This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nINyubjIu33geaoAM2ygk8-OXIM.roa File: nINyubjIu33geaoAM2ygk8-OXIM.roa (raw, json) Hash identifier: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok= Subject key identifier: 9C:83:72:B9:B8:C8:BB:7D:E0:79:AA:00:33:6C:A0:93:CF:8E:5C:83 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8A1CCAA06DD2C8261A90736AA591 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nINyubjIu33geaoAM2ygk8-OXIM.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8203 IP address blocks: 192.115.8.0/22 maxlen: 22 192.115.8.0/24 maxlen: 24 192.116.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8a:1c:ca:a0:6d:d2:c8:26:1a:90:73:6a:a5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c8372b9b8c8bb7de079aa00336ca093cf8e5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:d6:7b:11:21:e6:1b:a0:6a:98:8a:5a:00: 9f:3e:a3:cd:4d:09:73:a3:47:b8:35:cd:8c:aa:b9: 72:23:81:dd:20:a2:84:31:7a:dd:be:41:45:35:97: 9a:93:38:76:5a:de:c8:9b:27:56:ac:2e:f5:4d:e2: dc:f1:28:3c:04:05:d3:be:0c:19:2f:18:2e:4c:b1: 81:6b:e4:df:32:9c:88:fe:62:05:d8:50:52:50:d1: 54:d0:e1:09:bf:77:14:c0:3d:98:3e:40:a8:f0:6a: 9c:00:66:aa:d3:d7:12:11:64:a8:7b:3a:bf:b9:6f: 58:d0:57:e6:22:98:cb:c5:86:f8:9b:04:7b:2d:73: 82:dc:f6:49:a7:c3:9b:89:c8:3c:ae:0b:2f:1e:6a: 04:0b:ce:52:a4:ce:5b:e4:c5:8e:37:dd:a4:3c:4d: c2:d3:76:b1:c6:1e:f3:5e:57:6e:0f:49:7e:3e:e3: 3b:cf:80:1e:1a:5a:c9:7e:1d:bb:74:26:86:c1:c3: ad:37:40:cc:f6:7f:07:52:3c:f7:f7:15:df:71:bb: 5b:c4:ff:41:26:c7:30:75:63:9a:67:57:6a:4c:34: de:23:0a:04:29:47:2a:0e:6e:17:de:c2:a4:63:5f: a2:c0:e9:a3:a4:00:8a:ce:37:64:e4:7d:73:32:36: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:72:B9:B8:C8:BB:7D:E0:79:AA:00:33:6C:A0:93:CF:8E:5C:83 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nINyubjIu33geaoAM2ygk8-OXIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.115.8.0/22 192.116.24.0/21 Signature Algorithm: sha256WithRSAEncryption 21:32:6a:f5:cf:ed:93:45:6e:e2:8f:31:e2:4c:04:c7:ed:4e: f4:ec:f8:fd:37:3d:0c:ce:2e:4d:2f:87:54:67:b2:a4:d1:6d: 6f:23:ef:31:48:5b:39:7b:61:80:a4:f9:0d:bc:dc:d7:44:97: 30:50:bd:92:b5:c4:33:ff:4a:e8:3b:f7:c6:a2:02:ad:b6:91: 55:f9:93:34:8d:2d:e1:54:e3:b5:a3:4e:5b:97:6b:5e:3a:bd: 71:1d:53:db:9d:a4:b1:37:52:da:35:46:74:1c:b9:18:a2:97: dc:49:5e:86:68:e8:a4:a1:3e:ca:79:42:60:ac:2a:dc:97:8b: 1a:ab:59:9f:e1:32:67:25:9c:34:62:78:48:8d:71:6b:6e:86: de:32:06:3f:5d:8f:1a:08:98:68:79:6c:a7:bf:35:8e:70:2d: fa:24:35:ce:63:0d:1e:7e:f5:b4:6c:e4:56:dd:94:8d:56:10: 13:65:7e:08:b4:1b:ed:8b:d0:99:65:11:05:77:4a:2d:9c:6e: 65:2a:87:0d:a3:9a:44:90:26:97:31:cc:0f:0b:d9:0a:fb:75: 14:a3:c9:df:ab:6e:81:1f:c0:55:09:dc:77:c1:12:7a:a0:d9: f4:5c:56:50:67:53:06:e1:b5:d3:fc:4c:55:ad:2d:51:a7:30: b3:27:83:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt264ocyqBt0sgmGpBzaqWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzgzNzJiOWI4YzhiYjdkZTA3OWFhMDAzMzZjYTA5M2NmOGU1YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbWexEh5hugapiKWgCfPqPNTQlz o0e4Nc2MqrlyI4HdIKKEMXrdvkFFNZeakzh2Wt7ImydWrC71TeLc8Sg8BAXTvgwZ LxguTLGBa+TfMpyI/mIF2FBSUNFU0OEJv3cUwD2YPkCo8GqcAGaq09cSEWSoezq/ uW9Y0FfmIpjLxYb4mwR7LXOC3PZJp8Obicg8rgsvHmoEC85SpM5b5MWON92kPE3C 03axxh7zXlduD0l+PuM7z4AeGlrJfh27dCaGwcOtN0DM9n8HUjz39xXfcbtbxP9B JscwdWOaZ1dqTDTeIwoEKUcqDm4X3sKkY1+iwOmjpACKzjdk5H1zMjZCXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJyDcrm4yLt94HmqADNsoJPPjlyDMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvbklOeXViakl1MzNnZWFvQU0yeWdrOC1PWElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwHMIAwQD wHQYMA0GCSqGSIb3DQEBCwUAA4IBAQAhMmr1z+2TRW7ijzHiTATH7U707Pj9Nz0M zi5NL4dUZ7Kk0W1vI+8xSFs5e2GApPkNvNzXRJcwUL2StcQz/0roO/fGogKttpFV +ZM0jS3hVOO1o05bl2teOr1xHVPbnaSxN1LaNUZ0HLkYopfcSV6GaOikoT7KeUJg rCrcl4saq1mf4TJnJZw0YnhIjXFrbobeMgY/XY8aCJhoeWynvzWOcC36JDXOYw0e fvW0bORW3ZSNVhATZX4ItBvti9CZZREFd0otnG5lKocNo5pEkCaXMcwPC9kK+3UU o8nfq26BH8BVCdx3wRJ6oNn0XFZQZ1MG4bXT/ExVrS1RpzCzJ4NO -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:15 2026 by rpki-client