This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa File: NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa (raw, json) Hash identifier: rTzaWCrN7/PGI/tGitbdR8zCYLNID56tT4jNL15qESI= Subject key identifier: 35:33:8A:C5:94:84:41:D9:85:14:E5:FB:6C:2B:2F:E2:BD:06:D1:EC Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d Certificate serial: 019B7C7FB9E203C71D7ED88015CC78B3676B Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206046 IP address blocks: 185.195.76.0/24 maxlen: 24 185.195.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b9:e2:03:c7:1d:7e:d8:80:15:cc:78:b3:67:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35338ac5948441d98514e5fb6c2b2fe2bd06d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:e8:ed:66:89:88:de:6e:be:15:39:7b:ab: 7d:d6:23:7f:75:59:be:ab:fe:99:2e:92:14:ed:3f: 76:8f:23:40:f3:e5:61:10:77:e3:39:f7:8d:c5:af: 62:eb:a5:73:2f:12:91:65:e0:56:4c:5a:82:6f:76: fd:b2:0f:a0:51:fd:e9:c6:15:0f:9b:70:71:74:fd: e1:88:82:63:d9:c4:e0:46:64:13:c1:39:70:2f:08: 31:0b:a8:3d:fa:17:46:2b:c9:cc:47:fc:f9:9c:f2: c7:e3:fd:ec:43:14:df:ed:93:74:1a:3c:ad:a5:0c: 5f:77:3d:cf:18:8b:21:76:70:c7:91:7f:a7:64:b9: b4:50:83:22:d0:88:86:00:69:d8:e1:e9:22:fd:17: ed:f8:e5:8c:c1:fa:bd:2f:fc:33:f1:8e:a8:be:ee: 20:07:fb:83:02:0b:3e:14:98:63:33:73:6d:e4:ff: 9e:87:9e:8f:8b:5e:ee:7e:93:43:f6:2f:c2:de:de: 77:48:9b:af:e6:a3:83:d9:85:da:54:d2:31:1c:c3: d2:3a:14:66:72:80:46:e4:13:34:bb:64:3d:3d:83: 2d:2e:65:d3:43:bf:93:6e:6a:05:f1:0a:8b:ea:b1: f4:b9:a9:78:76:b4:35:96:a3:a9:ac:fc:8a:db:0a: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:8A:C5:94:84:41:D9:85:14:E5:FB:6C:2B:2F:E2:BD:06:D1:EC X509v3 Authority Key Identifier: keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.76.0/23 Signature Algorithm: sha256WithRSAEncryption 77:05:30:3d:43:a6:53:94:03:11:45:61:1d:4d:1e:b7:f1:fc: 0b:f3:4f:32:7b:7b:71:0c:50:1f:bd:f4:fa:33:0f:02:8d:6e: a1:a9:11:59:85:0d:07:c8:c0:ff:46:54:16:1d:00:cd:a8:c0: 7a:cf:0f:e7:58:71:60:9f:18:ce:1c:b1:61:ef:08:aa:87:fb: ff:7e:94:4b:44:2c:a3:da:d8:c4:42:b6:7f:42:00:bc:7f:14: 4b:0e:b7:61:39:c0:42:78:e7:4c:1f:56:55:0b:2c:fe:a6:83: 84:f7:30:02:ef:56:59:1d:8c:1f:d9:9c:88:a7:b1:da:f5:8b: 3d:b1:af:11:5a:a3:83:51:0b:5d:69:49:41:ee:db:8f:2c:bd: c9:86:cc:4a:70:bd:0b:da:5f:c4:d8:75:56:c5:54:17:c4:19: be:7c:bc:a1:3b:d4:7c:3b:c3:b5:41:41:8c:94:6c:6f:6d:51: b4:d2:6a:13:79:69:97:42:2d:a0:22:6d:dc:64:2c:59:23:99: 05:2b:00:3d:f0:c4:72:a2:ce:46:82:71:48:d8:85:aa:1e:65: d0:9e:44:e7:04:d7:2f:68:e9:e3:b5:0f:62:01:f3:7e:b1:f4: b1:dc:5f:e9:b9:14:be:06:4f:9d:de:3c:55:8b:7b:b3:1c:10: d9:f1:f4:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7niA8cdftiAFcx4s2drMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWQzNDRlYjVmN2ViMWRlZTRiOGY4NDM1ZmI1YjlkODc2 NjNlOWQwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTMzOGFjNTk0ODQ0MWQ5ODUxNGU1ZmI2YzJiMmZlMmJkMDZkMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JHo7WaJiN5uvhU5e6t91iN/dVm+ q/6ZLpIU7T92jyNA8+VhEHfjOfeNxa9i66VzLxKRZeBWTFqCb3b9sg+gUf3pxhUP m3BxdP3hiIJj2cTgRmQTwTlwLwgxC6g9+hdGK8nMR/z5nPLH4/3sQxTf7ZN0Gjyt pQxfdz3PGIshdnDHkX+nZLm0UIMi0IiGAGnY4eki/Rft+OWMwfq9L/wz8Y6ovu4g B/uDAgs+FJhjM3Nt5P+eh56Pi17ufpND9i/C3t53SJuv5qOD2YXaVNIxHMPSOhRm coBG5BM0u2Q9PYMtLmXTQ7+TbmoF8QqL6rH0ual4drQ1lqOprPyK2wr3dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUzisWUhEHZhRTl+2wrL+K9BtHsMB8GA1UdIwQY MBaAFO+tNE619+sd7kuPhDX7W52HZj6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzYwMFRyWDM2eDN1UzQtRU5mdGJuWWRtUHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYTgzMGEtZjA2MS00Y2RjLWJhZmIt YTJmZTlmMDE1ZDcxLzEvTlRPS3haU0VRZG1GRk9YN2JDc3Y0cjBHMGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xYTgzMGEtZjA2MS00Y2RjLWJhZmItYTJmZTlmMDE1ZDcx LzEvNzYwMFRyWDM2eDN1UzQtRU5mdGJuWWRtUHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucNMMA0G CSqGSIb3DQEBCwUAA4IBAQB3BTA9Q6ZTlAMRRWEdTR638fwL808ye3txDFAfvfT6 Mw8CjW6hqRFZhQ0HyMD/RlQWHQDNqMB6zw/nWHFgnxjOHLFh7wiqh/v/fpRLRCyj 2tjEQrZ/QgC8fxRLDrdhOcBCeOdMH1ZVCyz+poOE9zAC71ZZHYwf2ZyIp7Ha9Ys9 sa8RWqODUQtdaUlB7tuPLL3JhsxKcL0L2l/E2HVWxVQXxBm+fLyhO9R8O8O1QUGM lGxvbVG00moTeWmXQi2gIm3cZCxZI5kFKwA98MRyos5GgnFI2IWqHmXQnkTnBNcv aOnjtQ9iAfN+sfSx3F/puRS+Bk+d3jxVi3uzHBDZ8fQK -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:18 2026 by rpki-client