This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/NIVw741XEPPSN6oP0Msosmkxzog.roa File: NIVw741XEPPSN6oP0Msosmkxzog.roa (raw, json) Hash identifier: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI= Subject key identifier: 34:85:70:EF:8D:57:10:F3:D2:37:AA:0F:D0:CB:28:B2:69:31:CE:88 Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Certificate serial: 019B7758EE05CD43FC29098E76A2BF6DEBF4 Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/NIVw741XEPPSN6oP0Msosmkxzog.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15681 IP address blocks: 83.150.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:05:cd:43:fc:29:09:8e:76:a2:bf:6d:eb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348570ef8d5710f3d237aa0fd0cb28b26931ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:e1:2d:12:86:f3:13:7b:52:d9:53:d1:42: ee:d3:2c:29:6d:5c:10:a0:fa:e7:9f:7c:97:44:9e: f8:08:b5:b3:85:5f:09:39:c9:24:32:32:a5:da:16: 5c:9f:f3:84:f1:1b:4b:fc:5c:22:96:e9:21:2d:07: 94:bf:75:e5:ad:04:08:62:80:c1:65:4c:d0:25:ee: 26:3e:8f:99:c9:ab:9f:d2:a1:55:5a:01:0c:9e:a2: 6e:21:7b:5b:e9:e6:32:7e:0b:69:d2:b2:ab:e8:92: 37:a7:e7:0d:8e:ce:7a:33:07:25:52:d2:14:c9:82: 6c:0a:4d:3a:54:40:93:9d:c4:7d:f6:7e:99:e5:ce: 1a:d5:77:d7:83:16:e6:8e:6d:a1:06:ad:cc:f1:08: 94:9c:32:86:93:15:b1:a0:19:cb:df:74:ce:29:10: 96:2e:40:a5:fe:d9:a9:a4:6e:fe:fc:ef:09:61:af: 18:95:93:7c:4c:4f:87:46:29:43:46:3a:c5:00:60: 78:87:7b:eb:5a:35:ba:63:77:73:7c:9c:63:51:a8: a7:c9:2e:78:ec:5a:29:f4:49:8d:70:00:c6:7a:e5: 89:15:f2:98:7f:4c:74:5a:07:3f:43:d1:86:ee:c5: 7f:e1:cf:b7:2b:9b:7a:b7:9b:77:1b:35:e5:5d:a7: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:70:EF:8D:57:10:F3:D2:37:AA:0F:D0:CB:28:B2:69:31:CE:88 X509v3 Authority Key Identifier: keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/NIVw741XEPPSN6oP0Msosmkxzog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.150.208.0/22 Signature Algorithm: sha256WithRSAEncryption 29:42:7e:e7:15:a7:33:f5:18:92:8a:68:89:07:c1:d5:a2:f3: a9:03:2c:d5:cf:52:fd:c7:69:eb:8e:84:d9:20:83:b3:de:2d: ce:6d:b5:bb:7d:06:c2:94:19:70:6d:0b:98:ce:ea:07:44:8c: f1:83:cd:d5:ca:88:94:80:9c:bd:28:18:30:0a:1c:fe:21:cb: f1:02:a9:65:13:db:e9:95:96:b5:95:e7:f9:77:94:48:cf:52: fd:d5:9b:64:cc:d4:c8:43:dd:f8:ed:77:d1:f1:30:04:88:78: 4c:2b:05:c3:4c:e5:a5:26:49:0f:c4:46:05:e3:51:7d:22:d5: 15:f6:bd:e2:7b:af:13:60:86:e8:b3:29:d7:43:ee:9c:ce:b9: 47:94:58:65:28:4a:29:8d:02:6f:be:d4:68:2d:ad:0c:f4:56: b0:18:73:0f:42:e9:2b:a6:91:6d:57:59:5e:bf:d7:46:b9:a4: 44:11:9a:c4:12:08:48:c0:9a:7a:07:ef:10:f3:8e:12:33:d0: fb:e1:3b:cb:22:fd:a4:60:86:c7:fa:f8:37:35:58:34:15:9a: 1a:d6:4a:68:54:bc:79:43:e0:6f:0a:55:fe:f8:41:9b:f2:c6: 83:06:16:3d:9a:6d:6b:03:e4:f5:e0:33:89:d4:56:8b:ba:89: af:c6:a6:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WO4FzUP8KQmOdqK/bev0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm MGFkOGIwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg1NzBlZjhkNTcxMGYzZDIzN2FhMGZkMGNiMjhiMjY5MzFjZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6HhLRKG8xN7UtlT0ULu0ywpbVwQ oPrnn3yXRJ74CLWzhV8JOckkMjKl2hZcn/OE8RtL/FwilukhLQeUv3XlrQQIYoDB ZUzQJe4mPo+Zyauf0qFVWgEMnqJuIXtb6eYyfgtp0rKr6JI3p+cNjs56MwclUtIU yYJsCk06VECTncR99n6Z5c4a1XfXgxbmjm2hBq3M8QiUnDKGkxWxoBnL33TOKRCW LkCl/tmppG7+/O8JYa8YlZN8TE+HRilDRjrFAGB4h3vrWjW6Y3dzfJxjUainyS54 7Fop9EmNcADGeuWJFfKYf0x0Wgc/Q9GG7sV/4c+3K5t6t5t3GzXlXacHrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSFcO+NVxDz0jeqD9DLKLJpMc6IMB8GA1UdIwQY MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct YmUzYmI2Y2QyZDUxLzEvTklWdzc0MVhFUFBTTjZvUDBNc29zbWt4em9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5bQMA0G CSqGSIb3DQEBCwUAA4IBAQApQn7nFacz9RiSimiJB8HVovOpAyzVz1L9x2nrjoTZ IIOz3i3ObbW7fQbClBlwbQuYzuoHRIzxg83VyoiUgJy9KBgwChz+IcvxAqllE9vp lZa1lef5d5RIz1L91ZtkzNTIQ9347XfR8TAEiHhMKwXDTOWlJkkPxEYF41F9ItUV 9r3ie68TYIbosynXQ+6czrlHlFhlKEopjQJvvtRoLa0M9FawGHMPQukrppFtV1le v9dGuaREEZrEEghIwJp6B+8Q844SM9D74TvLIv2kYIbH+vg3NVg0FZoa1kpoVLx5 Q+BvClX++EGb8saDBhY9mm1rA+T14DOJ1FaLuomvxqYp -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:19 2026 by rpki-client