This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NC0UAgfuyICWUK07pGjses6Gmp4.roa File: NC0UAgfuyICWUK07pGjses6Gmp4.roa (raw, json) Hash identifier: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes= Subject key identifier: 34:2D:14:02:07:EE:C8:80:96:50:AD:3B:A4:68:EC:7A:CE:86:9A:9E Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B7C133E9D3F65F351CB0B0183F69BAC4E Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NC0UAgfuyICWUK07pGjses6Gmp4.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209479 IP address blocks: 85.14.154.0/23 maxlen: 23 217.171.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3e:9d:3f:65:f3:51:cb:0b:01:83:f6:9b:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342d140207eec8809650ad3ba468ec7ace869a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:f7:ce:a5:c1:3c:64:e6:b2:79:72:55:59: 56:e9:56:d5:03:c2:6a:ad:66:75:84:b8:7e:b0:79: 97:d2:4b:f7:88:3e:07:d4:35:4a:f1:6e:40:a4:71: 27:5e:0d:92:ea:f8:e2:19:35:13:09:e4:f6:45:bb: 60:7c:79:c8:13:d8:2f:47:dc:b5:89:1b:3d:6b:50: 7b:97:d9:af:f4:39:78:09:49:35:45:66:74:45:b4: c3:fe:f8:60:02:2c:81:4d:2b:ed:71:87:48:a7:44: 64:f1:1c:d2:0c:fa:1a:e0:b7:66:34:0f:e1:f1:e4: 51:41:46:bc:f5:7b:e4:de:a7:3f:e2:cd:c9:f5:93: a4:48:85:f3:2e:ab:7e:2a:10:76:db:0e:45:1a:82: 15:2a:7d:4c:7c:93:5a:7f:a5:b2:31:ba:d8:94:e3: 92:61:0e:78:96:92:ca:ec:24:fe:2c:f1:8e:9b:cd: 42:9a:41:e3:fc:99:31:da:e4:b8:6e:3c:be:32:24: c2:87:4d:fb:54:fd:cb:86:8b:0a:29:d7:88:58:89: 0c:47:93:cb:32:ac:25:36:3b:96:09:e5:04:76:91: f3:26:e2:95:f8:2e:8b:55:63:d5:40:d1:19:8c:ff: 85:bb:0e:f1:78:de:8f:83:7f:9c:4d:8d:21:74:6c: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:14:02:07:EE:C8:80:96:50:AD:3B:A4:68:EC:7A:CE:86:9A:9E X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/NC0UAgfuyICWUK07pGjses6Gmp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.14.154.0/23 217.171.24.0/23 Signature Algorithm: sha256WithRSAEncryption c3:de:db:6b:a3:39:7c:2a:cc:00:5c:ad:49:06:5d:55:25:4b: 9d:b7:c2:23:96:e9:86:bd:65:b8:cd:a7:63:e5:2f:cd:98:f9: a8:f2:47:5e:50:6d:75:08:dc:19:db:3e:11:2b:8c:b1:e3:37: bb:c9:1f:3f:a4:b1:18:da:6f:d7:4e:3f:75:34:5e:65:1f:72: 4e:0e:fa:18:74:5f:b2:65:f5:2b:66:8c:05:c1:0c:5b:e3:e2: 31:cb:d1:4d:06:d8:09:72:66:c6:6b:0a:bd:07:e5:4e:70:57: 47:ac:7f:69:48:60:8b:68:67:c1:91:b8:56:ec:3d:62:57:b5: e2:0e:f6:f1:a4:95:1f:02:d3:0d:3a:b8:8e:d0:1d:6a:79:28: b3:b1:1e:4f:b6:fb:3f:ef:34:3f:59:32:34:12:87:26:af:20: d7:c4:78:27:e1:27:18:1f:f6:07:49:4a:dd:5e:4e:11:df:be: 10:56:62:97:be:0e:7e:5f:b2:77:82:26:f1:8d:8b:d5:5e:71: 4e:59:12:ca:af:37:04:da:ed:28:3e:1f:de:f0:f5:a2:71:81: a9:12:aa:92:47:4b:98:90:26:9a:23:e9:7f:b3:47:4e:39:4e: d4:2c:a4:8f:a4:b7:63:4d:69:60:36:f6:43:2c:63:81:95:de: 5f:46:13:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ez6dP2XzUcsLAYP2m6xOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJkMTQwMjA3ZWVjODgwOTY1MGFkM2JhNDY4ZWM3YWNlODY5YTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6X3zqXBPGTmsnlyVVlW6VbVA8Jq rWZ1hLh+sHmX0kv3iD4H1DVK8W5ApHEnXg2S6vjiGTUTCeT2RbtgfHnIE9gvR9y1 iRs9a1B7l9mv9Dl4CUk1RWZ0RbTD/vhgAiyBTSvtcYdIp0Rk8RzSDPoa4LdmNA/h 8eRRQUa89Xvk3qc/4s3J9ZOkSIXzLqt+KhB22w5FGoIVKn1MfJNaf6WyMbrYlOOS YQ54lpLK7CT+LPGOm81CmkHj/Jkx2uS4bjy+MiTCh037VP3LhosKKdeIWIkMR5PL MqwlNjuWCeUEdpHzJuKV+C6LVWPVQNEZjP+Fuw7xeN6Pg3+cTY0hdGxgtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDQtFAIH7siAllCtO6Ro7HrOhpqeMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTkMwVUFnZnV5SUNXVUswN3BHanNlczZHbXA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVQ6aAwQB 2asYMA0GCSqGSIb3DQEBCwUAA4IBAQDD3ttrozl8KswAXK1JBl1VJUudt8IjlumG vWW4zadj5S/NmPmo8kdeUG11CNwZ2z4RK4yx4ze7yR8/pLEY2m/XTj91NF5lH3JO DvoYdF+yZfUrZowFwQxb4+Ixy9FNBtgJcmbGawq9B+VOcFdHrH9pSGCLaGfBkbhW 7D1iV7XiDvbxpJUfAtMNOriO0B1qeSizsR5Ptvs/7zQ/WTI0EocmryDXxHgn4ScY H/YHSUrdXk4R374QVmKXvg5+X7J3gibxjYvVXnFOWRLKrzcE2u0oPh/e8PWicYGp EqqSR0uYkCaaI+l/s0dOOU7ULKSPpLdjTWlgNvZDLGOBld5fRhN8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:37 2026 by rpki-client