This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/n1oRFTjCd9cFrEeWK2PvigDChJY.roa File: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (raw, json) Hash identifier: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs= Subject key identifier: 9F:5A:11:15:38:C2:77:D7:05:AC:47:96:2B:63:EF:8A:00:C2:84:96 Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019B76EAD0F984113FCE7421D80AF1E8CB5C Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/n1oRFTjCd9cFrEeWK2PvigDChJY.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210973 IP address blocks: 149.62.35.0/24 maxlen: 24 194.0.132.0/24 maxlen: 24 2a10:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d0:f9:84:11:3f:ce:74:21:d8:0a:f1:e8:cb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f5a111538c277d705ac47962b63ef8a00c28496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:29:c9:17:fa:e8:13:58:08:a7:c3:f0:bb: d8:93:9e:99:93:20:85:d3:7c:e1:94:29:fd:c0:cd: 90:ee:d1:15:b9:16:f8:0b:10:14:46:cb:6f:7b:ac: ee:8c:25:55:d8:08:41:43:f6:4e:d6:ac:57:17:f2: f4:3e:68:33:19:1e:5f:7f:07:74:b6:17:0b:e0:1f: 0a:81:e3:b8:41:3b:3c:1a:fe:2e:d7:1c:42:61:79: cd:3c:92:cd:5c:01:8a:bd:48:2b:0b:cc:9b:06:44: ca:94:bc:d1:f1:a9:51:29:aa:c2:d5:a5:ad:9e:6e: 84:5f:f7:fc:af:7e:45:7f:93:f7:24:b4:a5:b7:3c: 5f:65:c8:c7:8b:90:46:30:81:72:f4:69:f9:77:6c: 5c:93:46:89:0c:8d:b3:bf:bb:58:1c:79:a6:f5:07: 4c:7b:ac:a4:9d:5f:cf:30:56:72:c9:30:08:c4:67: a7:c4:f0:06:9e:41:29:d7:d9:ea:3f:36:4c:e5:c8: 9e:f1:43:2d:c2:3d:43:f5:b3:48:60:b4:b6:0d:60: 8d:b8:bb:f9:c7:0f:44:dd:51:51:d1:7a:e8:97:a4: 34:5e:01:70:00:87:39:96:32:7a:ce:b2:6f:57:38: 27:f3:ba:be:86:8f:a6:83:b1:9a:ec:f5:67:76:0c: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:11:15:38:C2:77:D7:05:AC:47:96:2B:63:EF:8A:00:C2:84:96 X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/n1oRFTjCd9cFrEeWK2PvigDChJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.35.0/24 194.0.132.0/24 IPv6: 2a10:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 4e:2c:61:12:19:37:a0:e8:9e:1c:ae:94:71:06:94:01:b2:46: b1:8c:6a:7d:65:24:a4:5a:ac:28:53:cf:b0:af:d4:b1:58:00: 58:25:d5:d0:4b:63:f2:83:4f:f6:97:c7:e7:1c:62:1a:3c:bb: f3:e6:a2:65:13:cc:fb:52:98:f0:e1:6f:d7:08:8b:21:14:ff: 82:a7:fb:f5:65:df:ae:84:1b:8b:dd:a0:75:45:cb:d6:de:dc: c1:32:fa:65:7a:4c:23:2d:a1:8f:ce:ee:13:54:7e:f7:5e:a3: 81:31:12:f4:3d:1c:82:8c:a1:e8:a7:8c:54:13:63:04:a5:ae: b9:3e:46:57:c9:31:9c:44:11:27:a8:06:01:e4:84:e5:e1:27: 3e:b2:b4:8a:b0:2e:46:2b:5e:7e:2b:e2:21:ef:f3:6b:c0:a3: 2e:aa:fa:93:92:5a:a9:40:dd:91:bb:03:3e:87:c8:76:5b:1b: d5:86:9a:44:54:07:1a:dd:d2:52:c0:ec:1d:cc:ad:03:b2:4c: 91:52:16:3c:fb:cd:a8:1d:5b:b0:2c:b5:be:07:f5:1c:84:db: 86:c0:ae:50:b9:44:4a:bb:88:5d:22:83:81:78:65:bc:ad:6d: 3d:32:41:6f:2d:7a:e9:07:45:5e:9e:08:4d:0e:e5:6a:2e:29: c7:85:d5:6e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26tD5hBE/znQh2Arx6MtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjVhMTExNTM4YzI3N2Q3MDVhYzQ3OTYyYjYzZWY4YTAwYzI4NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2MpyRf66BNYCKfD8LvYk56ZkyCF 03zhlCn9wM2Q7tEVuRb4CxAURstve6zujCVV2AhBQ/ZO1qxXF/L0PmgzGR5ffwd0 thcL4B8KgeO4QTs8Gv4u1xxCYXnNPJLNXAGKvUgrC8ybBkTKlLzR8alRKarC1aWt nm6EX/f8r35Ff5P3JLSltzxfZcjHi5BGMIFy9Gn5d2xck0aJDI2zv7tYHHmm9QdM e6yknV/PMFZyyTAIxGenxPAGnkEp19nqPzZM5cie8UMtwj1D9bNIYLS2DWCNuLv5 xw9E3VFR0Xrol6Q0XgFwAIc5ljJ6zrJvVzgn87q+ho+mg7Ga7PVndgy3twIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ9aERU4wnfXBaxHlitj74oAwoSWMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvbjFvUkZUakNkOWNGckVlV0syUHZpZ0RDaEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAlT4jAwQA wgCEMA0EAgACMAcDBQAqEP0AMA0GCSqGSIb3DQEBCwUAA4IBAQBOLGESGTeg6J4c rpRxBpQBskaxjGp9ZSSkWqwoU8+wr9SxWABYJdXQS2Pyg0/2l8fnHGIaPLvz5qJl E8z7Upjw4W/XCIshFP+Cp/v1Zd+uhBuL3aB1RcvW3tzBMvplekwjLaGPzu4TVH73 XqOBMRL0PRyCjKHop4xUE2MEpa65PkZXyTGcRBEnqAYB5ITl4Sc+srSKsC5GK15+ K+Ih7/NrwKMuqvqTklqpQN2RuwM+h8h2WxvVhppEVAca3dJSwOwdzK0DskyRUhY8 +82oHVuwLLW+B/UchNuGwK5QuURKu4hdIoOBeGW8rW09MkFvLXrpB0VenghNDuVq LinHhdVu -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:36 2026 by rpki-client