This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa File: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (raw, json) Hash identifier: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII= Subject key identifier: 35:E5:9C:ED:F5:76:C5:EA:F3:09:92:EA:27:13:07:ED:2F:51:9E:AD Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED4525F882416A6BD66EA2671C7402 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8915 IP address blocks: 80.90.176.0/23 maxlen: 24 95.140.144.0/23 maxlen: 24 95.140.150.0/24 maxlen: 24 2a00:1818::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:25:f8:82:41:6a:6b:d6:6e:a2:67:1c:74:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35e59cedf576c5eaf30992ea271307ed2f519ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:e3:8b:83:73:66:ca:64:a4:5f:d8:b4:92: 5d:e4:b6:7d:19:f9:0e:73:66:c8:62:b6:fe:de:84: 39:41:13:40:76:af:04:1a:bb:72:d3:34:d3:a1:7f: 0b:1f:c9:41:12:58:6c:75:6f:59:8c:1e:11:77:24: fb:7e:bb:59:9b:18:e0:fd:56:2f:95:2a:66:5d:33: fd:c2:d2:6b:92:f1:6f:00:30:d7:03:a5:f8:01:7e: ae:af:b4:18:35:ec:d1:d0:09:19:b3:3d:db:56:3b: 2c:f9:25:9a:59:c1:34:29:f4:0e:a8:61:37:25:59: e9:6f:52:c9:05:ea:90:c8:24:3b:68:8e:df:52:97: 06:d2:48:78:87:a3:8e:70:b1:12:81:f9:66:24:8b: 11:b9:fa:f0:68:3b:1e:50:1f:d1:5e:bd:38:de:ee: 64:30:e2:71:33:a2:4c:ee:4d:c0:28:35:a7:27:3b: 70:3e:73:8d:3a:ba:cb:c7:b6:3d:76:5b:f1:9b:9b: 49:3c:2d:52:03:48:b3:44:9e:52:54:37:18:db:06: 8f:64:80:9d:ba:4b:d2:6b:87:79:18:ab:d1:8a:23: 25:af:29:69:4e:0f:44:1c:25:f5:37:ba:50:c4:7e: 0c:65:65:47:6d:6d:aa:de:d8:3c:6d:7d:1e:2a:e1: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:9C:ED:F5:76:C5:EA:F3:09:92:EA:27:13:07:ED:2F:51:9E:AD X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.176.0/23 95.140.144.0/23 95.140.150.0/24 IPv6: 2a00:1818::/32 Signature Algorithm: sha256WithRSAEncryption 70:07:70:93:d2:14:88:d8:64:ad:9f:9c:fb:3a:fe:3c:c1:e7: 94:a5:78:29:88:66:09:48:02:d3:7a:fd:d8:49:04:5a:6d:a0: 25:66:6b:38:bf:4e:7d:b1:92:bb:2e:bb:2c:04:d3:5a:59:06: 3e:23:1b:87:36:6e:73:a3:ba:cd:67:73:8f:f4:29:18:2e:2a: 3a:93:98:e7:ef:b8:db:d1:e5:cd:f8:f8:c3:47:a3:be:82:59: 6a:12:96:05:0e:35:41:20:86:28:04:08:ad:ec:52:8e:54:5e: 61:38:69:bd:27:cf:c7:90:b2:39:f1:dc:db:81:6b:3d:05:19: 67:a1:c5:5c:10:e1:81:68:bc:eb:a3:93:a0:68:8d:f9:97:8f: b1:bd:1a:45:6e:8a:bd:c9:f0:3e:35:b5:33:bb:20:ff:9d:ce: cc:bf:9b:bf:df:4d:c9:33:0e:b5:e1:b1:02:24:86:99:f7:11: 19:6e:2b:e9:24:b3:fa:f6:74:e8:e5:79:ec:b4:a0:96:78:09: 10:dd:ed:e6:c1:97:f3:16:80:01:c0:18:37:e0:f0:90:b9:62: ac:b5:a6:b1:0a:63:80:a1:30:30:95:a2:49:58:b6:16:1d:f4: 9f:49:e0:80:3b:16:ab:f1:77:86:05:ec:ac:fd:d9:00:1b:58: 45:46:13:8f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57UUl+IJBamvWbqJnHHQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWU1OWNlZGY1NzZjNWVhZjMwOTkyZWEyNzEzMDdlZDJmNTE5ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYzji4NzZspkpF/YtJJd5LZ9GfkO c2bIYrb+3oQ5QRNAdq8EGrty0zTToX8LH8lBElhsdW9ZjB4RdyT7frtZmxjg/VYv lSpmXTP9wtJrkvFvADDXA6X4AX6ur7QYNezR0AkZsz3bVjss+SWaWcE0KfQOqGE3 JVnpb1LJBeqQyCQ7aI7fUpcG0kh4h6OOcLESgflmJIsRufrwaDseUB/RXr043u5k MOJxM6JM7k3AKDWnJztwPnONOrrLx7Y9dlvxm5tJPC1SA0izRJ5SVDcY2waPZICd ukvSa4d5GKvRiiMlrylpTg9EHCX1N7pQxH4MZWVHbW2q3tg8bX0eKuG/3QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDXlnO31dsXq8wmS6icTB+0vUZ6tMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvTmVXYzdmVjJ4ZXJ6Q1pMcUp4TUg3UzlSbnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBUFqwAwQB X4yQAwQAX4yWMA0EAgACMAcDBQAqABgYMA0GCSqGSIb3DQEBCwUAA4IBAQBwB3CT 0hSI2GStn5z7Ov48weeUpXgpiGYJSALTev3YSQRabaAlZms4v059sZK7LrssBNNa WQY+IxuHNm5zo7rNZ3OP9CkYLio6k5jn77jb0eXN+PjDR6O+gllqEpYFDjVBIIYo BAit7FKOVF5hOGm9J8/HkLI58dzbgWs9BRlnocVcEOGBaLzro5OgaI35l4+xvRpF boq9yfA+NbUzuyD/nc7Mv5u/303JMw614bECJIaZ9xEZbivpJLP69nTo5XnstKCW eAkQ3e3mwZfzFoABwBg34PCQuWKstaaxCmOAoTAwlaJJWLYWHfSfSeCAOxar8XeG Beys/dkAG1hFRhOP -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:31 2026 by rpki-client