This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NWbp3VrBJBdU6D_ridQDOjSfmF0.roa File: NWbp3VrBJBdU6D_ridQDOjSfmF0.roa (raw, json) Hash identifier: 4qV9ehrXuaMD5cBVZLVrGxb8KSokmAuPhNFEOUMPMAk= Subject key identifier: 35:66:E9:DD:5A:C1:24:17:54:E8:3F:EB:89:D4:03:3A:34:9F:98:5D Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F84770D2C687114C39535EF3F75BF0F Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NWbp3VrBJBdU6D_ridQDOjSfmF0.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210618 IP address blocks: 85.153.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:77:0d:2c:68:71:14:c3:95:35:ef:3f:75:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3566e9dd5ac1241754e83feb89d4033a349f985d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:8a:b6:cc:10:05:f3:bb:9e:f7:fe:77:e5: 40:ba:c2:35:b9:63:5d:f7:00:98:3c:ca:32:71:f3: 2f:a4:f0:c8:8d:44:76:53:39:a0:96:2b:86:f0:f5: a0:d0:37:c0:54:3a:51:05:ce:cc:56:8a:7c:09:ef: a9:a1:b9:57:d9:9a:f2:d7:3a:98:b0:c7:98:0f:d2: ac:a1:0e:7a:e9:96:a6:f4:c9:d2:8a:c5:b5:f4:92: f2:f5:16:53:6d:42:21:13:9c:1f:24:b4:11:78:e5: 4c:fb:82:d8:77:1e:7e:4b:c6:ce:53:39:1b:fa:cb: 50:7c:b6:b6:06:93:7d:47:44:cc:cd:af:da:63:0b: 2b:5c:7a:81:c2:28:a5:dc:74:1d:70:79:85:67:ff: 72:0f:a8:32:0d:b5:05:06:da:64:66:11:50:49:01: e7:79:07:bd:23:d5:49:54:e3:3f:2e:35:47:20:2d: 67:4d:1b:73:1d:8e:46:f2:cc:e9:93:06:8d:51:33: cb:d4:64:ce:6d:ac:be:27:ea:f2:ca:f0:42:9c:02: ea:9a:14:0f:8d:12:76:40:03:2e:49:ec:37:d0:33: 16:4b:f5:dc:ff:af:35:56:6a:a7:57:23:89:74:d6: 76:3d:33:68:ff:ae:08:95:63:2f:96:95:21:94:c7: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:66:E9:DD:5A:C1:24:17:54:E8:3F:EB:89:D4:03:3A:34:9F:98:5D X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/NWbp3VrBJBdU6D_ridQDOjSfmF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.208.0/24 Signature Algorithm: sha256WithRSAEncryption 63:36:5b:1e:c2:aa:05:de:28:93:62:77:06:79:97:aa:a5:86: 2c:d7:1e:b3:ba:a1:bb:05:8b:eb:15:fb:43:67:e9:f4:d7:37: 72:61:93:01:66:36:13:00:d9:86:6a:3e:0d:6d:e6:ae:60:6e: 3f:83:cf:e7:0e:58:a5:ac:a8:54:84:e7:24:39:90:ad:09:4b: 9b:40:dc:eb:e0:52:e6:4f:10:6b:f9:9f:6e:ba:04:22:cd:f5: fd:61:f8:65:4e:bf:f1:51:c0:17:76:79:9f:d8:43:9d:2f:b2: 59:3e:22:02:17:23:8b:d7:f2:cc:02:d2:9d:d6:77:cc:d5:07: ef:79:24:5f:18:8f:f7:7b:60:7e:6c:c4:88:88:42:35:4e:12: 23:88:45:1a:cc:24:96:7a:21:62:42:1d:4b:8c:35:69:4c:a9: 5a:a9:44:14:43:73:49:91:84:a2:17:af:00:d2:bc:c8:bc:4b: cd:38:f0:d5:90:03:ec:b9:d8:85:78:79:9e:f4:10:33:69:41: 68:5b:03:6b:2c:b7:af:58:ef:24:e7:20:b9:a4:b6:33:e0:5a: 16:09:f5:2f:93:3c:75:ee:15:50:66:be:a7:7b:4b:2e:ed:14: f2:5e:9d:c4:56:79:39:db:27:33:8a:00:1a:9a:20:c4:16:ca: 97:da:c2:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHcNLGhxFMOVNe8/db8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY2ZTlkZDVhYzEyNDE3NTRlODNmZWI4OWQ0MDMzYTM0OWY5ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZeKtswQBfO7nvf+d+VAusI1uWNd 9wCYPMoycfMvpPDIjUR2UzmgliuG8PWg0DfAVDpRBc7MVop8Ce+poblX2Zry1zqY sMeYD9KsoQ566Zam9MnSisW19JLy9RZTbUIhE5wfJLQReOVM+4LYdx5+S8bOUzkb +stQfLa2BpN9R0TMza/aYwsrXHqBwiil3HQdcHmFZ/9yD6gyDbUFBtpkZhFQSQHn eQe9I9VJVOM/LjVHIC1nTRtzHY5G8szpkwaNUTPL1GTObay+J+ryyvBCnALqmhQP jRJ2QAMuSew30DMWS/Xc/681VmqnVyOJdNZ2PTNo/64IlWMvlpUhlMeFPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVm6d1awSQXVOg/64nUAzo0n5hdMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvTldicDNWckJKQmRVNkRfcmlkUURPalNmbUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZnQMA0G CSqGSIb3DQEBCwUAA4IBAQBjNlsewqoF3iiTYncGeZeqpYYs1x6zuqG7BYvrFftD Z+n01zdyYZMBZjYTANmGaj4NbeauYG4/g8/nDlilrKhUhOckOZCtCUubQNzr4FLm TxBr+Z9uugQizfX9YfhlTr/xUcAXdnmf2EOdL7JZPiICFyOL1/LMAtKd1nfM1Qfv eSRfGI/3e2B+bMSIiEI1ThIjiEUazCSWeiFiQh1LjDVpTKlaqUQUQ3NJkYSiF68A 0rzIvEvNOPDVkAPsudiFeHme9BAzaUFoWwNrLLevWO8k5yC5pLYz4FoWCfUvkzx1 7hVQZr6ne0su7RTyXp3EVnk52yczigAamiDEFsqX2sIx -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:06 2026 by rpki-client