This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/N1AbqW-LglnJHa8JDMfRFCkNqAg.roa File: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (raw, json) Hash identifier: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs= Subject key identifier: 37:50:1B:A9:6F:8B:82:59:C9:1D:AF:09:0C:C7:D1:14:29:0D:A8:08 Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410 Certificate serial: 019B7DC9372A14DD6E119923A7FE50AB45E0 Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/N1AbqW-LglnJHa8JDMfRFCkNqAg.roa Signing time: Fri 02 Jan 2026 08:18:17 +0000 ROA not before: Fri 02 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44350 IP address blocks: 185.161.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 03:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:37:2a:14:dd:6e:11:99:23:a7:fe:50:ab:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410 Validity Not Before: Jan 2 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37501ba96f8b8259c91daf090cc7d114290da808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:45:ef:a5:8a:90:1e:4d:59:16:2a:24:d4: 46:ed:d3:8d:35:81:df:58:a3:92:7d:61:88:c4:48: 7e:39:f3:d8:06:61:d7:9c:70:81:69:47:47:e9:00: 6d:20:0c:17:a6:7a:01:79:8f:2f:81:0e:cb:43:90: e0:24:52:90:20:e7:ca:93:06:c9:33:60:a4:58:9e: c8:18:b0:34:a2:ba:4d:e9:59:bf:1c:fe:0a:ec:31: 4b:27:04:1c:06:2f:a9:8c:f6:2b:c1:3a:1b:6e:85: 14:04:3a:a1:4c:d3:ff:f4:b5:fd:fc:41:b2:96:b8: 45:f6:72:3b:92:51:8b:4f:be:63:7a:37:9f:c9:42: c3:db:8b:63:9d:da:87:2d:41:46:3c:3e:f1:77:5f: a8:ab:83:2d:40:9e:d8:d7:00:ce:7b:24:7b:2b:15: 2d:1c:0d:51:8b:c9:ba:49:bc:ad:e3:e6:a6:26:1c: a4:40:39:59:8c:7b:e3:74:52:53:c1:f8:62:f9:23: 4b:55:c6:d9:ac:fd:cf:21:96:a3:f0:da:f1:c8:f3: 52:d7:f5:d5:60:1b:57:ee:f9:3f:c4:7a:e8:11:ec: 3c:34:c0:70:d6:51:d4:21:f8:bd:48:db:f1:a0:2c: bc:fc:36:b5:2b:54:bd:34:9a:e5:6f:1d:a8:a7:20: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:50:1B:A9:6F:8B:82:59:C9:1D:AF:09:0C:C7:D1:14:29:0D:A8:08 X509v3 Authority Key Identifier: keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/N1AbqW-LglnJHa8JDMfRFCkNqAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.161.0/24 Signature Algorithm: sha256WithRSAEncryption 39:20:92:ee:07:f5:d4:bb:84:1c:65:0e:64:ea:02:8b:9b:92: 9d:23:b3:01:e7:5c:0c:36:a6:1e:e9:ec:7c:ec:5c:6c:d1:d1: 8f:38:39:aa:7d:e3:fb:9c:01:7c:c8:20:75:f8:b8:24:0e:c7: d0:f6:69:03:89:53:14:5d:e5:0a:c5:0c:59:24:db:04:ed:0f: 36:fd:aa:e2:b7:10:1c:95:ce:0d:f7:78:9a:ce:2f:7d:7d:7d: 2c:c0:a9:0d:b9:3c:a8:c4:e5:e8:18:91:1f:87:c3:75:b3:6b: 94:b2:91:11:65:41:fa:c0:f8:14:3d:13:8c:89:30:65:21:76: 1d:29:6a:d0:c2:10:c5:85:e2:b7:16:98:24:f7:ff:34:63:c3: b8:9e:6d:37:85:8d:cf:2f:c7:ac:2f:29:c9:bb:5e:02:58:21: 87:3e:5f:08:e5:dd:f7:25:46:ee:08:12:1e:f5:81:ab:64:0d: c4:95:f0:ec:44:64:e0:f9:60:c4:cd:36:0c:6e:ce:ba:2d:fa: 0d:ec:6c:a8:0e:d2:3c:b0:d8:f7:a3:9c:5c:5a:66:96:a8:04: d6:4f:2e:af:e4:03:55:98:08:02:b2:59:36:1f:af:ca:40:51: 3b:17:42:3d:b1:78:d5:a8:91:e4:aa:b0:b5:e5:7a:48:22:23: 5f:75:69:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yTcqFN1uEZkjp/5Qq0XgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1 NWY0MTAwHhcNMjYwMTAyMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzUwMWJhOTZmOGI4MjU5YzkxZGFmMDkwY2M3ZDExNDI5MGRhODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwldF76WKkB5NWRYqJNRG7dONNYHf WKOSfWGIxEh+OfPYBmHXnHCBaUdH6QBtIAwXpnoBeY8vgQ7LQ5DgJFKQIOfKkwbJ M2CkWJ7IGLA0orpN6Vm/HP4K7DFLJwQcBi+pjPYrwTobboUUBDqhTNP/9LX9/EGy lrhF9nI7klGLT75jejefyULD24tjndqHLUFGPD7xd1+oq4MtQJ7Y1wDOeyR7KxUt HA1Ri8m6Sbyt4+amJhykQDlZjHvjdFJTwfhi+SNLVcbZrP3PIZaj8NrxyPNS1/XV YBtX7vk/xHroEew8NMBw1lHUIfi9SNvxoCy8/Da1K1S9NJrlbx2opyDLhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdQG6lvi4JZyR2vCQzH0RQpDagIMB8GA1UdIwQY MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt NjZhYzBkYmE1YmYyLzEvTjFBYnFXLUxnbG5KSGE4SkRNZlJGQ2tOcUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaGhMA0G CSqGSIb3DQEBCwUAA4IBAQA5IJLuB/XUu4QcZQ5k6gKLm5KdI7MB51wMNqYe6ex8 7Fxs0dGPODmqfeP7nAF8yCB1+LgkDsfQ9mkDiVMUXeUKxQxZJNsE7Q82/aritxAc lc4N93iazi99fX0swKkNuTyoxOXoGJEfh8N1s2uUspERZUH6wPgUPROMiTBlIXYd KWrQwhDFheK3Fpgk9/80Y8O4nm03hY3PL8esLynJu14CWCGHPl8I5d33JUbuCBIe 9YGrZA3ElfDsRGTg+WDEzTYMbs66LfoN7GyoDtI8sNj3o5xcWmaWqATWTy6v5ANV mAgCslk2H6/KQFE7F0I9sXjVqJHkqrC15XpIIiNfdWna -----END CERTIFICATE-----Generated at Sat Jan 17 11:05:00 2026 by rpki-client