This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/NZpb2E9m2foAvsfyivT97O1jcng.roa File: NZpb2E9m2foAvsfyivT97O1jcng.roa (raw, json) Hash identifier: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE= Subject key identifier: 35:9A:5B:D8:4F:66:D9:FA:00:BE:C7:F2:8A:F4:FD:EC:ED:63:72:78 Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Certificate serial: 019B7AC81CFA15C6A0EB3766F96F7B5C463E Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/NZpb2E9m2foAvsfyivT97O1jcng.roa Signing time: Thu 01 Jan 2026 18:18:13 +0000 ROA not before: Thu 01 Jan 2026 18:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 193.104.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1c:fa:15:c6:a0:eb:37:66:f9:6f:7b:5c:46:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Validity Not Before: Jan 1 18:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=359a5bd84f66d9fa00bec7f28af4fdeced637278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:5e:b2:80:3e:bc:b3:5e:4d:0e:3b:5a:93: 7c:46:df:f8:0c:7e:a4:ca:69:ce:6a:4e:4e:c7:ce: 11:ba:81:9f:a0:c2:d4:f3:e9:32:39:d1:53:4b:56: 9d:81:18:d8:b1:2b:4e:3f:d9:61:6d:8d:72:9d:6b: 43:98:86:f4:88:6f:7a:f9:8d:03:59:39:7e:a1:2c: e8:05:97:90:8f:e4:da:41:9f:e5:b3:52:0d:97:b7: 32:99:3e:9b:5d:1a:fc:a9:ee:9c:5c:99:6f:ed:e1: 49:93:6e:33:30:eb:93:19:f1:bf:e8:7f:a8:0b:b3: c2:2c:1f:2d:25:bd:46:22:61:5a:9f:19:cd:9a:33: f8:d1:4a:2b:f9:32:34:be:56:73:d3:c1:b7:d1:a9: 22:8f:4a:16:c6:01:7a:16:1e:3b:39:ef:cd:de:83: 3c:7e:7c:dd:a0:05:df:15:5d:3d:c3:b8:8e:45:ca: eb:e0:46:5c:96:a6:d5:5a:bb:73:cb:62:41:f2:2f: 7f:9c:39:b9:cc:82:85:13:ab:66:5a:e2:82:5f:60: 09:fe:d8:80:36:68:5f:6e:e1:41:23:e7:63:18:b9: 50:46:1c:dc:31:1e:85:78:0e:db:55:97:75:c1:c5: 50:fe:7a:2a:4b:13:3e:88:79:ad:65:7a:d1:77:76: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9A:5B:D8:4F:66:D9:FA:00:BE:C7:F2:8A:F4:FD:EC:ED:63:72:78 X509v3 Authority Key Identifier: keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/NZpb2E9m2foAvsfyivT97O1jcng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.1.0/24 Signature Algorithm: sha256WithRSAEncryption ce:2a:93:14:7e:8f:e2:af:23:d2:93:a9:95:c8:51:2a:ed:67: f3:6a:b0:f4:7d:10:06:b2:58:fe:b5:7d:b6:33:5c:04:62:2f: 16:41:30:fc:b0:9a:a3:10:15:f8:d9:cd:a9:fd:22:52:cf:84: 9d:59:9c:62:de:b3:ff:90:63:18:9b:c8:3b:d7:e8:8c:f8:41: dd:87:bc:28:45:32:81:4e:82:13:fd:b0:6b:fc:68:a0:53:1e: 6b:92:c1:9f:fc:36:9d:4c:74:a3:33:17:2d:1e:66:65:31:22: 01:7c:79:62:93:9b:c1:12:04:eb:b0:8f:a1:ea:a9:20:ff:4b: f6:c3:31:58:55:78:36:aa:8e:c5:0e:a2:1f:3d:d3:ee:e2:97: 23:98:31:a8:27:4a:c6:08:90:b6:d2:ac:7e:fc:c4:32:8b:71: d4:44:33:b0:71:91:c6:52:a8:92:bd:28:76:06:15:57:bb:ff: bd:61:c7:5f:d0:3f:c9:07:2a:a6:b1:f4:20:93:5b:f4:c6:b8: 0c:81:5a:50:a8:08:25:51:5a:3f:34:45:f4:24:9c:25:cf:31: bb:88:52:2a:9b:66:35:f3:81:f3:75:97:fc:87:f2:fb:c5:48: 74:50:bc:44:de:d7:e5:7c:cd:e5:0b:5b:c7:a7:39:fb:bc:b3: ad:81:09:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBz6Fcag6zdm+W97XEY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy ZWFhOGIwHhcNMjYwMTAxMTgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTlhNWJkODRmNjZkOWZhMDBiZWM3ZjI4YWY0ZmRlY2VkNjM3Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJxesoA+vLNeTQ47WpN8Rt/4DH6k ymnOak5Ox84RuoGfoMLU8+kyOdFTS1adgRjYsStOP9lhbY1ynWtDmIb0iG96+Y0D WTl+oSzoBZeQj+TaQZ/ls1INl7cymT6bXRr8qe6cXJlv7eFJk24zMOuTGfG/6H+o C7PCLB8tJb1GImFanxnNmjP40Uor+TI0vlZz08G30akij0oWxgF6Fh47Oe/N3oM8 fnzdoAXfFV09w7iORcrr4EZclqbVWrtzy2JB8i9/nDm5zIKFE6tmWuKCX2AJ/tiA NmhfbuFBI+djGLlQRhzcMR6FeA7bVZd1wcVQ/noqSxM+iHmtZXrRd3Ya6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWaW9hPZtn6AL7H8or0/eztY3J4MB8GA1UdIwQY MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et NmUyZGVhMDNkNTk2LzEvTlpwYjJFOW0yZm9BdnNmeWl2VDk3TzFqY25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2 LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgBMA0G CSqGSIb3DQEBCwUAA4IBAQDOKpMUfo/iryPSk6mVyFEq7WfzarD0fRAGslj+tX22 M1wEYi8WQTD8sJqjEBX42c2p/SJSz4SdWZxi3rP/kGMYm8g71+iM+EHdh7woRTKB ToIT/bBr/GigUx5rksGf/DadTHSjMxctHmZlMSIBfHlik5vBEgTrsI+h6qkg/0v2 wzFYVXg2qo7FDqIfPdPu4pcjmDGoJ0rGCJC20qx+/MQyi3HURDOwcZHGUqiSvSh2 BhVXu/+9Ycdf0D/JByqmsfQgk1v0xrgMgVpQqAglUVo/NEX0JJwlzzG7iFIqm2Y1 84HzdZf8h/L7xUh0ULxE3tflfM3lC1vHpzn7vLOtgQlc -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:02 2026 by rpki-client