This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/nLPrlrzFQJke2w0nSv6P6BPs3rs.roa File: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (raw, json) Hash identifier: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY= Subject key identifier: 9C:B3:EB:96:BC:C5:40:99:1E:DB:0D:27:4A:FE:8F:E8:13:EC:DE:BB Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a Certificate serial: 019B7E38CAB532FEEAB5B457417F86C5B78D Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/nLPrlrzFQJke2w0nSv6P6BPs3rs.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210791 IP address blocks: 92.119.96.0/22 maxlen: 24 185.32.136.0/22 maxlen: 24 185.78.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ca:b5:32:fe:ea:b5:b4:57:41:7f:86:c5:b7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cb3eb96bcc540991edb0d274afe8fe813ecdebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:ec:a5:f9:bb:ac:1b:63:d2:f6:b4:47:2f: 48:bd:b9:e7:97:d5:f1:b5:cc:c7:ae:e4:51:9e:14: 45:9e:d0:56:65:4b:b3:43:19:11:20:93:13:a9:15: 46:eb:3e:20:6a:9c:88:f3:29:3a:57:3f:4f:36:48: 9d:5d:75:6f:a3:00:91:80:b7:e5:78:aa:71:d0:11: 1c:75:e4:9a:ac:61:fc:2d:18:f4:e0:49:6e:31:06: 03:14:8c:75:91:01:92:b4:58:f0:b2:02:95:ad:f1: ec:43:92:11:4c:1e:5e:4b:b6:6a:54:71:c5:8a:a6: 15:9d:1b:c8:d0:82:56:71:29:73:fb:6a:4f:eb:08: 7e:e6:d0:e3:b2:bb:a7:ec:14:4a:dd:cd:cf:49:f6: fd:76:a2:44:ef:fe:72:b6:48:53:8d:fe:4d:e1:cc: bb:40:e3:38:23:f5:f6:4b:c7:a4:82:57:f1:d5:40: 4a:31:d5:62:24:24:00:e9:be:f5:73:95:4c:a8:68: d8:da:82:26:bb:6f:51:ec:6f:e0:98:9b:fa:39:2d: c8:9b:d6:b2:65:12:10:c4:cf:fe:41:b3:77:ae:cd: fc:24:c4:ce:f5:e3:22:99:39:9b:04:a9:dc:26:1a: 29:ae:95:61:99:2d:0b:73:e1:96:f9:3a:a7:e9:d7: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:EB:96:BC:C5:40:99:1E:DB:0D:27:4A:FE:8F:E8:13:EC:DE:BB X509v3 Authority Key Identifier: keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/nLPrlrzFQJke2w0nSv6P6BPs3rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.96.0/22 185.32.136.0/22 185.78.0.0/22 Signature Algorithm: sha256WithRSAEncryption 12:aa:ca:33:a5:79:b9:29:fa:e3:e0:25:e5:03:fa:76:f4:78: 14:63:24:d8:07:fd:be:e4:50:d3:22:10:60:c5:a5:5c:b1:46: c9:24:6c:23:27:06:70:08:d4:f3:67:5b:d0:31:4d:94:f2:c0: a6:31:6d:32:cc:57:0c:54:d7:9d:ef:0f:c6:0b:2e:c5:7e:79: 45:df:95:35:1e:1f:75:2a:4b:a1:48:c9:41:bb:65:b6:52:78: 4c:95:ec:72:c3:1b:32:ec:f3:dc:50:54:ee:68:c8:65:43:9f: 6c:84:42:22:cf:ed:e3:ee:18:8e:3c:9b:f1:7c:8e:6a:46:f4: 0a:b6:4c:c5:8e:f3:e7:0c:cc:bd:55:37:25:e4:0a:f8:93:31: 45:8a:32:c2:2b:d3:7c:c5:a5:43:33:6d:7c:48:ca:d1:20:2f: 4f:aa:7e:22:03:ad:26:a1:37:11:62:3f:fe:a0:31:4c:00:3f: 4a:84:43:26:8b:88:c4:51:51:ea:f2:cd:e9:8f:68:69:49:fc: c5:00:e4:99:48:fc:2d:15:a7:93:f9:fa:9d:81:37:33:7d:23: e3:77:eb:32:84:4f:1f:eb:81:db:35:0f:fd:bf:71:c4:82:c7: 68:4c:6a:37:89:ad:3d:d4:d1:42:be:d0:ae:b0:24:0d:34:3c: 79:89:79:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OMq1Mv7qtbRXQX+GxbeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi MjE2MWEwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2IzZWI5NmJjYzU0MDk5MWVkYjBkMjc0YWZlOGZlODEzZWNkZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Tspfm7rBtj0va0Ry9Ivbnnl9Xx tczHruRRnhRFntBWZUuzQxkRIJMTqRVG6z4gapyI8yk6Vz9PNkidXXVvowCRgLfl eKpx0BEcdeSarGH8LRj04EluMQYDFIx1kQGStFjwsgKVrfHsQ5IRTB5eS7ZqVHHF iqYVnRvI0IJWcSlz+2pP6wh+5tDjsrun7BRK3c3PSfb9dqJE7/5ytkhTjf5N4cy7 QOM4I/X2S8ekglfx1UBKMdViJCQA6b71c5VMqGjY2oImu29R7G/gmJv6OS3Im9ay ZRIQxM/+QbN3rs38JMTO9eMimTmbBKncJhoprpVhmS0Lc+GW+Tqn6ddinwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJyz65a8xUCZHtsNJ0r+j+gT7N67MB8GA1UdIwQY MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt ZDU5MTA4YjU3MjE0LzEvbkxQcmxyekZRSmtlMncwblN2NlA2QlBzM3JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0 LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXHdgAwQC uSCIAwQCuU4AMA0GCSqGSIb3DQEBCwUAA4IBAQASqsozpXm5Kfrj4CXlA/p29HgU YyTYB/2+5FDTIhBgxaVcsUbJJGwjJwZwCNTzZ1vQMU2U8sCmMW0yzFcMVNed7w/G Cy7FfnlF35U1Hh91KkuhSMlBu2W2UnhMlexywxsy7PPcUFTuaMhlQ59shEIiz+3j 7hiOPJvxfI5qRvQKtkzFjvPnDMy9VTcl5Ar4kzFFijLCK9N8xaVDM218SMrRIC9P qn4iA60moTcRYj/+oDFMAD9KhEMmi4jEUVHq8s3pj2hpSfzFAOSZSPwtFaeT+fqd gTczfSPjd+syhE8f64HbNQ/9v3HEgsdoTGo3ia091NFCvtCusCQNNDx5iXkl -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:19 2026 by rpki-client