This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/nkIfu7bImABod5-85N1FwAXx42g.roa File: nkIfu7bImABod5-85N1FwAXx42g.roa (raw, json) Hash identifier: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc= Subject key identifier: 9E:42:1F:BB:B6:C8:98:00:68:77:9F:BC:E4:DD:45:C0:05:F1:E3:68 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019B7A5B6EF11C72FDC67DB21BAE9F66C767 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/nkIfu7bImABod5-85N1FwAXx42g.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44407 IP address blocks: 188.73.0.0/18 maxlen: 24 188.231.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6e:f1:1c:72:fd:c6:7d:b2:1b:ae:9f:66:c7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e421fbbb6c8980068779fbce4dd45c005f1e368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:0f:63:b0:e7:19:da:14:07:fe:47:0c:f6: 6e:58:af:3d:e3:c5:cc:d9:d2:9e:75:76:a5:bd:0b: 13:9a:bc:46:6a:c9:99:4f:d4:62:ab:13:bf:07:73: 09:b9:7e:6f:0d:8a:31:74:60:ac:72:bd:a5:24:b7: 40:d2:c3:04:d2:06:54:84:13:fb:9c:4f:8a:4d:93: 5e:1d:11:f8:51:f8:73:70:1b:5d:88:9a:86:c1:0e: 1a:85:23:8b:64:69:4c:f4:e0:c2:96:85:70:54:82: 24:71:67:03:d5:23:de:43:57:04:d2:40:76:1c:cd: 82:60:58:28:bb:0f:df:5d:d6:be:f7:c6:ec:a5:46: de:db:4b:c9:ff:ff:6f:4c:6d:c1:0b:eb:48:10:cf: 49:ec:d2:82:3b:28:ab:58:61:33:bb:41:9c:f4:88: 19:1b:b9:3f:3c:08:49:78:03:d4:8b:ce:c7:5d:d5: e6:1e:65:f0:f3:49:36:20:91:b3:db:8a:27:e2:d6: 83:16:15:9b:65:8a:b7:4e:3b:64:f2:4d:ba:e6:5f: 93:18:d5:47:8f:cd:58:dd:22:f6:3a:48:72:05:96: 1e:df:a2:a6:40:b2:f8:a4:98:e8:62:2b:e1:2c:3a: 3a:85:42:ac:d0:fc:48:53:c9:47:02:cd:71:51:6d: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:1F:BB:B6:C8:98:00:68:77:9F:BC:E4:DD:45:C0:05:F1:E3:68 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/nkIfu7bImABod5-85N1FwAXx42g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.73.0.0/18 188.231.0.0/17 Signature Algorithm: sha256WithRSAEncryption bf:77:28:9c:a2:a9:9b:b4:53:53:c4:4a:7a:ca:78:e2:56:24: df:b1:1a:33:7c:f2:97:24:4b:32:8b:0f:d2:fe:18:3c:3b:17: e8:3d:dc:42:e7:cf:2c:36:4c:60:40:a7:32:45:18:3f:c6:f7: 47:fb:8d:6f:56:95:8f:d5:db:93:86:66:91:e5:0f:21:bd:17: 9d:40:b5:78:e5:a9:56:60:f7:7d:3c:5a:10:93:cf:bc:0b:eb: 7f:26:7f:14:7b:c0:c7:9e:1b:1f:bc:07:40:a7:25:49:74:ef: 5e:1a:d1:af:5c:07:dc:d8:6b:af:d2:81:9a:e2:9f:35:c9:d6: 83:ff:94:b5:e9:23:b8:b4:ee:ce:86:b7:1b:fd:f8:19:0f:94: 09:6a:cc:35:94:d9:ae:fe:2a:23:54:1b:b0:60:0d:66:3d:89: 56:6c:9d:95:f8:ed:64:00:c9:ed:c6:af:fe:71:c8:5a:e5:5e: 92:29:4b:cf:1a:73:d3:aa:99:65:e5:56:28:bd:91:19:8f:63: 75:d2:7d:a3:2e:1c:9f:15:f9:3f:6d:06:da:05:d2:99:01:83: ce:e2:db:06:42:29:9d:dc:5e:75:28:3a:6d:5c:10:a0:07:6d: 24:86:48:70:ab:f9:db:c4:0a:53:2d:8a:98:ca:66:fe:8b:61: 10:4d:6c:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W27xHHL9xn2yG66fZsdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQyMWZiYmI2Yzg5ODAwNjg3NzlmYmNlNGRkNDVjMDA1ZjFlMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9APY7DnGdoUB/5HDPZuWK8948XM 2dKedXalvQsTmrxGasmZT9RiqxO/B3MJuX5vDYoxdGCscr2lJLdA0sME0gZUhBP7 nE+KTZNeHRH4UfhzcBtdiJqGwQ4ahSOLZGlM9ODCloVwVIIkcWcD1SPeQ1cE0kB2 HM2CYFgouw/fXda+98bspUbe20vJ//9vTG3BC+tIEM9J7NKCOyirWGEzu0Gc9IgZ G7k/PAhJeAPUi87HXdXmHmXw80k2IJGz24on4taDFhWbZYq3Tjtk8k265l+TGNVH j81Y3SL2OkhyBZYe36KmQLL4pJjoYivhLDo6hUKs0PxIU8lHAs1xUW2mqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ5CH7u2yJgAaHefvOTdRcAF8eNoMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvbmtJZnU3YkltQUJvZDUtODVOMUZ3QVh4NDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGvEkAAwQH vOcAMA0GCSqGSIb3DQEBCwUAA4IBAQC/dyicoqmbtFNTxEp6ynjiViTfsRozfPKX JEsyiw/S/hg8OxfoPdxC588sNkxgQKcyRRg/xvdH+41vVpWP1duThmaR5Q8hvRed QLV45alWYPd9PFoQk8+8C+t/Jn8Ue8DHnhsfvAdApyVJdO9eGtGvXAfc2Guv0oGa 4p81ydaD/5S16SO4tO7Ohrcb/fgZD5QJasw1lNmu/iojVBuwYA1mPYlWbJ2V+O1k AMntxq/+ccha5V6SKUvPGnPTqpll5VYovZEZj2N10n2jLhyfFfk/bQbaBdKZAYPO 4tsGQimd3F51KDptXBCgB20khkhwq/nbxApTLYqYymb+i2EQTWw0 -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:40 2026 by rpki-client