This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa File: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (raw, json) Hash identifier: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A= Subject key identifier: 36:AF:69:E8:93:86:F5:DD:4C:3D:9E:6A:77:EB:00:8A:37:45:48:9D Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Certificate serial: 019B7B367602F9FE33223E6D6E0A7BEC7E6E Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 193.5.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:02:f9:fe:33:22:3e:6d:6e:0a:7b:ec:7e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36af69e89386f5dd4c3d9e6a77eb008a3745489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:b2:6b:89:59:b7:15:62:ab:d6:29:2b:26: b9:8b:2e:8e:9a:90:47:72:da:7d:87:d3:e4:f9:d4: b9:7e:33:fa:56:f4:35:9d:e5:af:25:98:72:08:39: 26:17:76:3d:16:62:a6:90:7d:0f:42:ac:b1:2a:05: e8:2a:63:0a:0e:40:c6:80:da:67:75:3b:75:26:c9: ef:b7:59:e4:ac:9f:50:90:95:a8:4c:7b:6b:4f:e3: 31:16:22:18:46:ca:15:14:9d:e9:5a:50:7b:fb:d2: 9f:24:e3:2b:a2:30:02:d5:98:8e:20:a2:c4:2b:a6: 3b:81:7d:96:c0:9e:d0:5c:97:e0:0b:c7:86:2d:dc: 86:63:77:d2:b3:f1:2b:80:ae:53:d6:9c:d9:55:26: 1c:9c:44:8a:f3:a1:aa:2d:09:a9:12:dd:33:49:c6: 96:65:20:43:e2:72:c1:23:55:af:fa:fe:84:2c:c3: a7:0c:48:50:55:f5:ef:41:14:df:5b:3a:94:25:8a: 90:95:5e:e9:a4:ad:d2:58:41:2e:12:cb:b4:ba:0e: 32:9b:c1:a2:3f:22:4e:57:c1:2b:fc:fc:ca:73:69: c6:d9:23:ea:04:c5:74:80:76:71:42:ff:9d:fe:07: 4b:88:ad:eb:89:9c:61:8a:15:ee:10:ca:8a:59:f2: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AF:69:E8:93:86:F5:DD:4C:3D:9E:6A:77:EB:00:8A:37:45:48:9D X509v3 Authority Key Identifier: keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.60.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b4:92:99:3a:ea:61:7a:e9:0b:21:77:29:02:8e:cf:cb:c8: ee:2b:59:a6:d0:a3:c8:80:48:38:e2:b6:76:5c:2e:fd:b9:92: 35:ee:04:3c:25:b9:f4:5d:7a:4a:68:eb:9a:93:33:81:fd:29: 4b:46:67:95:9f:59:be:e0:8a:ca:2a:57:fc:81:60:e0:53:b0: a8:e3:01:88:a0:e1:f7:f8:e3:45:d3:bc:c2:15:97:d1:aa:20: 51:6a:e1:07:8a:a6:75:53:66:de:ef:d3:61:5d:ec:8b:ea:65: 0b:7f:30:f5:69:9c:90:f5:33:cf:2e:ff:c1:d4:28:0c:f5:87: dc:37:79:57:4a:70:42:27:ea:55:2b:d4:60:4b:a8:86:56:ea: 6f:c1:62:ed:84:c2:5f:01:d4:3e:74:9c:fb:0c:1c:00:61:a7: fa:4d:5d:bf:89:e8:65:79:a1:fa:99:38:85:a9:4c:5f:82:d8: cf:fb:a6:58:06:4b:f7:54:99:64:fd:89:f4:61:d3:47:18:3d: 6b:07:17:bd:47:38:95:c4:ad:70:b5:40:de:4c:9b:a1:85:07: 8e:39:d2:b5:0c:86:96:a2:51:3a:f2:a4:f5:fc:57:8b:f4:d7: da:e6:75:0d:23:06:ca:03:85:ff:09:bc:15:9a:02:be:8d:28: 8e:b6:84:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnYC+f4zIj5tbgp77H5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi ZDk5ZTkwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmFmNjllODkzODZmNWRkNGMzZDllNmE3N2ViMDA4YTM3NDU0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloGya4lZtxViq9YpKya5iy6OmpBH ctp9h9Pk+dS5fjP6VvQ1neWvJZhyCDkmF3Y9FmKmkH0PQqyxKgXoKmMKDkDGgNpn dTt1Jsnvt1nkrJ9QkJWoTHtrT+MxFiIYRsoVFJ3pWlB7+9KfJOMrojAC1ZiOIKLE K6Y7gX2WwJ7QXJfgC8eGLdyGY3fSs/ErgK5T1pzZVSYcnESK86GqLQmpEt0zScaW ZSBD4nLBI1Wv+v6ELMOnDEhQVfXvQRTfWzqUJYqQlV7ppK3SWEEuEsu0ug4ym8Gi PyJOV8Er/PzKc2nG2SPqBMV0gHZxQv+d/gdLiK3riZxhihXuEMqKWfLKLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDavaeiThvXdTD2eanfrAIo3RUidMB8GA1UdIwQY MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It NjAwNWMwMTExZjFlLzEvTnE5cDZKT0c5ZDFNUFo1cWQtc0FpamRGU0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQU8MA0G CSqGSIb3DQEBCwUAA4IBAQBHtJKZOupheukLIXcpAo7Py8juK1mm0KPIgEg44rZ2 XC79uZI17gQ8Jbn0XXpKaOuakzOB/SlLRmeVn1m+4IrKKlf8gWDgU7Co4wGIoOH3 +ONF07zCFZfRqiBRauEHiqZ1U2be79NhXeyL6mULfzD1aZyQ9TPPLv/B1CgM9Yfc N3lXSnBCJ+pVK9RgS6iGVupvwWLthMJfAdQ+dJz7DBwAYaf6TV2/iehleaH6mTiF qUxfgtjP+6ZYBkv3VJlk/Yn0YdNHGD1rBxe9RziVxK1wtUDeTJuhhQeOOdK1DIaW olE68qT1/FeL9Nfa5nUNIwbKA4X/CbwVmgK+jSiOtoRO -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:34 2026 by rpki-client