This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/nClTwpToiFqAscBy4IrBVIyla1o.roa File: nClTwpToiFqAscBy4IrBVIyla1o.roa (raw, json) Hash identifier: wolg6ruFPU1FSLrTeE1keQYcUJk2DOWAN3fu7gn3ZgE= Subject key identifier: 9C:29:53:C2:94:E8:88:5A:80:B1:C0:72:E0:8A:C1:54:8C:A5:6B:5A Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8 Certificate serial: 019B797E8FFC7EBD459898BC01482D32FB7C Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/nClTwpToiFqAscBy4IrBVIyla1o.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207541 IP address blocks: 185.166.252.0/24 maxlen: 24 2a0b:7940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8f:fc:7e:bd:45:98:98:bc:01:48:2d:32:fb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8 Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2953c294e8885a80b1c072e08ac1548ca56b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:cb:23:99:93:67:60:38:80:e3:02:98:2a: 54:70:21:2f:1a:be:19:46:8e:d8:bc:c0:e1:d9:84: cc:49:3f:9e:e9:e2:89:71:5b:94:43:4f:4f:49:0f: 81:9a:e6:ac:0a:a6:1e:23:14:d9:e2:a1:41:fe:e7: 31:3b:e7:ef:c9:d1:2a:72:f3:6a:06:89:92:11:2d: 02:12:88:1b:2d:61:f8:1d:83:74:b0:b4:19:36:e0: b2:4b:e5:1f:59:67:2a:a8:d3:ef:ce:4a:0a:f6:46: 70:4e:82:11:13:15:c4:d2:b9:97:cb:7e:77:29:b6: 74:52:1b:bc:e3:29:3f:c5:23:64:2e:2b:90:30:93: b7:92:05:bf:4e:af:ac:f7:62:6f:cd:24:bb:d8:7b: b8:8c:96:95:ec:d5:cb:da:b6:97:67:28:ce:6a:8d: 8f:57:f7:58:fd:35:f2:a1:de:ae:f1:5c:5e:12:a4: 98:f4:71:89:68:d5:ad:4a:05:f0:b5:e8:c5:89:de: 5d:32:3a:f0:55:dd:85:6c:8d:23:3a:19:e1:d4:01: 8d:7d:47:9a:53:96:ea:94:76:5b:7c:52:5f:f4:07: 3f:38:3a:71:19:56:3b:3e:00:1e:6c:49:e2:98:e1: 63:de:6b:89:e6:78:8f:01:c9:64:4f:d2:3f:02:23: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:29:53:C2:94:E8:88:5A:80:B1:C0:72:E0:8A:C1:54:8C:A5:6B:5A X509v3 Authority Key Identifier: keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/nClTwpToiFqAscBy4IrBVIyla1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.252.0/24 IPv6: 2a0b:7940::/29 Signature Algorithm: sha256WithRSAEncryption 00:98:94:2c:37:36:3c:aa:09:74:03:90:57:92:19:7e:7e:b4: 2c:3c:02:18:fd:8f:99:07:96:6b:b8:0e:ae:02:19:3a:aa:1f: f1:dd:2f:5d:7f:28:ec:01:0f:f2:af:39:b5:35:cd:f8:f2:81: 5e:0a:ba:5e:6a:a1:75:a7:dd:59:2d:6b:95:d4:a8:44:91:a1: 07:29:87:a2:ef:00:1f:69:51:39:e6:91:11:02:52:4f:33:88: 32:af:78:41:1b:0f:54:ca:bd:4a:e9:e6:73:83:06:0e:93:44: a1:ec:48:6c:9c:c8:c5:28:00:5d:2d:0f:dd:fc:38:a8:57:21: 86:80:c5:1f:dc:c0:a6:0f:27:df:28:96:ce:85:2a:1a:1f:ec: 8f:11:4c:8e:71:d3:84:02:0c:54:61:8d:35:58:c9:c0:99:f3: 50:a4:d7:70:3f:da:cf:58:98:e7:de:bc:0e:8d:e8:a7:78:58: 28:fa:e2:18:d0:a4:b9:d3:68:c2:71:d7:86:e7:00:22:ef:fd: 6a:39:b4:58:04:47:05:8a:16:19:3a:70:9a:c8:84:c8:8f:4f: b6:47:cb:fa:df:8a:71:f3:e0:d5:71:26:cd:e6:7d:2f:34:cb: d1:fd:9f:48:a4:5a:ca:70:35:1b:87:b6:46:17:23:4b:7c:32: 90:65:da:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fo/8fr1FmJi8AUgtMvt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjhiMDY3NzlhODMwNjVkYmRjNTgwOGUxZTdmZmFmOWM3 ZDhkYTgwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzI5NTNjMjk0ZTg4ODVhODBiMWMwNzJlMDhhYzE1NDhjYTU2YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydTLI5mTZ2A4gOMCmCpUcCEvGr4Z Ro7YvMDh2YTMST+e6eKJcVuUQ09PSQ+BmuasCqYeIxTZ4qFB/ucxO+fvydEqcvNq BomSES0CEogbLWH4HYN0sLQZNuCyS+UfWWcqqNPvzkoK9kZwToIRExXE0rmXy353 KbZ0Uhu84yk/xSNkLiuQMJO3kgW/Tq+s92JvzSS72Hu4jJaV7NXL2raXZyjOao2P V/dY/TXyod6u8VxeEqSY9HGJaNWtSgXwtejFid5dMjrwVd2FbI0jOhnh1AGNfUea U5bqlHZbfFJf9Ac/ODpxGVY7PgAebEnimOFj3muJ5niPAclkT9I/AiM++QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJwpU8KU6IhagLHAcuCKwVSMpWtaMB8GA1UdIwQY MBaAFLv4sGd5qDBl29xYCOHn/6+cfY2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYt NTQ4ZDQ3YTQ2YWQ0LzEvbkNsVHdwVG9pRnFBc2NCeTRJckJWSXlsYTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYtNTQ4ZDQ3YTQ2YWQ0 LzEvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuab8MA0E AgACMAcDBQMqC3lAMA0GCSqGSIb3DQEBCwUAA4IBAQAAmJQsNzY8qgl0A5BXkhl+ frQsPAIY/Y+ZB5ZruA6uAhk6qh/x3S9dfyjsAQ/yrzm1Nc348oFeCrpeaqF1p91Z LWuV1KhEkaEHKYei7wAfaVE55pERAlJPM4gyr3hBGw9Uyr1K6eZzgwYOk0Sh7Ehs nMjFKABdLQ/d/DioVyGGgMUf3MCmDyffKJbOhSoaH+yPEUyOcdOEAgxUYY01WMnA mfNQpNdwP9rPWJjn3rwOjeineFgo+uIY0KS502jCcdeG5wAi7/1qObRYBEcFihYZ OnCayITIj0+2R8v634px8+DVcSbN5n0vNMvR/Z9IpFrKcDUbh7ZGFyNLfDKQZdr8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:48 2026 by rpki-client