This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/NanNAKKpriw1xLHpXZYYWO89_ic.roa File: NanNAKKpriw1xLHpXZYYWO89_ic.roa (raw, json) Hash identifier: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk= Subject key identifier: 35:A9:CD:00:A2:A9:AE:2C:35:C4:B1:E9:5D:96:18:58:EF:3D:FE:27 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE8C77FFA2700232B6CCED17C09E9 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/NanNAKKpriw1xLHpXZYYWO89_ic.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211908 IP address blocks: 185.239.176.0/24 maxlen: 24 185.239.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e8:c7:7f:fa:27:00:23:2b:6c:ce:d1:7c:09:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35a9cd00a2a9ae2c35c4b1e95d961858ef3dfe27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:f5:12:77:93:6d:e9:81:3b:ef:cd:e0:ef: 92:d6:3f:ee:d9:7c:47:3a:f6:e8:4e:90:c6:03:7c: 92:19:1d:23:1f:03:d9:55:70:ff:ac:f9:ef:b7:cd: c1:cf:74:cb:51:57:3e:ac:32:25:cc:7c:3b:3a:81: 93:b9:4a:1a:3a:f9:83:26:f4:a0:fb:0f:09:f7:e2: 97:69:9b:cb:94:d6:fd:4f:cf:ad:e1:f3:db:ae:78: 2e:25:b6:06:37:d0:66:f9:d0:35:35:b3:d2:9f:bb: 24:93:1e:ef:63:5d:27:fc:d0:0f:61:a0:dd:2a:f7: 30:38:55:9c:7f:5e:76:85:ae:bd:d6:f8:96:4e:a2: 26:a9:c9:c9:27:65:7f:da:b4:3a:a6:14:2c:6f:38: 06:4b:5e:0e:2a:a7:2b:55:83:c0:5c:17:f3:ed:1b: eb:66:47:cb:a3:42:79:7d:08:19:6d:32:76:5e:9b: 2b:57:bb:eb:4e:58:3c:d6:8c:e3:02:8c:19:ec:0a: fb:4b:a0:da:51:e1:30:41:e2:7a:96:f6:15:95:c9: 8c:cf:bc:88:d6:05:32:aa:99:eb:3a:ab:bc:11:72: 7c:45:2b:38:69:00:3c:a7:c1:75:28:d3:7b:85:74: f9:19:7b:1f:5e:6c:b4:50:27:6b:32:21:80:78:ce: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:CD:00:A2:A9:AE:2C:35:C4:B1:E9:5D:96:18:58:EF:3D:FE:27 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/NanNAKKpriw1xLHpXZYYWO89_ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.176.0/24 185.239.178.0/24 Signature Algorithm: sha256WithRSAEncryption cd:28:da:ee:a8:18:96:28:b0:ae:b3:40:d2:21:8c:b7:54:ac: 6d:c6:a3:5b:03:2f:98:70:ca:e9:ae:f4:5f:ef:71:c0:a1:d3: c1:60:cc:7f:ea:21:cf:2b:9f:8c:25:a7:ef:ce:04:b7:67:1d: 3f:3e:08:35:2a:a1:9d:e8:5b:d8:c8:9e:1d:29:4e:30:58:78: 08:ad:21:54:b5:15:78:92:b8:ca:26:26:c5:cc:4d:7e:af:67: 69:7f:c7:54:44:99:d3:93:bf:9b:6b:fd:e8:8a:a0:33:4e:26: 66:4d:ca:fc:28:e3:0d:e8:d2:46:87:1a:86:9f:ac:d9:7c:2b: 7c:cc:9e:f4:cd:da:74:5d:19:d3:1f:1f:3c:19:ae:f5:0c:29: c4:40:d4:7e:e4:6c:af:56:6b:b2:e3:26:0d:cb:8a:d3:c3:90: 96:e1:75:50:f7:16:fd:49:1d:fb:70:73:18:df:e1:f4:97:19: 9b:be:77:54:7c:79:39:bb:ee:e1:41:b4:b6:71:73:3b:6e:d5: 14:c8:a6:bb:d8:a1:a0:26:fb:0f:52:0c:f0:73:6d:65:31:d2: c3:ae:f3:70:53:37:38:3a:0c:bb:3d:b6:c5:92:ee:7e:24:e9: 60:83:b1:d7:0c:55:ad:9e:c8:01:1a:76:61:33:d5:df:05:2c: a8:dc:2a:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ejHf/onACMrbM7RfAnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWE5Y2QwMGEyYTlhZTJjMzVjNGIxZTk1ZDk2MTg1OGVmM2RmZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3j1EneTbemBO+/N4O+S1j/u2XxH OvboTpDGA3ySGR0jHwPZVXD/rPnvt83Bz3TLUVc+rDIlzHw7OoGTuUoaOvmDJvSg +w8J9+KXaZvLlNb9T8+t4fPbrnguJbYGN9Bm+dA1NbPSn7skkx7vY10n/NAPYaDd KvcwOFWcf152ha691viWTqImqcnJJ2V/2rQ6phQsbzgGS14OKqcrVYPAXBfz7Rvr ZkfLo0J5fQgZbTJ2XpsrV7vrTlg81ozjAowZ7Ar7S6DaUeEwQeJ6lvYVlcmMz7yI 1gUyqpnrOqu8EXJ8RSs4aQA8p8F1KNN7hXT5GXsfXmy0UCdrMiGAeM6SPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDWpzQCiqa4sNcSx6V2WGFjvPf4nMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvTmFuTkFLS3ByaXcxeExIcFhaWVlXTzg5X2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue+wAwQA ue+yMA0GCSqGSIb3DQEBCwUAA4IBAQDNKNruqBiWKLCus0DSIYy3VKxtxqNbAy+Y cMrprvRf73HAodPBYMx/6iHPK5+MJafvzgS3Zx0/Pgg1KqGd6FvYyJ4dKU4wWHgI rSFUtRV4krjKJibFzE1+r2dpf8dURJnTk7+ba/3oiqAzTiZmTcr8KOMN6NJGhxqG n6zZfCt8zJ70zdp0XRnTHx88Ga71DCnEQNR+5GyvVmuy4yYNy4rTw5CW4XVQ9xb9 SR37cHMY3+H0lxmbvndUfHk5u+7hQbS2cXM7btUUyKa72KGgJvsPUgzwc21lMdLD rvNwUzc4Ogy7PbbFku5+JOlgg7HXDFWtnsgBGnZhM9XfBSyo3Cpq -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:41 2026 by rpki-client