This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/N2FCQYbf7oikjwWt145FrEyeXnc.roa File: N2FCQYbf7oikjwWt145FrEyeXnc.roa (raw, json) Hash identifier: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y= Subject key identifier: 37:61:42:41:86:DF:EE:88:A4:8F:05:AD:D7:8E:45:AC:4C:9E:5E:77 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52B5B72B5F29161489B756DE49A3C Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/N2FCQYbf7oikjwWt145FrEyeXnc.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 87.246.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2b:5b:72:b5:f2:91:61:48:9b:75:6d:e4:9a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3761424186dfee88a48f05add78e45ac4c9e5e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:55:47:d9:9b:cd:d1:ce:9f:ae:d9:d3:d5: 6a:57:5f:02:2b:3f:4e:57:1b:48:09:98:f4:de:ed: 97:92:f1:7f:44:66:da:b2:51:eb:07:07:98:b9:6e: 53:c4:f9:6f:2d:0f:f3:3a:8f:66:6c:b1:a3:dd:77: 2d:17:2d:98:11:64:f1:d6:27:65:d3:5a:65:b6:05: bd:87:89:70:1b:02:54:50:ca:ec:8a:3b:b3:47:db: 13:a8:e2:29:ba:93:02:c7:23:74:8a:27:e0:18:da: 61:f2:c3:ec:64:b8:3c:91:44:e6:56:f8:20:10:60: 88:7d:bc:6a:d7:ad:00:7e:90:40:bd:6f:09:91:0b: 24:19:d2:db:9d:59:a2:8f:60:97:47:37:e9:0b:c3: 57:3f:c9:89:2e:07:f7:2d:97:85:cd:2c:32:d7:75: a4:9d:bc:e0:f2:76:a0:d2:3f:a8:fe:56:fb:34:29: f7:f1:4c:4f:e3:ca:11:33:15:8a:2e:7b:51:43:5b: 0a:1d:26:02:bd:54:34:3e:19:e9:22:db:c8:81:3c: 79:00:45:06:05:82:25:b6:5d:d4:fa:5a:85:16:4f: 21:73:ce:c9:bd:55:09:63:9d:8c:23:4a:3c:86:59: 19:a4:09:aa:61:94:ba:a4:8a:35:e8:93:32:85:85: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:42:41:86:DF:EE:88:A4:8F:05:AD:D7:8E:45:AC:4C:9E:5E:77 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/N2FCQYbf7oikjwWt145FrEyeXnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.8.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:63:a1:6b:96:1d:b5:28:22:cf:0b:68:4c:98:80:4b:61:ff: c2:c6:3b:76:2b:a5:14:75:7f:6e:60:f0:89:0d:2a:69:fe:4b: c3:62:8e:9c:28:27:ed:e8:33:5a:33:d3:ec:5f:39:57:6a:c2: 4c:30:b0:74:be:73:c1:e3:3d:5d:86:21:15:ef:b9:5a:56:28: 91:f7:56:8a:fb:3d:7f:52:71:af:38:4f:f3:5c:04:43:f2:45: 9a:7a:e9:a8:11:a8:a7:38:e9:da:fc:db:1b:24:bf:cc:2d:68: 18:8d:5e:cf:78:70:5b:d7:58:eb:dd:41:58:a4:fb:47:8c:be: d6:fa:47:56:5a:7e:4e:dd:fc:83:16:4a:63:77:0f:7b:73:ff: a3:f9:d7:17:63:3e:02:26:aa:af:3d:2e:fc:97:91:0b:45:dd: 77:28:c2:63:b0:a9:29:5f:79:7b:f7:fe:66:9e:f2:71:a1:5a: e9:59:4f:2c:76:ea:69:9b:b5:62:53:33:9a:fc:b8:79:46:b2: 5c:86:d3:57:90:ef:a1:d1:1c:b6:5d:eb:25:7d:1b:70:76:e1: 42:25:97:83:b4:4c:e3:d7:38:50:2f:61:9a:75:21:4b:b1:e7: 9f:b4:54:98:56:61:06:b6:f0:a8:95:9f:bf:1e:1a:33:cf:00: c0:34:ed:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pStbcrXykWFIm3Vt5Jo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzYxNDI0MTg2ZGZlZTg4YTQ4ZjA1YWRkNzhlNDVhYzRjOWU1ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2hVR9mbzdHOn67Z09VqV18CKz9O VxtICZj03u2XkvF/RGbaslHrBweYuW5TxPlvLQ/zOo9mbLGj3XctFy2YEWTx1idl 01pltgW9h4lwGwJUUMrsijuzR9sTqOIpupMCxyN0iifgGNph8sPsZLg8kUTmVvgg EGCIfbxq160AfpBAvW8JkQskGdLbnVmij2CXRzfpC8NXP8mJLgf3LZeFzSwy13Wk nbzg8nag0j+o/lb7NCn38UxP48oRMxWKLntRQ1sKHSYCvVQ0PhnpItvIgTx5AEUG BYIltl3U+lqFFk8hc87JvVUJY52MI0o8hlkZpAmqYZS6pIo16JMyhYXi/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdhQkGG3+6IpI8FrdeORaxMnl53MB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvTjJGQ1FZYmY3b2lrandXdDE0NUZyRXllWG5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCV/YIMA0G CSqGSIb3DQEBCwUAA4IBAQBdY6Frlh21KCLPC2hMmIBLYf/Cxjt2K6UUdX9uYPCJ DSpp/kvDYo6cKCft6DNaM9PsXzlXasJMMLB0vnPB4z1dhiEV77laViiR91aK+z1/ UnGvOE/zXARD8kWaeumoEainOOna/NsbJL/MLWgYjV7PeHBb11jr3UFYpPtHjL7W +kdWWn5O3fyDFkpjdw97c/+j+dcXYz4CJqqvPS78l5ELRd13KMJjsKkpX3l79/5m nvJxoVrpWU8sduppm7ViUzOa/Lh5RrJchtNXkO+h0Ry2XeslfRtwduFCJZeDtEzj 1zhQL2GadSFLseeftFSYVmEGtvColZ+/HhozzwDANO2A -----END CERTIFICATE-----Generated at Mon Jan 19 17:04:01 2026 by rpki-client