This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa File: nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa (raw, json) Hash identifier: vS4SbJavvGCy6afeQpD8NQ8z7X7Q99Ou3a4Euk5tYic= Subject key identifier: 9C:AA:61:1D:32:D9:F7:00:22:11:A6:47:27:71:84:F9:20:63:E0:1E Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807F5F76888A297D2D71FB93EECFF5 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199329 IP address blocks: 212.49.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:5f:76:88:8a:29:7d:2d:71:fb:93:ee:cf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9caa611d32d9f7002211a647277184f92063e01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:4f:a0:f3:e3:02:92:6b:e6:8b:10:cb:af: 81:7a:e9:90:52:8b:30:f9:74:a3:0f:d8:0e:73:71: ad:e7:fa:41:4c:df:47:b8:cd:49:c1:4e:98:f0:e1: 98:1e:98:cb:1d:4d:47:5a:ef:a6:4b:0b:80:56:1e: aa:fc:c1:7c:b4:19:a8:84:8b:63:73:e7:6f:23:2d: 30:6c:22:30:32:9f:bb:cd:f2:86:7b:46:16:f3:b4: f1:eb:13:f5:6f:bb:0d:56:b5:71:6c:e4:ce:20:27: ab:f7:82:74:18:42:6a:f1:db:76:7e:65:e3:e3:57: 0d:e7:82:3c:00:67:16:c3:c7:1d:23:75:03:fc:b2: bf:d4:a7:97:87:11:b1:b3:10:e9:09:a3:cb:3b:bc: 6e:7b:01:db:f5:6a:b0:70:8c:4f:88:bb:ad:a5:38: 37:df:cf:a7:14:36:24:d8:ee:14:20:39:e3:50:a9: 6a:9a:ed:da:76:f6:f0:08:3d:a5:98:4f:e2:11:fa: f4:90:55:a8:35:96:91:28:02:d6:64:24:df:96:0e: d1:99:33:db:2f:91:46:a2:3d:c1:64:24:1e:86:6f: 81:5d:4e:bd:23:45:23:35:86:c7:77:e3:7f:94:bc: 38:44:da:d8:1c:eb:96:98:88:ee:84:18:2b:c8:83: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AA:61:1D:32:D9:F7:00:22:11:A6:47:27:71:84:F9:20:63:E0:1E X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.49.180.0/24 Signature Algorithm: sha256WithRSAEncryption 24:4d:44:57:38:58:c3:3d:80:9f:2e:a1:e6:e8:08:db:0c:5a: 0f:e2:8a:be:08:8d:57:2f:22:36:1e:34:1b:66:52:03:ef:0a: 64:17:5a:b8:47:f1:2c:47:10:8d:6e:40:c3:c7:93:e3:e9:92: b7:3a:20:c1:5d:cc:21:60:00:62:ba:bf:a0:ce:83:37:26:8c: 1b:67:fd:a2:92:e8:81:ef:16:a2:2d:1b:0a:39:aa:c9:01:ed: 68:9a:5e:39:fc:4f:a6:e3:a0:4c:23:18:88:6b:47:dd:76:fa: ff:00:f5:6f:ed:39:fb:7f:ea:56:9b:06:49:b1:0d:d9:22:33: 26:cf:3b:a6:84:35:7c:23:df:eb:86:22:2c:ab:96:90:f8:e1: 80:2c:28:89:10:e9:b9:85:d4:24:96:c1:62:c5:5c:ab:16:b2: bd:40:f3:de:92:8c:14:ad:10:74:e4:94:2d:e9:ff:93:a9:da: 12:04:d7:ea:ac:53:61:53:67:27:a6:07:8a:7d:34:65:28:a8: f5:3c:0c:34:79:4f:d7:e5:67:53:bd:a9:82:44:77:90:0a:99: f1:55:68:d1:2d:9e:da:f1:89:a0:fd:e9:98:77:91:7b:35:30: 7c:02:9f:84:54:34:75:b3:e9:0b:b4:db:0d:f7:83:d4:e8:53: f0:d8:21:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH9fdoiKKX0tcfuT7s/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2FhNjExZDMyZDlmNzAwMjIxMWE2NDcyNzcxODRmOTIwNjNlMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5PoPPjApJr5osQy6+BeumQUosw +XSjD9gOc3Gt5/pBTN9HuM1JwU6Y8OGYHpjLHU1HWu+mSwuAVh6q/MF8tBmohItj c+dvIy0wbCIwMp+7zfKGe0YW87Tx6xP1b7sNVrVxbOTOICer94J0GEJq8dt2fmXj 41cN54I8AGcWw8cdI3UD/LK/1KeXhxGxsxDpCaPLO7xuewHb9WqwcIxPiLutpTg3 38+nFDYk2O4UIDnjUKlqmu3advbwCD2lmE/iEfr0kFWoNZaRKALWZCTflg7RmTPb L5FGoj3BZCQehm+BXU69I0UjNYbHd+N/lLw4RNrYHOuWmIjuhBgryINLgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJyqYR0y2fcAIhGmRydxhPkgY+AeMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvbktwaEhUTFo5d0FpRWFaSEozR0UtU0JqNEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DG0MA0G CSqGSIb3DQEBCwUAA4IBAQAkTURXOFjDPYCfLqHm6AjbDFoP4oq+CI1XLyI2HjQb ZlID7wpkF1q4R/EsRxCNbkDDx5Pj6ZK3OiDBXcwhYABiur+gzoM3JowbZ/2ikuiB 7xaiLRsKOarJAe1oml45/E+m46BMIxiIa0fddvr/APVv7Tn7f+pWmwZJsQ3ZIjMm zzumhDV8I9/rhiIsq5aQ+OGALCiJEOm5hdQklsFixVyrFrK9QPPekowUrRB05JQt 6f+TqdoSBNfqrFNhU2cnpgeKfTRlKKj1PAw0eU/X5WdTvamCRHeQCpnxVWjRLZ7a 8Ymg/emYd5F7NTB8Ap+EVDR1s+kLtNsN94PU6FPw2CFH -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:39 2026 by rpki-client