This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/niKMcxvkNHwtFE1swRnZRa7V130.roa File: niKMcxvkNHwtFE1swRnZRa7V130.roa (raw, json) Hash identifier: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY= Subject key identifier: 9E:22:8C:73:1B:E4:34:7C:2D:14:4D:6C:C1:19:D9:45:AE:D5:D7:7D Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11F3E3C60ACC2E1B3B6E876A1FE59B Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/niKMcxvkNHwtFE1swRnZRa7V130.roa Signing time: Fri 02 Jan 2026 00:18:29 +0000 ROA not before: Fri 02 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11895 IP address blocks: 193.118.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f3:e3:c6:0a:cc:2e:1b:3b:6e:87:6a:1f:e5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e228c731be4347c2d144d6cc119d945aed5d77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:15:8b:de:f4:e4:82:c4:83:53:67:01:58: e4:ad:38:e6:92:85:ee:d5:7f:e5:4d:0c:65:da:3f: 71:c9:36:5d:28:54:92:c6:96:c3:9d:7a:5e:3c:43: 4a:e5:3c:6e:26:f9:b9:44:ee:63:2c:c8:26:77:18: 37:24:29:fe:86:ac:5d:13:bf:98:a4:a0:24:a9:e4: 74:6e:c4:11:79:39:8d:3c:d3:27:3f:83:ff:85:1f: 3f:e3:22:aa:bd:fb:ae:ee:af:dc:b6:e9:fd:2e:00: 16:aa:7f:24:39:27:a1:15:93:dc:3a:5e:23:45:f9: 5a:85:73:dc:88:f2:86:a7:2d:a9:47:dd:5a:07:50: 3a:c9:67:62:77:8c:f0:08:db:6d:2a:ef:f2:04:95: 7d:7b:c7:ff:9e:6e:9e:4a:49:2e:0c:5b:3d:4e:62: 54:8d:de:e0:73:66:09:83:28:e0:63:fd:c3:3a:f7: f5:e2:a1:d1:d0:ec:12:02:11:6c:16:c3:49:3e:86: 99:27:f4:4e:fc:ae:cc:f4:26:ea:62:05:3c:0d:d2: ed:e1:47:e2:91:e8:f1:55:5b:69:22:36:48:81:7c: a8:6d:85:2f:6b:62:9e:c0:c0:19:09:e3:58:c7:d5: fc:12:1c:19:ac:cd:7b:ec:aa:62:a5:ea:c9:6b:71: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:8C:73:1B:E4:34:7C:2D:14:4D:6C:C1:19:D9:45:AE:D5:D7:7D X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/niKMcxvkNHwtFE1swRnZRa7V130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.118.166.0/24 Signature Algorithm: sha256WithRSAEncryption ab:bd:0f:01:d3:0c:4b:c0:a5:a3:af:1c:6d:4e:71:85:31:82: 66:fa:13:c9:de:3c:4b:24:d9:a8:92:67:95:c5:0a:78:85:d3: 8a:f2:ee:de:cf:ec:91:2b:9a:ec:4e:ad:39:21:bc:44:56:72: 5f:5f:15:cb:56:4c:93:ab:5e:97:27:e5:d6:5b:a1:01:39:56: c3:16:60:6e:f7:b2:93:e9:17:05:34:22:46:a2:c6:e9:5c:96: bb:96:9e:06:d3:ef:5e:0b:05:c3:c1:eb:14:e0:25:d1:22:7c: 5d:7d:e1:b6:d5:39:37:cf:a7:b2:45:34:dd:f9:b5:4a:25:26: 3e:91:22:98:e7:7a:6f:c1:71:c2:4a:75:90:f2:cd:5b:ca:7b: c9:a1:d3:06:f6:5f:58:03:ec:05:a4:fe:d9:ae:5b:10:66:1f: 92:22:6f:54:34:dd:80:1a:2f:98:00:2a:4d:0d:7c:a5:ce:62: bf:4c:11:94:65:b1:43:fe:a3:77:93:08:91:ea:5b:40:ba:ed: bc:80:b0:f0:a1:4e:10:a9:00:aa:79:e4:28:a1:db:c3:44:15: 0b:ed:e6:08:b4:96:1f:2b:7a:34:cd:fa:68:8f:f3:3d:00:b6: 89:ae:bf:af:b3:b9:55:71:2c:40:03:fb:bf:4d:67:4d:17:ab: ec:78:43:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfPjxgrMLhs7bodqH+WbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTIyOGM3MzFiZTQzNDdjMmQxNDRkNmNjMTE5ZDk0NWFlZDVkNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS0Vi9705ILEg1NnAVjkrTjmkoXu 1X/lTQxl2j9xyTZdKFSSxpbDnXpePENK5TxuJvm5RO5jLMgmdxg3JCn+hqxdE7+Y pKAkqeR0bsQReTmNPNMnP4P/hR8/4yKqvfuu7q/ctun9LgAWqn8kOSehFZPcOl4j RflahXPciPKGpy2pR91aB1A6yWdid4zwCNttKu/yBJV9e8f/nm6eSkkuDFs9TmJU jd7gc2YJgyjgY/3DOvf14qHR0OwSAhFsFsNJPoaZJ/RO/K7M9CbqYgU8DdLt4Ufi kejxVVtpIjZIgXyobYUva2KewMAZCeNYx9X8EhwZrM177KpiperJa3HbyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4ijHMb5DR8LRRNbMEZ2UWu1dd9MB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvbmlLTWN4dmtOSHd0RkUxc3dSblpSYTdWMTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXamMA0G CSqGSIb3DQEBCwUAA4IBAQCrvQ8B0wxLwKWjrxxtTnGFMYJm+hPJ3jxLJNmokmeV xQp4hdOK8u7ez+yRK5rsTq05IbxEVnJfXxXLVkyTq16XJ+XWW6EBOVbDFmBu97KT 6RcFNCJGosbpXJa7lp4G0+9eCwXDwesU4CXRInxdfeG21Tk3z6eyRTTd+bVKJSY+ kSKY53pvwXHCSnWQ8s1bynvJodMG9l9YA+wFpP7ZrlsQZh+SIm9UNN2AGi+YACpN DXylzmK/TBGUZbFD/qN3kwiR6ltAuu28gLDwoU4QqQCqeeQoodvDRBUL7eYItJYf K3o0zfpoj/M9ALaJrr+vs7lVcSxAA/u/TWdNF6vseEPb -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:14 2026 by rpki-client