This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/nQENJbRz1W0WhBM6EIeWbWaXGe0.roa File: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (raw, json) Hash identifier: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc= Subject key identifier: 9D:01:0D:25:B4:73:D5:6D:16:84:13:3A:10:87:96:6D:66:97:19:ED Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006 Certificate serial: 019B7DCA789C52FC5AA72B86252C19C1AEE6 Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/nQENJbRz1W0WhBM6EIeWbWaXGe0.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61424 IP address blocks: 185.115.141.0/24 maxlen: 24 185.115.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:78:9c:52:fc:5a:a7:2b:86:25:2c:19:c1:ae:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d010d25b473d56d1684133a1087966d669719ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:52:00:f4:5d:e4:65:0f:30:a5:e2:4c:a4: 3a:59:01:fa:1e:ed:5d:53:b4:28:e6:13:5d:c8:13: 31:e1:0b:d4:a8:81:a2:2c:7a:60:a2:13:b2:e5:f6: 62:dc:91:ac:27:22:c5:b7:bd:d7:6f:7e:ca:a6:e0: 20:38:92:c8:53:32:3f:22:1e:e5:d0:2a:79:3c:2d: 60:e3:a4:18:3b:4b:e7:44:cc:8e:ef:07:46:f4:17: 07:f7:58:f9:f9:b0:d8:36:6d:e7:31:9f:9f:c1:9e: 90:6e:93:54:a0:14:f8:f0:1b:60:66:01:bf:13:ed: ed:93:fe:f6:27:95:cf:7c:29:42:5f:b3:28:d9:49: fd:21:d3:a6:ff:86:17:3a:8d:03:72:b1:54:67:28: 57:38:6b:f9:43:21:3d:ae:6b:fc:0d:57:0d:21:f1: 0c:32:94:9c:69:97:4b:83:30:e3:d8:de:45:b0:9f: 08:eb:a4:87:3b:87:02:9d:fb:39:61:7d:1e:f9:2d: e7:54:70:de:fa:14:cc:72:6a:91:6c:f4:14:a8:29: 98:3d:5f:87:ec:3e:ac:64:13:1f:a4:1a:2a:3f:92: b0:b1:d2:02:59:f6:ce:bb:57:ff:85:74:d7:18:a1: 61:ba:fa:91:c5:73:0b:4b:ab:61:bc:18:d0:ec:5c: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:0D:25:B4:73:D5:6D:16:84:13:3A:10:87:96:6D:66:97:19:ED X509v3 Authority Key Identifier: keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/nQENJbRz1W0WhBM6EIeWbWaXGe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.141.0/24 185.115.143.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:49:78:2f:90:48:99:57:e4:1a:06:13:b1:84:8f:f2:71:a2: f0:77:1a:03:02:6f:d8:20:48:49:58:68:fb:a7:bb:be:b8:fb: 12:ad:56:43:2f:d3:bc:c0:ae:47:2a:b1:07:a4:59:38:2a:44: df:1c:17:66:00:65:6a:6d:31:2c:7a:77:23:f2:71:ea:67:ed: d5:44:26:1c:30:83:f5:a5:30:c8:6e:40:d1:7c:87:90:95:2d: 70:de:bf:4a:99:cd:8f:3d:ff:eb:ef:56:e6:25:9d:19:ad:b6: 71:f5:f5:d9:88:80:48:ff:73:f7:fa:86:08:47:b2:49:db:83: ff:a5:28:0a:d8:71:b2:dd:71:a6:af:4e:bb:18:63:f9:3f:9a: 07:ab:c2:a4:e7:c7:65:43:1b:e5:a8:24:71:c4:68:0a:2e:dc: a5:d7:3f:e2:a6:f1:a3:7a:4b:fe:2c:05:4e:3f:88:6d:03:52: b8:a9:c9:fb:d9:f8:fe:5c:08:be:32:bc:a7:77:11:f6:93:4e: af:90:75:6c:f5:fc:49:09:7c:4c:21:d1:89:dd:2f:ee:f4:4a: 52:d3:74:b2:ff:bd:cb:ba:c8:34:0c:de:f2:38:83:76:de:4d: 39:72:06:1c:5d:6b:a7:d1:2a:91:31:45:7b:17:3a:03:cf:0c: 63:a5:9b:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ynicUvxapyuGJSwZwa7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDcwMzhiODNlYjI0N2ZjNjViZGFkMDE5NWI4NjI0NmY4 ZjMwMDYwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDAxMGQyNWI0NzNkNTZkMTY4NDEzM2ExMDg3OTY2ZDY2OTcxOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSRSAPRd5GUPMKXiTKQ6WQH6Hu1d U7Qo5hNdyBMx4QvUqIGiLHpgohOy5fZi3JGsJyLFt73Xb37KpuAgOJLIUzI/Ih7l 0Cp5PC1g46QYO0vnRMyO7wdG9BcH91j5+bDYNm3nMZ+fwZ6QbpNUoBT48BtgZgG/ E+3tk/72J5XPfClCX7Mo2Un9IdOm/4YXOo0DcrFUZyhXOGv5QyE9rmv8DVcNIfEM MpScaZdLgzDj2N5FsJ8I66SHO4cCnfs5YX0e+S3nVHDe+hTMcmqRbPQUqCmYPV+H 7D6sZBMfpBoqP5KwsdICWfbOu1f/hXTXGKFhuvqRxXMLS6thvBjQ7FztzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ0BDSW0c9VtFoQTOhCHlm1mlxntMB8GA1UdIwQY MBaAFBDXA4uD6yR/xlva0BlbhiRvjzAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUt MWM1YmRlMmMxNGY0LzEvblFFTkpiUnoxVzBXaEJNNkVJZVdiV2FYR2UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUtMWM1YmRlMmMxNGY0 LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXONAwQA uXOPMA0GCSqGSIb3DQEBCwUAA4IBAQB6SXgvkEiZV+QaBhOxhI/ycaLwdxoDAm/Y IEhJWGj7p7u+uPsSrVZDL9O8wK5HKrEHpFk4KkTfHBdmAGVqbTEsencj8nHqZ+3V RCYcMIP1pTDIbkDRfIeQlS1w3r9Kmc2PPf/r71bmJZ0ZrbZx9fXZiIBI/3P3+oYI R7JJ24P/pSgK2HGy3XGmr067GGP5P5oHq8Kk58dlQxvlqCRxxGgKLtyl1z/ipvGj ekv+LAVOP4htA1K4qcn72fj+XAi+MryndxH2k06vkHVs9fxJCXxMIdGJ3S/u9EpS 03Sy/73Lusg0DN7yOIN23k05cgYcXWun0SqRMUV7FzoDzwxjpZu0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:56 2026 by rpki-client