This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L-_NTDhr_NNBUM4yQiTsAhHqjlQ.roa File: L-_NTDhr_NNBUM4yQiTsAhHqjlQ.roa (raw, json) Hash identifier: PmuH/6Z3FEUwlOGsjCfcPWrUXMbwVCIPbtNHsLU09CQ= Subject key identifier: 2F:EF:CD:4C:38:6B:FC:D3:41:50:CE:32:42:24:EC:02:11:EA:8E:54 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137E31296C61E5CBE9EB34920CF5CE Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L-_NTDhr_NNBUM4yQiTsAhHqjlQ.roa Signing time: Fri 02 Jan 2026 00:20:10 +0000 ROA not before: Fri 02 Jan 2026 00:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152868 IP address blocks: 185.209.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7e:31:29:6c:61:e5:cb:e9:eb:34:92:0c:f5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fefcd4c386bfcd34150ce324224ec0211ea8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:cd:4e:c3:64:91:05:30:c6:e2:7f:83:0f: de:b0:3b:bb:23:8b:e3:1d:fb:47:de:2c:70:16:1c: 4d:69:21:45:23:d6:dc:2b:30:01:d7:52:1d:96:80: d9:9a:6d:d5:5e:73:6a:cc:bc:ab:69:8a:9f:5e:55: 2e:f4:48:3b:b4:96:c7:c6:e8:7d:98:99:7c:d7:cd: 71:02:76:d6:b1:7b:6c:c5:c6:92:9b:92:95:35:a4: 63:53:b1:11:e4:30:83:06:d5:81:7d:92:10:60:b7: f1:ec:d1:1f:6a:6c:31:d9:74:84:39:d7:cd:de:09: 3d:00:05:be:64:03:b1:a9:c2:17:34:de:85:dd:90: 40:ee:fb:1f:44:48:11:c3:bd:09:91:61:32:dc:73: aa:96:fa:40:62:c7:a0:36:f7:f1:8b:c6:be:4f:68: 14:a2:cf:da:91:2c:fa:de:11:a5:cb:c8:da:58:c6: 0b:fc:1b:cf:b3:05:a5:a1:72:0b:4e:e5:d5:ba:f8: 25:6b:9c:59:d2:12:49:2e:e6:d5:40:10:13:8e:aa: 76:c0:a5:ba:98:45:f2:6a:fa:d7:b6:3b:8e:35:b3: 93:db:01:f0:02:e9:1d:7c:dc:e6:a9:81:09:ed:f5: 48:60:37:0f:2f:60:23:0e:c1:a9:26:1f:50:94:90: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EF:CD:4C:38:6B:FC:D3:41:50:CE:32:42:24:EC:02:11:EA:8E:54 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L-_NTDhr_NNBUM4yQiTsAhHqjlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.74.0/24 Signature Algorithm: sha256WithRSAEncryption 45:25:c3:ec:b9:c4:e5:a3:fd:ed:17:aa:75:13:b5:06:f6:25: 1a:ca:0b:29:a2:6b:b4:6c:da:08:de:05:cd:fd:56:35:72:1b: 01:34:56:94:57:b1:7d:75:d9:7e:74:02:ea:86:71:e1:99:7c: 5d:1d:f1:a5:1d:bb:46:33:7b:d0:8e:ee:49:04:02:40:88:0d: ae:b6:76:fc:3d:72:f3:d1:ed:e8:2e:be:0f:ee:e3:91:87:55: 8e:24:c3:e8:d3:36:24:d7:b3:76:43:bb:53:bb:74:f3:bb:73: 89:9e:4e:87:7b:44:ce:42:75:6f:e5:32:26:fa:22:45:c3:ff: 91:0e:6d:2c:32:00:a5:e4:b6:6e:be:06:a7:09:e9:fc:63:f6: 3f:76:20:12:9f:66:2b:c8:9c:95:a5:d2:d4:17:b0:bd:9a:d9: da:c7:5c:03:1b:b4:69:8a:2b:dc:f5:de:cc:39:26:2e:36:d4: 9c:1d:81:af:32:eb:c1:86:c1:57:1a:b8:0c:5a:fd:bf:50:dc: 9a:1c:cd:60:88:5d:79:f4:ef:40:9e:08:77:c1:97:4c:2c:fb: 44:28:49:60:3d:81:0a:7f:7a:79:a2:d0:fe:45:46:bf:f7:b2: 9b:37:5a:e4:63:01:e9:36:a8:dc:2c:88:21:44:18:6a:b0:67: 20:87:c4:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E34xKWxh5cvp6zSSDPXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmVmY2Q0YzM4NmJmY2QzNDE1MGNlMzI0MjI0ZWMwMjExZWE4ZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA/NTsNkkQUwxuJ/gw/esDu7I4vj HftH3ixwFhxNaSFFI9bcKzAB11IdloDZmm3VXnNqzLyraYqfXlUu9Eg7tJbHxuh9 mJl8181xAnbWsXtsxcaSm5KVNaRjU7ER5DCDBtWBfZIQYLfx7NEfamwx2XSEOdfN 3gk9AAW+ZAOxqcIXNN6F3ZBA7vsfREgRw70JkWEy3HOqlvpAYsegNvfxi8a+T2gU os/akSz63hGly8jaWMYL/BvPswWloXILTuXVuvgla5xZ0hJJLubVQBATjqp2wKW6 mEXyavrXtjuONbOT2wHwAukdfNzmqYEJ7fVIYDcPL2AjDsGpJh9QlJA1pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/vzUw4a/zTQVDOMkIk7AIR6o5UMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvTC1fTlREaHJfTk5CVU00eVFpVHNBaEhxamxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudFKMA0G CSqGSIb3DQEBCwUAA4IBAQBFJcPsucTlo/3tF6p1E7UG9iUaygspomu0bNoI3gXN /VY1chsBNFaUV7F9ddl+dALqhnHhmXxdHfGlHbtGM3vQju5JBAJAiA2utnb8PXLz 0e3oLr4P7uORh1WOJMPo0zYk17N2Q7tTu3Tzu3OJnk6He0TOQnVv5TIm+iJFw/+R Dm0sMgCl5LZuvganCen8Y/Y/diASn2YryJyVpdLUF7C9mtnax1wDG7Rpiivc9d7M OSYuNtScHYGvMuvBhsFXGrgMWv2/UNyaHM1giF159O9Angh3wZdMLPtEKElgPYEK f3p5otD+RUa/97KbN1rkYwHpNqjcLIghRBhqsGcgh8QT -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:47 2026 by rpki-client