This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/nFz68vxexIG1S-RusF1_qXkv1Yc.roa File: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (raw, json) Hash identifier: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU= Subject key identifier: 9C:5C:FA:F2:FC:5E:C4:81:B5:4B:E4:6E:B0:5D:7F:A9:79:2F:D5:87 Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Certificate serial: 019B7E385B13EF87A12A37EF96457D99BA97 Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/nFz68vxexIG1S-RusF1_qXkv1Yc.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 185.75.204.0/24 maxlen: 24 185.75.205.0/24 maxlen: 24 185.75.206.0/24 maxlen: 24 185.75.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5b:13:ef:87:a1:2a:37:ef:96:45:7d:99:ba:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c5cfaf2fc5ec481b54be46eb05d7fa9792fd587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:fa:c3:bd:d5:33:2b:af:91:92:a7:18:35: 5d:78:e4:23:44:d4:4e:b9:e8:86:83:c0:53:b2:45: 2f:c4:3f:51:1d:50:ec:a2:95:61:e6:72:60:93:e1: b3:b3:62:ca:01:84:94:20:cc:a8:76:3d:a1:06:f7: 6b:39:bc:d3:1a:a2:4f:86:70:6c:2a:24:16:70:50: 50:fa:f3:99:9a:ae:dd:15:90:93:12:6b:0b:0e:84: a7:cb:78:a9:8e:f1:6b:2f:68:74:6b:92:4e:42:5c: b7:93:6f:60:0f:82:90:a8:bd:36:03:07:a6:79:f4: 50:3e:d3:7c:33:e4:b0:d2:dc:c0:e8:3b:69:b2:2c: 3b:52:7f:84:15:bf:a4:14:6a:77:c8:ce:48:c0:07: 7d:fc:37:b1:ff:4a:52:53:11:31:af:9c:a4:b7:6a: d7:79:c1:af:6e:e5:74:84:c0:39:bb:28:64:56:6c: 52:eb:0c:d9:84:e0:0e:af:7b:7b:26:35:5f:75:6e: 0c:33:ac:48:42:14:fd:3a:c7:57:15:46:ce:91:00: 54:ce:df:7b:4f:4b:30:f8:54:f7:ca:f2:b0:ba:78: 84:75:21:c0:3b:a2:b0:92:c5:fa:f5:65:b6:b0:f2: 5c:03:59:81:b6:3f:14:bc:0a:ba:24:5e:93:2f:08: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:FA:F2:FC:5E:C4:81:B5:4B:E4:6E:B0:5D:7F:A9:79:2F:D5:87 X509v3 Authority Key Identifier: keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/nFz68vxexIG1S-RusF1_qXkv1Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.204.0/22 Signature Algorithm: sha256WithRSAEncryption ba:93:cf:7e:21:40:10:0c:b7:8f:44:e8:18:9c:09:82:13:2a: 4e:d3:cb:e8:5b:8c:d5:d1:68:e2:59:06:de:a5:e1:e0:e9:e6: 34:3f:8a:a1:5e:73:25:f1:05:5f:a5:a6:45:47:72:9f:88:e8: 41:9e:78:95:65:52:f6:65:a8:a1:5a:dd:df:e2:dd:4a:c6:94: 80:cc:e6:e6:b3:da:f0:c5:94:74:be:84:44:57:9e:ee:13:3a: b1:f7:a5:fd:6a:30:dc:b3:bb:38:ea:e3:32:18:19:0f:7b:d1: 31:be:74:b3:f2:02:f9:36:38:e8:71:29:1a:b9:21:57:f3:47: 99:05:d3:64:32:87:f9:e7:0b:9e:0c:34:ae:b2:8d:8c:aa:c9: 88:9e:c6:5b:ac:1b:34:5d:76:61:8d:01:ae:7e:de:b4:45:44: 17:fb:06:e3:30:d4:0e:d0:58:79:9d:45:ec:1b:e8:53:d0:0a: ad:97:f5:8f:8e:13:ca:c8:9f:da:6c:b8:fd:a2:17:fa:db:ba: 71:d1:ee:49:3e:2f:b9:6c:69:60:ec:06:ab:e0:17:43:f7:f4: 39:9e:ed:21:29:c2:1a:27:f2:63:75:ca:34:5f:be:31:18:a7: 78:88:68:3c:b0:6f:b8:22:44:92:46:fc:70:3c:3e:8b:76:5d: a4:03:58:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFsT74ehKjfvlkV9mbqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh MzljNzEwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzVjZmFmMmZjNWVjNDgxYjU0YmU0NmViMDVkN2ZhOTc5MmZkNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEL6w73VMyuvkZKnGDVdeOQjRNRO ueiGg8BTskUvxD9RHVDsopVh5nJgk+Gzs2LKAYSUIMyodj2hBvdrObzTGqJPhnBs KiQWcFBQ+vOZmq7dFZCTEmsLDoSny3ipjvFrL2h0a5JOQly3k29gD4KQqL02Awem efRQPtN8M+Sw0tzA6Dtpsiw7Un+EFb+kFGp3yM5IwAd9/Dex/0pSUxExr5ykt2rX ecGvbuV0hMA5uyhkVmxS6wzZhOAOr3t7JjVfdW4MM6xIQhT9OsdXFUbOkQBUzt97 T0sw+FT3yvKwuniEdSHAO6KwksX69WW2sPJcA1mBtj8UvAq6JF6TLwgTdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxc+vL8XsSBtUvkbrBdf6l5L9WHMB8GA1UdIwQY MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt NmVkNTRkM2ZlNGY0LzEvbkZ6Njh2eGV4SUcxUy1SdXNGMV9xWGt2MVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0 LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUvMMA0G CSqGSIb3DQEBCwUAA4IBAQC6k89+IUAQDLePROgYnAmCEypO08voW4zV0WjiWQbe peHg6eY0P4qhXnMl8QVfpaZFR3KfiOhBnniVZVL2ZaihWt3f4t1KxpSAzObms9rw xZR0voREV57uEzqx96X9ajDcs7s46uMyGBkPe9ExvnSz8gL5NjjocSkauSFX80eZ BdNkMof55wueDDSuso2MqsmInsZbrBs0XXZhjQGuft60RUQX+wbjMNQO0Fh5nUXs G+hT0Aqtl/WPjhPKyJ/abLj9ohf627px0e5JPi+5bGlg7Aar4BdD9/Q5nu0hKcIa J/Jjdco0X74xGKd4iGg8sG+4IkSSRvxwPD6Ldl2kA1hb -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:56 2026 by rpki-client