This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa File: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (raw, json) Hash identifier: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI= Subject key identifier: 37:73:72:B7:81:24:D4:F9:E6:24:CB:BB:13:75:48:8E:E2:F1:AF:BD Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc Certificate serial: 019B78355DF65C2CE36054F222B9A9CDE8EA Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59807 IP address blocks: 164.10.0.0/16 maxlen: 24 164.10.0.0/24 maxlen: 24 164.10.26.0/24 maxlen: 24 164.10.29.0/24 maxlen: 24 164.10.30.0/24 maxlen: 24 164.10.32.0/24 maxlen: 24 164.10.45.0/24 maxlen: 24 164.10.46.0/24 maxlen: 24 164.10.47.0/24 maxlen: 24 164.10.48.0/24 maxlen: 24 164.10.49.0/24 maxlen: 24 164.10.50.0/24 maxlen: 24 164.10.60.0/24 maxlen: 24 164.10.61.0/24 maxlen: 24 164.10.79.0/24 maxlen: 24 164.10.252.0/24 maxlen: 24 164.10.255.0/24 maxlen: 24 185.181.88.0/22 maxlen: 24 2a03:2520::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5d:f6:5c:2c:e3:60:54:f2:22:b9:a9:cd:e8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377372b78124d4f9e624cbbb1375488ee2f1afbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:c0:fa:da:e3:ee:b8:4a:8a:24:ff:fe:26: f0:cf:d5:99:2c:de:b8:e1:ec:5a:fb:f4:3d:71:f5: 2f:67:84:41:66:42:a6:66:42:e2:75:fc:87:d5:68: 81:93:f2:36:a4:2b:4e:75:e3:65:65:88:98:61:53: 30:d7:0c:04:25:e4:05:e9:a8:43:61:ae:b3:a8:d7: 16:d4:50:dd:11:38:f1:d8:f6:40:34:24:37:ea:f1: 17:24:4b:1f:a3:49:11:30:32:8f:58:ff:7e:5e:ea: 3b:6e:f5:76:17:0e:10:92:4f:2c:9d:aa:53:7f:e1: 5c:93:01:9b:7f:67:84:a8:cc:fe:63:bc:e6:47:b7: b1:0f:a1:19:a0:c5:d8:f8:45:8c:2b:0d:36:cf:2f: 0f:33:60:59:da:d6:80:cc:38:23:22:e9:4e:6d:68: 47:5b:14:09:6e:2a:99:2a:5a:3a:9f:64:52:13:62: 89:ab:5b:c6:a5:bb:64:0c:3c:87:6c:c5:3f:c5:bc: f1:26:64:3c:9a:3f:1f:e8:62:d9:e7:2b:34:31:a9: b9:f0:8f:5e:fa:d8:33:da:5e:a6:86:90:90:c1:07: af:37:97:43:1d:6f:72:ff:30:a9:36:d6:c7:7a:cf: 49:21:0e:f8:6a:82:7b:13:0c:f8:fb:cd:da:cb:9f: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:73:72:B7:81:24:D4:F9:E6:24:CB:BB:13:75:48:8E:E2:F1:AF:BD X509v3 Authority Key Identifier: keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.10.0.0/16 185.181.88.0/22 IPv6: 2a03:2520::/32 Signature Algorithm: sha256WithRSAEncryption aa:a4:a1:cd:b8:6b:7d:93:f6:b0:7a:78:e3:ec:bf:e0:8b:ff: d0:cd:ad:8d:38:91:c3:6a:d5:b4:ae:4b:8b:6c:32:0d:dd:6f: 90:5d:be:1a:9c:94:34:7f:08:99:da:be:96:c6:8e:75:54:74: 00:8c:3b:5c:18:6d:f5:af:85:e7:84:2c:a5:af:fb:94:af:f5: 9e:cd:57:79:fc:1a:4a:0e:b8:f0:3d:ff:b8:73:91:89:e2:ff: 0d:70:fd:df:d9:45:d9:3d:d8:be:86:e2:41:ae:6a:c5:9a:6e: 10:bc:a3:0e:d9:f6:5b:ec:5b:30:d1:5c:d2:e0:86:b5:40:45: d9:0e:75:b6:30:f7:54:7a:61:a3:bc:af:5c:ea:3a:6f:ea:80: 9d:90:8f:05:98:ac:fb:2f:8d:b5:a1:b4:e6:6f:98:0c:55:13: 77:84:f9:2a:c0:bf:4c:3d:13:fc:fe:5c:2e:5b:c4:db:4e:21: 02:3d:2c:c6:47:4c:e6:16:59:64:78:30:33:ff:33:83:07:a1: 00:6f:a7:68:e2:eb:84:08:95:37:75:5e:ac:0a:5a:67:27:97: 99:62:08:d2:f7:15:e8:74:ce:51:56:5d:77:18:d3:39:1e:53: c7:0e:3d:1a:1c:ed:e2:ca:c7:3f:f5:4e:ae:1a:ae:e3:b5:b2: 4c:b6:07:52 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NV32XCzjYFTyIrmpzejqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0 ZDcxZmMwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzczNzJiNzgxMjRkNGY5ZTYyNGNiYmIxMzc1NDg4ZWUyZjFhZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rA+trj7rhKiiT//ibwz9WZLN64 4exa+/Q9cfUvZ4RBZkKmZkLidfyH1WiBk/I2pCtOdeNlZYiYYVMw1wwEJeQF6ahD Ya6zqNcW1FDdETjx2PZANCQ36vEXJEsfo0kRMDKPWP9+Xuo7bvV2Fw4Qkk8snapT f+FckwGbf2eEqMz+Y7zmR7exD6EZoMXY+EWMKw02zy8PM2BZ2taAzDgjIulObWhH WxQJbiqZKlo6n2RSE2KJq1vGpbtkDDyHbMU/xbzxJmQ8mj8f6GLZ5ys0Mam58I9e +tgz2l6mhpCQwQevN5dDHW9y/zCpNtbHes9JIQ74aoJ7Ewz4+83ay5/cNwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDdzcreBJNT55iTLuxN1SI7i8a+9MB8GA1UdIwQY MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt OWQ3Zjg2ZjBkNDc3LzEvTjNOeXQ0RWsxUG5tSk11N0UzVklqdUx4cjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3 LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMApAoDBAK5 tVgwDQQCAAIwBwMFACoDJSAwDQYJKoZIhvcNAQELBQADggEBAKqkoc24a32T9rB6 eOPsv+CL/9DNrY04kcNq1bSuS4tsMg3db5BdvhqclDR/CJnavpbGjnVUdACMO1wY bfWvheeELKWv+5Sv9Z7NV3n8GkoOuPA9/7hzkYni/w1w/d/ZRdk92L6G4kGuasWa bhC8ow7Z9lvsWzDRXNLghrVARdkOdbYw91R6YaO8r1zqOm/qgJ2QjwWYrPsvjbWh tOZvmAxVE3eE+SrAv0w9E/z+XC5bxNtOIQI9LMZHTOYWWWR4MDP/M4MHoQBvp2ji 64QIlTd1XqwKWmcnl5liCNL3Feh0zlFWXXcY0zkeU8cOPRoc7eLKxz/1Tq4aruO1 sky2B1I= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:33 2026 by rpki-client