This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Nwh0KYpyjxcBqZbuhbindqyhWgs.roa File: Nwh0KYpyjxcBqZbuhbindqyhWgs.roa (raw, json) Hash identifier: CxYdlY1Bka0rR2LATCvnbvz8VFJeEdpkh3OYlD98DAs= Subject key identifier: 37:08:74:29:8A:72:8F:17:01:A9:96:EE:85:B8:A7:76:AC:A1:5A:0B Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C72A7AF6FDA7A674691D5D867ADF28 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Nwh0KYpyjxcBqZbuhbindqyhWgs.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3216 IP address blocks: 194.85.128.0/19 maxlen: 19 194.85.129.0/28 maxlen: 28 194.85.129.16/28 maxlen: 28 194.85.153.240/28 maxlen: 28 194.85.154.0/24 maxlen: 24 195.209.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:7a:f6:fd:a7:a6:74:69:1d:5d:86:7a:df:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=370874298a728f1701a996ee85b8a776aca15a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:8d:80:f7:3e:93:5e:67:f2:de:7a:ed:18: e0:55:dd:3d:e4:25:38:a5:4d:47:53:d6:f1:5b:35: 83:94:9f:54:85:a5:48:66:7f:cc:3b:bb:9a:2d:7a: a1:b0:ee:ed:e6:24:db:df:61:59:36:ef:60:17:f1: 2e:0b:d6:f5:e5:31:2a:db:a1:9e:96:c6:56:84:31: 5b:a0:fc:7f:c4:8b:c8:30:47:65:6d:b2:17:89:02: 44:9a:ef:92:2e:53:99:ac:7e:fc:5a:63:fd:a7:4e: 3e:2d:86:83:7e:09:31:ff:2c:15:d3:06:2a:d7:86: f7:4b:fc:58:78:04:62:1b:c3:6b:c6:1e:97:84:63: 00:bb:c4:c2:75:21:12:c9:b1:4d:1b:2d:14:b0:a4: 49:41:c1:77:63:8e:29:a6:00:c3:4f:34:47:dc:31: 78:25:79:16:bc:cd:a9:16:32:06:04:32:2c:3a:86: 97:8e:80:b8:8d:da:c5:24:9e:d4:94:a9:9c:2b:c2: 80:c2:ea:c6:37:28:d7:4a:ff:87:30:29:d8:db:84: 08:d6:54:e2:83:12:ec:97:e7:f7:21:63:a4:b8:7e: 49:80:7e:ab:37:e1:fd:61:15:ad:19:db:4b:b9:62: 74:37:83:0c:79:d1:a1:36:ef:16:a1:60:ee:6f:18: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:08:74:29:8A:72:8F:17:01:A9:96:EE:85:B8:A7:76:AC:A1:5A:0B X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Nwh0KYpyjxcBqZbuhbindqyhWgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.85.128.0/19 195.209.160.0/20 Signature Algorithm: sha256WithRSAEncryption 25:6c:30:81:01:96:24:97:48:8d:df:fd:dd:5c:37:80:2c:00: 45:7f:ee:54:c2:3d:e3:00:c2:fd:a8:36:1e:06:c3:0a:fe:e0: 27:e2:fa:04:ca:22:89:61:b6:79:40:a2:74:b7:b4:3d:4e:56: 20:03:c7:be:76:0e:77:0b:37:b4:14:77:25:f5:60:72:d8:2a: 2d:37:15:54:a5:b1:ba:b3:8f:1c:bb:7b:2a:46:3f:30:73:d1: 24:eb:14:9a:02:49:b0:9c:91:25:95:03:d0:dd:c6:c1:9c:80: 6e:2a:1a:eb:f3:03:f2:ca:db:f4:7b:2d:bb:a8:13:8d:d0:6d: 46:1d:25:a0:f4:75:6c:46:b0:a8:a0:6e:89:72:82:35:23:7f: 25:fc:e9:0f:41:82:68:8b:63:d0:82:6f:fe:52:84:de:59:02: 62:f8:1d:74:66:80:f7:92:9b:f2:be:e3:f4:65:7f:53:cf:83: 05:c2:dd:21:1c:84:a6:e6:f5:30:79:15:8d:29:98:72:d9:35: 8e:f8:c7:be:33:db:07:c6:0e:3e:aa:61:f0:b7:cd:4b:f7:dd: da:12:cd:67:ef:03:fa:69:8f:e4:bf:8d:a6:b1:01:c9:14:0c: 03:99:dd:91:1a:99:64:1b:86:2a:ae:5d:66:b4:44:2c:4a:16: 3f:42:92:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyp69v2npnRpHV2Get8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzA4NzQyOThhNzI4ZjE3MDFhOTk2ZWU4NWI4YTc3NmFjYTE1YTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CqNgPc+k15n8t567RjgVd095CU4 pU1HU9bxWzWDlJ9UhaVIZn/MO7uaLXqhsO7t5iTb32FZNu9gF/EuC9b15TEq26Ge lsZWhDFboPx/xIvIMEdlbbIXiQJEmu+SLlOZrH78WmP9p04+LYaDfgkx/ywV0wYq 14b3S/xYeARiG8Nrxh6XhGMAu8TCdSESybFNGy0UsKRJQcF3Y44ppgDDTzRH3DF4 JXkWvM2pFjIGBDIsOoaXjoC4jdrFJJ7UlKmcK8KAwurGNyjXSv+HMCnY24QI1lTi gxLsl+f3IWOkuH5JgH6rN+H9YRWtGdtLuWJ0N4MMedGhNu8WoWDubxhNwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDcIdCmKco8XAamW7oW4p3asoVoLMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvTndoMEtZcHlqeGNCcVpidWhiaW5kcXloV2dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFwlWAAwQE w9GgMA0GCSqGSIb3DQEBCwUAA4IBAQAlbDCBAZYkl0iN3/3dXDeALABFf+5Uwj3j AML9qDYeBsMK/uAn4voEyiKJYbZ5QKJ0t7Q9TlYgA8e+dg53Cze0FHcl9WBy2Cot NxVUpbG6s48cu3sqRj8wc9Ek6xSaAkmwnJEllQPQ3cbBnIBuKhrr8wPyytv0ey27 qBON0G1GHSWg9HVsRrCooG6JcoI1I38l/OkPQYJoi2PQgm/+UoTeWQJi+B10ZoD3 kpvyvuP0ZX9Tz4MFwt0hHISm5vUweRWNKZhy2TWO+Me+M9sHxg4+qmHwt81L993a Es1n7wP6aY/kv42msQHJFAwDmd2RGplkG4Yqrl1mtEQsShY/QpJ5 -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:38 2026 by rpki-client