This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/nmDQzXrowDtDsmaT7IpPejjRWG0.roa File: nmDQzXrowDtDsmaT7IpPejjRWG0.roa (raw, json) Hash identifier: GXfSa12Z+HzkUJgQU3oz+bpDRacv3sjfzvlZHnK3Bnk= Subject key identifier: 9E:60:D0:CD:7A:E8:C0:3B:43:B2:66:93:EC:8A:4F:7A:38:D1:58:6D Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E803F3F9AB0720D2C04624A411DF Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/nmDQzXrowDtDsmaT7IpPejjRWG0.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137280 IP address blocks: 104.166.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e8:03:f3:f9:ab:07:20:d2:c0:46:24:a4:11:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e60d0cd7ae8c03b43b26693ec8a4f7a38d1586d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:ee:63:c3:14:3e:da:c6:d7:33:ea:f0:4b: 84:67:e8:d4:87:0c:7f:2c:56:41:9e:8c:bc:ae:38: 76:d8:ad:3e:86:65:dd:91:8a:dd:f2:18:d6:0a:1e: ba:ea:b5:86:7e:f7:a0:a2:42:d2:0a:32:18:1d:64: d2:13:1e:d5:9e:41:c6:d0:f8:29:fb:24:fb:12:c7: c7:ca:a0:ec:3e:1f:42:f7:19:8c:e0:02:59:e2:20: 5b:6d:20:85:6a:65:12:74:7a:e5:2b:aa:6c:f0:17: 5f:05:94:c0:a0:fa:df:ae:92:17:e2:56:1b:87:2a: 6c:5c:84:a2:9e:80:08:43:c3:39:a3:46:94:78:af: 76:8b:27:e4:53:b6:7d:c5:5c:56:94:df:eb:29:26: bf:aa:b9:5e:37:85:34:cb:e8:b5:d5:f0:9c:0a:79: 72:6f:db:08:f5:18:45:d2:89:c7:ad:ff:1d:2b:84: db:41:3a:3c:73:81:b2:4e:8d:49:3f:bd:f2:3e:63: 03:c8:39:a3:33:e1:24:f5:21:59:95:99:52:d5:65: 2b:6d:0a:c3:c4:85:18:0b:75:81:49:82:ae:9d:ea: c2:19:8f:9f:2d:1b:c7:5b:9d:a8:11:77:75:56:a5: c2:75:9b:69:5d:eb:29:3b:96:76:32:47:a4:d7:aa: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:60:D0:CD:7A:E8:C0:3B:43:B2:66:93:EC:8A:4F:7A:38:D1:58:6D X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/nmDQzXrowDtDsmaT7IpPejjRWG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.166.180.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:b5:b6:b2:da:90:cc:0f:fa:16:40:fa:7a:76:07:df:a1:91: f5:2c:48:6e:82:55:9f:70:3d:07:0b:68:73:65:df:f7:c8:25: 01:b9:af:a7:e3:c9:46:cb:17:a2:51:46:75:5a:ab:f3:cc:dc: 3b:4e:cd:d4:2f:4b:72:ed:32:4e:ae:79:ba:4c:41:57:bc:20: 4d:ea:f9:ad:13:d8:7f:54:3c:ea:e8:25:0e:ca:aa:78:2d:02: 9b:0c:7d:e1:dc:d9:0c:ca:81:e2:19:63:17:99:d7:e3:fb:06: 4d:f8:5a:89:30:e6:78:30:cd:7d:99:5c:3c:4e:0a:51:0e:3f: 0b:37:86:18:c1:18:4b:63:9e:65:a2:0d:4b:43:b8:86:66:f7: 6d:df:a2:50:7d:fc:19:c0:2c:99:09:02:58:9a:26:e6:c5:2e: 5a:e0:5a:ad:9f:cd:cd:bb:3e:ef:e2:dd:b9:60:c7:a2:e1:ff: d9:93:6b:46:a9:f9:8e:5c:21:92:d0:47:a4:87:42:f8:86:2e: 5d:04:7c:15:66:cc:9b:ab:ed:ef:86:64:86:44:9f:89:a4:d0: bb:a4:66:c3:36:01:60:50:bd:3b:53:11:32:95:b0:ac:92:d5: dd:b4:d5:09:80:52:08:32:2d:b7:31:90:84:d0:aa:7e:2c:87: 69:a7:7f:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yegD8/mrByDSwEYkpBHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTYwZDBjZDdhZThjMDNiNDNiMjY2OTNlYzhhNGY3YTM4ZDE1ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/HuY8MUPtrG1zPq8EuEZ+jUhwx/ LFZBnoy8rjh22K0+hmXdkYrd8hjWCh666rWGfvegokLSCjIYHWTSEx7VnkHG0Pgp +yT7EsfHyqDsPh9C9xmM4AJZ4iBbbSCFamUSdHrlK6ps8BdfBZTAoPrfrpIX4lYb hypsXISinoAIQ8M5o0aUeK92iyfkU7Z9xVxWlN/rKSa/qrleN4U0y+i11fCcCnly b9sI9RhF0onHrf8dK4TbQTo8c4GyTo1JP73yPmMDyDmjM+Ek9SFZlZlS1WUrbQrD xIUYC3WBSYKunerCGY+fLRvHW52oEXd1VqXCdZtpXespO5Z2Mkek16rtqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5g0M166MA7Q7Jmk+yKT3o40VhtMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvbm1EUXpYcm93RHREc21hVDdJcFBlampSV0cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKa0MA0G CSqGSIb3DQEBCwUAA4IBAQCNtbay2pDMD/oWQPp6dgffoZH1LEhuglWfcD0HC2hz Zd/3yCUBua+n48lGyxeiUUZ1WqvzzNw7Ts3UL0ty7TJOrnm6TEFXvCBN6vmtE9h/ VDzq6CUOyqp4LQKbDH3h3NkMyoHiGWMXmdfj+wZN+FqJMOZ4MM19mVw8TgpRDj8L N4YYwRhLY55log1LQ7iGZvdt36JQffwZwCyZCQJYmibmxS5a4Fqtn83Nuz7v4t25 YMei4f/Zk2tGqfmOXCGS0Eekh0L4hi5dBHwVZsybq+3vhmSGRJ+JpNC7pGbDNgFg UL07UxEylbCsktXdtNUJgFIIMi23MZCE0Kp+LIdpp3/i -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:51 2026 by rpki-client