This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa File: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (raw, json) Hash identifier: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw= Subject key identifier: 9F:E5:D8:9C:90:AC:89:70:10:AB:C6:75:AD:84:22:4B:C4:CD:34:54 Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Certificate serial: 019B7B35FB9AD1E9E51ADFCF39BD9AFAFD0F Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.206.120.0/24 maxlen: 24 188.116.35.0/24 maxlen: 24 2a10:a200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fb:9a:d1:e9:e5:1a:df:cf:39:bd:9a:fa:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe5d89c90ac897010abc675ad84224bc4cd3454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:6a:63:52:5a:85:8e:7e:f2:70:3f:01:31: 80:31:c3:ec:45:3c:18:e0:35:02:49:6f:58:7c:60: 65:41:21:c9:27:52:85:8b:62:cf:ee:14:ae:eb:17: 0d:5a:db:a5:3f:6f:32:4c:94:be:0e:cb:05:64:9c: 31:b4:80:a2:08:6e:34:c9:70:c1:9c:61:2c:b5:9a: d1:23:b3:0c:85:47:7a:6c:9c:1e:a2:c3:af:fe:09: 30:44:af:33:77:06:a2:14:c0:7e:fd:cb:2a:12:53: 9c:a2:12:75:af:d1:c7:be:dc:d7:f2:d3:d7:9e:ee: f1:2c:8a:6c:cf:76:cf:cb:95:58:b8:fc:f1:c1:0c: 4d:1e:8d:4d:b2:e6:7d:66:3a:37:3e:c9:e1:54:d6: af:4b:c5:81:f3:4c:93:8e:93:a7:5c:e5:49:3e:ef: 12:3f:09:10:ed:cf:7a:b7:fa:74:35:fd:ec:90:70: b4:11:77:00:57:a5:ef:31:84:9d:d2:67:da:4f:4c: 87:43:e0:35:c2:ab:90:86:73:d8:ee:1d:78:09:a8: c5:75:3f:55:ad:17:bb:ae:83:88:53:d6:1c:5e:6e: a2:ab:3d:63:f8:3b:2d:3b:73:49:44:d4:03:60:a3: cf:b9:38:d6:ff:34:c2:1d:a9:88:bb:1f:d6:1d:d4: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E5:D8:9C:90:AC:89:70:10:AB:C6:75:AD:84:22:4B:C4:CD:34:54 X509v3 Authority Key Identifier: keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.120.0/24 188.116.35.0/24 IPv6: 2a10:a200::/48 Signature Algorithm: sha256WithRSAEncryption 75:48:14:f9:34:c6:67:3a:82:58:0e:7f:3c:4d:fb:2a:b3:8f: d3:52:6d:7d:72:ad:6b:e3:b0:3c:41:08:c5:fb:e4:70:a8:e2: 17:c6:39:92:bc:27:95:c2:2d:37:0c:c1:42:ac:90:88:ce:f8: ba:19:36:35:72:5f:bd:5f:8e:cb:5b:35:71:15:8c:dc:82:83: e8:35:89:f4:cb:02:f8:bc:19:7c:a3:99:b1:8c:be:e2:7b:d8: 66:99:91:42:6e:36:0e:d4:f1:70:a4:29:02:28:0c:bf:14:59: 44:c2:05:4c:2b:09:60:fe:d6:47:d9:70:1d:df:7f:76:c9:57: bb:4a:86:f3:0f:65:ed:ab:80:96:c5:62:7d:66:76:f4:02:14: 90:57:dd:70:2d:85:f7:2b:a5:6c:03:41:f7:6f:f0:30:5e:73: ae:d8:88:10:23:21:e5:18:68:1b:86:b9:48:5b:0f:df:fa:2b: 32:23:5b:7d:00:27:4b:cf:06:03:5a:f3:78:27:0b:d6:4f:cf: 03:e5:a9:93:74:03:25:c8:19:ba:f9:2e:90:ef:e1:2d:e5:90: d9:ed:2f:82:5d:ff:06:cc:97:86:11:25:af:fb:e4:17:87:19: b6:ed:2a:d1:49:7d:64:cb:ce:87:48:db:6c:ca:65:e2:27:40: a2:31:ec:31 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7Nfua0enlGt/POb2a+v0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDY3MDZhMmUyNzBjYjQ4NmJiNDcyNDM0NjNjY2JiZjlm NGQ1Y2EwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU1ZDg5YzkwYWM4OTcwMTBhYmM2NzVhZDg0MjI0YmM0Y2QzNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMRqY1JahY5+8nA/ATGAMcPsRTwY 4DUCSW9YfGBlQSHJJ1KFi2LP7hSu6xcNWtulP28yTJS+DssFZJwxtICiCG40yXDB nGEstZrRI7MMhUd6bJweosOv/gkwRK8zdwaiFMB+/csqElOcohJ1r9HHvtzX8tPX nu7xLIpsz3bPy5VYuPzxwQxNHo1NsuZ9Zjo3PsnhVNavS8WB80yTjpOnXOVJPu8S PwkQ7c96t/p0Nf3skHC0EXcAV6XvMYSd0mfaT0yHQ+A1wquQhnPY7h14CajFdT9V rRe7roOIU9YcXm6iqz1j+DstO3NJRNQDYKPPuTjW/zTCHamIux/WHdS+cQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ/l2JyQrIlwEKvGda2EIkvEzTRUMB8GA1UdIwQY MBaAFDfWcGouJwy0hrtHJDRjzLv59NXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYt NWRmMmRlMDhiNjk1LzEvbi1YWW5KQ3NpWEFRcThaMXJZUWlTOFROTkZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYtNWRmMmRlMDhiNjk1 LzEvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuc54AwQA vHQjMA8EAgACMAkDBwAqEKIAAAAwDQYJKoZIhvcNAQELBQADggEBAHVIFPk0xmc6 glgOfzxN+yqzj9NSbX1yrWvjsDxBCMX75HCo4hfGOZK8J5XCLTcMwUKskIjO+LoZ NjVyX71fjstbNXEVjNyCg+g1ifTLAvi8GXyjmbGMvuJ72GaZkUJuNg7U8XCkKQIo DL8UWUTCBUwrCWD+1kfZcB3ff3bJV7tKhvMPZe2rgJbFYn1mdvQCFJBX3XAthfcr pWwDQfdv8DBec67YiBAjIeUYaBuGuUhbD9/6KzIjW30AJ0vPBgNa83gnC9ZPzwPl qZN0AyXIGbr5LpDv4S3lkNntL4Jd/wbMl4YRJa/75BeHGbbtKtFJfWTLzodI22zK ZeInQKIx7DE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:20 2026 by rpki-client