This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa File: NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa (raw, json) Hash identifier: kmXA/OCGhyiId8hIHYYzQ+3ut/BaLBRzEWv/qUUmjqo= Subject key identifier: 34:DD:36:45:87:43:4A:57:79:63:F1:9A:6B:62:FB:63:A2:8C:C2:58 Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d Certificate serial: 019B77C73DEE9AE6928F93ED635C0B63551E Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3d:ee:9a:e6:92:8f:93:ed:63:5c:0b:63:55:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34dd364587434a577963f19a6b62fb63a28cc258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:df:51:ba:97:9a:34:82:c4:3e:99:57:b2: c0:f0:e3:81:a1:78:c8:cc:e1:57:e9:8e:26:d9:36: 0c:e5:69:7c:ab:19:b0:b3:01:54:ce:05:85:95:c3: 9e:5b:f3:a5:7b:af:34:1e:72:09:f1:ae:cc:f8:b9: fe:f1:ce:e0:62:e2:57:61:8c:86:3d:1c:e6:f9:d2: 3e:21:f4:bc:91:1b:03:02:c4:76:72:6b:f0:c4:dd: b5:df:08:bf:0f:17:41:84:95:46:ba:de:3b:fd:71: 30:96:17:7f:b2:09:43:8a:94:ca:e9:1b:b2:83:44: a1:23:9e:89:2d:5b:6f:5f:68:f4:e0:c1:0e:eb:f6: eb:92:b4:28:a4:fd:6e:a6:db:70:a3:5d:a6:25:a0: d2:6c:59:be:4e:8a:73:88:ca:03:98:2f:c0:72:1e: f5:f9:16:60:9b:91:c9:f5:bf:93:02:16:5a:2c:30: 1b:25:9d:6a:8f:70:bf:93:3e:4d:b8:52:b8:5d:bd: 8c:32:3d:e2:0b:1c:18:7c:fc:08:9c:85:a8:6a:ce: ba:d0:fa:33:03:88:5d:17:3f:ce:ce:c8:b4:24:c9: e0:8f:48:d1:6d:3b:b8:fb:95:e5:6b:93:bc:ef:c6: 00:10:52:17:d2:a7:b0:00:96:dc:cd:c5:34:e1:5f: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:36:45:87:43:4A:57:79:63:F1:9A:6B:62:FB:63:A2:8C:C2:58 X509v3 Authority Key Identifier: keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/NN02RYdDSld5Y_Gaa2L7Y6KMwlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ec:73:5d:7a:1e:11:97:3d:85:c8:f7:3f:52:68:31:8d:13: d0:96:2a:ef:86:11:82:fc:3f:37:e5:d6:20:f3:0a:fa:c9:fe: 40:96:4c:f2:b6:d8:74:ae:03:94:a5:23:de:cc:a9:82:e8:e4: 9e:39:5a:62:db:e3:1d:0b:73:3d:6f:ac:0b:c4:55:e8:47:3f: 1f:54:dc:1d:05:ff:56:82:fb:42:0b:26:53:1d:d8:82:d9:06: 18:9d:89:c0:ea:6f:af:1c:f6:93:46:af:31:46:ba:bf:e6:72: d3:f9:1d:fc:68:73:a2:c5:8b:78:54:2b:79:66:8c:45:12:cf: bb:c7:c7:ea:37:de:fb:9d:ca:64:bd:88:f5:94:30:4d:62:26: 12:ba:b7:4e:f3:da:3a:6f:f5:08:4b:a0:ae:b8:32:e9:74:ce: e3:b3:70:0b:8a:50:b7:63:3c:53:aa:a1:8c:dc:28:fd:31:14: a4:0e:41:b3:08:f8:85:d9:58:27:a1:64:3b:d6:4b:3e:e1:e5: 12:36:3b:9c:d7:db:8a:fa:a6:fa:4e:db:f6:4b:95:fb:8c:7d: 08:24:8c:11:d8:e6:21:f0:b5:ee:bd:0c:8a:32:e5:61:20:6f: 04:9d:01:f2:9d:c3:38:50:a0:6f:14:2d:49:b4:42:0b:9d:4e: 9d:70:89:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xz3umuaSj5PtY1wLY1UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5 ZDM2OGQwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGRkMzY0NTg3NDM0YTU3Nzk2M2YxOWE2YjYyZmI2M2EyOGNjMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HHfUbqXmjSCxD6ZV7LA8OOBoXjI zOFX6Y4m2TYM5Wl8qxmwswFUzgWFlcOeW/Ole680HnIJ8a7M+Ln+8c7gYuJXYYyG PRzm+dI+IfS8kRsDAsR2cmvwxN213wi/DxdBhJVGut47/XEwlhd/sglDipTK6Ruy g0ShI56JLVtvX2j04MEO6/brkrQopP1upttwo12mJaDSbFm+TopziMoDmC/Ach71 +RZgm5HJ9b+TAhZaLDAbJZ1qj3C/kz5NuFK4Xb2MMj3iCxwYfPwInIWoas660Poz A4hdFz/Ozsi0JMngj0jRbTu4+5Xla5O878YAEFIX0qewAJbczcU04V+CewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTdNkWHQ0pXeWPxmmti+2OijMJYMB8GA1UdIwQY MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt MzEyZTViNDkxMTQ2LzEvTk4wMlJZZERTbGQ1WV9HYWEyTDdZNktNd2xnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2 LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQV5MA0G CSqGSIb3DQEBCwUAA4IBAQAx7HNdeh4Rlz2FyPc/UmgxjRPQlirvhhGC/D835dYg 8wr6yf5Alkzytth0rgOUpSPezKmC6OSeOVpi2+MdC3M9b6wLxFXoRz8fVNwdBf9W gvtCCyZTHdiC2QYYnYnA6m+vHPaTRq8xRrq/5nLT+R38aHOixYt4VCt5ZoxFEs+7 x8fqN977ncpkvYj1lDBNYiYSurdO89o6b/UIS6CuuDLpdM7js3ALilC3YzxTqqGM 3Cj9MRSkDkGzCPiF2VgnoWQ71ks+4eUSNjuc19uK+qb6Ttv2S5X7jH0IJIwR2OYh 8LXuvQyKMuVhIG8EnQHyncM4UKBvFC1JtEILnU6dcIml -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:36 2026 by rpki-client