This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa File: nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa (raw, json) Hash identifier: 1o7tQyZeZiqzL+ktcifE7MOOMo51KCeyAAEwmbZDyZM= Subject key identifier: 9C:CE:97:60:1D:A2:C2:02:75:EE:84:D1:F1:79:9E:22:0D:B1:23:63 Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Certificate serial: 019B78A3269AB948F8E44EE6333BDFA191D0 Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.16.132.0/22 maxlen: 22 185.77.160.0/24 maxlen: 24 185.77.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:26:9a:b9:48:f8:e4:4e:e6:33:3b:df:a1:91:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cce97601da2c20275ee84d1f1799e220db12363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:db:9e:95:a9:cd:db:e0:f4:a2:d0:65:ab: 9d:a7:ad:30:0a:9f:12:a2:b5:7a:3d:90:c8:88:0c: db:38:09:58:40:f6:15:a7:a3:ad:7f:d1:db:bf:2d: e2:81:c3:0a:5f:bb:cb:e1:f2:76:ab:06:76:11:a5: c3:72:51:4b:31:ff:f6:dd:7a:82:40:94:37:8c:6c: 4b:33:c8:e0:9e:4f:13:1d:7a:82:19:97:aa:81:d3: d3:44:c1:ba:ac:bc:53:61:f8:94:dc:24:7b:66:70: 18:cb:ee:40:fe:a9:a8:cc:39:ee:e4:66:29:11:4d: 59:18:1c:27:c0:5e:95:be:29:4c:1c:0f:e3:78:e0: 83:83:bf:04:4e:b5:f8:30:5c:c2:1e:18:55:dd:f2: 4d:43:96:ef:0a:bd:48:aa:1a:1b:2c:4d:89:f8:8c: b3:1a:f0:1d:55:57:e4:bc:2b:d7:8b:27:aa:d2:3a: 4a:96:d3:07:60:f9:91:43:47:2e:42:d4:ac:02:ac: 0d:d7:1d:5b:38:09:10:42:d5:3f:ef:23:62:bf:9c: de:3e:7a:e2:18:b3:fe:34:e2:b2:0f:2a:e3:5b:0f: 28:ca:10:2c:3a:4b:9b:f4:be:17:17:fe:91:fc:74: 9e:4b:5d:bf:92:e1:99:0f:e4:33:99:86:ec:29:11: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:97:60:1D:A2:C2:02:75:EE:84:D1:F1:79:9E:22:0D:B1:23:63 X509v3 Authority Key Identifier: keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/nM6XYB2iwgJ17oTR8XmeIg2xI2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.132.0/22 185.77.160.0/24 185.77.162.0/24 Signature Algorithm: sha256WithRSAEncryption 54:2b:b9:9f:d6:2d:e5:ff:d8:f4:96:7c:dc:70:c8:46:dc:0c: a8:74:1d:6b:39:fd:84:83:47:a1:24:ce:b7:08:81:7d:09:e6: e5:33:4e:f1:41:55:5b:9d:38:ea:ab:1b:bc:f6:4a:1c:ee:7f: ef:4f:86:39:e4:2e:04:f1:05:40:66:6d:f9:de:46:6a:36:78: 00:26:9a:1f:a8:bd:64:da:1e:a3:45:7d:e4:78:b4:97:62:d5: 1c:8f:cf:98:2f:ab:16:70:78:5e:af:14:dd:f6:b0:e6:7b:47: 75:ad:41:3f:ed:b3:4b:bd:a8:a1:ba:a3:78:b4:c5:19:61:3a: 6b:1c:85:7c:7d:44:76:b1:89:5d:72:5b:b9:35:9b:b7:f6:3e: 72:75:43:cd:63:e3:62:65:ca:5d:f6:ec:81:1f:72:91:ad:23: 3f:16:f8:ac:33:79:b7:63:62:fb:ea:a8:06:d5:54:d1:3e:aa: 42:f7:f0:7f:2f:4b:ce:83:02:27:bc:94:41:c8:dc:f5:05:f9: fe:31:e5:a4:22:60:8b:3d:eb:07:7e:1c:bc:66:9a:de:24:c3: 1b:5b:d2:52:39:2a:d3:b8:8a:34:9f:a6:b9:3c:3f:a7:d5:b5: e5:8e:da:8d:cb:d5:98:1e:2b:9e:c4:d6:29:93:af:7a:3f:ae: ae:14:cb:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyaauUj45E7mMzvfoZHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5 MzczOTQwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2NlOTc2MDFkYTJjMjAyNzVlZTg0ZDFmMTc5OWUyMjBkYjEyMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza/bnpWpzdvg9KLQZaudp60wCp8S orV6PZDIiAzbOAlYQPYVp6Otf9Hbvy3igcMKX7vL4fJ2qwZ2EaXDclFLMf/23XqC QJQ3jGxLM8jgnk8THXqCGZeqgdPTRMG6rLxTYfiU3CR7ZnAYy+5A/qmozDnu5GYp EU1ZGBwnwF6VvilMHA/jeOCDg78ETrX4MFzCHhhV3fJNQ5bvCr1IqhobLE2J+Iyz GvAdVVfkvCvXiyeq0jpKltMHYPmRQ0cuQtSsAqwN1x1bOAkQQtU/7yNiv5zePnri GLP+NOKyDyrjWw8oyhAsOkub9L4XF/6R/HSeS12/kuGZD+QzmYbsKRFBQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJzOl2AdosICde6E0fF5niINsSNjMB8GA1UdIwQY MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt NTlhN2VmZDM4NGMwLzEvbk02WFlCMml3Z0oxN29UUjhYbWVJZzJ4STJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRCEAwQA uU2gAwQAuU2iMA0GCSqGSIb3DQEBCwUAA4IBAQBUK7mf1i3l/9j0lnzccMhG3Ayo dB1rOf2Eg0ehJM63CIF9CeblM07xQVVbnTjqqxu89koc7n/vT4Y55C4E8QVAZm35 3kZqNngAJpofqL1k2h6jRX3keLSXYtUcj8+YL6sWcHherxTd9rDme0d1rUE/7bNL vaihuqN4tMUZYTprHIV8fUR2sYldclu5NZu39j5ydUPNY+NiZcpd9uyBH3KRrSM/ FvisM3m3Y2L76qgG1VTRPqpC9/B/L0vOgwInvJRByNz1Bfn+MeWkImCLPesHfhy8 ZpreJMMbW9JSOSrTuIo0n6a5PD+n1bXljtqNy9WYHiuexNYpk696P66uFMu8 -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:41 2026 by rpki-client