This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/nayB3_rE3RntOJEk4e7i16Y7R3M.roa File: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (raw, json) Hash identifier: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg= Subject key identifier: 9D:AC:81:DF:FA:C4:DD:19:ED:38:91:24:E1:EE:E2:D7:A6:3B:47:73 Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019B7F83D2DECCA00931D8C9E0E075612740 Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/nayB3_rE3RntOJEk4e7i16Y7R3M.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56716 IP address blocks: 31.129.236.0/22 maxlen: 22 31.129.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d2:de:cc:a0:09:31:d8:c9:e0:e0:75:61:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dac81dffac4dd19ed389124e1eee2d7a63b4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:38:2e:37:d8:74:f2:26:a0:32:fe:af:32: 2e:3c:9d:67:df:6c:5b:49:4a:3b:7e:81:d1:a8:18: 2a:82:6b:15:72:10:3d:bd:92:e4:6e:ed:af:21:b1: d1:92:b7:3e:9b:db:6a:31:e4:b9:07:f3:a2:39:ed: 7e:2e:88:27:f2:98:6b:e9:f9:f2:6d:b1:ff:84:9d: 8c:bf:1c:28:65:33:54:7a:95:61:58:57:a4:32:e5: 26:16:ed:1c:98:f4:54:84:f5:83:08:4c:02:1f:4d: 4f:58:69:35:13:2f:09:1f:39:e3:7b:74:64:d3:84: f6:a3:42:e9:2b:28:59:93:e3:d2:ca:6b:3b:dc:81: 7e:7e:ee:ec:d9:45:ba:41:53:c3:50:80:a3:d2:d9: 90:88:be:aa:a2:80:b2:d3:fb:2f:67:f3:1e:a0:9e: d5:3f:db:4a:be:ef:44:a0:4c:cc:4a:a1:61:9f:65: c2:93:32:04:31:3c:5a:67:9e:a7:02:31:28:ef:d8: 95:a2:9a:cd:31:a6:60:2a:3f:c3:47:69:ac:03:c9: 80:1c:e4:a8:d2:6e:0f:b1:5b:d7:12:1f:c8:0b:32: dc:42:87:43:a5:db:2f:d6:bd:e6:2a:84:24:4e:a6: 34:aa:05:fb:5e:22:1a:0c:94:b1:95:90:69:39:0d: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AC:81:DF:FA:C4:DD:19:ED:38:91:24:E1:EE:E2:D7:A6:3B:47:73 X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/nayB3_rE3RntOJEk4e7i16Y7R3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.236.0-31.129.243.255 Signature Algorithm: sha256WithRSAEncryption 5d:d1:ae:f2:15:dd:89:2b:56:20:03:1d:79:30:0c:ca:67:c8: d7:e4:6a:0d:54:f2:55:60:d7:53:7d:91:20:90:49:4b:04:e1: 86:d1:72:e9:ad:36:32:14:f8:ac:c0:b6:53:82:e5:cc:e0:2b: af:f1:7e:7d:74:59:a3:29:19:89:5c:d6:a4:4f:08:71:4a:01: e9:6e:c1:42:9d:2a:3a:62:f3:ab:61:e2:68:e5:bd:96:f5:af: 01:04:77:d7:67:27:6c:b6:d3:d3:2f:83:fa:25:44:6a:6d:96: fe:6e:9c:4c:48:2d:d2:55:4c:77:b6:1d:b5:ae:5f:2b:9e:71: 4b:25:e4:83:64:ce:40:90:ac:43:7d:55:08:63:b8:dd:e2:91: 1a:71:69:6d:3d:28:29:e7:de:3c:6b:6a:6c:e6:7a:d0:58:6f: 9f:c5:ba:1b:8b:f2:66:0a:04:1b:8d:25:ba:81:cb:19:cd:bc: 80:97:ce:73:ae:a5:3f:62:78:d9:ea:99:7b:f3:52:bd:7a:4c: fa:16:16:1c:f8:26:2e:07:86:b2:58:f9:07:2e:ad:1e:f7:ed: 54:b1:1b:5b:48:45:a5:c2:e4:3d:0b:72:4e:51:49:f7:f7:9e: 00:e4:a6:f3:fe:90:49:4f:7f:49:87:49:99:b8:93:99:1d:42: c1:2a:f0:69 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g9LezKAJMdjJ4OB1YSdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGFjODFkZmZhYzRkZDE5ZWQzODkxMjRlMWVlZTJkN2E2M2I0NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrg4LjfYdPImoDL+rzIuPJ1n32xb SUo7foHRqBgqgmsVchA9vZLkbu2vIbHRkrc+m9tqMeS5B/OiOe1+Logn8phr6fny bbH/hJ2MvxwoZTNUepVhWFekMuUmFu0cmPRUhPWDCEwCH01PWGk1Ey8JHznje3Rk 04T2o0LpKyhZk+PSyms73IF+fu7s2UW6QVPDUICj0tmQiL6qooCy0/svZ/MeoJ7V P9tKvu9EoEzMSqFhn2XCkzIEMTxaZ56nAjEo79iVoprNMaZgKj/DR2msA8mAHOSo 0m4PsVvXEh/ICzLcQodDpdsv1r3mKoQkTqY0qgX7XiIaDJSxlZBpOQ2aUwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ2sgd/6xN0Z7TiRJOHu4temO0dzMB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvbmF5QjNfckUzUm50T0pFazRlN2kxNlk3UjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIfgewD BAIfgfAwDQYJKoZIhvcNAQELBQADggEBAF3RrvIV3YkrViADHXkwDMpnyNfkag1U 8lVg11N9kSCQSUsE4YbRcumtNjIU+KzAtlOC5czgK6/xfn10WaMpGYlc1qRPCHFK AeluwUKdKjpi86th4mjlvZb1rwEEd9dnJ2y209Mvg/olRGptlv5unExILdJVTHe2 HbWuXyuecUsl5INkzkCQrEN9VQhjuN3ikRpxaW09KCnn3jxramzmetBYb5/FuhuL 8mYKBBuNJbqByxnNvICXznOupT9ieNnqmXvzUr16TPoWFhz4Ji4HhrJY+QcurR73 7VSxG1tIRaXC5D0Lck5RSff3ngDkpvP+kElPf0mHSZm4k5kdQsEq8Gk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:07 2026 by rpki-client