This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/N8T1T4yzeC_svV7N6clN6YYuhS0.roa File: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (raw, json) Hash identifier: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo= Subject key identifier: 37:C4:F5:4F:8C:B3:78:2F:EC:BD:5E:CD:E9:C9:4D:E9:86:2E:85:2D Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349C62461CAD0B9B19EA912CEDFC0F Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/N8T1T4yzeC_svV7N6clN6YYuhS0.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 104.160.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9c:62:46:1c:ad:0b:9b:19:ea:91:2c:ed:fc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37c4f54f8cb3782fecbd5ecde9c94de9862e852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:4c:36:3f:f5:49:13:ca:7e:92:1c:10:f3: 49:1b:58:3d:c2:80:4d:44:e7:9b:cb:00:d1:18:f8: 6a:a5:70:d6:39:74:f2:22:d3:fc:4b:80:96:62:f3: e2:27:3d:f0:e4:4b:1b:5a:c8:76:e1:d6:8c:79:43: 4d:9d:97:86:48:64:0e:f2:c3:2c:ad:f7:4b:33:9d: 6c:5a:d2:58:eb:13:e1:e0:e4:82:02:5f:33:74:34: ea:b2:90:f2:1f:f1:cf:fe:14:79:d2:bb:67:32:40: ee:00:aa:d5:53:13:ed:fe:5c:9f:21:d4:b1:b5:5b: 95:b5:83:b3:69:c3:4f:3a:ee:96:51:7c:af:92:5e: 20:db:d2:08:86:07:4a:a5:7b:79:89:2a:04:de:d8: 83:f7:dc:f3:14:e8:ed:1e:af:d6:15:51:20:d8:65: a0:92:66:4f:ec:29:b2:7b:3a:2e:00:1e:e5:8d:75: d2:83:56:df:fb:2c:77:b7:98:ce:be:4f:6a:c9:09: 07:5c:6e:dd:82:87:2b:c4:be:ae:65:6e:ce:1f:f2: e4:40:59:d0:df:9d:13:e7:4c:57:16:03:01:c5:84: 4a:4e:2d:fe:e1:41:8e:cc:da:f7:4c:ff:c6:3d:2e: f5:fe:1f:b4:97:f9:dc:de:24:5c:47:a5:a9:28:0c: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:F5:4F:8C:B3:78:2F:EC:BD:5E:CD:E9:C9:4D:E9:86:2E:85:2D X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/N8T1T4yzeC_svV7N6clN6YYuhS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.160.9.0/24 Signature Algorithm: sha256WithRSAEncryption 46:e9:9e:29:d8:a2:b0:e5:e7:a9:fc:93:70:39:dc:f1:55:37: cc:66:38:5c:aa:a6:c4:e6:80:42:b1:e8:64:99:7f:9e:08:db: 71:37:f4:e2:92:50:69:1f:4f:6f:df:12:f4:b5:3a:ff:e4:87: fb:ce:71:99:38:f4:0e:eb:19:ee:6a:0b:c0:4e:2c:38:32:23: 99:cf:89:0a:c6:4f:36:f6:31:fe:2c:7d:b3:0b:eb:a1:80:90: 63:6f:aa:cb:5c:25:4e:14:97:a2:eb:04:c8:c5:1d:d7:49:e2: 56:bc:11:5c:25:25:9c:79:d8:17:38:7d:ca:f9:1b:ec:ce:65: 61:f7:d9:25:f9:18:a2:c3:a8:d0:47:9c:c4:96:24:77:b5:67: 7c:31:12:15:5e:86:ed:91:04:b3:2b:fd:05:25:e2:af:f3:ac: c6:44:6c:65:a4:24:7e:7f:8d:5b:71:b8:9b:8e:da:83:c1:0e: ae:24:e0:1c:9b:9e:b8:dd:bc:ab:fb:2a:8e:70:de:71:c8:95: 03:19:55:54:79:27:ec:30:87:72:2c:27:21:15:f0:be:2e:63: 0f:d0:5a:b4:da:a9:a3:cc:4a:cc:44:f6:29:e3:03:80:f1:1e: ed:6c:62:2d:2f:a9:81:2c:35:af:61:96:1f:a3:21:e3:ad:a2: a9:4a:b2:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJxiRhytC5sZ6pEs7fwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2M0ZjU0ZjhjYjM3ODJmZWNiZDVlY2RlOWM5NGRlOTg2MmU4NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrpMNj/1SRPKfpIcEPNJG1g9woBN ROebywDRGPhqpXDWOXTyItP8S4CWYvPiJz3w5EsbWsh24daMeUNNnZeGSGQO8sMs rfdLM51sWtJY6xPh4OSCAl8zdDTqspDyH/HP/hR50rtnMkDuAKrVUxPt/lyfIdSx tVuVtYOzacNPOu6WUXyvkl4g29IIhgdKpXt5iSoE3tiD99zzFOjtHq/WFVEg2GWg kmZP7CmyezouAB7ljXXSg1bf+yx3t5jOvk9qyQkHXG7dgocrxL6uZW7OH/LkQFnQ 350T50xXFgMBxYRKTi3+4UGOzNr3TP/GPS71/h+0l/nc3iRcR6WpKAwVXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfE9U+Ms3gv7L1ezenJTemGLoUtMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvTjhUMVQ0eXplQ19zdlY3TjZjbE42WVl1aFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKAJMA0G CSqGSIb3DQEBCwUAA4IBAQBG6Z4p2KKw5eep/JNwOdzxVTfMZjhcqqbE5oBCsehk mX+eCNtxN/TiklBpH09v3xL0tTr/5If7znGZOPQO6xnuagvATiw4MiOZz4kKxk82 9jH+LH2zC+uhgJBjb6rLXCVOFJei6wTIxR3XSeJWvBFcJSWcedgXOH3K+RvszmVh 99kl+Riiw6jQR5zEliR3tWd8MRIVXobtkQSzK/0FJeKv86zGRGxlpCR+f41bcbib jtqDwQ6uJOAcm5643byr+yqOcN5xyJUDGVVUeSfsMIdyLCchFfC+LmMP0Fq02qmj zErMRPYp4wOA8R7tbGItL6mBLDWvYZYfoyHjraKpSrLF -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:26 2026 by rpki-client