This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/nQHAV_Ps2-Y3Woetwnk626f8UAk.roa File: nQHAV_Ps2-Y3Woetwnk626f8UAk.roa (raw, json) Hash identifier: ClqAt8FqMvn1/qMPIADB90+Mz30NK/WNRIWwQOc3by0= Subject key identifier: 9D:01:C0:57:F3:EC:DB:E6:37:5A:87:AD:C2:79:3A:DB:A7:FC:50:09 Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Certificate serial: 019B77C764D2480FF031945DDF1B9CAF76EB Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/nQHAV_Ps2-Y3Woetwnk626f8UAk.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 185.127.124.0/24 maxlen: 24 185.127.125.0/24 maxlen: 24 185.127.126.0/24 maxlen: 24 185.127.127.0/24 maxlen: 24 193.27.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:d2:48:0f:f0:31:94:5d:df:1b:9c:af:76:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d01c057f3ecdbe6375a87adc2793adba7fc5009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ab:8a:c8:7c:ba:66:d5:4e:93:a7:7e:09:0d: 76:03:76:41:05:ae:82:13:e9:a2:26:3a:1e:38:a0: c1:27:46:2b:d8:ad:9f:3a:0f:a9:f6:3a:57:fb:6b: 54:f0:04:6c:77:b4:61:64:0e:ef:5b:1f:78:d4:a3: 49:b9:74:df:8e:e3:e0:3c:e2:f4:a9:23:2c:bb:63: f4:2c:b1:16:e2:d8:88:79:9c:f0:d7:de:1f:2e:05: d6:3b:1f:32:cb:78:8d:0b:ec:8b:33:d5:44:18:99: 9f:9a:73:b1:0a:5c:29:6b:e9:08:c3:d3:08:6b:d4: 44:22:f0:39:6f:f4:10:c9:10:16:61:d2:25:64:6f: 0b:38:62:ed:8d:c8:18:de:ee:17:2e:cc:09:f0:49: 1b:ae:83:2a:c6:b9:4b:f8:95:b8:41:e6:43:a7:ab: 20:b7:5d:f8:8e:2b:4c:0b:50:54:a6:f6:9a:30:9e: 48:ac:f7:dd:e8:a1:b4:9b:76:3a:9a:35:de:c1:d8: 16:26:6c:fd:2e:30:f2:78:1d:28:68:97:a0:e0:2c: c3:36:57:88:c2:a3:28:c9:06:f8:a7:b4:85:9b:70: 04:61:f0:69:da:58:99:ff:4a:0e:ff:5b:15:05:41: 5f:26:68:74:5f:44:91:ed:9c:e9:c4:bc:c0:7d:3d: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:C0:57:F3:EC:DB:E6:37:5A:87:AD:C2:79:3A:DB:A7:FC:50:09 X509v3 Authority Key Identifier: keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/nQHAV_Ps2-Y3Woetwnk626f8UAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.124.0/22 193.27.234.0/24 Signature Algorithm: sha256WithRSAEncryption 12:71:10:59:b2:a1:5c:49:fb:40:41:cf:26:60:29:14:4f:98: 43:61:63:9d:1c:f6:5c:27:33:23:91:74:19:59:0d:6a:7e:aa: 4a:f8:b3:68:ce:91:53:b3:2e:fc:89:0b:4d:e3:f7:44:3f:f2: 67:3f:43:ca:67:8f:c5:9c:df:3d:c2:a9:90:35:70:50:7d:ff: f2:e7:c2:e3:03:ab:c9:81:b8:9b:f8:2a:cb:67:fb:43:f3:fa: 9a:8f:dd:92:4f:be:bd:f0:cd:ff:9c:70:bf:32:cf:82:33:a8: e6:d7:16:cb:9c:5f:dd:98:f2:0b:bc:34:70:3d:38:63:a5:c4: ac:69:92:28:64:0d:95:91:23:5c:38:dd:8b:fd:84:f2:e2:60: db:6a:b9:39:2c:7f:4c:53:12:34:74:6d:75:09:f7:7a:d8:08: 02:43:d6:8a:27:22:ba:3b:e2:d6:a0:3b:ee:51:79:75:9d:0d: 84:6a:16:3f:44:8d:c1:97:cc:a7:6e:fd:c3:ce:a7:a9:f7:e6: ff:1b:83:4f:87:e7:c0:c4:d4:97:03:af:3f:47:1a:b6:4b:95: 56:6c:93:a3:4b:5a:98:0a:55:9c:9f:5e:0a:f8:1c:52:a1:e8: 6c:26:93:8d:46:e9:82:a5:4c:b5:9f:e8:a1:06:83:91:d5:4f: c0:18:1a:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2TSSA/wMZRd3xucr3brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj NmU5MzgwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDAxYzA1N2YzZWNkYmU2Mzc1YTg3YWRjMjc5M2FkYmE3ZmM1MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKuKyHy6ZtVOk6d+CQ12A3ZBBa6C E+miJjoeOKDBJ0Yr2K2fOg+p9jpX+2tU8ARsd7RhZA7vWx941KNJuXTfjuPgPOL0 qSMsu2P0LLEW4tiIeZzw194fLgXWOx8yy3iNC+yLM9VEGJmfmnOxClwpa+kIw9MI a9REIvA5b/QQyRAWYdIlZG8LOGLtjcgY3u4XLswJ8EkbroMqxrlL+JW4QeZDp6sg t134jitMC1BUpvaaMJ5IrPfd6KG0m3Y6mjXewdgWJmz9LjDyeB0oaJeg4CzDNleI wqMoyQb4p7SFm3AEYfBp2liZ/0oO/1sVBUFfJmh0X0SR7ZzpxLzAfT13BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ0BwFfz7NvmN1qHrcJ5Otun/FAJMB8GA1UdIwQY MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt NTJhZmM3N2NhMThmLzEvblFIQVZfUHMyLVkzV29ldHduazYyNmY4VUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuX98AwQA wRvqMA0GCSqGSIb3DQEBCwUAA4IBAQAScRBZsqFcSftAQc8mYCkUT5hDYWOdHPZc JzMjkXQZWQ1qfqpK+LNozpFTsy78iQtN4/dEP/JnP0PKZ4/FnN89wqmQNXBQff/y 58LjA6vJgbib+CrLZ/tD8/qaj92ST7698M3/nHC/Ms+CM6jm1xbLnF/dmPILvDRw PThjpcSsaZIoZA2VkSNcON2L/YTy4mDbark5LH9MUxI0dG11Cfd62AgCQ9aKJyK6 O+LWoDvuUXl1nQ2EahY/RI3Bl8ynbv3Dzqep9+b/G4NPh+fAxNSXA68/Rxq2S5VW bJOjS1qYClWcn14K+BxSoehsJpONRumCpUy1n+ihBoOR1U/AGBrT -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:08 2026 by rpki-client