This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/nNax3jH-aHbv8fUxbVL4yA04BCc.roa File: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (raw, json) Hash identifier: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8= Subject key identifier: 9C:D6:B1:DE:31:FE:68:76:EF:F1:F5:31:6D:52:F8:C8:0D:38:04:27 Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Certificate serial: 019B7BA4118A2EEB8FA6A64908FB776602BC Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/nNax3jH-aHbv8fUxbVL4yA04BCc.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199773 IP address blocks: 193.142.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:11:8a:2e:eb:8f:a6:a6:49:08:fb:77:66:02:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd6b1de31fe6876eff1f5316d52f8c80d380427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:b7:a3:65:49:15:9e:b2:ea:b2:57:b6:8c: 49:58:1f:8b:58:12:22:01:20:c8:69:42:a4:fc:fb: 4c:bb:27:f7:be:af:b6:e9:ec:43:ce:26:82:86:ed: 56:fe:04:96:4c:a4:d2:af:f8:46:26:5e:59:51:ed: b7:26:1c:7c:9a:cf:44:a5:9a:d0:97:71:9c:7d:56: 8d:0e:0d:3a:4d:ad:2a:b0:1d:52:0f:7b:10:15:1a: f9:f7:59:91:71:47:ea:fd:8b:d3:fe:c8:41:18:82: a4:c7:b4:0d:fc:51:fc:2c:96:e5:8d:0c:4f:39:ce: 76:16:1f:22:6c:bc:d6:47:e5:c2:0a:93:05:67:fe: 77:4c:49:1e:11:ec:68:9f:14:22:a9:8e:f8:57:11: fe:9b:5a:c1:81:aa:bc:48:99:55:12:e1:ff:6b:d1: 76:f6:4c:90:fc:59:2b:6a:56:05:5a:64:a5:b6:86: e9:8b:31:7a:99:fe:88:d3:0d:5b:38:b5:aa:a7:7c: 4c:b6:43:a5:a1:f3:92:a4:b0:5f:60:34:36:3a:c8: 81:f1:04:81:8e:52:78:09:4f:e0:50:ff:be:50:c8: a3:32:f3:4c:34:ca:64:ba:7c:1b:c9:62:92:57:0c: fb:17:ec:b5:7d:79:7e:79:a2:f5:12:3e:4b:16:40: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D6:B1:DE:31:FE:68:76:EF:F1:F5:31:6D:52:F8:C8:0D:38:04:27 X509v3 Authority Key Identifier: keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/nNax3jH-aHbv8fUxbVL4yA04BCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.211.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ba:e6:59:50:f3:a5:2b:6b:44:93:59:33:29:33:20:d6:c9: 8f:6e:9f:09:3e:62:ae:da:21:02:8f:4b:da:79:58:cf:7e:39: 29:74:b8:b8:41:f5:f5:02:33:90:7b:39:c5:8a:24:f4:72:17: dd:06:87:89:b0:99:0a:9f:5a:0c:f3:f7:85:35:de:13:19:a7: df:5c:d8:9b:36:02:9d:2e:62:be:72:55:63:74:62:6a:42:3c: ec:74:a5:13:d7:19:73:5a:45:1c:39:77:c8:6a:4c:df:ba:a0: 70:0a:01:23:ee:db:80:35:bd:bd:01:54:fc:d0:d0:54:7a:e1: 0a:50:c3:8e:6f:f4:2a:a9:24:62:37:c9:be:7a:fb:7d:e3:7a: 70:d6:3e:1f:23:38:db:6c:81:02:c0:2f:78:81:d3:f9:02:38: 17:e7:8b:d1:67:a6:af:05:e3:1d:e5:68:68:18:2a:fc:ff:f2: 9d:6e:ff:fa:c2:06:de:0a:35:e0:b8:a9:15:cb:b1:6e:f0:c5: 06:7d:50:70:3a:27:59:3a:bb:5b:92:a3:a7:d9:00:e6:f8:1c: 2d:c2:4c:7f:fb:bd:e1:7d:23:98:4d:9b:37:e3:84:fe:95:46: 04:7f:fe:2f:c9:ca:78:f5:e4:f4:2f:3f:ce:35:0a:4e:d6:e4: 0c:1b:65:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBGKLuuPpqZJCPt3ZgK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My ZjE5MmMwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Q2YjFkZTMxZmU2ODc2ZWZmMWY1MzE2ZDUyZjhjODBkMzgwNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wa3o2VJFZ6y6rJXtoxJWB+LWBIi ASDIaUKk/PtMuyf3vq+26exDziaChu1W/gSWTKTSr/hGJl5ZUe23Jhx8ms9EpZrQ l3GcfVaNDg06Ta0qsB1SD3sQFRr591mRcUfq/YvT/shBGIKkx7QN/FH8LJbljQxP Oc52Fh8ibLzWR+XCCpMFZ/53TEkeEexonxQiqY74VxH+m1rBgaq8SJlVEuH/a9F2 9kyQ/FkralYFWmSltobpizF6mf6I0w1bOLWqp3xMtkOlofOSpLBfYDQ2OsiB8QSB jlJ4CU/gUP++UMijMvNMNMpkunwbyWKSVwz7F+y1fXl+eaL1Ej5LFkBr8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzWsd4x/mh27/H1MW1S+MgNOAQnMB8GA1UdIwQY MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt YjE0Y2M5MWM3NzZjLzEvbk5heDNqSC1hSGJ2OGZVeGJWTDR5QTA0QkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY7TMA0G CSqGSIb3DQEBCwUAA4IBAQBsuuZZUPOlK2tEk1kzKTMg1smPbp8JPmKu2iECj0va eVjPfjkpdLi4QfX1AjOQeznFiiT0chfdBoeJsJkKn1oM8/eFNd4TGaffXNibNgKd LmK+clVjdGJqQjzsdKUT1xlzWkUcOXfIakzfuqBwCgEj7tuANb29AVT80NBUeuEK UMOOb/QqqSRiN8m+evt943pw1j4fIzjbbIECwC94gdP5AjgX54vRZ6avBeMd5Who GCr8//Kdbv/6wgbeCjXguKkVy7Fu8MUGfVBwOidZOrtbkqOn2QDm+Bwtwkx/+73h fSOYTZs344T+lUYEf/4vycp49eT0Lz/ONQpO1uQMG2X+ -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:31 2026 by rpki-client