This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/nqmWzH-tzCnzE93LuhfxRjm9wHw.roa File: nqmWzH-tzCnzE93LuhfxRjm9wHw.roa (raw, json) Hash identifier: L9/RTfwJkK0P4xFaKDfFjPQ7yNTzuYqZSZ9Mz6ikrfc= Subject key identifier: 9E:A9:96:CC:7F:AD:CC:29:F3:13:DD:CB:BA:17:F1:46:39:BD:C0:7C Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Certificate serial: 019B77C6A0BDFA5CFDC5B876B6568B976087 Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/nqmWzH-tzCnzE93LuhfxRjm9wHw.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207406 IP address blocks: 185.64.4.0/24 maxlen: 24 2a10:1f00::/31 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:bd:fa:5c:fd:c5:b8:76:b6:56:8b:97:60:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea996cc7fadcc29f313ddcbba17f14639bdc07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:cf:1a:64:39:90:dc:f1:1f:d7:c0:29:62: 7f:5a:80:0b:d9:5c:74:4d:04:b7:ca:68:e6:03:de: fb:5b:7a:f5:fb:3e:b6:57:3f:2c:ca:2a:72:a6:26: 14:2f:15:60:71:3a:81:3a:3d:11:ca:61:05:cb:a8: 01:0a:d3:ee:41:c2:7b:6d:1b:62:0c:88:7c:f8:7b: eb:73:43:54:f2:cb:7b:1a:3e:13:a8:5b:b0:09:6d: bc:59:47:ad:41:2c:0b:78:aa:e1:10:ac:ef:54:e7: 30:63:a9:f8:cc:5c:9f:5e:55:a1:d4:4e:ab:4e:f4: a5:ab:63:bb:c5:a2:16:89:bc:db:b1:c3:af:ae:32: bb:f2:43:09:45:6c:0b:5a:c3:dd:ba:75:f4:df:7c: 53:18:82:42:05:2b:fb:1b:a8:1b:66:92:14:7e:1d: cc:e1:89:55:45:02:5d:7a:22:37:0e:3c:b7:c8:83: bb:5d:b5:9f:b4:61:a7:fb:84:a2:4a:9b:a4:c2:43: a5:d3:c5:1c:08:32:34:f4:7e:98:e7:05:3a:72:1a: d7:9b:0c:70:f1:da:5c:7a:5d:4a:7d:f0:b1:41:4d: 9f:81:e4:02:f8:56:a5:38:fd:5e:62:62:69:9e:f4: 59:46:8e:cd:0d:73:ef:b3:ef:f1:18:9d:28:3a:20: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:96:CC:7F:AD:CC:29:F3:13:DD:CB:BA:17:F1:46:39:BD:C0:7C X509v3 Authority Key Identifier: keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/nqmWzH-tzCnzE93LuhfxRjm9wHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.4.0/24 IPv6: 2a10:1f00::/31 Signature Algorithm: sha256WithRSAEncryption 15:42:c3:55:ae:0a:08:8d:ab:b1:4e:d6:1f:05:a9:d8:0a:00: ec:23:fb:49:dc:b6:46:c9:23:7a:41:6a:5e:71:73:ff:23:c7: f8:65:c6:66:c5:46:4f:ed:e0:f9:67:e0:35:3b:ed:ef:ea:3b: 93:07:d5:79:b1:c1:a5:d1:64:f2:eb:a2:fc:ed:b3:fb:70:f1: 12:01:c0:0f:d2:b9:d5:7e:cb:65:0c:2f:90:25:92:94:bb:e6: 49:d1:28:82:04:07:aa:1b:2b:34:e9:cd:f4:4a:31:bb:3f:0e: 2d:8e:7a:ea:67:9e:ae:12:a4:3f:84:62:15:56:ef:66:30:bb: e4:af:86:a7:db:f0:da:2d:12:5d:f1:90:06:a6:70:bc:57:9d: 3a:11:89:fa:5a:d9:95:71:03:20:c8:2c:bb:8d:dc:08:9a:c5: 74:a1:d8:f1:57:a4:a2:53:27:ca:50:2a:2e:0c:92:d2:aa:6e: 32:84:61:b6:57:a1:f8:e8:19:0c:ba:d4:0e:f1:e6:56:23:2f: 39:71:58:b2:3d:b6:6a:a3:55:80:b2:99:a3:1c:84:15:d0:98: 33:b9:6f:10:0b:3d:e5:15:8c:36:0e:ce:40:95:ef:02:36:d4: ba:00:e3:b6:68:af:de:46:30:c9:2e:2d:31:96:f1:04:53:d5: f1:51:fb:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xqC9+lz9xbh2tlaLl2CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz ZTZhOTgwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWE5OTZjYzdmYWRjYzI5ZjMxM2RkY2JiYTE3ZjE0NjM5YmRjMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6zPGmQ5kNzxH9fAKWJ/WoAL2Vx0 TQS3ymjmA977W3r1+z62Vz8syipypiYULxVgcTqBOj0RymEFy6gBCtPuQcJ7bRti DIh8+Hvrc0NU8st7Gj4TqFuwCW28WUetQSwLeKrhEKzvVOcwY6n4zFyfXlWh1E6r TvSlq2O7xaIWibzbscOvrjK78kMJRWwLWsPdunX033xTGIJCBSv7G6gbZpIUfh3M 4YlVRQJdeiI3Djy3yIO7XbWftGGn+4SiSpukwkOl08UcCDI09H6Y5wU6chrXmwxw 8dpcel1KffCxQU2fgeQC+FalOP1eYmJpnvRZRo7NDXPvs+/xGJ0oOiDsSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ6plsx/rcwp8xPdy7oX8UY5vcB8MB8GA1UdIwQY MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt ZGY4YjJhYTZiYmU2LzEvbnFtV3pILXR6Q256RTkzTHVoZnhSam05d0h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2 LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUAEMA0E AgACMAcDBQEqEB8AMA0GCSqGSIb3DQEBCwUAA4IBAQAVQsNVrgoIjauxTtYfBanY CgDsI/tJ3LZGySN6QWpecXP/I8f4ZcZmxUZP7eD5Z+A1O+3v6juTB9V5scGl0WTy 66L87bP7cPESAcAP0rnVfstlDC+QJZKUu+ZJ0SiCBAeqGys06c30SjG7Pw4tjnrq Z56uEqQ/hGIVVu9mMLvkr4an2/DaLRJd8ZAGpnC8V506EYn6WtmVcQMgyCy7jdwI msV0odjxV6SiUyfKUCouDJLSqm4yhGG2V6H46BkMutQO8eZWIy85cViyPbZqo1WA spmjHIQV0JgzuW8QCz3lFYw2Ds5Ale8CNtS6AOO2aK/eRjDJLi0xlvEEU9XxUft2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:27 2026 by rpki-client