This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/nhNt2f4O-xCK4COg-s6KV2g8IiU.roa File: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (raw, json) Hash identifier: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc= Subject key identifier: 9E:13:6D:D9:FE:0E:FB:10:8A:E0:23:A0:FA:CE:8A:57:68:3C:22:25 Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Certificate serial: 019B79EC40B17E947DD461D30A990DEA5734 Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/nhNt2f4O-xCK4COg-s6KV2g8IiU.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198171 IP address blocks: 185.102.76.0/22 maxlen: 22 2a00:ca80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:40:b1:7e:94:7d:d4:61:d3:0a:99:0d:ea:57:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e136dd9fe0efb108ae023a0face8a57683c2225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:1b:73:8a:49:28:83:54:46:42:96:54:bd: 72:f3:e3:5f:25:4c:45:90:f2:3e:34:ec:3b:11:ea: 6e:67:dd:54:05:76:74:b4:62:9a:b9:8e:53:5c:77: 02:8f:03:02:81:ed:21:72:2e:27:a8:c2:44:57:0e: 82:af:ae:71:5e:40:42:24:b3:42:d7:13:12:08:07: 0c:d0:9f:6a:51:64:8f:d7:bd:a9:77:c7:20:80:83: 44:4c:a2:ab:bf:da:09:58:87:74:f2:15:2f:b3:bd: f1:e1:8b:3b:35:f2:09:de:24:b5:fc:59:af:a7:7f: 56:b2:6c:22:3a:26:48:cd:00:ea:c9:71:73:df:8c: 47:7d:95:95:bd:ae:88:d4:7c:22:02:af:71:d3:07: a0:4d:43:08:b5:f2:e4:c1:7b:60:cc:7b:63:b7:9e: 96:6e:32:a6:75:f1:c0:d1:38:6a:21:b4:d3:b4:27: cc:20:89:bd:7c:f4:ba:cf:cd:29:a8:2a:87:03:4d: 83:d1:1b:ac:fa:da:e5:ee:fa:63:b4:32:d1:29:dc: ea:0e:83:16:94:38:cf:23:03:5a:2f:b8:97:1e:c3: ce:fb:a9:ab:55:c9:b9:cd:4f:0b:4d:50:52:bb:0f: a2:88:46:74:37:bc:da:b1:86:c9:e5:e6:a5:7d:1c: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:13:6D:D9:FE:0E:FB:10:8A:E0:23:A0:FA:CE:8A:57:68:3C:22:25 X509v3 Authority Key Identifier: keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/nhNt2f4O-xCK4COg-s6KV2g8IiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.76.0/22 IPv6: 2a00:ca80::/32 Signature Algorithm: sha256WithRSAEncryption 30:02:c6:47:da:9a:d0:bb:01:5a:6d:18:31:07:ab:27:9a:e6: af:82:fb:ea:d6:78:77:51:db:3c:df:a2:6a:c7:92:d2:0a:a9: 29:03:92:a2:b8:94:23:c8:b8:55:6f:e2:d9:0c:60:14:a8:08: c3:e4:44:fd:44:7a:eb:64:82:e9:1b:1d:af:37:0f:3e:e4:48: ac:2b:e0:8f:00:af:69:60:cc:f8:6d:63:64:45:47:12:5f:c5: 57:7b:63:26:ed:97:d1:66:65:d1:55:38:e4:8b:c8:f2:64:73: 08:eb:e6:b4:0e:0d:b6:4f:80:eb:96:0b:5f:dc:37:9d:3c:10: cc:08:3e:8e:92:c9:15:46:56:fd:8e:74:3b:ee:bd:a0:a2:11: 41:86:1a:6d:3a:0f:a1:dc:de:5d:7e:bf:a1:3b:12:32:41:3b: 88:03:0e:be:e2:60:62:b1:95:22:c2:73:95:bf:6b:16:37:3f: fb:4c:59:e8:5b:3e:fd:d5:a7:9a:b7:f4:2b:88:06:d4:92:82: 24:72:c0:5f:85:80:a7:1f:83:8c:fc:3b:34:67:4e:7d:bd:ca: d8:10:15:d0:c9:8b:66:8c:d0:18:eb:b3:66:aa:48:01:83:b9: 11:b6:23:01:81:75:bf:51:76:ab:b0:d2:1c:bb:8f:ef:ac:c3: b0:51:6a:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57ECxfpR91GHTCpkN6lc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz NmZmMTAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTEzNmRkOWZlMGVmYjEwOGFlMDIzYTBmYWNlOGE1NzY4M2MyMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39cbc4pJKINURkKWVL1y8+NfJUxF kPI+NOw7EepuZ91UBXZ0tGKauY5TXHcCjwMCge0hci4nqMJEVw6Cr65xXkBCJLNC 1xMSCAcM0J9qUWSP172pd8cggINETKKrv9oJWId08hUvs73x4Ys7NfIJ3iS1/Fmv p39WsmwiOiZIzQDqyXFz34xHfZWVva6I1HwiAq9x0wegTUMItfLkwXtgzHtjt56W bjKmdfHA0ThqIbTTtCfMIIm9fPS6z80pqCqHA02D0Rus+trl7vpjtDLRKdzqDoMW lDjPIwNaL7iXHsPO+6mrVcm5zU8LTVBSuw+iiEZ0N7zasYbJ5ealfRxADwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ4Tbdn+DvsQiuAjoPrOildoPCIlMB8GA1UdIwQY MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt YjUzYjY0Y2YwZDk1LzEvbmhOdDJmNE8teENLNENPZy1zNktWMmc4SWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1 LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWZMMA0E AgACMAcDBQAqAMqAMA0GCSqGSIb3DQEBCwUAA4IBAQAwAsZH2prQuwFabRgxB6sn muavgvvq1nh3Uds836Jqx5LSCqkpA5KiuJQjyLhVb+LZDGAUqAjD5ET9RHrrZILp Gx2vNw8+5EisK+CPAK9pYMz4bWNkRUcSX8VXe2Mm7ZfRZmXRVTjki8jyZHMI6+a0 Dg22T4Drlgtf3DedPBDMCD6OkskVRlb9jnQ77r2gohFBhhptOg+h3N5dfr+hOxIy QTuIAw6+4mBisZUiwnOVv2sWNz/7TFnoWz791aeat/QriAbUkoIkcsBfhYCnH4OM /Ds0Z059vcrYEBXQyYtmjNAY67NmqkgBg7kRtiMBgXW/UXarsNIcu4/vrMOwUWr+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:28 2026 by rpki-client