This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa File: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (raw, json) Hash identifier: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw= Subject key identifier: 35:63:CD:87:34:29:6D:BD:69:59:F3:91:F0:3A:38:46:4D:F7:21:21 Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892 Certificate serial: 019B7F834D53A26FC2AB03C6ABDFEA7E74B3 Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa Signing time: Fri 02 Jan 2026 16:21:09 +0000 ROA not before: Fri 02 Jan 2026 16:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47841 IP address blocks: 185.65.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4d:53:a2:6f:c2:ab:03:c6:ab:df:ea:7e:74:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3563cd8734296dbd6959f391f03a38464df72121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:b3:76:80:32:cf:7d:d6:0f:eb:05:36:62: bb:c0:5f:65:53:ef:fb:53:7f:21:5a:ba:bc:66:6b: 4c:92:33:e8:8c:07:79:c4:81:d8:e7:c7:8c:88:b9: 0f:e5:34:c1:2e:ba:bd:2a:6d:26:59:b2:42:23:d8: 4b:19:b7:8b:75:e8:5c:0a:a0:e5:81:78:80:d1:c4: 0a:c8:67:d6:cd:2b:b7:ab:61:68:fa:50:e1:3a:92: 04:45:34:4b:d9:9f:cf:93:ec:14:a5:81:1a:6e:2b: 63:cf:9c:99:db:7e:a6:af:72:a6:a8:4d:1b:6d:f4: cd:1a:c2:c4:aa:a4:62:61:2f:4f:02:a5:f6:da:1c: 11:87:76:8e:da:d0:26:21:63:0f:34:be:50:d1:64: 46:89:73:bb:5a:36:8b:4c:1a:e8:28:f1:f7:2b:8c: 34:06:91:6a:af:06:7d:de:c9:0b:51:62:7d:aa:a6: 2f:f6:8a:9f:52:78:cf:a4:ad:c5:1e:db:fe:00:70: c0:d3:40:03:1a:c6:22:d5:22:0e:b3:bc:23:1a:7f: 22:70:12:2f:ec:da:d5:58:1c:c6:03:89:2d:d1:65: fb:63:13:30:3b:94:e3:8c:fb:1e:f2:5e:9e:db:17: c1:ee:34:e7:7e:85:9d:3a:f9:0c:b1:06:df:3a:3d: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:63:CD:87:34:29:6D:BD:69:59:F3:91:F0:3A:38:46:4D:F7:21:21 X509v3 Authority Key Identifier: keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.112.0/22 Signature Algorithm: sha256WithRSAEncryption 08:18:7b:84:40:20:17:48:df:11:88:2d:3c:7f:5f:b3:05:b4: 7f:b1:5f:f7:a4:ca:66:7d:a6:f5:48:9d:1c:df:66:60:3e:58: c0:9a:23:97:89:55:af:b3:5a:0d:f5:75:5d:9c:ff:42:61:68: 88:e3:c1:80:6c:95:a2:c8:cc:c0:8f:db:30:27:8f:5f:8e:c1: dd:e8:9a:a7:41:19:ae:8b:10:a6:83:c1:9d:81:21:39:76:ef: 90:f9:3c:58:4a:c3:e5:12:1a:5c:54:50:68:c8:98:c4:e7:8a: d8:5d:22:58:9c:58:b8:df:14:83:c4:1c:b3:7a:6f:b5:17:f4: 73:c6:20:fc:1d:f8:d1:a6:10:8c:f2:e3:e1:ea:80:d5:e0:76: aa:21:fe:54:86:21:ab:4f:b4:86:16:c0:88:0a:fb:99:37:cd: 5a:a3:51:2b:03:f3:95:ca:33:cd:44:71:c7:ee:db:db:f3:b8: 9c:0a:2d:32:3e:b0:e5:60:d9:e9:5f:b4:a5:6a:9d:b4:6f:7a: bd:f0:db:95:2a:fb:e3:9d:dc:bf:7c:92:89:f4:1e:7b:92:39: e4:fc:d6:b1:8e:43:90:69:c0:ab:91:de:df:7f:8c:8d:6f:f4: f4:82:2d:72:03:6a:eb:af:d7:29:cf:ff:17:d9:0e:41:1c:a4: fc:1b:25:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g01Tom/CqwPGq9/qfnSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3 MWQ4OTIwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTYzY2Q4NzM0Mjk2ZGJkNjk1OWYzOTFmMDNhMzg0NjRkZjcyMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC6zdoAyz33WD+sFNmK7wF9lU+/7 U38hWrq8ZmtMkjPojAd5xIHY58eMiLkP5TTBLrq9Km0mWbJCI9hLGbeLdehcCqDl gXiA0cQKyGfWzSu3q2Fo+lDhOpIERTRL2Z/Pk+wUpYEabitjz5yZ236mr3KmqE0b bfTNGsLEqqRiYS9PAqX22hwRh3aO2tAmIWMPNL5Q0WRGiXO7WjaLTBroKPH3K4w0 BpFqrwZ93skLUWJ9qqYv9oqfUnjPpK3FHtv+AHDA00ADGsYi1SIOs7wjGn8icBIv 7NrVWBzGA4kt0WX7YxMwO5TjjPse8l6e2xfB7jTnfoWdOvkMsQbfOj2HGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVjzYc0KW29aVnzkfA6OEZN9yEhMB8GA1UdIwQY MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt MmVmNDQ3ZTFiMDhjLzEvTldQTmh6UXBiYjFwV2ZPUjhEbzRSazMzSVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUFwMA0G CSqGSIb3DQEBCwUAA4IBAQAIGHuEQCAXSN8RiC08f1+zBbR/sV/3pMpmfab1SJ0c 32ZgPljAmiOXiVWvs1oN9XVdnP9CYWiI48GAbJWiyMzAj9swJ49fjsHd6JqnQRmu ixCmg8GdgSE5du+Q+TxYSsPlEhpcVFBoyJjE54rYXSJYnFi43xSDxByzem+1F/Rz xiD8HfjRphCM8uPh6oDV4HaqIf5UhiGrT7SGFsCICvuZN81ao1ErA/OVyjPNRHHH 7tvb87icCi0yPrDlYNnpX7Slap20b3q98NuVKvvjndy/fJKJ9B57kjnk/NaxjkOQ acCrkd7ff4yNb/T0gi1yA2rrr9cpz/8X2Q5BHKT8GyX6 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:52 2026 by rpki-client