This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/nTSOIsFCXPktLiPKU0rpSqAxP9c.roa File: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (raw, json) Hash identifier: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E= Subject key identifier: 9D:34:8E:22:C1:42:5C:F9:2D:2E:23:CA:53:4A:E9:4A:A0:31:3F:D7 Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Certificate serial: 019B78A36AFC302019030447E62FC7670D13 Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/nTSOIsFCXPktLiPKU0rpSqAxP9c.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30821 IP address blocks: 185.134.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6a:fc:30:20:19:03:04:47:e6:2f:c7:67:0d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d348e22c1425cf92d2e23ca534ae94aa0313fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:39:17:23:79:53:01:b6:23:88:42:ec:c4: 30:b5:75:a9:7b:b9:7f:63:55:b5:38:16:39:a3:67: b3:94:2f:6b:56:0a:d4:8b:4c:f3:e2:a5:ce:7d:7c: 9f:79:e1:97:66:d3:6d:6f:9a:aa:98:ea:e8:12:43: ff:13:24:16:ab:d5:35:b4:69:8d:d6:91:3f:0e:18: 76:96:54:30:51:22:e1:e2:35:8b:36:e7:3a:b5:ea: 76:83:e6:0a:50:64:46:91:4e:5e:0b:5d:9a:9f:cf: d8:96:ff:92:9b:2e:9e:4e:27:69:39:6c:ae:a8:a7: 90:5a:45:4d:b9:9f:68:0e:97:34:2e:c7:6a:04:c3: 27:2c:c2:da:30:84:f5:fd:7a:96:40:b3:43:67:3b: 44:a3:d3:01:45:5b:ae:c7:a1:83:81:00:7c:e8:83: 8f:ea:cb:03:08:3b:b3:ba:bb:9b:97:cc:ec:e9:1b: 5f:ec:ad:20:4b:33:27:f3:e9:71:05:ec:94:0b:3f: c7:cb:65:dd:3c:97:a6:a7:6a:08:5f:bb:5b:d3:12: e9:2a:83:d6:a4:33:64:5f:e2:27:43:90:f5:16:b5: 49:43:58:bc:d8:97:fc:9c:32:19:28:2c:5a:46:16: 70:54:ec:1a:ce:b0:d7:ec:c3:a6:75:5c:2a:fd:78: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:8E:22:C1:42:5C:F9:2D:2E:23:CA:53:4A:E9:4A:A0:31:3F:D7 X509v3 Authority Key Identifier: keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/nTSOIsFCXPktLiPKU0rpSqAxP9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.16.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:b0:49:fe:6f:ff:83:bd:53:91:31:bb:03:dc:bc:aa:48:c1: 97:f2:dd:10:48:ab:00:7c:a4:a9:bf:2b:d0:6a:0c:bf:01:51: 28:eb:d2:ae:57:af:cc:f5:c4:a6:bb:e2:50:6e:e4:3d:5e:7a: f8:36:8d:65:33:19:cb:fd:aa:4d:24:14:0d:f0:86:15:01:0d: b2:63:84:2e:9c:86:9c:93:7b:bd:02:ae:4f:05:0d:69:75:98: 1e:7e:d3:8b:f5:51:de:0a:7f:3a:d4:d8:ec:99:0e:ab:ea:60: 79:88:68:47:74:3a:4f:a8:b4:38:58:76:fb:b2:3b:1e:76:a0: e0:97:2a:94:ae:f0:5c:b7:e5:4c:0e:24:c7:22:7f:2a:2f:c3: b3:5f:de:61:37:34:fc:fa:a8:48:a4:cc:e6:38:c1:ab:93:6d: 36:a3:21:59:59:8f:ff:79:25:20:b2:38:3e:1c:e0:71:a8:50: 2c:0b:b7:92:da:d0:92:75:cd:eb:94:6a:fb:16:27:5a:9a:67: 13:c0:96:4e:9f:27:61:81:df:dc:15:ca:44:2b:af:a2:4b:79: f5:56:2d:cc:7e:6b:81:19:88:b2:e3:0f:35:1f:59:81:2d:e3: 09:83:09:e9:e7:b7:44:51:99:8f:4a:6d:ec:4f:c4:c9:be:e0: 29:ce:a5:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2r8MCAZAwRH5i/HZw0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx YTNlYWEwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDM0OGUyMmMxNDI1Y2Y5MmQyZTIzY2E1MzRhZTk0YWEwMzEzZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgs5FyN5UwG2I4hC7MQwtXWpe7l/ Y1W1OBY5o2ezlC9rVgrUi0zz4qXOfXyfeeGXZtNtb5qqmOroEkP/EyQWq9U1tGmN 1pE/Dhh2llQwUSLh4jWLNuc6tep2g+YKUGRGkU5eC12an8/Ylv+Smy6eTidpOWyu qKeQWkVNuZ9oDpc0LsdqBMMnLMLaMIT1/XqWQLNDZztEo9MBRVuux6GDgQB86IOP 6ssDCDuzurubl8zs6Rtf7K0gSzMn8+lxBeyUCz/Hy2XdPJemp2oIX7tb0xLpKoPW pDNkX+InQ5D1FrVJQ1i82Jf8nDIZKCxaRhZwVOwazrDX7MOmdVwq/XhdBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ00jiLBQlz5LS4jylNK6UqgMT/XMB8GA1UdIwQY MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt ZDdjMGU5MzkzZWEwLzEvblRTT0lzRkNYUGt0TGlQS1UwcnBTcUF4UDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYYQMA0G CSqGSIb3DQEBCwUAA4IBAQArsEn+b/+DvVORMbsD3LyqSMGX8t0QSKsAfKSpvyvQ agy/AVEo69KuV6/M9cSmu+JQbuQ9Xnr4No1lMxnL/apNJBQN8IYVAQ2yY4QunIac k3u9Aq5PBQ1pdZgeftOL9VHeCn861NjsmQ6r6mB5iGhHdDpPqLQ4WHb7sjsedqDg lyqUrvBct+VMDiTHIn8qL8OzX95hNzT8+qhIpMzmOMGrk202oyFZWY//eSUgsjg+ HOBxqFAsC7eS2tCSdc3rlGr7FidammcTwJZOnydhgd/cFcpEK6+iS3n1Vi3MfmuB GYiy4w81H1mBLeMJgwnp57dEUZmPSm3sT8TJvuApzqWL -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:15 2026 by rpki-client