This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/nYp3_cwZdOz_BuJRO8waybMbYvE.roa File: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (raw, json) Hash identifier: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk= Subject key identifier: 9D:8A:77:FD:CC:19:74:EC:FF:06:E2:51:3B:CC:1A:C9:B3:1B:62:F1 Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B7DC9587847AD9011ECEAE3E6E54756FB Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/nYp3_cwZdOz_BuJRO8waybMbYvE.roa Signing time: Fri 02 Jan 2026 08:18:25 +0000 ROA not before: Fri 02 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61227 IP address blocks: 176.110.116.0/23 maxlen: 23 2001:67c:1070::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:58:78:47:ad:90:11:ec:ea:e3:e6:e5:47:56:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d8a77fdcc1974ecff06e2513bcc1ac9b31b62f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:c8:58:a1:b1:03:d5:90:11:56:d3:0a:86: b7:f5:b8:45:79:a9:a2:58:2e:84:07:f6:44:b2:f2: 20:3f:7e:b7:dd:b2:65:fc:17:26:71:61:b9:09:c7: cf:8f:28:70:28:03:c8:e1:a9:1d:e7:aa:89:9c:23: 29:9f:57:81:9f:0e:c8:b9:0f:f0:c6:2e:cb:e8:a3: 68:60:bf:9c:0e:60:66:af:93:75:48:30:dc:fd:33: de:86:b4:b6:07:8a:40:c9:0e:26:f7:e9:f8:d2:5e: 56:10:96:4f:a7:86:90:53:8c:b1:79:38:8b:26:e7: 42:35:b6:f2:7f:d0:7e:84:b2:3c:92:3f:34:77:3d: 0a:b9:a7:c2:71:e6:f9:37:84:35:83:f1:15:a5:56: ec:c1:af:e1:30:d2:ae:59:0a:39:d3:49:a1:74:77: de:88:19:e4:96:04:8c:5d:e0:d6:4f:ea:33:dc:33: 31:52:83:26:4f:0d:b5:03:fa:41:01:a9:7b:fd:59: 07:6f:15:00:ca:d4:19:e6:90:9c:fa:a7:b9:06:8f: 41:f9:ea:b3:44:6b:99:1f:47:71:79:8d:25:61:fe: 63:67:e8:38:2f:14:ef:2a:f6:b9:98:ec:41:f4:9b: 08:6a:ef:de:03:c9:26:85:bd:70:fe:56:10:df:70: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8A:77:FD:CC:19:74:EC:FF:06:E2:51:3B:CC:1A:C9:B3:1B:62:F1 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/nYp3_cwZdOz_BuJRO8waybMbYvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.116.0/23 IPv6: 2001:67c:1070::/47 Signature Algorithm: sha256WithRSAEncryption 73:09:09:bc:b9:75:b3:4c:c2:53:40:ed:7e:6a:5a:eb:a7:41: a1:2e:83:a0:4f:2a:53:36:d5:5c:d9:57:25:48:f1:1d:e9:cf: da:61:49:44:db:0a:f4:8a:55:d6:f1:e6:d7:48:5f:78:82:d5: 91:51:99:c7:c0:2e:59:2b:85:20:60:a5:08:b2:18:79:35:2e: 75:01:4b:bc:cb:c5:75:6a:b0:93:7c:eb:9a:53:52:30:08:6d: 36:88:2d:f5:55:3b:fd:87:0f:09:50:e6:aa:6b:13:4e:f5:a4: 8d:5d:52:af:25:66:40:13:c1:bb:54:24:f3:97:11:39:05:15: 6b:a9:28:da:65:e2:08:0f:2f:ce:43:75:f6:83:0b:34:ae:0e: c2:ea:33:87:f5:05:70:ae:da:14:bd:e2:d5:fe:62:1a:5b:ee: c2:de:d9:19:46:02:0b:67:31:c5:90:ea:84:69:aa:10:ff:c8: 91:ba:01:55:9c:97:1b:db:ac:4b:47:26:8e:dd:6d:55:8a:ed: 24:6b:d9:13:f7:57:df:dc:7b:67:f0:df:55:ea:ea:b3:04:46: 35:fe:c4:5b:08:36:fe:21:5d:43:8d:4c:c3:f0:52:8e:63:8b: 86:7f:b7:4d:2b:be:a8:c9:ac:50:9c:f0:87:e2:e6:20:2e:73: 34:80:18:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yVh4R62QEezq4+blR1b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDhhNzdmZGNjMTk3NGVjZmYwNmUyNTEzYmNjMWFjOWIzMWI2MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnIWKGxA9WQEVbTCoa39bhFeami WC6EB/ZEsvIgP3633bJl/BcmcWG5CcfPjyhwKAPI4akd56qJnCMpn1eBnw7IuQ/w xi7L6KNoYL+cDmBmr5N1SDDc/TPehrS2B4pAyQ4m9+n40l5WEJZPp4aQU4yxeTiL JudCNbbyf9B+hLI8kj80dz0KuafCceb5N4Q1g/EVpVbswa/hMNKuWQo500mhdHfe iBnklgSMXeDWT+oz3DMxUoMmTw21A/pBAal7/VkHbxUAytQZ5pCc+qe5Bo9B+eqz RGuZH0dxeY0lYf5jZ+g4LxTvKva5mOxB9JsIau/eA8kmhb1w/lYQ33DZgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ2Kd/3MGXTs/wbiUTvMGsmzG2LxMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvbllwM19jd1pkT3pfQnVKUk84d2F5Yk1iWXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBsG50MA8E AgACMAkDBwEgAQZ8EHAwDQYJKoZIhvcNAQELBQADggEBAHMJCby5dbNMwlNA7X5q WuunQaEug6BPKlM21VzZVyVI8R3pz9phSUTbCvSKVdbx5tdIX3iC1ZFRmcfALlkr hSBgpQiyGHk1LnUBS7zLxXVqsJN865pTUjAIbTaILfVVO/2HDwlQ5qprE071pI1d Uq8lZkATwbtUJPOXETkFFWupKNpl4ggPL85DdfaDCzSuDsLqM4f1BXCu2hS94tX+ Yhpb7sLe2RlGAgtnMcWQ6oRpqhD/yJG6AVWclxvbrEtHJo7dbVWK7SRr2RP3V9/c e2fw31Xq6rMERjX+xFsINv4hXUONTMPwUo5ji4Z/t00rvqjJrFCc8Ifi5iAuczSA GCw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:02 2026 by rpki-client