This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/NhT4hC_Kop9-UElgOeKDWNxMT4w.roa File: NhT4hC_Kop9-UElgOeKDWNxMT4w.roa (raw, json) Hash identifier: Hh1bKiy5nqyZE4loxZYD93YfRpjyquMG28IeFVWqVbU= Subject key identifier: 36:14:F8:84:2F:CA:A2:9F:7E:50:49:60:39:E2:83:58:DC:4C:4F:8C Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe Certificate serial: 019B7C8096828AC14EB2A7A9DDC518EB5B9D Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/NhT4hC_Kop9-UElgOeKDWNxMT4w.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.209.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:82:8a:c1:4e:b2:a7:a9:dd:c5:18:eb:5b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3614f8842fcaa29f7e50496039e28358dc4c4f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:f3:ae:f7:bb:44:6f:b7:bc:01:f0:71:7b: 54:5e:ef:be:6f:3e:c7:08:e2:11:16:b4:08:64:57: 3d:f7:3e:35:d1:b3:22:1f:dc:9c:c9:64:20:2f:91: 85:f9:df:cf:c3:95:e6:ac:de:66:e8:05:eb:09:92: a0:ca:a1:e4:b4:01:ac:61:f4:59:ac:8c:5e:28:4d: 19:ea:89:db:8c:fe:da:f5:4c:66:70:ec:ed:02:79: ff:7c:ec:0e:b2:ae:c7:2b:70:f0:b3:78:b1:51:46: ea:b6:50:e1:d4:2d:f2:76:cf:6b:d8:20:26:db:0c: 59:dd:49:94:b3:9b:42:77:17:a2:7c:0b:be:91:31: 2e:d8:20:d7:4a:e6:16:c4:df:42:d8:7d:2b:12:ed: c7:df:83:4b:38:6b:5f:fa:eb:e1:3d:00:ae:fa:2a: ea:cd:84:e9:b1:15:7b:1d:6f:34:7b:38:a1:4f:07: 4f:ce:d9:b7:5f:86:3f:d6:05:95:c7:87:73:1e:c7: 31:51:05:2f:9c:e5:f6:90:0c:0e:d0:e1:22:f6:cc: 81:ab:74:c2:22:ad:91:ba:ee:a9:c4:14:93:54:3e: f4:29:d5:20:71:07:7d:55:5f:89:88:f1:50:8d:1e: 8b:1f:8b:da:01:71:4b:19:8f:fc:ed:30:cd:30:3b: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:F8:84:2F:CA:A2:9F:7E:50:49:60:39:E2:83:58:DC:4C:4F:8C X509v3 Authority Key Identifier: keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/NhT4hC_Kop9-UElgOeKDWNxMT4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.209.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:4b:a3:80:d9:91:52:d2:bd:38:72:a1:90:55:5e:2a:1a:d9: 8c:e2:1e:2c:a2:9a:e5:2b:d5:0b:ba:ea:79:bb:0f:55:42:10: b7:f1:1d:69:03:16:59:8a:c8:c2:7e:af:73:e0:b1:a7:d3:38: 5f:0a:b1:40:b4:28:05:af:a3:64:f5:4c:b7:ad:78:48:2f:b3: ee:b6:ca:e0:a0:70:b1:1e:2c:60:ea:27:76:fa:0b:d6:3a:8e: ef:a5:f2:29:09:2b:3f:b2:32:67:0a:6d:99:fe:4c:42:5d:29: 23:54:7e:17:b0:92:eb:e8:b8:6d:33:c3:aa:20:fa:57:8a:23: 16:8d:fc:61:ec:41:4a:02:51:44:95:99:79:f2:7d:4a:0b:f8: 02:d0:5e:5c:bd:e0:2c:2d:85:eb:8d:3f:2d:35:cf:1b:2c:cf: 1a:f6:07:a8:25:03:31:01:08:98:06:af:62:48:1c:bf:96:bf: 08:57:82:da:08:3a:68:6c:81:b7:b1:85:fb:03:4a:59:93:59: d3:ca:07:db:3c:5b:e4:6d:02:5a:94:20:4f:a6:81:65:e9:2e: 89:05:89:d1:86:0a:88:37:91:c1:e2:ca:fe:87:f8:6b:d7:34: 9a:6c:61:e0:0a:0d:56:77:2f:c3:cc:50:e3:8a:b3:e1:01:27: f0:5c:61:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJaCisFOsqep3cUY61udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDYxMDQxMGNmODAxNGFjMWRiZTlmNmFiY2M4MWM2NjE4 N2FmYmUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjE0Zjg4NDJmY2FhMjlmN2U1MDQ5NjAzOWUyODM1OGRjNGM0ZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu3zrve7RG+3vAHwcXtUXu++bz7H COIRFrQIZFc99z410bMiH9ycyWQgL5GF+d/Pw5XmrN5m6AXrCZKgyqHktAGsYfRZ rIxeKE0Z6onbjP7a9UxmcOztAnn/fOwOsq7HK3Dws3ixUUbqtlDh1C3yds9r2CAm 2wxZ3UmUs5tCdxeifAu+kTEu2CDXSuYWxN9C2H0rEu3H34NLOGtf+uvhPQCu+irq zYTpsRV7HW80ezihTwdPztm3X4Y/1gWVx4dzHscxUQUvnOX2kAwO0OEi9syBq3TC Iq2Ruu6pxBSTVD70KdUgcQd9VV+JiPFQjR6LH4vaAXFLGY/87TDNMDtZoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYU+IQvyqKfflBJYDnig1jcTE+MMB8GA1UdIwQY MBaAFOkGEEEM+AFKwdvp9qvMgcZhh6++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQt NjYwM2ViNTRiYjNhLzEvTmhUNGhDX0tvcDktVUVsZ09lS0RXTnhNVDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQtNjYwM2ViNTRiYjNh LzEvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1NH/MA0G CSqGSIb3DQEBCwUAA4IBAQALS6OA2ZFS0r04cqGQVV4qGtmM4h4soprlK9ULuup5 uw9VQhC38R1pAxZZisjCfq9z4LGn0zhfCrFAtCgFr6Nk9Uy3rXhIL7PutsrgoHCx Hixg6id2+gvWOo7vpfIpCSs/sjJnCm2Z/kxCXSkjVH4XsJLr6LhtM8OqIPpXiiMW jfxh7EFKAlFElZl58n1KC/gC0F5cveAsLYXrjT8tNc8bLM8a9geoJQMxAQiYBq9i SBy/lr8IV4LaCDpobIG3sYX7A0pZk1nTygfbPFvkbQJalCBPpoFl6S6JBYnRhgqI N5HB4sr+h/hr1zSabGHgCg1Wdy/DzFDjirPhASfwXGGj -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:15 2026 by rpki-client