This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NzAk-80nwPdjRSk-yqn0f6awD3I.roa File: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (raw, json) Hash identifier: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE= Subject key identifier: 37:30:24:FB:CD:27:C0:F7:63:45:29:3E:CA:A9:F4:7F:A6:B0:0F:72 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B7910188FC6B47E029B239B9B4351F8F1 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NzAk-80nwPdjRSk-yqn0f6awD3I.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49678 IP address blocks: 46.37.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:18:8f:c6:b4:7e:02:9b:23:9b:9b:43:51:f8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373024fbcd27c0f76345293ecaa9f47fa6b00f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:9f:07:1e:c0:77:1b:9f:04:b2:b7:2d:e4: 20:9f:28:b0:da:ba:82:7b:28:0b:6e:7a:f1:62:76: 75:5b:9d:ce:ca:01:2d:a3:bf:d9:62:86:e5:98:67: dc:81:6d:e8:13:6e:0e:0f:c9:44:f1:36:7b:1b:bf: f9:15:5f:8a:12:3d:7d:8d:14:b0:8b:d4:ca:21:45: b7:a0:9e:23:b3:fb:2e:52:15:b0:2c:1e:dd:89:23: f9:9c:54:90:43:21:3d:41:ad:cb:85:53:82:d0:a1: 83:13:1f:1c:6f:4c:20:34:fc:cf:1c:61:74:6f:73: 5b:84:df:77:3f:3e:94:d5:37:48:aa:59:7d:a1:aa: a1:7a:cb:2a:76:f1:9f:5f:8d:af:e9:6f:88:09:09: eb:4e:6f:a9:ea:40:d9:9f:34:11:5f:13:dc:fd:79: 9f:8a:b9:6d:66:ed:fa:bf:a0:db:68:da:6d:fe:bf: 0d:2e:65:74:c4:d3:67:82:38:21:1b:14:00:16:75: 3b:8f:51:a8:2e:b6:d3:9c:98:99:9c:20:cf:8e:7d: f4:64:de:f5:4b:87:8c:52:e8:2f:91:3a:73:25:4e: c5:08:95:d7:75:c8:52:0c:eb:29:6a:c9:ce:91:44: f4:a1:2e:29:1e:48:0b:10:31:5b:93:90:90:1d:ce: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:24:FB:CD:27:C0:F7:63:45:29:3E:CA:A9:F4:7F:A6:B0:0F:72 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NzAk-80nwPdjRSk-yqn0f6awD3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.117.0/24 Signature Algorithm: sha256WithRSAEncryption 71:b3:f6:43:94:31:84:ae:0e:e8:8e:c6:92:27:b1:fc:29:f6: b6:e8:2c:a9:e1:0b:1f:4f:eb:21:1c:cc:54:00:1d:71:22:25: ea:75:20:05:d1:72:44:c9:9a:de:f9:66:e2:7e:f3:02:50:ef: 72:40:03:9f:4c:dd:13:27:7b:b6:61:a3:0d:dd:e8:40:c9:fc: 95:c1:98:00:67:c6:c8:34:7d:1d:c6:e8:82:ca:24:bc:61:54: a3:8f:00:3b:42:a5:97:70:4b:65:61:02:c7:5b:89:76:9e:1c: ee:fd:5d:e1:66:46:10:ed:68:9c:ea:40:57:39:86:20:fc:87: ad:e9:9c:13:b1:7a:45:6e:ac:fc:49:49:08:b2:57:18:47:5a: f8:8a:b6:64:ff:4c:18:be:34:1e:f3:d9:71:f7:a3:24:d4:5e: 5c:29:fb:b0:53:6d:19:71:d1:7c:f4:ea:06:7f:58:87:54:a7: 71:21:19:79:1a:9c:7d:d1:36:58:0b:69:0b:3c:8a:bb:47:ab: df:05:80:2d:cb:3c:ba:e0:c8:39:21:e8:2f:b1:d0:2e:d8:a3: ac:f8:e6:1b:26:58:7d:96:fd:89:47:4e:b7:27:b3:be:8d:9b: 17:c9:3c:b3:93:31:75:ca:51:17:47:4c:0f:99:a8:f9:48:8b: c0:a8:64:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBiPxrR+Apsjm5tDUfjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzMwMjRmYmNkMjdjMGY3NjM0NTI5M2VjYWE5ZjQ3ZmE2YjAwZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2fBx7AdxufBLK3LeQgnyiw2rqC eygLbnrxYnZ1W53OygEto7/ZYoblmGfcgW3oE24OD8lE8TZ7G7/5FV+KEj19jRSw i9TKIUW3oJ4js/suUhWwLB7diSP5nFSQQyE9Qa3LhVOC0KGDEx8cb0wgNPzPHGF0 b3NbhN93Pz6U1TdIqll9oaqhessqdvGfX42v6W+ICQnrTm+p6kDZnzQRXxPc/Xmf irltZu36v6DbaNpt/r8NLmV0xNNngjghGxQAFnU7j1GoLrbTnJiZnCDPjn30ZN71 S4eMUugvkTpzJU7FCJXXdchSDOspasnOkUT0oS4pHkgLEDFbk5CQHc5cFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcwJPvNJ8D3Y0UpPsqp9H+msA9yMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvTnpBay04MG53UGRqUlNrLXlxbjBmNmF3RDNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV1MA0G CSqGSIb3DQEBCwUAA4IBAQBxs/ZDlDGErg7ojsaSJ7H8Kfa26Cyp4QsfT+shHMxU AB1xIiXqdSAF0XJEyZre+WbifvMCUO9yQAOfTN0TJ3u2YaMN3ehAyfyVwZgAZ8bI NH0dxuiCyiS8YVSjjwA7QqWXcEtlYQLHW4l2nhzu/V3hZkYQ7Wic6kBXOYYg/Iet 6ZwTsXpFbqz8SUkIslcYR1r4irZk/0wYvjQe89lx96Mk1F5cKfuwU20ZcdF89OoG f1iHVKdxIRl5Gpx90TZYC2kLPIq7R6vfBYAtyzy64Mg5IegvsdAu2KOs+OYbJlh9 lv2JR063J7O+jZsXyTyzkzF1ylEXR0wPmaj5SIvAqGSH -----END CERTIFICATE-----Generated at Sun Jan 18 08:35:38 2026 by rpki-client