This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Nd1TnNt00oK2xr_oilTTzqexc7Q.roa File: Nd1TnNt00oK2xr_oilTTzqexc7Q.roa (raw, json) Hash identifier: +kz057WFCQ3qfR3EIzjNvOnka8S56ej02u7lcwgzBvw= Subject key identifier: 35:DD:53:9C:DB:74:D2:82:B6:C6:BF:E8:8A:54:D3:CE:A7:B1:73:B4 Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Certificate serial: 019B7F83429583DD01AAF97E12BF21A216C1 Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Nd1TnNt00oK2xr_oilTTzqexc7Q.roa Signing time: Fri 02 Jan 2026 16:21:07 +0000 ROA not before: Fri 02 Jan 2026 16:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50324 IP address blocks: 176.126.216.0/22 maxlen: 32 178.19.208.0/20 maxlen: 32 185.28.184.0/22 maxlen: 32 2a04:a40::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:42:95:83:dd:01:aa:f9:7e:12:bf:21:a2:16:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35dd539cdb74d282b6c6bfe88a54d3cea7b173b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:7b:2c:3f:ae:80:bc:9c:95:26:84:6f:42: 18:06:2e:6a:bb:12:33:2f:e1:51:13:c0:c4:3e:1a: 5f:ff:7e:d6:85:19:1c:f1:db:3f:07:71:2b:b0:85: 76:8a:01:f6:3c:9c:24:a4:1d:01:3a:40:d3:ac:2e: b5:f1:23:18:71:b7:46:ef:0a:43:fd:eb:5c:4e:8c: b9:1e:92:cc:5b:6f:b4:70:66:4b:e1:1c:74:59:e3: ad:64:eb:18:bf:7e:72:a5:2b:5b:57:0b:95:c7:3b: 5d:9f:ba:f6:c0:37:79:a1:ea:3b:47:75:ce:c3:d7: ef:b3:36:74:00:03:1c:f4:9c:81:70:3d:98:d1:91: 53:cb:71:0a:e0:4a:e8:b5:84:d2:db:5e:ba:6c:c5: 18:4a:69:86:77:e2:14:88:37:9c:8f:94:7c:58:37: e4:49:da:86:08:91:b6:4d:d7:53:72:1b:78:03:e5: 1f:62:fb:e5:01:83:d8:05:8a:81:cf:ea:0e:14:28: f2:ff:89:79:c0:34:21:46:b2:f1:a8:17:98:85:71: ce:e3:37:79:0e:1d:b9:bd:a7:fa:48:b1:1d:7c:42: ed:fc:e7:74:82:74:6c:a2:10:7f:98:26:66:bb:2c: ba:57:f8:c6:6b:e4:3e:cf:e0:bd:e7:70:b1:29:fb: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DD:53:9C:DB:74:D2:82:B6:C6:BF:E8:8A:54:D3:CE:A7:B1:73:B4 X509v3 Authority Key Identifier: keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Nd1TnNt00oK2xr_oilTTzqexc7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.216.0/22 178.19.208.0/20 185.28.184.0/22 IPv6: 2a04:a40::/29 Signature Algorithm: sha256WithRSAEncryption 97:ba:73:29:4f:b0:f3:b9:0a:90:07:f9:53:2f:b0:e9:13:63: 03:31:08:b6:4b:93:ff:70:f8:38:2a:7b:ea:9c:d5:a0:ea:24: 05:a6:05:ec:26:df:4c:df:ea:69:22:4e:b6:58:be:4b:3d:bc: bf:fe:49:bb:33:40:44:81:2f:81:e4:4b:af:a2:b5:58:be:68: 0d:93:2d:59:f2:28:a2:7b:17:0d:9b:fa:52:6f:45:e3:d7:d4: aa:41:cf:14:f8:2d:df:46:42:4c:08:71:d4:af:a9:ee:ac:58: 99:71:69:74:73:2c:dc:76:4a:d0:00:b2:07:2f:60:05:da:c6: ca:56:c5:3f:57:49:ed:22:82:d0:77:d4:e9:af:31:c9:39:6f: f4:b7:3a:14:4b:e8:a6:dc:ac:47:16:cc:64:1f:e1:b1:b4:f6: b9:bc:30:a6:cf:6b:4f:a0:e1:1d:07:02:a0:e7:29:a3:6b:be: 7a:13:cc:19:70:07:bd:2f:a8:c3:4f:89:7a:fc:0b:52:d2:92: e0:1e:7b:07:71:72:a4:ba:e1:58:c3:f1:77:a1:68:50:6f:d5: 26:74:06:de:11:51:41:be:7e:a0:b9:7c:e9:5c:e1:0b:f2:60: 54:48:70:a3:2f:ad:07:86:fc:6c:98:ee:cb:fd:6a:c8:24:01: d1:f0:e7:19 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/g0KVg90Bqvl+Er8hohbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTRmMDA1ZjU5NzdjMzIzZWNkYmVhOWM1ZjhjY2EzNjll NjVjNjcwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWRkNTM5Y2RiNzRkMjgyYjZjNmJmZTg4YTU0ZDNjZWE3YjE3M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAx7LD+ugLyclSaEb0IYBi5quxIz L+FRE8DEPhpf/37WhRkc8ds/B3ErsIV2igH2PJwkpB0BOkDTrC618SMYcbdG7wpD /etcToy5HpLMW2+0cGZL4Rx0WeOtZOsYv35ypStbVwuVxztdn7r2wDd5oeo7R3XO w9fvszZ0AAMc9JyBcD2Y0ZFTy3EK4ErotYTS2166bMUYSmmGd+IUiDecj5R8WDfk SdqGCJG2TddTcht4A+UfYvvlAYPYBYqBz+oOFCjy/4l5wDQhRrLxqBeYhXHO4zd5 Dh25vaf6SLEdfELt/Od0gnRsohB/mCZmuyy6V/jGa+Q+z+C953CxKfut6wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDXdU5zbdNKCtsa/6IpU086nsXO0MB8GA1UdIwQY MBaAFKaU8AX1l3wyPs2+qcX4zKNp5lxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAt MWI1MjdjZTE2NTExLzEvTmQxVG5OdDAwb0syeHJfb2lsVFR6cWV4YzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAtMWI1MjdjZTE2NTEx LzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCsH7YAwQE shPQAwQCuRy4MA0EAgACMAcDBQMqBApAMA0GCSqGSIb3DQEBCwUAA4IBAQCXunMp T7DzuQqQB/lTL7DpE2MDMQi2S5P/cPg4KnvqnNWg6iQFpgXsJt9M3+ppIk62WL5L Pby//km7M0BEgS+B5EuvorVYvmgNky1Z8iiiexcNm/pSb0Xj19SqQc8U+C3fRkJM CHHUr6nurFiZcWl0cyzcdkrQALIHL2AF2sbKVsU/V0ntIoLQd9TprzHJOW/0tzoU S+im3KxHFsxkH+GxtPa5vDCmz2tPoOEdBwKg5ymja756E8wZcAe9L6jDT4l6/AtS 0pLgHnsHcXKkuuFYw/F3oWhQb9UmdAbeEVFBvn6guXzpXOEL8mBUSHCjL60Hhvxs mO7L/WrIJAHR8OcZ -----END CERTIFICATE-----Generated at Mon Jan 26 15:31:42 2026 by rpki-client