This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa File: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (raw, json) Hash identifier: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg= Subject key identifier: 9F:F3:7D:02:1E:11:C3:55:A9:F5:9F:B7:49:56:08:CB:A6:34:C0:2E Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b Certificate serial: 019B7AC8CF779935D7FC0494391FE9B4BC72 Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38325 IP address blocks: 79.170.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cf:77:99:35:d7:fc:04:94:39:1f:e9:b4:bc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ff37d021e11c355a9f59fb7495608cba634c02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:27:34:c4:5d:3a:b0:d1:0c:39:06:82:2e: 11:ae:30:ac:7e:04:83:3a:f2:1c:fc:29:cf:e8:48: 86:7c:78:4b:ec:0b:e7:b3:c8:0b:9f:55:da:d8:27: 8f:be:d2:1f:14:82:5b:38:54:92:0e:a1:7b:d0:f8: 5b:6c:19:ab:6f:4e:29:64:98:d7:56:78:2e:29:26: e2:aa:da:92:97:04:a4:89:c7:67:86:90:e4:af:03: dc:97:aa:15:95:ae:fc:f9:b6:f1:1c:67:97:3f:e3: 43:74:36:8c:87:af:12:22:06:07:53:a3:51:18:e8: be:29:c9:b7:44:57:bf:01:67:74:0c:fe:8d:0c:6b: 0a:3a:96:a3:a0:5b:06:a1:81:59:3c:82:65:92:3c: 5c:ba:9e:19:41:cb:29:7e:12:13:af:77:e0:9a:37: 21:9a:f0:2a:55:ff:b4:34:ba:da:5f:74:2a:47:5a: 21:7d:8e:0f:74:14:5f:f2:7c:b3:0b:76:d6:41:08: cb:2e:39:f2:f9:20:8a:ea:0a:e1:15:54:8f:d3:ad: 68:58:b4:57:4e:17:0f:c9:6a:e1:b7:27:c0:8b:0a: 44:b4:2d:5f:97:c5:a5:b8:6b:98:0b:7d:8c:99:85: 00:55:4c:e1:26:cc:10:44:76:d5:93:41:1d:8a:95: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:7D:02:1E:11:C3:55:A9:F5:9F:B7:49:56:08:CB:A6:34:C0:2E X509v3 Authority Key Identifier: keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.35.0/24 Signature Algorithm: sha256WithRSAEncryption 36:2a:84:a7:53:d6:ea:37:df:40:37:c9:79:2c:23:ff:95:8b: 2f:66:65:46:f5:a0:f3:79:ba:48:1d:d3:5e:4f:03:2c:50:75: 75:33:eb:d7:5f:11:1c:25:12:e5:98:af:c4:84:1e:de:08:71: 6f:20:53:2c:7d:bd:96:d0:b4:4a:e2:9b:a7:8a:75:54:02:b2: 8d:65:6d:d9:53:6e:34:4a:bb:c0:b3:ae:0b:c5:0d:3b:bc:7f: aa:a2:a5:2c:d7:df:97:d4:77:b3:b9:6f:80:f8:29:3c:00:e5: 97:92:88:4a:a4:c2:6a:35:66:09:81:b6:05:31:2e:67:ea:e6: b1:81:48:35:95:58:5b:d1:af:34:75:9a:60:f7:4b:20:1c:d5: 95:2f:0d:8e:4b:98:bb:55:b9:63:ac:ba:b5:1d:6f:9c:1a:dc: fd:a0:ec:91:49:43:2f:b0:d2:5d:c9:9e:34:7e:5b:4f:8d:5d: 33:dd:ac:9a:cd:33:42:c4:55:04:bd:e0:f7:07:47:ea:bd:9c: c2:f2:db:02:fa:92:d8:5a:81:86:f9:85:ed:c6:24:4a:49:07: ef:9b:f2:39:e2:26:68:36:51:98:a8:e6:4c:23:58:cf:05:b9: 19:5b:c4:07:c6:bc:f8:e2:a1:55:96:cb:df:59:94:0d:5a:f0: bb:72:a9:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM93mTXX/ASUOR/ptLxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm NDAxOGIwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmYzN2QwMjFlMTFjMzU1YTlmNTlmYjc0OTU2MDhjYmE2MzRjMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8QnNMRdOrDRDDkGgi4RrjCsfgSD OvIc/CnP6EiGfHhL7Avns8gLn1Xa2CePvtIfFIJbOFSSDqF70PhbbBmrb04pZJjX VnguKSbiqtqSlwSkicdnhpDkrwPcl6oVla78+bbxHGeXP+NDdDaMh68SIgYHU6NR GOi+Kcm3RFe/AWd0DP6NDGsKOpajoFsGoYFZPIJlkjxcup4ZQcspfhITr3fgmjch mvAqVf+0NLraX3QqR1ohfY4PdBRf8nyzC3bWQQjLLjny+SCK6grhFVSP061oWLRX ThcPyWrhtyfAiwpEtC1fl8WluGuYC32MmYUAVUzhJswQRHbVk0EdipXuzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/zfQIeEcNVqfWft0lWCMumNMAuMB8GA1UdIwQY MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt OTIyZTIyNDQ1OWZiLzEvbl9OOUFoNFJ3MVdwOVotM1NWWUl5Nlkwd0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6ojMA0G CSqGSIb3DQEBCwUAA4IBAQA2KoSnU9bqN99AN8l5LCP/lYsvZmVG9aDzebpIHdNe TwMsUHV1M+vXXxEcJRLlmK/EhB7eCHFvIFMsfb2W0LRK4puninVUArKNZW3ZU240 SrvAs64LxQ07vH+qoqUs19+X1HezuW+A+Ck8AOWXkohKpMJqNWYJgbYFMS5n6uax gUg1lVhb0a80dZpg90sgHNWVLw2OS5i7VbljrLq1HW+cGtz9oOyRSUMvsNJdyZ40 fltPjV0z3ayazTNCxFUEveD3B0fqvZzC8tsC+pLYWoGG+YXtxiRKSQfvm/I54iZo NlGYqOZMI1jPBbkZW8QHxrz44qFVlsvfWZQNWvC7cqlF -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:36 2026 by rpki-client