This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/nExWLodTy66s6nOpw-IuXiduwOc.roa File: nExWLodTy66s6nOpw-IuXiduwOc.roa (raw, json) Hash identifier: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg= Subject key identifier: 9C:4C:56:2E:87:53:CB:AE:AC:EA:73:A9:C3:E2:2E:5E:27:6E:C0:E7 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B7F1534A8E7833B1FD8F60FF00E2B84AA Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/nExWLodTy66s6nOpw-IuXiduwOc.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 212.127.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:34:a8:e7:83:3b:1f:d8:f6:0f:f0:0e:2b:84:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c4c562e8753cbaeacea73a9c3e22e5e276ec0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:24:b0:39:ff:7f:48:fe:9a:7e:50:de:04: 9b:41:56:b6:49:14:9c:f7:7d:84:c4:a9:99:f6:5d: be:01:a0:03:68:f5:9e:8f:b9:04:9a:8c:4c:50:6d: 07:f4:d7:07:85:99:5c:29:83:48:2a:55:05:05:f5: 9a:42:c7:31:45:7f:35:46:c4:ad:eb:47:96:11:7f: 98:46:f6:cc:39:a0:73:a4:a5:a2:c6:df:7f:aa:83: 56:f8:a0:f1:11:de:72:b8:7e:a2:17:35:25:bc:81: d1:a8:ac:56:59:12:43:5a:60:56:4e:58:7b:54:22: 67:f7:3b:90:ef:dd:d2:de:f7:df:4c:c4:36:2d:4f: fb:0a:6f:77:7c:0b:56:ea:02:bf:67:7e:7c:c7:68: cf:04:43:1c:2e:b6:58:3f:34:b5:83:35:f6:49:6c: 52:4f:99:99:82:3e:a7:ba:53:32:bc:fd:0d:d9:4e: b4:2d:12:cc:e5:70:83:5b:39:26:48:1b:ac:96:f7: 58:89:d5:eb:db:08:00:34:83:72:ed:de:ec:a8:ca: e7:7d:4b:ae:21:f1:2f:7c:56:ec:d8:f9:a3:0b:2f: ca:eb:1d:ae:2d:25:d7:3f:95:a4:12:65:b7:65:0c: ef:4d:66:71:51:da:a9:d5:f6:ea:4b:96:54:4e:76: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:56:2E:87:53:CB:AE:AC:EA:73:A9:C3:E2:2E:5E:27:6E:C0:E7 X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/nExWLodTy66s6nOpw-IuXiduwOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.127.96.0/19 Signature Algorithm: sha256WithRSAEncryption 1b:d0:90:5a:60:8b:98:8b:61:fb:f7:65:0e:97:2b:e0:77:30: 34:4b:5c:82:35:25:ce:0f:78:0c:f5:00:26:4b:ab:95:6a:50: 8a:06:a5:38:41:f3:43:25:f4:f8:21:02:3f:e1:c3:d4:34:e2: e6:6a:48:06:59:ab:fb:b8:31:49:31:ae:6b:f0:6f:89:8f:6c: 11:5f:e6:1b:17:17:9b:19:4f:99:ce:5d:59:c6:94:f5:48:bf: 80:56:b8:32:be:5b:7a:96:49:02:17:16:5e:f3:70:cd:d5:42: f0:80:19:97:f2:82:fb:0e:77:81:d5:a3:20:e3:1c:c3:38:90: 82:14:f0:1d:3a:4e:05:a2:a9:59:e5:00:26:23:d9:f3:38:c7: e7:da:51:fd:76:41:d7:cc:37:82:57:1e:7c:83:c7:dd:c2:26: 64:3d:f6:36:83:cd:2b:33:8f:7e:55:ad:3b:0b:78:51:c3:3a: 38:f8:9a:b0:49:f0:c9:d3:42:b9:22:a9:db:9b:da:7d:ac:b7: 42:87:35:34:9a:84:02:39:23:a5:69:ee:77:15:32:e5:48:cb: e0:b2:e2:bf:93:65:25:7f:9b:5d:ed:e9:43:a0:b6:24:73:43: 38:01:0a:6f:a4:e6:06:f9:df:cf:e9:81:6d:c9:5f:88:7f:a8: 0c:1a:4e:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTSo54M7H9j2D/AOK4SqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzRjNTYyZTg3NTNjYmFlYWNlYTczYTljM2UyMmU1ZTI3NmVjMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk0ksDn/f0j+mn5Q3gSbQVa2SRSc 932ExKmZ9l2+AaADaPWej7kEmoxMUG0H9NcHhZlcKYNIKlUFBfWaQscxRX81RsSt 60eWEX+YRvbMOaBzpKWixt9/qoNW+KDxEd5yuH6iFzUlvIHRqKxWWRJDWmBWTlh7 VCJn9zuQ793S3vffTMQ2LU/7Cm93fAtW6gK/Z358x2jPBEMcLrZYPzS1gzX2SWxS T5mZgj6nulMyvP0N2U60LRLM5XCDWzkmSBuslvdYidXr2wgANINy7d7sqMrnfUuu IfEvfFbs2PmjCy/K6x2uLSXXP5WkEmW3ZQzvTWZxUdqp1fbqS5ZUTnZgnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxMVi6HU8uurOpzqcPiLl4nbsDnMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvbkV4V0xvZFR5NjZzNm5PcHctSXVYaWR1d09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H9gMA0G CSqGSIb3DQEBCwUAA4IBAQAb0JBaYIuYi2H792UOlyvgdzA0S1yCNSXOD3gM9QAm S6uValCKBqU4QfNDJfT4IQI/4cPUNOLmakgGWav7uDFJMa5r8G+Jj2wRX+YbFxeb GU+Zzl1ZxpT1SL+AVrgyvlt6lkkCFxZe83DN1ULwgBmX8oL7DneB1aMg4xzDOJCC FPAdOk4FoqlZ5QAmI9nzOMfn2lH9dkHXzDeCVx58g8fdwiZkPfY2g80rM49+Va07 C3hRwzo4+JqwSfDJ00K5Iqnbm9p9rLdChzU0moQCOSOlae53FTLlSMvgsuK/k2Ul f5td7elDoLYkc0M4AQpvpOYG+d/P6YFtyV+If6gMGk7X -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:28 2026 by rpki-client