This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/N9g6nUbClkcydweR7R8xaurzMO0.roa File: N9g6nUbClkcydweR7R8xaurzMO0.roa (raw, json) Hash identifier: SXrUgqtlKGnSKDU/5SbtXc1yb311zFdWrtMQZNTwofA= Subject key identifier: 37:D8:3A:9D:46:C2:96:47:32:77:07:91:ED:1F:31:6A:EA:F3:30:ED Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Certificate serial: 019B76EB29709DFA2DC0C4AF17A8F9845733 Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/N9g6nUbClkcydweR7R8xaurzMO0.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61049 IP address blocks: 185.20.52.0/24 maxlen: 24 185.20.53.0/24 maxlen: 24 185.20.54.0/24 maxlen: 24 185.20.55.0/24 maxlen: 24 185.159.191.0/24 maxlen: 24 185.195.116.0/24 maxlen: 24 185.195.117.0/24 maxlen: 24 185.195.118.0/24 maxlen: 24 185.195.119.0/24 maxlen: 24 185.231.216.0/24 maxlen: 24 185.231.217.0/24 maxlen: 24 185.231.218.0/24 maxlen: 24 2a04:13c0::/32 maxlen: 32 2a04:13c1::/32 maxlen: 32 2a04:13c3::/32 maxlen: 32 2a04:13c5::/32 maxlen: 32 2a0c:8301::/32 maxlen: 32 2a0c:8305::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:29:70:9d:fa:2d:c0:c4:af:17:a8:f9:84:57:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37d83a9d46c2964732770791ed1f316aeaf330ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:27:67:1f:7f:58:02:c4:40:3d:7b:0c:75: a7:03:04:0d:a1:a0:62:e5:fd:93:aa:31:3e:af:92: 4f:61:87:bb:35:bb:78:c8:57:2b:42:17:e2:71:e7: 71:62:c9:a4:01:b6:19:c3:05:a2:dd:66:33:de:0f: 3b:7d:ac:ef:a9:e5:7d:c8:da:8e:d9:58:05:b8:2c: 7b:38:a0:0e:72:c8:d8:cb:17:ca:78:39:e7:8a:6b: c1:47:be:13:ba:c9:69:1c:eb:14:03:23:58:b6:aa: 39:80:df:00:5b:70:d0:1c:e5:d3:db:e5:03:cf:b2: ff:44:0f:0e:90:91:98:02:ed:b9:8d:76:ce:7c:a2: 93:4d:6c:20:13:71:00:fa:85:de:c6:56:3f:c4:5e: 09:c5:19:39:7e:db:34:d7:6c:9d:30:8e:2f:16:3d: 4b:22:79:bf:f4:1d:92:d9:05:2e:e9:27:38:03:c6: fc:4d:3e:d4:e1:1d:29:2f:33:cd:48:61:fb:a8:68: f9:a5:38:95:61:c1:65:18:eb:13:95:98:f4:af:1e: 49:20:45:55:23:ff:b0:3c:a2:7e:b5:35:df:16:0f: af:bc:83:d0:7b:e0:fc:ac:ea:f4:d8:60:2e:4e:ff: 9d:b6:24:68:ed:09:89:f1:ab:c3:31:b6:3e:6f:5f: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D8:3A:9D:46:C2:96:47:32:77:07:91:ED:1F:31:6A:EA:F3:30:ED X509v3 Authority Key Identifier: keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/N9g6nUbClkcydweR7R8xaurzMO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.52.0/22 185.159.191.0/24 185.195.116.0/22 185.231.216.0-185.231.218.255 IPv6: 2a04:13c0::/31 2a04:13c3::/32 2a04:13c5::/32 2a0c:8301::/32 