This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NmJmwlutv_IvFi3e_LxUKjazcWo.roa File: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (raw, json) Hash identifier: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY= Subject key identifier: 36:62:66:C2:5B:AD:BF:F2:2F:16:2D:DE:FC:BC:54:2A:36:B3:71:6A Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CB41C3B7E47873B06B5E0155834C Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NmJmwlutv_IvFi3e_LxUKjazcWo.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 146.19.154.0/24 maxlen: 24 147.78.198.0/24 maxlen: 24 193.84.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:41:c3:b7:e4:78:73:b0:6b:5e:01:55:83:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=366266c25badbff22f162ddefcbc542a36b3716a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:eb:7a:3b:ce:d8:71:8e:8d:41:46:cb:8a: 88:47:8d:89:df:c6:86:7a:2f:1f:a9:4e:5b:8a:de: b5:ab:66:04:75:f1:15:a6:dd:be:51:e8:ed:a5:0c: be:7f:f4:ee:93:ca:a2:7e:0a:6b:85:7c:42:e7:e7: 07:66:7e:61:5e:4f:ae:f3:5e:26:7a:f3:83:b1:f0: 3d:92:08:84:b5:9c:b8:c4:c3:a7:bd:a1:4c:b9:e4: 8c:54:10:32:63:01:56:fe:63:21:07:5c:b3:8b:24: f4:01:2d:c2:e1:23:38:85:1c:8c:e5:34:9b:9c:86: 37:2c:41:1a:2d:f0:b5:ad:bf:f3:3d:72:6c:3f:db: 60:05:7f:64:95:d8:84:55:7f:33:5d:87:91:88:44: cc:6e:85:5a:6d:96:5a:34:37:a5:80:22:08:cf:eb: dc:59:8c:32:33:32:71:21:cf:16:b8:2f:94:76:7f: 88:f8:76:58:9a:fc:fb:8e:e6:0a:83:c1:4a:06:0a: d2:94:2b:9b:b5:0b:c8:8f:c8:9e:42:69:95:88:ba: 88:c3:b3:f5:54:89:25:bc:6f:25:bd:61:eb:87:9a: eb:ff:39:fc:49:05:23:92:5b:52:cb:c6:0a:6f:2e: c1:e5:b6:d9:e6:91:d5:3f:b8:02:86:c7:ef:75:73: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:66:C2:5B:AD:BF:F2:2F:16:2D:DE:FC:BC:54:2A:36:B3:71:6A X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NmJmwlutv_IvFi3e_LxUKjazcWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.154.0/24 147.78.198.0/24 193.84.109.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b5:5f:2a:94:c2:c9:09:dc:a5:8c:43:32:07:b3:2b:be:5d: 61:96:bc:cc:b5:b7:02:60:20:82:10:75:65:b7:2d:13:1c:46: e5:15:eb:54:5e:0f:bc:15:0d:1f:d9:2f:7d:d1:e2:59:9a:e6: 7f:5c:d8:0f:88:fa:ad:1a:00:ce:52:b3:f8:d9:6e:84:a3:a7: 67:46:d1:cb:cb:d1:44:fa:b7:eb:11:6c:99:aa:71:d5:99:03: 11:7e:f3:6f:ec:45:83:9d:51:18:b5:8c:e0:96:69:a9:0a:e3: cd:fe:aa:84:cb:f5:ce:0a:1e:e2:b7:bd:a8:18:97:f3:ec:a4: 7d:a9:33:ee:d2:34:60:af:40:c0:84:1d:28:51:70:ba:0e:67: 05:33:ea:22:94:45:87:42:77:ba:9d:e0:a1:24:67:e0:e4:df: 14:93:01:0a:ae:af:9d:d1:79:e9:06:45:e9:5a:90:68:7b:5d: cf:d7:7e:0d:5e:54:f1:06:fc:ae:ef:71:72:9b:32:80:60:e9: 77:3d:b8:e1:0e:8f:37:29:a8:51:3b:a6:3c:08:5e:5a:6c:be: 48:93:85:ab:1a:90:a2:5d:a5:dd:6d:dd:85:ee:40:1a:17:e3: c9:c7:22:02:7c:88:99:50:1a:26:87:19:a3:cf:16:5e:ff:e2: 31:81:de:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FctBw7fkeHOwa14BVYNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjYyNjZjMjViYWRiZmYyMmYxNjJkZGVmY2JjNTQyYTM2YjM3MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdDrejvO2HGOjUFGy4qIR42J38aG ei8fqU5bit61q2YEdfEVpt2+UejtpQy+f/Tuk8qifgprhXxC5+cHZn5hXk+u814m evODsfA9kgiEtZy4xMOnvaFMueSMVBAyYwFW/mMhB1yziyT0AS3C4SM4hRyM5TSb nIY3LEEaLfC1rb/zPXJsP9tgBX9kldiEVX8zXYeRiETMboVabZZaNDelgCIIz+vc WYwyMzJxIc8WuC+Udn+I+HZYmvz7juYKg8FKBgrSlCubtQvIj8ieQmmViLqIw7P1 VIklvG8lvWHrh5rr/zn8SQUjkltSy8YKby7B5bbZ5pHVP7gChsfvdXNIjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDZiZsJbrb/yLxYt3vy8VCo2s3FqMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvTm1KbXdsdXR2X0l2RmkzZV9MeFVLamF6Y1dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkhOaAwQA k07GAwQAwVRtMA0GCSqGSIb3DQEBCwUAA4IBAQAGtV8qlMLJCdyljEMyB7Mrvl1h lrzMtbcCYCCCEHVlty0THEblFetUXg+8FQ0f2S990eJZmuZ/XNgPiPqtGgDOUrP4 2W6Eo6dnRtHLy9FE+rfrEWyZqnHVmQMRfvNv7EWDnVEYtYzglmmpCuPN/qqEy/XO Ch7it72oGJfz7KR9qTPu0jRgr0DAhB0oUXC6DmcFM+oilEWHQne6neChJGfg5N8U kwEKrq+d0XnpBkXpWpBoe13P134NXlTxBvyu73FymzKAYOl3PbjhDo83KahRO6Y8 CF5abL5Ik4WrGpCiXaXdbd2F7kAaF+PJxyICfIiZUBomhxmjzxZe/+Ixgd7i -----END CERTIFICATE-----Generated at Sun Jan 25 14:34:02 2026 by rpki-client