This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/NewAQnihHqA7BNLZDBxX7vg5CC4.roa File: NewAQnihHqA7BNLZDBxX7vg5CC4.roa (raw, json) Hash identifier: rbbMZVaqhBZlgDHmKJbZoLzfGxiIjRIEY2aQtlKdukU= Subject key identifier: 35:EC:00:42:78:A1:1E:A0:3B:04:D2:D9:0C:1C:57:EE:F8:39:08:2E Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019BF4B4872F81CFCBC87065446A335E9B35 Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/NewAQnihHqA7BNLZDBxX7vg5CC4.roa Signing time: Sun 25 Jan 2026 10:30:30 +0000 ROA not before: Sun 25 Jan 2026 10:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.238.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:b4:87:2f:81:cf:cb:c8:70:65:44:6a:33:5e:9b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Jan 25 10:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35ec004278a11ea03b04d2d90c1c57eef839082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:b6:1e:af:f4:e2:ec:9d:22:19:1c:60:3a: 6e:35:a5:b4:38:ae:08:c0:bc:8a:0a:3e:77:b2:96: 75:b6:ce:03:d1:77:75:22:2f:cf:74:f0:16:d7:8e: 5c:b5:f8:61:96:42:0a:5f:16:a1:bc:54:8e:f2:91: 48:6c:a7:fe:95:6b:25:7f:9a:d6:4b:db:9e:c9:e9: 47:5f:b1:ca:34:dd:47:6e:c8:6f:60:2c:e8:f8:8f: 5a:16:11:c7:d6:51:31:2d:3b:da:ee:34:c8:9f:53: c7:ac:06:d2:4c:f2:e2:e7:80:e0:60:0e:46:b3:b4: a6:8b:51:a2:86:f4:1d:78:40:d3:e6:b1:68:71:95: 2e:2a:26:20:f7:34:94:10:07:ae:58:6c:5d:79:ae: 80:21:b3:a1:e4:02:0e:15:8a:7d:75:71:a6:c7:1e: ca:c2:f0:3e:62:8d:16:be:4d:07:58:10:2f:59:86: dc:0d:71:5b:7e:99:64:54:77:cc:ac:eb:30:f0:2a: 96:e5:53:54:ca:49:05:4a:e6:3d:f5:c2:6c:34:c5: c5:49:b2:af:47:48:61:e0:55:49:9d:14:f3:9a:88: 76:c2:aa:98:81:ba:58:50:d2:41:5a:e2:de:6a:fa: 7a:98:1d:1c:01:69:f2:7e:fe:b2:5a:96:22:d5:79: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EC:00:42:78:A1:1E:A0:3B:04:D2:D9:0C:1C:57:EE:F8:39:08:2E X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/NewAQnihHqA7BNLZDBxX7vg5CC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.212.0/23 Signature Algorithm: sha256WithRSAEncryption 98:c6:c7:8c:7c:27:95:e7:fc:1a:e8:50:e8:34:2d:38:e1:23: d9:a4:34:5b:4a:d7:d2:d6:43:98:e2:c8:f9:6d:8e:fa:c7:74: a8:39:db:92:b7:1f:16:c4:62:de:17:f8:d5:85:70:6b:68:23: ba:aa:55:d8:6b:95:a7:bf:23:db:73:98:9b:bf:74:86:38:75: a8:5b:28:e1:88:2a:eb:8d:dc:fd:91:93:c8:9c:9d:7c:e4:7a: a2:a6:d8:b8:11:04:75:29:8f:10:7b:10:f3:27:e9:58:ca:79: 3a:df:10:e0:c2:b8:92:77:30:f7:ac:de:38:46:9d:01:40:b3: a4:d3:12:f2:c2:ad:7a:68:62:7d:1f:10:db:2a:72:a1:dd:0d: d8:d3:cd:94:99:fe:3f:c9:a7:16:b4:56:11:54:dd:48:19:82: 29:a0:e6:c3:01:8b:57:b0:a7:ed:30:01:57:a7:10:d0:94:a0: c7:03:28:9e:6b:3f:63:c6:b1:26:c3:e3:46:b0:87:5f:bf:ac: 92:74:32:26:60:f5:98:36:91:db:fa:c0:ea:64:6d:49:f0:7d: 23:66:dc:7f:86:ba:0c:be:bc:4d:5c:75:e5:05:21:1d:bb:9a: 94:0d:99:60:a5:b7:12:a2:c6:33:af:55:06:68:fd:fb:1a:1b: 37:74:0a:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv0tIcvgc/LyHBlRGozXps1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjYwMTI1MTAzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWVjMDA0Mjc4YTExZWEwM2IwNGQyZDkwYzFjNTdlZWY4MzkwODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwe2Hq/04uydIhkcYDpuNaW0OK4I wLyKCj53spZ1ts4D0Xd1Ii/PdPAW145ctfhhlkIKXxahvFSO8pFIbKf+lWslf5rW S9ueyelHX7HKNN1HbshvYCzo+I9aFhHH1lExLTva7jTIn1PHrAbSTPLi54DgYA5G s7Smi1GihvQdeEDT5rFocZUuKiYg9zSUEAeuWGxdea6AIbOh5AIOFYp9dXGmxx7K wvA+Yo0Wvk0HWBAvWYbcDXFbfplkVHfMrOsw8CqW5VNUykkFSuY99cJsNMXFSbKv R0hh4FVJnRTzmoh2wqqYgbpYUNJBWuLeavp6mB0cAWnyfv6yWpYi1XmFTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXsAEJ4oR6gOwTS2QwcV+74OQguMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvTmV3QVFuaWhIcUE3Qk5MWkRCeFg3dmc1Q0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G CSqGSIb3DQEBCwUAA4IBAQCYxseMfCeV5/wa6FDoNC044SPZpDRbStfS1kOY4sj5 bY76x3SoOduStx8WxGLeF/jVhXBraCO6qlXYa5WnvyPbc5ibv3SGOHWoWyjhiCrr jdz9kZPInJ185Hqipti4EQR1KY8QexDzJ+lYynk63xDgwriSdzD3rN44Rp0BQLOk 0xLywq16aGJ9HxDbKnKh3Q3Y082Umf4/yacWtFYRVN1IGYIpoObDAYtXsKftMAFX pxDQlKDHAyieaz9jxrEmw+NGsIdfv6ySdDImYPWYNpHb+sDqZG1J8H0jZtx/hroM vrxNXHXlBSEdu5qUDZlgpbcSosYzr1UGaP37Ghs3dAri -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:32 2026 by rpki-client