This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NuqPhouRONL44rUb1cLtqoOo1jg.roa File: NuqPhouRONL44rUb1cLtqoOo1jg.roa (raw, json) Hash identifier: cnRw58Xkwpz25Kb8YVWzU5CREedmYPvRcaBJ1jenGwY= Subject key identifier: 36:EA:8F:86:8B:91:38:D2:F8:E2:B5:1B:D5:C2:ED:AA:83:A8:D6:38 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D2307BED0BA5DCADEF62C8C95826D Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NuqPhouRONL44rUb1cLtqoOo1jg.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203583 IP address blocks: 84.1.158.0/24 maxlen: 24 195.56.141.0/24 maxlen: 24 195.228.29.0/24 maxlen: 24 195.228.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:23:07:be:d0:ba:5d:ca:de:f6:2c:8c:95:82:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36ea8f868b9138d2f8e2b51bd5c2edaa83a8d638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:d6:46:a2:0d:a8:06:a0:46:49:0d:41:9b: 84:9d:e7:4c:47:60:6f:6e:3d:fd:5e:da:0e:6c:36: 71:25:95:e3:2b:94:7d:eb:4a:23:bd:b0:8b:19:55: ac:6a:4b:ab:d0:32:e7:ad:c7:ad:76:19:25:28:85: 07:83:a3:78:0c:cb:ce:e1:f1:a3:9b:7e:fe:8f:93: e3:24:d2:3f:b4:4d:9b:4f:cf:b5:64:2c:00:58:a4: f8:40:0e:4b:10:e4:11:44:ff:c7:36:87:99:7e:a4: f1:0c:f5:8d:58:ed:e7:c9:e1:70:a6:9f:d1:0c:af: ca:91:38:cd:59:ac:31:ec:6e:f9:99:6e:71:10:f7: 19:97:19:ce:bf:cd:c4:a7:45:43:4e:e0:44:58:c7: 77:7d:f5:a5:f4:3a:92:0b:6f:39:0e:a6:ae:9d:e7: 51:a9:1e:29:39:c8:be:90:a5:3e:29:86:a0:5e:b2: c3:c3:87:fd:44:3d:e1:4a:70:75:9d:19:3d:e5:b6: 8b:7b:31:a4:af:fe:89:be:c1:a4:91:f0:c9:0b:7a: fe:36:1f:6f:7e:d9:b1:b6:b8:ac:0d:3c:43:d7:27: 9b:fe:01:a4:65:5e:1c:00:f6:7c:73:08:29:cc:07: bf:91:e8:09:7e:df:d8:82:95:e3:b5:00:be:eb:c6: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:8F:86:8B:91:38:D2:F8:E2:B5:1B:D5:C2:ED:AA:83:A8:D6:38 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/NuqPhouRONL44rUb1cLtqoOo1jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.158.0/24 195.56.141.0/24 195.228.29.0/24 195.228.180.0/24 Signature Algorithm: sha256WithRSAEncryption 84:c5:52:4e:11:54:bc:30:a7:0c:37:5d:02:bb:fb:bf:8a:4d: 61:d8:ab:e9:1f:96:ce:d5:02:d7:36:a0:ad:84:37:10:1c:77: 27:19:74:05:ac:6e:41:04:75:53:56:39:54:0c:0e:76:64:0b: 2f:0b:c7:58:88:29:64:a1:df:4e:1e:85:a9:69:b3:83:d1:08: 2c:17:4c:4c:f6:32:57:3d:f7:a4:b8:8e:4f:9e:3e:fb:8c:7a: 7e:14:bd:de:3a:fc:c7:e7:14:b5:97:f2:03:65:bf:e9:6e:1c: 04:0f:95:df:8c:5c:93:eb:89:4d:fe:89:34:6d:12:9d:9f:b0: f9:ea:fd:a2:8a:23:d1:24:5e:f7:6f:15:66:a0:e8:e8:12:6f: 3b:08:18:b4:ae:de:54:7e:ad:b1:38:4f:9e:29:eb:7a:c2:14: 95:9a:0c:20:fb:67:75:d3:69:b5:08:e2:b8:c0:14:4e:db:44: dd:f7:c8:c8:70:54:b8:3c:fd:b5:8a:c5:10:fe:ff:a4:e3:91: fe:cc:07:93:0c:51:93:98:8a:7c:a7:64:ff:d5:58:f7:38:10: df:7a:83:43:8e:4c:6a:21:30:9f:47:77:99:ce:6d:a5:41:03: 15:a8:9a:af:cc:11:51:e0:89:c9:00:db:af:f1:a3:9a:aa:59: 87:bb:ab:71 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XSMHvtC6Xcre9iyMlYJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmVhOGY4NjhiOTEzOGQyZjhlMmI1MWJkNWMyZWRhYTgzYThkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4PWRqINqAagRkkNQZuEnedMR2Bv bj39XtoObDZxJZXjK5R960ojvbCLGVWsakur0DLnrcetdhklKIUHg6N4DMvO4fGj m37+j5PjJNI/tE2bT8+1ZCwAWKT4QA5LEOQRRP/HNoeZfqTxDPWNWO3nyeFwpp/R DK/KkTjNWawx7G75mW5xEPcZlxnOv83Ep0VDTuBEWMd3ffWl9DqSC285DqaunedR qR4pOci+kKU+KYagXrLDw4f9RD3hSnB1nRk95baLezGkr/6JvsGkkfDJC3r+Nh9v ftmxtrisDTxD1yeb/gGkZV4cAPZ8cwgpzAe/kegJft/YgpXjtQC+68bNHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDbqj4aLkTjS+OK1G9XC7aqDqNY4MB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvTnVxUGhvdVJPTkw0NHJVYjFjTHRxb09vMWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVAGeAwQA wziNAwQAw+QdAwQAw+S0MA0GCSqGSIb3DQEBCwUAA4IBAQCExVJOEVS8MKcMN10C u/u/ik1h2KvpH5bO1QLXNqCthDcQHHcnGXQFrG5BBHVTVjlUDA52ZAsvC8dYiClk od9OHoWpabOD0QgsF0xM9jJXPfekuI5Pnj77jHp+FL3eOvzH5xS1l/IDZb/pbhwE D5XfjFyT64lN/ok0bRKdn7D56v2iiiPRJF73bxVmoOjoEm87CBi0rt5Ufq2xOE+e Ket6whSVmgwg+2d102m1COK4wBRO20Td98jIcFS4PP21isUQ/v+k45H+zAeTDFGT mIp8p2T/1Vj3OBDfeoNDjkxqITCfR3eZzm2lQQMVqJqvzBFR4InJANuv8aOaqlmH u6tx -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:24 2026 by rpki-client