This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/N_ijFCSvEAh4jcjSazZABa1f9xI.roa File: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (raw, json) Hash identifier: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU= Subject key identifier: 37:F8:A3:14:24:AF:10:08:78:8D:C8:D2:6B:36:40:05:AD:5F:F7:12 Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e Certificate serial: 019B790FF5C47912D25A3354A07B9AAC9B18 Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/N_ijFCSvEAh4jcjSazZABa1f9xI.roa Signing time: Thu 01 Jan 2026 10:17:27 +0000 ROA not before: Thu 01 Jan 2026 10:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1764 IP address blocks: 194.45.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f5:c4:79:12:d2:5a:33:54:a0:7b:9a:ac:9b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e Validity Not Before: Jan 1 10:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37f8a31424af1008788dc8d26b364005ad5ff712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:47:98:4d:ae:03:91:5f:0d:ce:dd:54:96: 5f:92:47:7b:ac:49:4e:ff:2b:7e:8b:48:ff:5b:7a: 8d:f4:90:b4:0d:1c:69:ef:4a:34:e7:50:fc:e7:12: f6:01:6f:8d:d5:16:2b:4d:75:b9:37:96:5f:f5:09: 5f:c6:8e:91:69:a1:aa:10:c0:ef:3c:41:c9:01:cf: a5:a2:64:34:48:80:7d:b0:1f:0a:95:82:f6:5b:5f: e3:80:68:ea:48:09:2d:3d:fc:f0:37:8a:a5:13:a1: 18:27:7a:d6:e4:41:52:fb:b0:06:a0:d9:05:f1:8a: cd:32:e8:1b:ba:66:3a:6e:4c:65:f3:57:b5:f3:4a: d1:6b:0e:84:be:b4:7b:71:38:bd:ad:1f:71:dd:77: 93:25:32:21:e0:3a:10:9f:87:0a:ff:40:28:a4:f4: f3:fe:34:06:0d:a4:06:ea:85:16:34:dc:2e:9f:5c: 16:f5:d3:25:69:50:a5:8a:53:44:9f:0a:aa:af:4a: d3:d2:44:6a:25:21:54:1a:0b:3b:d0:3e:16:84:4c: ad:8b:03:f7:8c:26:e6:76:f6:43:18:3a:2f:55:f9: 1c:ff:7e:7d:a4:a2:0f:1f:e5:a1:89:44:51:51:ed: e8:b1:2b:82:ef:b4:c9:b8:96:53:e9:10:67:42:01: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:A3:14:24:AF:10:08:78:8D:C8:D2:6B:36:40:05:AD:5F:F7:12 X509v3 Authority Key Identifier: keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/N_ijFCSvEAh4jcjSazZABa1f9xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.144.0/21 Signature Algorithm: sha256WithRSAEncryption 02:26:5f:bf:50:b0:63:d5:bc:50:7e:f9:40:9c:d0:2c:f0:64: 07:4e:86:90:1b:16:88:04:e9:72:0f:93:13:5a:7e:83:1b:88: 24:a3:74:59:7c:34:f2:7e:04:8e:fc:61:05:36:46:79:f8:bc: 84:5f:a6:c3:10:fb:3b:2e:7e:99:61:68:5d:44:c5:7c:b0:b8: 67:f0:d9:0b:8c:72:b1:54:46:d8:ad:3d:43:dc:b2:d9:b8:43: 5c:5a:d5:39:da:46:0c:f2:bb:cd:f2:f6:3d:98:11:c9:d4:65: 6e:40:d9:59:83:e7:36:7e:d1:f5:1a:37:ed:05:73:24:7d:ea: 24:bd:d1:d8:3d:0a:6a:fa:b5:4f:12:8e:f1:58:54:44:ca:de: 4d:f6:f3:a6:26:8e:c2:5f:5b:c8:27:ef:4c:2b:b4:dc:ee:5d: a8:3b:a2:ec:69:73:ef:4e:5e:5f:3e:89:03:2f:75:94:6f:ff: 11:8f:c4:1d:22:c2:17:c7:5b:9f:f2:d6:cd:8a:15:47:d7:49: 17:41:25:a3:bb:e3:49:5a:b5:92:ca:ed:19:97:6a:9a:70:19: 61:24:49:59:35:30:1d:4d:28:73:e4:df:3e:c9:23:38:84:38: 33:56:da:52:db:ee:d3:6f:ce:b2:8a:85:3d:7e:4b:60:ca:8c: 81:5f:cc:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/XEeRLSWjNUoHuarJsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3 YmQwOGUwHhcNMjYwMTAxMTAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Y4YTMxNDI0YWYxMDA4Nzg4ZGM4ZDI2YjM2NDAwNWFkNWZmNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BdHmE2uA5FfDc7dVJZfkkd7rElO /yt+i0j/W3qN9JC0DRxp70o051D85xL2AW+N1RYrTXW5N5Zf9Qlfxo6RaaGqEMDv PEHJAc+lomQ0SIB9sB8KlYL2W1/jgGjqSAktPfzwN4qlE6EYJ3rW5EFS+7AGoNkF 8YrNMugbumY6bkxl81e180rRaw6EvrR7cTi9rR9x3XeTJTIh4DoQn4cK/0AopPTz /jQGDaQG6oUWNNwun1wW9dMlaVClilNEnwqqr0rT0kRqJSFUGgs70D4WhEytiwP3 jCbmdvZDGDovVfkc/359pKIPH+WhiURRUe3osSuC77TJuJZT6RBnQgEoqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDf4oxQkrxAIeI3I0ms2QAWtX/cSMB8GA1UdIwQY MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt Y2UyYTQ5NmZlZTg2LzEvTl9pakZDU3ZFQWg0amNqU2F6WkFCYTFmOXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2 LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwi2QMA0G CSqGSIb3DQEBCwUAA4IBAQACJl+/ULBj1bxQfvlAnNAs8GQHToaQGxaIBOlyD5MT Wn6DG4gko3RZfDTyfgSO/GEFNkZ5+LyEX6bDEPs7Ln6ZYWhdRMV8sLhn8NkLjHKx VEbYrT1D3LLZuENcWtU52kYM8rvN8vY9mBHJ1GVuQNlZg+c2ftH1GjftBXMkfeok vdHYPQpq+rVPEo7xWFREyt5N9vOmJo7CX1vIJ+9MK7Tc7l2oO6LsaXPvTl5fPokD L3WUb/8Rj8QdIsIXx1uf8tbNihVH10kXQSWju+NJWrWSyu0Zl2qacBlhJElZNTAd TShz5N8+ySM4hDgzVtpS2+7Tb86yioU9fktgyoyBX8zT -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:27 2026 by rpki-client