This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NsZFy4QDHBw9Z0-RU9ikkHal9A4.roa File: NsZFy4QDHBw9Z0-RU9ikkHal9A4.roa (raw, json) Hash identifier: klOmfhJ8dJiSblLHGNzpERpVUWDltSssUV8Vq2W4SG4= Subject key identifier: 36:C6:45:CB:84:03:1C:1C:3D:67:4F:91:53:D8:A4:90:76:A5:F4:0E Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77265EFFEC813F8A7E0AC9CF157D4 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NsZFy4QDHBw9Z0-RU9ikkHal9A4.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35787 IP address blocks: 195.136.32.0/23 maxlen: 23 195.136.32.0/24 maxlen: 24 195.136.33.0/24 maxlen: 24 195.136.72.0/23 maxlen: 23 195.136.72.0/24 maxlen: 24 195.136.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:65:ef:fe:c8:13:f8:a7:e0:ac:9c:f1:57:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36c645cb84031c1c3d674f9153d8a49076a5f40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:5e:03:cb:59:d2:29:ba:58:b8:81:61:7a: 44:93:6c:e6:ae:bc:ad:c7:bc:7c:5b:45:84:e6:98: 61:6c:c2:7d:b4:c4:d1:fc:8b:10:77:7d:f2:2b:de: de:8b:5c:30:1d:34:29:61:12:2b:57:3a:8d:5e:7a: 66:3f:02:81:21:b0:df:53:a5:86:8b:2a:b2:ad:9b: 8d:88:79:6e:48:01:78:6f:ab:ef:c2:f7:99:93:71: e2:09:4d:d8:07:39:25:14:81:c9:95:1c:c0:be:ab: 9f:1c:ab:f1:9d:85:41:92:3f:03:7b:44:45:d2:0e: 78:bb:57:3e:34:e5:59:95:4e:97:00:b4:53:9b:0d: c0:cd:0d:b3:b4:8e:54:01:e5:20:58:bb:58:dc:69: 85:1d:aa:7d:93:e0:73:af:97:6a:e2:53:88:df:e4: f5:b3:15:c3:a3:68:38:0b:6e:31:79:52:7a:0e:26: 51:de:3d:00:28:2b:68:c4:9b:9f:ff:f2:96:82:6c: 6d:44:be:4d:7d:77:97:fb:71:c4:ae:5a:6e:36:02: cf:79:c1:cb:59:5b:af:d2:78:85:54:39:dd:c3:1c: 82:cb:b0:37:50:02:82:08:9f:ca:07:d7:ed:16:85: 3b:6b:14:44:a1:16:21:e6:a9:46:f5:f2:87:bc:66: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:45:CB:84:03:1C:1C:3D:67:4F:91:53:D8:A4:90:76:A5:F4:0E X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NsZFy4QDHBw9Z0-RU9ikkHal9A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.32.0/23 195.136.72.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:97:c4:be:6c:ac:d9:ac:30:c1:d9:ec:6d:bf:9e:52:95:6b: 73:2f:e9:b7:d2:2e:44:7c:31:ce:53:41:89:c7:0a:70:25:34: ea:95:d6:50:8a:d6:8b:fe:f9:31:4e:97:f4:8f:43:d1:89:9c: 73:83:f7:2d:56:21:b0:17:de:ac:37:7f:3e:00:fe:96:33:b9: 88:62:a3:64:a6:b5:17:c9:9b:1c:8c:ac:c3:29:5b:99:42:c3: 3b:40:57:3b:a8:87:ed:b7:84:2e:92:ef:d7:56:5c:4d:f8:0c: a0:73:ee:2d:12:c4:23:76:6f:c7:34:85:42:0a:84:fb:ca:11: 36:a7:a7:4c:1e:d6:f9:06:08:78:04:4f:ff:df:d1:30:fd:57: 9c:0d:47:a5:aa:59:ca:b5:5b:fb:0e:db:17:c2:d9:32:6a:34: 8b:b2:d7:9a:2e:8a:f6:dc:5d:42:85:21:fd:13:81:b4:1f:db: 8a:b3:a0:04:29:94:c2:22:63:5e:55:1b:5d:84:f4:29:5f:9a: 62:41:27:70:9a:14:17:5b:fb:81:29:9e:67:2b:68:82:69:6d: 1b:c4:5b:04:a6:f1:55:cf:e6:b0:fb:00:09:5a:b0:d1:81:ab: 2a:38:73:de:45:25:3d:22:af:7b:65:63:bb:ce:08:59:de:fa: 6f:80:5a:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x3Jl7/7IE/in4Kyc8VfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmM2NDVjYjg0MDMxYzFjM2Q2NzRmOTE1M2Q4YTQ5MDc2YTVmNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqleA8tZ0im6WLiBYXpEk2zmrryt x7x8W0WE5phhbMJ9tMTR/IsQd33yK97ei1wwHTQpYRIrVzqNXnpmPwKBIbDfU6WG iyqyrZuNiHluSAF4b6vvwveZk3HiCU3YBzklFIHJlRzAvqufHKvxnYVBkj8De0RF 0g54u1c+NOVZlU6XALRTmw3AzQ2ztI5UAeUgWLtY3GmFHap9k+Bzr5dq4lOI3+T1 sxXDo2g4C24xeVJ6DiZR3j0AKCtoxJuf//KWgmxtRL5NfXeX+3HErlpuNgLPecHL WVuv0niFVDndwxyCy7A3UAKCCJ/KB9ftFoU7axREoRYh5qlG9fKHvGbnRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDbGRcuEAxwcPWdPkVPYpJB2pfQOMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvTnNaRnk0UURIQnc5WjAtUlU5aWtrSGFsOUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw4ggAwQB w4hIMA0GCSqGSIb3DQEBCwUAA4IBAQAdl8S+bKzZrDDB2extv55SlWtzL+m30i5E fDHOU0GJxwpwJTTqldZQitaL/vkxTpf0j0PRiZxzg/ctViGwF96sN38+AP6WM7mI YqNkprUXyZscjKzDKVuZQsM7QFc7qIftt4Quku/XVlxN+Aygc+4tEsQjdm/HNIVC CoT7yhE2p6dMHtb5Bgh4BE//39Ew/VecDUelqlnKtVv7DtsXwtkyajSLsteaLor2 3F1ChSH9E4G0H9uKs6AEKZTCImNeVRtdhPQpX5piQSdwmhQXW/uBKZ5nK2iCaW0b xFsEpvFVz+aw+wAJWrDRgasqOHPeRSU9Iq97ZWO7zghZ3vpvgFpD -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:10 2026 by rpki-client