This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/NtzUoTARnkc4QLuLuKK3L5i08Gg.roa File: NtzUoTARnkc4QLuLuKK3L5i08Gg.roa (raw, json) Hash identifier: WHzeIB9oGHBY17wslEieeVrvaTIjdjtqABPLJfiC5Hs= Subject key identifier: 36:DC:D4:A1:30:11:9E:47:38:40:BB:8B:B8:A2:B7:2F:98:B4:F0:68 Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7 Certificate serial: 019B78A28CFA5EC25960531E2E05A2D1AF85 Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/NtzUoTARnkc4QLuLuKK3L5i08Gg.roa Signing time: Thu 01 Jan 2026 08:17:57 +0000 ROA not before: Thu 01 Jan 2026 08:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206169 IP address blocks: 185.194.152.0/24 maxlen: 24 185.194.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8c:fa:5e:c2:59:60:53:1e:2e:05:a2:d1:af:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36dcd4a130119e473840bb8bb8a2b72f98b4f068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:61:60:93:ab:ae:82:ab:6c:b0:94:fc:27: af:07:db:92:7d:c9:6a:be:28:3e:09:05:a6:fc:81: f5:11:5d:32:11:07:e4:40:12:05:74:5c:f9:4c:96: 6e:66:8e:b8:6a:ee:f4:8b:2a:34:95:e1:58:3a:d6: 89:0b:84:5b:4e:b5:b2:1b:df:46:40:32:79:9f:eb: e9:20:c5:cd:62:1a:14:96:c5:a1:c0:72:4f:b1:5b: 1a:44:d2:1f:d2:51:73:19:32:f5:42:c2:08:23:d2: 2a:f6:1f:31:6b:87:05:b9:36:55:4c:fb:b5:11:7c: e1:6f:49:fa:2b:5e:97:30:54:09:83:44:ec:e4:79: d9:6d:80:cf:4c:31:a3:60:a3:3c:b2:bf:8f:88:b6: db:33:cc:52:22:e3:c0:da:c1:61:43:97:77:7a:0b: 2d:34:68:34:45:2a:2a:ad:27:6f:e4:de:a8:28:fa: bc:cc:41:ad:ab:fa:ba:ed:89:c2:a0:94:bf:c7:c8: d3:20:ab:19:d2:27:e5:8b:20:2d:21:01:c7:e5:db: 55:63:53:0d:c9:9e:85:57:66:19:44:d3:66:55:ca: 9e:2f:7d:22:1d:51:9f:af:c3:c0:96:43:4f:d0:b4: a0:ee:df:2d:b0:3d:67:e7:be:c8:11:b3:da:bd:95: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:D4:A1:30:11:9E:47:38:40:BB:8B:B8:A2:B7:2F:98:B4:F0:68 X509v3 Authority Key Identifier: keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/NtzUoTARnkc4QLuLuKK3L5i08Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.152.0/23 Signature Algorithm: sha256WithRSAEncryption d6:06:74:0d:f7:7a:ee:6b:05:1f:6c:59:19:50:0f:0b:bc:74: e7:48:4b:e7:86:25:0f:e7:88:f3:94:2a:67:8b:58:7d:9c:f6: 0a:c2:e8:20:a3:70:ab:6b:0f:e6:2b:9c:f4:58:d2:23:8e:ff: b2:60:56:99:4b:53:78:81:37:3f:30:31:ad:53:2f:c8:1e:da: f2:2e:4f:01:61:2d:d1:0c:ac:51:c0:e4:c5:91:d4:71:c1:61: b1:ed:dd:e1:c7:57:e0:ee:3d:82:19:00:31:95:e6:a4:a2:a0: 63:2b:6d:9e:6c:fd:fb:a5:06:79:a2:1f:55:2f:45:83:35:49: dd:01:8f:e6:92:7d:4d:f6:17:5d:e1:40:bb:da:98:b7:a4:97: 8e:7d:c9:e3:6c:e2:01:e2:2a:ec:24:20:29:7d:5f:74:52:da: c8:c5:a7:74:dd:64:a6:e2:90:b9:be:ee:23:12:03:01:a5:d3: 90:ae:34:da:0d:74:fb:09:7e:05:33:0b:ec:33:2a:a1:74:76: 92:4a:83:14:0d:e7:c9:f1:7d:65:16:5d:c6:af:60:56:f4:0d: 98:93:38:e5:05:ea:53:0e:3a:53:be:aa:03:42:e7:11:8b:14: ca:34:1e:22:8c:c1:c3:89:12:2d:e0:e9:b8:74:0a:f0:ac:21: 8e:f6:7e:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ooz6XsJZYFMeLgWi0a+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmJjMTA2OTc3NWE4MDQ4MDZiNTBiYWVkN2VjZTg0OGFi ZGU4YTcwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmRjZDRhMTMwMTE5ZTQ3Mzg0MGJiOGJiOGEyYjcyZjk4YjRmMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHJhYJOrroKrbLCU/CevB9uSfclq vig+CQWm/IH1EV0yEQfkQBIFdFz5TJZuZo64au70iyo0leFYOtaJC4RbTrWyG99G QDJ5n+vpIMXNYhoUlsWhwHJPsVsaRNIf0lFzGTL1QsIII9Iq9h8xa4cFuTZVTPu1 EXzhb0n6K16XMFQJg0Ts5HnZbYDPTDGjYKM8sr+PiLbbM8xSIuPA2sFhQ5d3egst NGg0RSoqrSdv5N6oKPq8zEGtq/q67YnCoJS/x8jTIKsZ0ifliyAtIQHH5dtVY1MN yZ6FV2YZRNNmVcqeL30iHVGfr8PAlkNP0LSg7t8tsD1n577IEbPavZXi/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbc1KEwEZ5HOEC7i7iity+YtPBoMB8GA1UdIwQY MBaAFEu7wQaXdagEgGtQuu1+zoSKveinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQt OWNmZjg0OTZlMzM0LzEvTnR6VW9UQVJua2M0UUx1THVLSzNMNWkwOEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQtOWNmZjg0OTZlMzM0 LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucKYMA0G CSqGSIb3DQEBCwUAA4IBAQDWBnQN93ruawUfbFkZUA8LvHTnSEvnhiUP54jzlCpn i1h9nPYKwuggo3Craw/mK5z0WNIjjv+yYFaZS1N4gTc/MDGtUy/IHtryLk8BYS3R DKxRwOTFkdRxwWGx7d3hx1fg7j2CGQAxleakoqBjK22ebP37pQZ5oh9VL0WDNUnd AY/mkn1N9hdd4UC72pi3pJeOfcnjbOIB4irsJCApfV90UtrIxad03WSm4pC5vu4j EgMBpdOQrjTaDXT7CX4FMwvsMyqhdHaSSoMUDefJ8X1lFl3Gr2BW9A2YkzjlBepT DjpTvqoDQucRixTKNB4ijMHDiRIt4Om4dArwrCGO9n45 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:39 2026 by rpki-client