This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nEwQdh3Pi4WtPOO6Sq1lJs2h2u8.roa File: nEwQdh3Pi4WtPOO6Sq1lJs2h2u8.roa (raw, json) Hash identifier: zfuuKtf1vqZBCmSUV2LOIK4Qr8xmX8PNQfNTXKnsC94= Subject key identifier: 9C:4C:10:76:1D:CF:8B:85:AD:3C:E3:BA:4A:AD:65:26:CD:A1:DA:EF Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390728BF46C9B138065E0202BE2583 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nEwQdh3Pi4WtPOO6Sq1lJs2h2u8.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34849 IP address blocks: 80.250.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:28:bf:46:c9:b1:38:06:5e:02:02:be:25:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c4c10761dcf8b85ad3ce3ba4aad6526cda1daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:ff:2e:43:21:e9:e1:57:56:44:6d:f2:83: e8:1a:33:a1:1b:ea:9d:5f:e0:76:ee:64:01:9a:d7: 7f:bc:75:40:33:6e:f6:52:a9:8f:6f:8b:67:92:64: a9:9d:33:46:e9:52:89:e7:f0:a2:7e:fe:ad:6d:9e: 4e:1e:48:8e:5a:ff:26:84:59:cb:44:56:9c:2c:14: 8f:92:0d:01:47:64:3c:7d:13:2f:40:9d:d2:b8:2c: 83:2e:a3:e5:ee:b7:aa:f5:97:bd:4a:e5:e1:b9:53: 82:23:85:5f:cb:2a:b7:d9:f1:86:7a:1f:93:ab:f5: 3a:4d:3d:af:eb:80:1d:1e:3f:e4:73:f3:ce:5e:74: 87:ae:3f:ac:40:f6:42:d1:26:41:05:58:2a:aa:12: 75:1a:46:91:e0:36:91:ad:1d:6d:90:e3:82:4d:dc: 30:b9:d6:60:6b:77:3b:b0:08:de:0b:65:fe:22:00: 1c:38:e0:f2:02:59:cb:6e:6f:e0:5f:3b:fe:1b:d7: a5:ab:0f:46:c5:81:b9:79:1d:a9:6c:8f:17:ac:65: 07:3e:22:e0:83:64:d3:48:58:8e:bf:41:1e:e0:eb: e8:ce:af:65:3a:32:14:95:14:53:8e:82:90:04:70: 4d:b7:7c:f3:40:d0:77:5f:1e:36:e8:b5:d8:3f:50: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:10:76:1D:CF:8B:85:AD:3C:E3:BA:4A:AD:65:26:CD:A1:DA:EF X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nEwQdh3Pi4WtPOO6Sq1lJs2h2u8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.174.0/24 Signature Algorithm: sha256WithRSAEncryption 52:c5:9a:69:8c:b7:79:83:d1:50:ec:9c:4e:3b:0e:04:58:7e: b6:55:b0:a9:da:23:c0:1d:cf:7a:f8:3c:98:da:df:ff:81:4b: 1f:7a:d0:b9:03:2c:62:ea:9c:d8:24:18:ae:1d:d8:50:ef:6b: 89:65:c1:f6:a4:37:38:83:17:20:2e:3a:7b:27:3c:59:17:f9: c1:1c:75:a6:77:b3:bf:aa:e0:ec:ec:82:b8:c9:1d:fd:f6:b3: 6e:da:11:e4:72:75:6d:65:57:50:6e:fe:d6:18:ac:db:e2:db: 93:fd:4d:fc:15:3a:62:d8:96:c7:6f:ac:e4:a7:4e:db:08:e0: 6f:0d:85:16:e8:54:f7:40:5b:f1:32:19:67:9f:90:03:9e:42: ed:68:24:44:0e:80:46:ad:2a:4f:2b:ad:b4:54:cd:02:24:1a: 6e:92:ef:08:9a:8a:8e:4a:bd:c2:89:8b:13:7a:ca:9c:42:b7: 99:7d:a6:80:e5:b8:75:79:65:f5:3e:3f:c3:d7:4e:f1:65:bf: fe:49:72:77:20:93:5e:d8:e3:2c:31:18:b8:4d:92:ae:1c:34: 9f:88:bf:4d:5e:15:41:e4:32:ff:82:e0:54:d9:7c:8e:4f:2a: 6a:9d:7e:87:51:83:ae:a8:79:8f:b1:08:0b:f5:46:a9:fe:88: ed:a2:e7:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQcov0bJsTgGXgICviWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzRjMTA3NjFkY2Y4Yjg1YWQzY2UzYmE0YWFkNjUyNmNkYTFkYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnT/LkMh6eFXVkRt8oPoGjOhG+qd X+B27mQBmtd/vHVAM272UqmPb4tnkmSpnTNG6VKJ5/Cifv6tbZ5OHkiOWv8mhFnL RFacLBSPkg0BR2Q8fRMvQJ3SuCyDLqPl7req9Ze9SuXhuVOCI4Vfyyq32fGGeh+T q/U6TT2v64AdHj/kc/POXnSHrj+sQPZC0SZBBVgqqhJ1GkaR4DaRrR1tkOOCTdww udZga3c7sAjeC2X+IgAcOODyAlnLbm/gXzv+G9elqw9GxYG5eR2pbI8XrGUHPiLg g2TTSFiOv0Ee4Ovozq9lOjIUlRRTjoKQBHBNt3zzQNB3Xx426LXYP1C2IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxMEHYdz4uFrTzjukqtZSbNodrvMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvbkV3UWRoM1BpNFd0UE9PNlNxMWxKczJoMnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPquMA0G CSqGSIb3DQEBCwUAA4IBAQBSxZppjLd5g9FQ7JxOOw4EWH62VbCp2iPAHc96+DyY 2t//gUsfetC5Ayxi6pzYJBiuHdhQ72uJZcH2pDc4gxcgLjp7JzxZF/nBHHWmd7O/ quDs7IK4yR399rNu2hHkcnVtZVdQbv7WGKzb4tuT/U38FTpi2JbHb6zkp07bCOBv DYUW6FT3QFvxMhlnn5ADnkLtaCREDoBGrSpPK620VM0CJBpuku8ImoqOSr3CiYsT esqcQreZfaaA5bh1eWX1Pj/D107xZb/+SXJ3IJNe2OMsMRi4TZKuHDSfiL9NXhVB 5DL/guBU2XyOTypqnX6HUYOuqHmPsQgL9Uap/ojtoueL -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:51 2026 by rpki-client