This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/N-ugS43QXCOLtMQg4hBDzZHSfs4.roa File: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (raw, json) Hash identifier: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI= Subject key identifier: 37:EB:A0:4B:8D:D0:5C:23:8B:B4:C4:20:E2:10:43:CD:91:D2:7E:CE Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF27B496C42C3BE3694E059F12165AF Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/N-ugS43QXCOLtMQg4hBDzZHSfs4.roa Signing time: Fri 02 Jan 2026 18:22:36 +0000 ROA not before: Fri 02 Jan 2026 18:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211545 IP address blocks: 82.119.71.0/24 maxlen: 24 89.252.204.0/24 maxlen: 24 89.252.205.0/24 maxlen: 24 176.67.236.0/24 maxlen: 24 176.67.237.0/24 maxlen: 24 176.67.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7b:49:6c:42:c3:be:36:94:e0:59:f1:21:65:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37eba04b8dd05c238bb4c420e21043cd91d27ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:dc:bc:77:3a:29:26:cc:42:ee:08:77:9a: e9:be:4f:e9:8c:41:fd:87:6e:46:5b:6d:40:d8:05: 21:0f:31:74:63:5d:f2:1a:e9:3b:dd:98:ce:d2:ef: 31:20:e5:65:90:a7:e7:07:21:38:87:a0:fc:0a:c9: 02:95:77:fb:0b:c4:92:9c:fc:01:fd:23:43:bc:2e: c5:75:a7:e5:a0:b8:b4:1a:41:69:22:52:75:f7:35: 8d:ef:ef:ec:50:09:9b:85:35:44:df:44:f0:2a:74: 8a:55:36:d3:36:73:a8:ce:9f:f8:36:20:60:16:0a: 84:88:1e:2b:e3:45:d9:34:d1:ab:19:5c:27:6c:46: 7d:00:d4:45:36:a1:0e:c6:68:67:6d:03:cb:1d:08: 65:d9:de:a3:6b:d4:0a:d4:04:5f:23:bc:33:7a:fd: a6:51:e4:2b:ab:62:8a:e0:15:0a:1c:8b:c8:4a:94: f3:a9:2f:78:c2:ff:27:b0:42:e2:3a:75:b8:4f:28: 20:fe:f7:4f:fe:46:86:86:84:57:02:4c:25:5f:57: 31:1a:56:78:da:a4:89:3d:06:e1:26:ea:38:c4:6c: bf:8c:ab:5a:39:4e:14:06:c5:b1:29:e7:9e:ba:71: 88:1b:3b:1f:3b:58:ee:87:72:2e:e3:83:56:36:7b: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EB:A0:4B:8D:D0:5C:23:8B:B4:C4:20:E2:10:43:CD:91:D2:7E:CE X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/N-ugS43QXCOLtMQg4hBDzZHSfs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.71.0/24 89.252.204.0/23 176.67.236.0/23 176.67.239.0/24 Signature Algorithm: sha256WithRSAEncryption bd:75:bf:22:17:c8:e5:17:3a:4e:bd:49:74:2b:cc:d9:cf:f0: c9:8e:45:ac:8c:3e:74:ab:de:3b:14:1a:ce:d2:5f:18:46:6d: 9c:cf:be:5d:9c:dd:ac:6e:ce:ff:91:ff:87:c0:b6:56:44:e5: 70:53:34:06:40:75:a5:a0:fa:da:d6:71:9d:6c:48:a5:29:f8: a5:0e:50:90:14:53:53:b6:7e:a3:4c:81:2e:0f:63:dd:0b:2d: 00:df:4a:29:0b:73:ef:08:af:9d:72:69:48:34:4f:66:9b:d0: 90:7a:e9:8b:7b:a9:99:58:d8:2c:c0:e3:ca:5e:eb:95:25:24: 73:57:40:44:d3:17:c6:d2:fe:93:33:05:7b:b2:44:f9:8c:fe: 69:a1:f1:38:d9:82:27:b3:de:33:fd:dd:9c:a4:b0:be:75:cd: 71:14:44:ae:39:7f:f6:30:78:14:47:b1:76:f6:c4:5b:c8:e4: 3e:51:68:2a:36:b4:69:3a:ff:b3:ae:2d:a3:d6:8f:7c:ff:36: 96:74:fa:7b:36:dd:4d:22:78:b2:b9:d1:30:ea:6f:c5:e8:9d: 90:52:51:14:d2:67:db:27:09:6b:39:b8:e6:44:0f:ef:00:95: 74:ae:8e:68:87:98:96:61:50:21:7b:3b:47:d8:22:3e:a5:5e: 3e:48:98:bd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/8ntJbELDvjaU4FnxIWWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ViYTA0YjhkZDA1YzIzOGJiNGM0MjBlMjEwNDNjZDkxZDI3ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfTcvHc6KSbMQu4Id5rpvk/pjEH9 h25GW21A2AUhDzF0Y13yGuk73ZjO0u8xIOVlkKfnByE4h6D8CskClXf7C8SSnPwB /SNDvC7FdafloLi0GkFpIlJ19zWN7+/sUAmbhTVE30TwKnSKVTbTNnOozp/4NiBg FgqEiB4r40XZNNGrGVwnbEZ9ANRFNqEOxmhnbQPLHQhl2d6ja9QK1ARfI7wzev2m UeQrq2KK4BUKHIvISpTzqS94wv8nsELiOnW4Tygg/vdP/kaGhoRXAkwlX1cxGlZ4 2qSJPQbhJuo4xGy/jKtaOU4UBsWxKeeeunGIGzsfO1juh3Iu44NWNnsy3wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDfroEuN0Fwji7TEIOIQQ82R0n7OMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvTi11Z1M0M1FYQ09MdE1RZzRoQkR6WkhTZnM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUndHAwQB WfzMAwQBsEPsAwQAsEPvMA0GCSqGSIb3DQEBCwUAA4IBAQC9db8iF8jlFzpOvUl0 K8zZz/DJjkWsjD50q947FBrO0l8YRm2cz75dnN2sbs7/kf+HwLZWROVwUzQGQHWl oPra1nGdbEilKfilDlCQFFNTtn6jTIEuD2PdCy0A30opC3PvCK+dcmlINE9mm9CQ eumLe6mZWNgswOPKXuuVJSRzV0BE0xfG0v6TMwV7skT5jP5pofE42YIns94z/d2c pLC+dc1xFESuOX/2MHgUR7F29sRbyOQ+UWgqNrRpOv+zri2j1o98/zaWdPp7Nt1N IniyudEw6m/F6J2QUlEU0mfbJwlrObjmRA/vAJV0ro5oh5iWYVAheztH2CI+pV4+ SJi9 -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:30 2026 by rpki-client