This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa File: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (raw, json) Hash identifier: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY= Subject key identifier: 37:A5:70:7B:64:9B:5B:2B:10:E1:CF:5A:C1:8E:29:A6:60:A0:33:C8 Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Certificate serial: 019B7AC8A450981CCA0C2F97AC314057C77B Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12294 IP address blocks: 212.40.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a4:50:98:1c:ca:0c:2f:97:ac:31:40:57:c7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11 Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37a5707b649b5b2b10e1cf5ac18e29a660a033c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:71:66:4e:a7:bd:7c:d2:45:eb:35:a6:9a: 42:e7:3a:37:2a:bb:70:95:ac:8c:1c:94:d7:28:c4: 7f:b9:20:d4:1a:69:43:23:bc:43:29:b1:6d:fd:49: 09:19:fd:01:6b:19:30:b0:07:ae:83:1f:2d:09:15: c4:bd:b2:3c:39:10:84:69:90:f3:e6:a1:4f:3d:90: b8:66:c6:bf:ad:00:11:5e:f9:b2:14:61:17:27:aa: 18:0e:87:c2:2c:1e:e6:54:01:74:17:53:e4:5e:aa: 3b:48:2a:32:4e:ae:f3:ee:e2:f7:17:3f:2d:1b:40: 41:33:c5:f5:97:c7:81:cd:14:be:0a:0e:6e:e0:31: b3:6d:45:64:c8:00:5f:75:01:c4:19:5a:c8:33:35: ef:e0:f2:1a:a3:42:e1:f2:e9:8c:8f:7b:92:8b:b3: f7:37:b5:8f:77:8b:7c:fb:45:0d:b7:48:36:e9:68: 65:57:4d:c1:b4:37:1a:19:f0:fd:36:b7:48:22:77: 0f:bb:d8:a8:cb:2c:ee:c6:ba:35:c7:0d:4e:9d:af: c5:ad:ec:e6:b6:86:03:d6:47:c5:6f:94:c7:22:7e: d1:dc:a2:7e:13:3e:87:87:1d:e9:a0:02:9f:71:a0: 06:05:7f:11:26:ae:0d:42:a6:cf:dd:b6:b5:05:dd: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:70:7B:64:9B:5B:2B:10:E1:CF:5A:C1:8E:29:A6:60:A0:33:C8 X509v3 Authority Key Identifier: keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.40.32.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:9e:49:8d:1c:b4:10:48:9f:a2:b5:29:b3:78:7c:d5:0d:73: 19:bd:e3:5e:1d:20:b7:66:8e:f5:4a:30:3b:11:4e:4e:26:80: 84:d5:36:e9:40:ed:5f:24:bd:18:20:69:43:a9:43:7f:18:0d: f6:35:c3:96:e9:c2:2e:47:58:ee:ae:b9:61:32:80:e8:7e:a6: cf:4e:0b:04:fc:35:9c:06:16:b5:d1:19:5c:5a:0a:e9:01:45: ba:ab:64:db:48:4a:c8:78:ae:af:49:cf:92:78:35:4c:fe:33: 0e:82:4b:c9:4e:9b:90:29:a6:ed:45:7a:27:21:88:9a:d7:55: 8b:89:fa:aa:23:5a:b6:69:c1:f0:2a:80:fd:73:4a:5a:06:07: fc:dc:2b:ce:92:9a:da:d6:68:47:f9:c7:e1:ab:28:3d:8c:42: 64:1e:e9:28:2d:1b:68:d7:06:f0:e5:b6:28:0e:a2:c2:9e:84: 90:0e:1d:85:a1:4b:52:d3:a8:45:7a:d9:d4:77:f7:e6:c6:51: a1:cc:99:25:cd:5a:15:47:0b:55:74:9f:fd:60:5a:2f:2f:1e: 82:b4:a5:a4:42:47:56:0a:70:49:18:cd:3c:f6:c5:77:13:c6: f6:00:a3:da:32:31:e8:4f:c1:f8:0b:1a:28:d6:d6:48:8e:45: 54:26:b2:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKRQmBzKDC+XrDFAV8d7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi ZTFiMTEwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2E1NzA3YjY0OWI1YjJiMTBlMWNmNWFjMThlMjlhNjYwYTAzM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoJxZk6nvXzSRes1pppC5zo3Krtw layMHJTXKMR/uSDUGmlDI7xDKbFt/UkJGf0BaxkwsAeugx8tCRXEvbI8ORCEaZDz 5qFPPZC4Zsa/rQARXvmyFGEXJ6oYDofCLB7mVAF0F1PkXqo7SCoyTq7z7uL3Fz8t G0BBM8X1l8eBzRS+Cg5u4DGzbUVkyABfdQHEGVrIMzXv4PIao0Lh8umMj3uSi7P3 N7WPd4t8+0UNt0g26WhlV03BtDcaGfD9NrdIIncPu9ioyyzuxro1xw1Ona/Frezm toYD1kfFb5THIn7R3KJ+Ez6Hhx3poAKfcaAGBX8RJq4NQqbP3ba1Bd2EjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDelcHtkm1srEOHPWsGOKaZgoDPIMB8GA1UdIwQY MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt NzQyZGMwYzk3MGMwLzEvTjZWd2UyU2JXeXNRNGM5YXdZNHBwbUNnTThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1CggMA0G CSqGSIb3DQEBCwUAA4IBAQCOnkmNHLQQSJ+itSmzeHzVDXMZveNeHSC3Zo71SjA7 EU5OJoCE1TbpQO1fJL0YIGlDqUN/GA32NcOW6cIuR1jurrlhMoDofqbPTgsE/DWc Bha10RlcWgrpAUW6q2TbSErIeK6vSc+SeDVM/jMOgkvJTpuQKabtRXonIYia11WL ifqqI1q2acHwKoD9c0paBgf83CvOkpra1mhH+cfhqyg9jEJkHukoLRto1wbw5bYo DqLCnoSQDh2FoUtS06hFetnUd/fmxlGhzJklzVoVRwtVdJ/9YFovLx6CtKWkQkdW CnBJGM089sV3E8b2AKPaMjHoT8H4Cxoo1tZIjkVUJrLi -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:35 2026 by rpki-client