2a0c:8305::/32 Signature Algorithm: sha256WithRSAEncryption 3a:b4:70:f0:1a:35:9d:f1:d2:f0:95:fe:6a:0b:a7:28:ca:1a: f2:2a:60:f3:fe:35:3b:27:b1:10:c8:78:c1:45:91:cf:b3:89: cf:d1:bb:36:35:64:f3:bc:cf:45:9b:3b:b2:8b:2b:15:b6:f4: 85:82:3e:a0:24:64:31:77:4c:fa:8d:9f:6e:40:64:89:97:79: 9a:d1:c6:27:7e:5e:a0:66:2f:86:94:04:9e:40:ec:9f:d2:2e: 12:7b:33:56:d5:28:85:c8:49:9b:41:d5:24:9c:ed:92:1d:1a: 74:c8:00:29:46:04:ff:65:a5:57:53:e6:dc:ef:24:a2:e2:e5: c5:2f:27:eb:af:7b:99:7f:f8:55:8b:c7:a9:02:4d:c7:f8:22: 1a:54:1b:f6:79:35:63:49:17:86:aa:fe:cf:00:f4:d3:3c:45: 1e:b3:80:43:81:54:bc:75:b9:f1:ee:ee:b3:c6:73:89:5a:24: 06:11:e3:01:05:5a:a4:97:4c:eb:55:ea:49:0d:76:ad:73:cf: 24:86:6e:77:fe:5c:86:6a:27:00:2d:a2:b8:74:83:57:40:1f: b4:16:7c:57:30:8e:94:2f:47:8d:1c:e5:a5:48:9c:0a:07:0b: ac:77:2c:0d:b5:a9:a0:6e:c6:c9:17:51:28:4d:f9:87:93:7d: 2b:1b:a7:18 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt26ylwnfotwMSvF6j5hFczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YmIzMmFhOGM5ZjhkMDVjNTE3YmUyYWQ2NjUyZjY2NTUw YThkNTcwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Q4M2E5ZDQ2YzI5NjQ3MzI3NzA3OTFlZDFmMzE2YWVhZjMzMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU0nZx9/WALEQD17DHWnAwQNoaBi 5f2TqjE+r5JPYYe7Nbt4yFcrQhficedxYsmkAbYZwwWi3WYz3g87fazvqeV9yNqO 2VgFuCx7OKAOcsjYyxfKeDnnimvBR74TuslpHOsUAyNYtqo5gN8AW3DQHOXT2+UD z7L/RA8OkJGYAu25jXbOfKKTTWwgE3EA+oXexlY/xF4JxRk5fts012ydMI4vFj1L Inm/9B2S2QUu6Sc4A8b8TT7U4R0pLzPNSGH7qGj5pTiVYcFlGOsTlZj0rx5JIEVV I/+wPKJ+tTXfFg+vvIPQe+D8rOr02GAuTv+dtiRo7QmJ8avDMbY+b1+fEwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFDfYOp1GwpZHMncHke0fMWrq8zDtMB8GA1UdIwQY MBaAFCe7MqqMn40FxRe+KtZlL2ZVCo1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUt NDg0MjIxYTFmMjg1LzEvTjlnNm5VYkNsa2N5ZHdlUjdSOHhhdXJ6TU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUtNDg0MjIxYTFmMjg1 LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzAmBAIAATAgAwQCuRQ0AwQA uZ+/AwQCucN0MAwDBAO559gDBAC559owKQQCAAIwIwMFASoEE8ADBQAqBBPDAwUA KgQTxQMFACoMgwEDBQAqDIMFMA0GCSqGSIb3DQEBCwUAA4IBAQA6tHDwGjWd8dLw lf5qC6coyhryKmDz/jU7J7EQyHjBRZHPs4nP0bs2NWTzvM9FmzuyiysVtvSFgj6g JGQxd0z6jZ9uQGSJl3ma0cYnfl6gZi+GlASeQOyf0i4SezNW1SiFyEmbQdUknO2S HRp0yAApRgT/ZaVXU+bc7ySi4uXFLyfrr3uZf/hVi8epAk3H+CIaVBv2eTVjSReG qv7PAPTTPEUes4BDgVS8dbnx7u6zxnOJWiQGEeMBBVqkl0zrVepJDXatc88khm53 /lyGaicALaK4dINXQB+0FnxXMI6UL0eNHOWlSJwKBwusdywNtamgbsbJF1EoTfmH k30rG6cY -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:29 2026 by rpki-client