This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/nAtKKEo6Mzv-candAEifxL69_bo.roa File: nAtKKEo6Mzv-candAEifxL69_bo.roa (raw, json) Hash identifier: R8Il+SRs/b8Guq3ex4Y5aLHHglnfMg1tmovCHKBdtmE= Subject key identifier: 9C:0B:4A:28:4A:3A:33:3B:FE:71:A9:DD:00:48:9F:C4:BE:BD:FD:BA Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Certificate serial: 019B7D5CE3B80EB1684992A1180C397BD2DC Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/nAtKKEo6Mzv-candAEifxL69_bo.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204861 IP address blocks: 194.169.190.0/24 maxlen: 24 194.169.193.0/24 maxlen: 24 194.169.196.0/24 maxlen: 24 194.169.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e3:b8:0e:b1:68:49:92:a1:18:0c:39:7b:d2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c0b4a284a3a333bfe71a9dd00489fc4bebdfdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:38:ca:7e:b4:d2:ac:f7:c1:e8:f0:0c:db: ee:a3:96:3b:e8:c7:fc:af:ca:62:15:6f:db:5d:b1: 72:80:4b:60:36:1f:89:a8:22:c5:ab:08:81:dc:d6: 58:c2:f9:d8:69:0f:13:14:c4:52:48:6f:78:66:5d: 0e:76:98:b9:72:a7:8e:6c:d6:14:dc:6b:ed:11:b1: 45:77:9d:2b:ae:cc:73:1e:d8:80:a8:6a:b7:ba:b6: 79:1f:3c:66:d1:dd:eb:a7:4f:0d:f9:54:e9:c5:0e: 23:f2:23:70:74:52:d0:be:8a:ca:fa:a6:dd:d6:bd: ac:7e:bf:e0:23:24:f9:20:32:c3:b9:3c:ad:30:95: 29:59:aa:d9:e5:c3:0b:70:21:19:d3:60:59:b5:31: 82:7a:20:de:a3:e2:14:c2:81:f2:70:e3:51:ae:93: 6d:c2:8d:3d:a8:0e:15:ab:56:10:d0:72:8f:ef:41: 46:16:5d:27:f1:a5:84:90:a6:4a:c0:00:4c:3b:a1: e3:33:b5:0f:e7:b6:89:f8:19:99:ce:0b:e4:4a:97: f8:f7:f7:13:73:aa:f3:5f:11:62:88:24:fe:8c:a4: eb:b4:dd:b5:cb:4b:80:45:17:7c:2f:1b:35:fd:35: 67:0c:a7:47:94:c5:22:0f:73:57:92:d5:30:24:6b: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0B:4A:28:4A:3A:33:3B:FE:71:A9:DD:00:48:9F:C4:BE:BD:FD:BA X509v3 Authority Key Identifier: keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/nAtKKEo6Mzv-candAEifxL69_bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.190.0/24 194.169.193.0/24 194.169.196.0/24 194.169.213.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:76:16:2f:cf:47:e0:e7:1b:26:a9:6e:cb:6e:cd:71:80:50: 3c:68:2d:5b:c3:65:fc:1f:92:6b:93:54:a9:01:24:b7:11:01: 86:f3:88:1c:d7:34:01:8f:69:5d:31:7f:48:2b:33:db:d1:4d: 65:02:7e:d3:f6:43:96:de:b1:61:33:5a:3c:7f:e4:8d:bb:8b: 2b:05:50:01:41:24:82:51:03:21:fd:7c:11:f9:62:c8:9a:9b: 10:5b:e3:7e:8b:96:ad:c8:57:11:da:35:3a:7b:e2:0b:ca:dc: 7f:48:0f:91:e2:f9:ab:97:23:bf:b5:ab:ed:91:6e:75:a8:89: 12:ea:35:68:3d:2f:26:80:c7:1e:20:5a:0b:5f:f9:60:16:76: 7d:fd:d4:c9:b7:2c:ec:40:cf:da:d3:e8:a7:24:0a:bf:d0:97: 27:63:71:0a:95:29:75:dc:5d:b0:db:18:75:13:62:26:8f:50: 12:63:be:15:ad:61:73:f2:7d:e3:15:4c:ec:f3:7b:39:26:64: 8f:68:7f:fc:e4:eb:ac:57:9f:b1:dd:7a:72:cc:20:92:31:9f: 49:86:bc:f0:09:78:c9:7a:e6:3e:63:f4:bb:9f:65:6a:c5:7e: f4:e4:7c:b4:c3:8e:d5:2e:e4:8e:f0:32:ca:a3:17:4c:36:24: 8e:83:3c:55 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XOO4DrFoSZKhGAw5e9LcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5 NDZiZDkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzBiNGEyODRhM2EzMzNiZmU3MWE5ZGQwMDQ4OWZjNGJlYmRmZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4I4yn600qz3wejwDNvuo5Y76Mf8 r8piFW/bXbFygEtgNh+JqCLFqwiB3NZYwvnYaQ8TFMRSSG94Zl0Odpi5cqeObNYU 3GvtEbFFd50rrsxzHtiAqGq3urZ5Hzxm0d3rp08N+VTpxQ4j8iNwdFLQvorK+qbd 1r2sfr/gIyT5IDLDuTytMJUpWarZ5cMLcCEZ02BZtTGCeiDeo+IUwoHycONRrpNt wo09qA4Vq1YQ0HKP70FGFl0n8aWEkKZKwABMO6HjM7UP57aJ+BmZzgvkSpf49/cT c6rzXxFiiCT+jKTrtN21y0uARRd8Lxs1/TVnDKdHlMUiD3NXktUwJGtU6wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJwLSihKOjM7/nGp3QBIn8S+vf26MB8GA1UdIwQY MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt NThhZGY3OGQ4Mjc4LzEvbkF0S0tFbzZNenYtY2FuZEFFaWZ4TDY5X2JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4 LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwqm+AwQA wqnBAwQAwqnEAwQAwqnVMA0GCSqGSIb3DQEBCwUAA4IBAQAOdhYvz0fg5xsmqW7L bs1xgFA8aC1bw2X8H5Jrk1SpASS3EQGG84gc1zQBj2ldMX9IKzPb0U1lAn7T9kOW 3rFhM1o8f+SNu4srBVABQSSCUQMh/XwR+WLImpsQW+N+i5atyFcR2jU6e+ILytx/ SA+R4vmrlyO/tavtkW51qIkS6jVoPS8mgMceIFoLX/lgFnZ9/dTJtyzsQM/a0+in JAq/0JcnY3EKlSl13F2w2xh1E2Imj1ASY74VrWFz8n3jFUzs83s5JmSPaH/85Ous V5+x3XpyzCCSMZ9JhrzwCXjJeuY+Y/S7n2VqxX705Hy0w47VLuSO8DLKoxdMNiSO gzxV -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:10 2026 by rpki-client