This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/nNBG6JVVM3hu0P20Vu06-SMt-9I.roa File: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (raw, json) Hash identifier: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM= Subject key identifier: 9C:D0:46:E8:95:55:33:78:6E:D0:FD:B4:56:ED:3A:F9:23:2D:FB:D2 Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Certificate serial: 019B7AC8672CEF42B93849726684E717CA42 Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/nNBG6JVVM3hu0P20Vu06-SMt-9I.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 193.107.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:67:2c:ef:42:b9:38:49:72:66:84:e7:17:ca:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd046e8955533786ed0fdb456ed3af9232dfbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:1a:bb:a0:48:a6:5a:b8:6c:b1:02:47:26: 88:2f:23:ef:f9:3a:ba:79:aa:5a:1d:72:64:50:c4: 5e:55:05:ac:f0:3a:f3:aa:48:b8:f9:f0:68:29:ae: 1c:13:33:c3:0f:35:82:0b:3a:56:df:0e:d1:4f:a7: a1:30:b6:01:b8:13:65:93:e4:e5:11:61:ce:6a:52: 32:6e:31:b2:46:b8:5a:f9:ad:23:0e:8c:42:6b:7f: a6:e3:65:3c:51:5d:ed:40:07:d1:5c:9c:06:c4:f9: 7e:69:1b:73:bd:13:b5:1a:48:64:c0:2e:85:c7:54: 50:a3:23:44:70:4c:5c:78:1c:29:a4:d0:a5:0d:36: 42:63:d2:ea:e4:64:56:e2:c7:6c:36:44:0b:eb:34: f4:bc:4f:c7:83:a0:b6:be:c9:cc:31:31:b1:2a:84: c2:ab:71:f3:49:65:ae:e0:40:0c:5b:02:8f:a0:7d: 14:d2:48:97:12:eb:ee:3b:a4:4a:5f:c4:26:9c:8c: 09:4a:fc:1d:44:a7:d2:84:be:2e:5b:a2:d7:cf:b0: dc:0f:8c:4a:22:3f:78:11:87:c1:b9:ee:33:f9:13: 2f:f2:09:18:cd:16:be:0a:e5:94:60:0b:7d:70:30: ab:45:00:d7:69:3a:e2:4f:46:be:38:19:18:d3:6b: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:46:E8:95:55:33:78:6E:D0:FD:B4:56:ED:3A:F9:23:2D:FB:D2 X509v3 Authority Key Identifier: keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/nNBG6JVVM3hu0P20Vu06-SMt-9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.120.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:76:e3:80:67:bc:07:5d:cc:b2:bd:ca:e7:3e:36:87:44:71: 9f:24:b9:ab:f6:51:52:c0:62:3f:7e:7b:82:63:49:3f:8d:95: 11:53:36:c6:4c:9e:ca:9a:ba:e9:d2:35:35:ff:77:ad:0e:d4: d0:7b:bc:b9:8b:8b:4e:c2:28:dd:e7:92:9e:6c:f0:0e:6f:fa: 68:45:19:d9:bd:63:ac:96:69:96:39:bc:83:24:d6:10:6c:c2: 31:8b:6b:4e:32:d8:1d:61:73:16:21:ce:0b:04:bf:f7:88:7e: f0:ba:2f:47:df:a5:43:25:7c:26:5c:21:3f:74:d0:c9:ea:7b: 9d:50:8f:58:81:d6:25:db:86:44:03:38:4b:d1:53:b5:8b:c6: b0:b7:b0:42:27:40:0d:72:01:30:67:c2:11:52:6c:1d:46:bc: a4:c8:91:3d:d0:3c:fa:37:60:86:ba:96:5d:03:4f:9d:06:e6: 59:71:be:d4:2d:0e:fc:82:28:4d:05:f0:60:0d:e3:26:42:dd: 1c:50:48:8e:36:fa:3c:6f:af:ff:02:ed:ac:8a:20:e4:15:d8: e6:55:9c:50:25:f4:c2:23:47:ec:c7:d5:0a:58:da:14:13:08: 15:12:f3:2c:f6:3e:e7:8a:0a:02:c1:f9:72:55:46:ea:97:74: 7b:00:6f:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGcs70K5OElyZoTnF8pCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm NDI3NzUwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2QwNDZlODk1NTUzMzc4NmVkMGZkYjQ1NmVkM2FmOTIzMmRmYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR8au6BIplq4bLECRyaILyPv+Tq6 eapaHXJkUMReVQWs8Drzqki4+fBoKa4cEzPDDzWCCzpW3w7RT6ehMLYBuBNlk+Tl EWHOalIybjGyRrha+a0jDoxCa3+m42U8UV3tQAfRXJwGxPl+aRtzvRO1GkhkwC6F x1RQoyNEcExceBwppNClDTZCY9Lq5GRW4sdsNkQL6zT0vE/Hg6C2vsnMMTGxKoTC q3HzSWWu4EAMWwKPoH0U0kiXEuvuO6RKX8QmnIwJSvwdRKfShL4uW6LXz7DcD4xK Ij94EYfBue4z+RMv8gkYzRa+CuWUYAt9cDCrRQDXaTriT0a+OBkY02tfBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzQRuiVVTN4btD9tFbtOvkjLfvSMB8GA1UdIwQY MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt YTRkMzU5ZDkxMjUxLzEvbk5CRzZKVlZNM2h1MFAyMFZ1MDYtU010LTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWt4MA0G CSqGSIb3DQEBCwUAA4IBAQBvduOAZ7wHXcyyvcrnPjaHRHGfJLmr9lFSwGI/fnuC Y0k/jZURUzbGTJ7Kmrrp0jU1/3etDtTQe7y5i4tOwijd55KebPAOb/poRRnZvWOs lmmWObyDJNYQbMIxi2tOMtgdYXMWIc4LBL/3iH7wui9H36VDJXwmXCE/dNDJ6nud UI9YgdYl24ZEAzhL0VO1i8awt7BCJ0ANcgEwZ8IRUmwdRrykyJE90Dz6N2CGupZd A0+dBuZZcb7ULQ78gihNBfBgDeMmQt0cUEiONvo8b6//Au2siiDkFdjmVZxQJfTC I0fsx9UKWNoUEwgVEvMs9j7nigoCwflyVUbql3R7AG+A -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:52 2026 by rpki-client