This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/NN0QHkAo8YjbrqzfVegC-uPDydo.roa File: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (raw, json) Hash identifier: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY= Subject key identifier: 34:DD:10:1E:40:28:F1:88:DB:AE:AC:DF:55:E8:02:FA:E3:C3:C9:DA Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Certificate serial: 019B7B35DC096AD9462684E9DAA4B799BCA3 Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/NN0QHkAo8YjbrqzfVegC-uPDydo.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206221 IP address blocks: 185.1.240.0/24 maxlen: 24 2001:7f8:12a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dc:09:6a:d9:46:26:84:e9:da:a4:b7:99:bc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34dd101e4028f188dbaeacdf55e802fae3c3c9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:13:6a:fa:56:7a:d3:c9:df:57:0b:3d:54: 75:56:99:25:00:7c:50:7d:c7:11:5f:c0:76:52:6f: a9:86:98:11:07:09:2b:40:21:63:cc:9a:3a:83:f0: 9e:7a:c3:83:51:40:c0:be:e9:d5:d7:f2:ac:19:36: 28:92:ff:ee:bd:01:b8:ab:47:3c:ee:cc:d0:c3:ef: e5:ca:33:a7:f6:9f:dd:82:91:1c:ec:08:8e:33:82: 39:d4:92:21:66:fd:ee:bc:df:2c:d7:85:a4:a8:c8: 16:e7:d6:22:16:4c:6f:3a:02:da:11:89:8c:5d:2b: cc:02:75:15:0b:a8:d3:69:5f:9f:ad:22:5c:f6:14: 8c:0f:67:89:15:5c:2a:10:75:6b:48:45:a9:f7:0b: 7a:a3:48:73:c4:e5:49:ea:52:5c:d6:af:b7:e7:9a: fb:73:55:e1:5b:59:97:d0:4e:00:dc:08:0f:33:df: 7d:ce:19:1d:78:97:ce:48:5c:90:de:d5:27:11:49: 5a:bc:00:a1:51:6a:59:eb:c9:d0:1a:45:3d:49:5f: 9a:5c:99:89:0b:2f:06:31:dc:dc:53:79:62:85:a7: 00:02:8f:44:1b:1e:80:b8:8b:a6:81:80:73:f8:bc: 50:d8:cd:c5:8a:53:26:b5:45:9d:77:b1:7d:2d:42: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:10:1E:40:28:F1:88:DB:AE:AC:DF:55:E8:02:FA:E3:C3:C9:DA X509v3 Authority Key Identifier: keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/NN0QHkAo8YjbrqzfVegC-uPDydo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.240.0/24 IPv6: 2001:7f8:12a::/48 Signature Algorithm: sha256WithRSAEncryption 5b:35:79:63:a8:db:04:52:ca:f6:8d:67:56:da:d2:41:cc:f1: b1:4d:92:db:90:ba:08:6c:87:9f:7d:4f:67:94:81:ea:00:95: e9:16:de:2f:18:f7:89:d4:38:5c:c6:97:12:cc:af:ec:72:b4: 0c:8f:7b:15:2b:76:ac:5c:af:50:a0:53:f5:8f:b1:2f:20:e9: 6a:7d:2e:64:50:c2:6d:ce:54:fa:e2:82:4e:1a:9a:18:8f:48: 8c:c8:61:e0:a0:25:c8:79:5c:f1:de:32:5f:ae:10:76:fd:22: 72:d4:05:75:a5:16:fc:0e:80:05:8d:63:78:a7:55:33:92:b7: 65:25:7d:21:03:1d:1e:27:c9:11:cb:1b:98:aa:7b:5c:4f:29: 55:45:6b:a6:f7:6e:bd:d4:5a:7d:1a:5a:e0:68:cb:2b:af:ef: a7:12:a8:ca:73:62:71:d5:75:26:29:b3:2e:88:4a:84:c1:3b: 8f:bd:c8:a2:31:9a:3d:71:47:3f:db:72:0d:f0:49:20:dd:70: 3a:33:46:e7:e9:45:4f:e9:3d:78:35:5f:6c:79:36:9f:e2:94: 87:94:d5:17:b8:f7:86:9b:59:2b:fa:7b:1e:75:74:fd:55:de: f9:39:52:d8:f1:90:18:e9:40:9e:cb:03:fa:b3:21:9e:95:e6: e7:26:36:92 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NdwJatlGJoTp2qS3mbyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj MjVhNjYwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGRkMTAxZTQwMjhmMTg4ZGJhZWFjZGY1NWU4MDJmYWUzYzNjOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDcTavpWetPJ31cLPVR1VpklAHxQ fccRX8B2Um+phpgRBwkrQCFjzJo6g/CeesODUUDAvunV1/KsGTYokv/uvQG4q0c8 7szQw+/lyjOn9p/dgpEc7AiOM4I51JIhZv3uvN8s14WkqMgW59YiFkxvOgLaEYmM XSvMAnUVC6jTaV+frSJc9hSMD2eJFVwqEHVrSEWp9wt6o0hzxOVJ6lJc1q+355r7 c1XhW1mX0E4A3AgPM999zhkdeJfOSFyQ3tUnEUlavAChUWpZ68nQGkU9SV+aXJmJ Cy8GMdzcU3lihacAAo9EGx6AuIumgYBz+LxQ2M3FilMmtUWdd7F9LUL/eQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDTdEB5AKPGI266s31XoAvrjw8naMB8GA1UdIwQY MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt NTBkZDNhNTgxNTRiLzEvTk4wUUhrQW84WWpicnF6ZlZlZ0MtdVBEeWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQHwMA8E AgACMAkDBwAgAQf4ASowDQYJKoZIhvcNAQELBQADggEBAFs1eWOo2wRSyvaNZ1ba 0kHM8bFNktuQughsh599T2eUgeoAlekW3i8Y94nUOFzGlxLMr+xytAyPexUrdqxc r1CgU/WPsS8g6Wp9LmRQwm3OVPrigk4amhiPSIzIYeCgJch5XPHeMl+uEHb9InLU BXWlFvwOgAWNY3inVTOSt2UlfSEDHR4nyRHLG5iqe1xPKVVFa6b3br3UWn0aWuBo yyuv76cSqMpzYnHVdSYpsy6ISoTBO4+9yKIxmj1xRz/bcg3wSSDdcDozRufpRU/p PXg1X2x5Np/ilIeU1Re494abWSv6ex51dP1V3vk5UtjxkBjpQJ7LA/qzIZ6V5ucm NpI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:56 2026 by rpki-client