This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa File: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (raw, json) Hash identifier: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0= Subject key identifier: 36:CF:FF:65:92:22:3D:BF:53:32:5E:CD:67:8C:F2:43:42:9E:2D:E6 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B77C6E4DDCE0B6A1181DC42AE929F8DEA Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34884 IP address blocks: 185.38.28.0/22 maxlen: 24 185.95.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:dd:ce:0b:6a:11:81:dc:42:ae:92:9f:8d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36cfff6592223dbf53325ecd678cf243429e2de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:17:92:f5:2b:4e:30:88:83:77:59:be:5a: fa:5c:14:17:75:5b:9b:ac:0d:ce:81:25:41:a7:e6: a1:e6:f6:c6:65:9a:82:e8:e4:0b:ec:28:c6:2d:c0: 0d:cb:30:13:58:93:6d:83:df:12:b0:57:37:33:78: 2a:0f:35:d8:75:17:a9:d2:ec:d4:38:98:6e:4c:2b: c3:1d:9a:cc:4e:16:79:4e:1e:89:62:eb:50:6d:47: 2c:dd:9d:1e:ee:90:e6:3a:86:6e:8d:fb:29:7a:d0: e0:ae:52:3d:b3:1b:29:12:71:36:3b:02:f4:a2:8b: 8b:5e:80:9d:52:91:ac:6f:1d:b0:db:fe:75:69:be: 36:f3:86:9d:78:be:41:61:17:a1:87:38:96:b9:3e: df:97:21:9e:39:8a:ec:74:5e:bd:1a:74:ba:f8:86: 86:e8:a9:0b:f6:ba:31:69:6d:eb:77:ee:44:0b:06: 7c:99:f7:c0:b8:7c:14:49:ee:96:ae:f5:11:c3:e3: 4b:6e:42:52:aa:78:6f:e8:82:3a:02:2b:f7:b1:5c: a1:f7:40:de:8e:b7:e1:81:6e:13:af:05:21:11:8e: 3d:de:24:5b:2c:85:16:2b:5d:53:8d:9b:b6:40:69: c9:da:4f:d2:9e:75:6a:51:6c:7a:34:c9:ca:1d:f0: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:FF:65:92:22:3D:BF:53:32:5E:CD:67:8C:F2:43:42:9E:2D:E6 X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.28.0/22 185.95.252.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:24:23:5b:78:48:5d:de:74:5a:ac:c1:4a:91:c6:f1:a5:84: 10:d0:1b:40:56:e3:06:8a:e6:68:66:63:3b:09:69:e0:fe:97: d3:12:b9:d1:92:e9:24:b3:36:bc:06:6e:20:50:e6:d6:9f:97: 99:72:60:3a:82:ab:3b:98:01:77:04:bb:d1:dc:76:d6:15:ba: 94:b8:3f:5f:18:9d:63:fa:68:eb:07:e9:d0:b4:88:1d:61:e8: 96:5e:e5:2d:82:e6:ce:c4:36:20:c7:53:e1:f9:68:2d:10:6b: 77:91:6e:ae:07:5f:50:0f:58:77:c2:17:a6:53:55:ac:c0:a5: 7d:b4:27:94:44:ec:7f:58:02:9b:60:76:4c:d2:b3:b0:38:23: 0f:b8:6f:3d:37:47:ed:4f:10:ab:03:02:b4:96:73:bb:b1:f9: 73:17:8c:d4:81:da:d5:23:67:72:b8:6f:f1:b8:8a:7b:f9:6c: 51:3b:be:18:6f:a9:69:e0:96:98:c9:b4:21:53:42:df:22:2f: 23:1f:af:47:40:5a:8c:51:2d:ca:26:46:42:fe:60:0a:67:52: 2f:71:71:1c:bc:08:d4:a9:c1:2d:2a:59:65:c9:c4:8c:c1:b6: 63:99:cb:bf:c8:c4:d7:2e:5d:4e:b9:1b:ac:bd:46:cb:5d:6e: af:1a:fa:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuTdzgtqEYHcQq6Sn43qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmNmZmY2NTkyMjIzZGJmNTMzMjVlY2Q2NzhjZjI0MzQyOWUyZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwwXkvUrTjCIg3dZvlr6XBQXdVub rA3OgSVBp+ah5vbGZZqC6OQL7CjGLcANyzATWJNtg98SsFc3M3gqDzXYdRep0uzU OJhuTCvDHZrMThZ5Th6JYutQbUcs3Z0e7pDmOoZujfspetDgrlI9sxspEnE2OwL0 oouLXoCdUpGsbx2w2/51ab4284adeL5BYRehhziWuT7flyGeOYrsdF69GnS6+IaG 6KkL9roxaW3rd+5ECwZ8mffAuHwUSe6WrvURw+NLbkJSqnhv6II6Aiv3sVyh90De jrfhgW4TrwUhEY493iRbLIUWK11TjZu2QGnJ2k/SnnVqUWx6NMnKHfDMxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDbP/2WSIj2/UzJezWeM8kNCni3mMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvTnNfX1paSWlQYjlUTWw3Tlo0enlRMEtlTGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSYcAwQC uV/8MA0GCSqGSIb3DQEBCwUAA4IBAQB7JCNbeEhd3nRarMFKkcbxpYQQ0BtAVuMG iuZoZmM7CWng/pfTErnRkukksza8Bm4gUObWn5eZcmA6gqs7mAF3BLvR3HbWFbqU uD9fGJ1j+mjrB+nQtIgdYeiWXuUtgubOxDYgx1Ph+WgtEGt3kW6uB19QD1h3whem U1WswKV9tCeUROx/WAKbYHZM0rOwOCMPuG89N0ftTxCrAwK0lnO7sflzF4zUgdrV I2dyuG/xuIp7+WxRO74Yb6lp4JaYybQhU0LfIi8jH69HQFqMUS3KJkZC/mAKZ1Iv cXEcvAjUqcEtKlllycSMwbZjmcu/yMTXLl1OuRusvUbLXW6vGvpz -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:00 2026 by rpki-client