This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/NyZecqDxZWfaHCuoM0IhIFWnpqg.roa File: NyZecqDxZWfaHCuoM0IhIFWnpqg.roa (raw, json) Hash identifier: iqpBZxFEqsIO8elb98oBs7HFDqASdANh9B/9XR18vAQ= Subject key identifier: 37:26:5E:72:A0:F1:65:67:DA:1C:2B:A8:33:42:21:20:55:A7:A6:A8 Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628 Certificate serial: 019B7C7EE23F93BF52EC1CB48E14C620F07E Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/NyZecqDxZWfaHCuoM0IhIFWnpqg.roa Signing time: Fri 02 Jan 2026 02:17:28 +0000 ROA not before: Fri 02 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213522 IP address blocks: 89.150.62.0/24 maxlen: 24 185.48.5.0/24 maxlen: 24 2a14:ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e2:3f:93:bf:52:ec:1c:b4:8e:14:c6:20:f0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628 Validity Not Before: Jan 2 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37265e72a0f16567da1c2ba83342212055a7a6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:f7:57:25:d0:88:e3:1d:83:f8:93:4f:04: 98:04:2c:66:1f:17:81:ea:c5:24:a5:41:fe:ac:20: 5a:fa:83:51:9d:c1:0a:89:a2:2f:2c:1e:db:ef:cd: 62:fd:2d:5c:67:f6:6a:da:b2:4d:a6:84:8b:89:97: e6:a6:ac:02:87:85:c4:61:42:ba:27:a9:25:85:ad: ea:1a:c3:64:0f:22:09:d0:47:87:07:ed:ae:dd:86: 3e:e4:fb:7a:e9:33:c6:c8:47:52:2f:7c:82:ad:35: 66:95:38:bb:a2:68:2d:fc:8b:cc:e4:b6:5d:d1:d5: 3b:5b:cc:2a:cb:ed:97:63:7d:71:9d:f3:2f:2e:4f: 0e:1b:84:dc:be:48:70:c4:cf:fd:fc:18:d7:f6:ac: 65:86:e3:c8:48:b3:a8:6e:1b:b5:9d:93:c3:93:ee: 06:76:2a:31:06:a6:1e:0b:05:b8:4e:d4:a0:39:19: 13:00:28:69:81:4d:b2:dc:73:b8:51:bd:48:0b:a7: 83:77:04:0b:bc:71:19:82:ec:4a:8a:f9:81:fe:fb: d6:cc:10:1c:d5:27:97:56:92:8e:60:11:72:e2:8d: 7b:1f:f5:4f:b7:1f:a0:ab:a5:1d:20:d9:b4:94:00: 8e:fb:58:75:5f:ad:cc:15:fc:a1:b4:5a:84:19:fe: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:5E:72:A0:F1:65:67:DA:1C:2B:A8:33:42:21:20:55:A7:A6:A8 X509v3 Authority Key Identifier: keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/NyZecqDxZWfaHCuoM0IhIFWnpqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.62.0/24 185.48.5.0/24 IPv6: 2a14:ec0::/29 Signature Algorithm: sha256WithRSAEncryption 13:70:c9:38:20:2d:fd:45:2a:55:6a:58:12:83:55:b7:dd:1a: 46:4a:34:59:d6:43:34:41:22:4a:ae:d2:4a:de:f9:8a:fd:a3: 19:7e:d8:87:ef:05:78:8b:a7:d9:c4:50:56:2e:e3:a8:92:95: 1f:bf:80:0a:f8:0c:03:7e:e3:5d:60:2b:96:12:92:fa:2d:42: 82:c8:fb:26:2a:24:83:ab:48:8e:a4:3c:b4:1c:7e:49:22:1e: 43:e0:d8:d4:b5:dd:25:dc:b7:09:7c:84:e3:a6:58:d8:e6:80: 33:f6:95:f2:e8:90:1b:13:16:80:f3:0d:2b:d9:6d:79:18:bd: cc:30:ba:d7:69:df:1b:e0:ad:a2:26:29:f4:47:33:cd:dc:d0: 49:d2:c1:bc:78:ef:61:01:4f:00:cf:cd:cb:c1:b2:04:b5:ee: d6:34:78:91:8c:da:2f:37:72:aa:34:96:e1:9d:34:2b:95:12: 90:bf:9b:cd:c6:22:31:6b:7a:35:5e:35:68:37:0f:05:bd:44: 8e:f4:94:ec:8c:67:44:a7:05:0f:44:75:2e:0d:f4:92:8a:49: 06:d6:4c:e3:88:c4:de:96:b2:1a:51:ff:00:b7:a8:e3:f8:5d: 7d:ec:b6:ce:93:58:6b:7b:ae:8a:de:24:8d:cb:92:02:ac:21: 30:0a:d4:25 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8fuI/k79S7By0jhTGIPB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj Zjg2MjgwHhcNMjYwMTAyMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzI2NWU3MmEwZjE2NTY3ZGExYzJiYTgzMzQyMjEyMDU1YTdhNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9P3VyXQiOMdg/iTTwSYBCxmHxeB 6sUkpUH+rCBa+oNRncEKiaIvLB7b781i/S1cZ/Zq2rJNpoSLiZfmpqwCh4XEYUK6 J6klha3qGsNkDyIJ0EeHB+2u3YY+5Pt66TPGyEdSL3yCrTVmlTi7omgt/IvM5LZd 0dU7W8wqy+2XY31xnfMvLk8OG4TcvkhwxM/9/BjX9qxlhuPISLOobhu1nZPDk+4G dioxBqYeCwW4TtSgORkTAChpgU2y3HO4Ub1IC6eDdwQLvHEZguxKivmB/vvWzBAc 1SeXVpKOYBFy4o17H/VPtx+gq6UdINm0lACO+1h1X63MFfyhtFqEGf7R3wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDcmXnKg8WVn2hwrqDNCISBVp6aoMB8GA1UdIwQY MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt NWVjMzM2YmY3NDNiLzEvTnlaZWNxRHhaV2ZhSEN1b00wSWhJRlducHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWZY+AwQA uTAFMA0EAgACMAcDBQMqFA7AMA0GCSqGSIb3DQEBCwUAA4IBAQATcMk4IC39RSpV algSg1W33RpGSjRZ1kM0QSJKrtJK3vmK/aMZftiH7wV4i6fZxFBWLuOokpUfv4AK +AwDfuNdYCuWEpL6LUKCyPsmKiSDq0iOpDy0HH5JIh5D4NjUtd0l3LcJfITjpljY 5oAz9pXy6JAbExaA8w0r2W15GL3MMLrXad8b4K2iJin0RzPN3NBJ0sG8eO9hAU8A z83LwbIEte7WNHiRjNovN3KqNJbhnTQrlRKQv5vNxiIxa3o1XjVoNw8FvUSO9JTs jGdEpwUPRHUuDfSSikkG1kzjiMTelrIaUf8At6jj+F197LbOk1hre66K3iSNy5IC rCEwCtQl -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:09 2026 by rpki-client