This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NA8tG2G3hFFALFYl7Venv99NrVc.roa File: NA8tG2G3hFFALFYl7Venv99NrVc.roa (raw, json) Hash identifier: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ= Subject key identifier: 34:0F:2D:1B:61:B7:84:51:40:2C:56:25:ED:57:A7:BF:DF:4D:AD:57 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B7C133D344B7DEDE61C7693A5A2BB6FC7 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NA8tG2G3hFFALFYl7Venv99NrVc.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60718 IP address blocks: 109.74.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3d:34:4b:7d:ed:e6:1c:76:93:a5:a2:bb:6f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=340f2d1b61b78451402c5625ed57a7bfdf4dad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:70:35:9f:a4:02:67:9e:9b:d5:b2:21:1b: bf:ef:d1:d7:14:14:2f:d3:cd:15:cf:60:04:94:ee: 52:03:ee:0d:ae:99:d7:6f:6a:0c:4e:dc:c5:40:90: 32:64:66:1d:1b:ba:37:33:f4:3b:cc:9a:46:0e:ad: a5:53:cd:c8:87:54:22:fe:51:cf:22:84:76:3e:c3: a8:f6:f1:f9:08:6e:af:26:22:27:aa:f5:81:bd:46: bd:ef:fe:3f:39:d3:35:d4:f2:ac:30:b8:eb:c8:e4: 5c:f7:62:3a:1c:61:9e:29:19:4d:16:1b:5a:b8:29: dd:e8:fa:56:a7:c7:c5:ee:88:5c:e8:53:a3:06:d7: 7d:e1:98:2d:df:1c:2d:43:dc:40:64:a9:ce:8c:df: 1a:78:d4:d2:48:96:c0:30:39:d5:99:e8:ef:c3:80: 88:c5:d6:24:6c:58:68:b5:58:66:4f:a6:dd:82:fe: b9:bf:f8:83:e3:78:ed:b4:44:72:73:03:e9:97:47: 0c:50:a6:54:2d:be:fc:3d:ee:d0:a6:1d:3d:7f:1d: 30:76:b9:1e:5b:44:19:99:70:be:f7:33:4e:cd:a9: db:61:b5:8a:d1:d0:bb:7e:52:0e:36:fc:37:62:ac: 14:12:c4:b1:e7:cd:be:9f:6d:21:02:95:c0:e9:23: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0F:2D:1B:61:B7:84:51:40:2C:56:25:ED:57:A7:BF:DF:4D:AD:57 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NA8tG2G3hFFALFYl7Venv99NrVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.86.0/24 Signature Algorithm: sha256WithRSAEncryption 90:e9:37:48:fe:00:19:41:40:66:7f:54:75:d7:1a:a2:4a:ca: 01:f6:a9:5b:96:29:f0:12:56:4e:d1:a6:87:df:6b:ea:14:1a: 8d:4c:d5:0d:2a:80:bc:af:fb:b5:28:0d:9e:5f:4c:be:26:a3: 49:72:62:d8:eb:fe:73:0c:fe:c2:9b:4d:b1:5d:46:42:ba:6c: b3:7f:89:28:66:88:b9:b1:a4:d7:90:2f:2b:78:67:3f:7b:98: a1:da:5d:c5:52:c4:6b:7a:4e:a9:c6:a6:87:8d:15:17:06:20: 58:f0:95:2f:3d:ea:63:6f:d5:3d:50:ca:53:0f:6d:33:83:bc: 89:eb:31:5f:d5:ef:86:00:70:79:00:c4:53:67:56:5f:9e:07: ff:0d:e1:ca:0f:1e:5b:6c:79:ac:82:cd:34:6d:31:a7:5c:9e: 1c:85:64:aa:b5:8b:75:62:3e:21:84:1d:a9:72:da:fd:1e:48: 6a:7c:12:eb:63:b3:db:b7:4f:e3:04:84:ca:32:1a:06:e7:0b: 2b:3d:1e:35:15:7c:1c:d4:ae:44:e9:c7:47:9e:1d:46:9b:33: 29:e7:21:2d:9c:24:33:83:de:66:78:7d:80:48:88:60:31:a1: 97:a8:5e:77:8f:5b:68:e6:2c:33:10:ac:88:0b:4a:a8:64:47: 68:6f:57:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez00S33t5hx2k6Wiu2/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDBmMmQxYjYxYjc4NDUxNDAyYzU2MjVlZDU3YTdiZmRmNGRhZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGBwNZ+kAmeem9WyIRu/79HXFBQv 080Vz2AElO5SA+4NrpnXb2oMTtzFQJAyZGYdG7o3M/Q7zJpGDq2lU83Ih1Qi/lHP IoR2PsOo9vH5CG6vJiInqvWBvUa97/4/OdM11PKsMLjryORc92I6HGGeKRlNFhta uCnd6PpWp8fF7ohc6FOjBtd94Zgt3xwtQ9xAZKnOjN8aeNTSSJbAMDnVmejvw4CI xdYkbFhotVhmT6bdgv65v/iD43jttERycwPpl0cMUKZULb78Pe7Qph09fx0wdrke W0QZmXC+9zNOzanbYbWK0dC7flIONvw3YqwUEsSx582+n20hApXA6SOB9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQPLRtht4RRQCxWJe1Xp7/fTa1XMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTkE4dEcyRzNoRkZBTEZZbDdWZW52OTlOclZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUpWMA0G CSqGSIb3DQEBCwUAA4IBAQCQ6TdI/gAZQUBmf1R11xqiSsoB9qlblinwElZO0aaH 32vqFBqNTNUNKoC8r/u1KA2eX0y+JqNJcmLY6/5zDP7Cm02xXUZCumyzf4koZoi5 saTXkC8reGc/e5ih2l3FUsRrek6pxqaHjRUXBiBY8JUvPepjb9U9UMpTD20zg7yJ 6zFf1e+GAHB5AMRTZ1Zfngf/DeHKDx5bbHmsgs00bTGnXJ4chWSqtYt1Yj4hhB2p ctr9HkhqfBLrY7Pbt0/jBITKMhoG5wsrPR41FXwc1K5E6cdHnh1GmzMp5yEtnCQz g95meH2ASIhgMaGXqF53j1to5iwzEKyIC0qoZEdob1dT -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:35 2026 by rpki-client