This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/nAH3H9obEDKPlNqoUXx9V7rYSxw.roa File: nAH3H9obEDKPlNqoUXx9V7rYSxw.roa (raw, json) Hash identifier: VQ7cf7+kTzq+f0dyjeb2mnlvMFjzIzqtRjcZld88OE0= Subject key identifier: 9C:01:F7:1F:DA:1B:10:32:8F:94:DA:A8:51:7C:7D:57:BA:D8:4B:1C Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Certificate serial: 019B7C7F343243318F9FEA07FB266DBB09FD Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/nAH3H9obEDKPlNqoUXx9V7rYSxw.roa Signing time: Fri 02 Jan 2026 02:17:49 +0000 ROA not before: Fri 02 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208769 IP address blocks: 85.208.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:34:32:43:31:8f:9f:ea:07:fb:26:6d:bb:09:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c01f71fda1b10328f94daa8517c7d57bad84b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:e3:b6:49:f4:98:24:eb:65:4b:0d:1d:b8: c8:dc:83:0f:49:b5:84:fd:aa:e8:cd:f8:4d:5a:4a: b1:b8:41:b4:ca:82:fc:a5:40:02:17:60:c3:73:22: 18:03:22:c8:42:35:7c:60:53:46:9c:03:30:fb:e8: 83:00:f3:3c:5a:39:03:a3:25:4e:0d:73:f0:b9:69: de:8c:08:01:1c:c7:32:9c:88:d6:76:ef:9a:28:10: 03:92:25:84:68:ac:74:b8:ea:bd:75:62:f1:1e:6d: 21:63:8b:f3:37:e0:df:a9:9b:37:3f:22:a4:56:be: 36:de:d1:32:a7:dd:92:9d:47:c7:4a:8d:91:3b:a7: d6:6d:e9:7f:2f:69:9d:a8:26:28:64:fe:73:ff:af: 53:ff:b9:43:48:47:e9:6f:d8:5e:36:44:d9:69:09: 89:5a:40:c2:14:df:1e:2a:8d:3d:69:08:49:6d:56: 13:71:b8:ac:b6:fd:4f:73:56:48:c5:16:91:69:20: 04:56:30:46:e4:e5:45:1a:bb:3e:d9:8f:f6:e6:b7: 9f:0d:82:ea:8f:59:4b:b2:21:d6:45:40:e9:cc:9a: dc:ee:73:7e:b2:a8:b9:c8:8f:a9:0c:a3:70:fd:56: 82:45:ff:54:ee:af:1d:3a:89:0a:51:48:bc:16:85: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:F7:1F:DA:1B:10:32:8F:94:DA:A8:51:7C:7D:57:BA:D8:4B:1C X509v3 Authority Key Identifier: keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/nAH3H9obEDKPlNqoUXx9V7rYSxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.102.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:e7:a6:c4:b4:34:73:e0:25:8f:d3:28:f2:43:53:99:b5:0a: 1f:d9:79:eb:04:cb:db:4a:5b:76:1a:01:dc:4b:48:df:f3:e7: ff:af:97:50:aa:dc:6f:86:d5:e1:2c:21:7f:8c:f9:ef:2a:9e: 4b:01:2f:13:6a:ab:5d:87:2d:17:93:90:43:37:c4:b6:51:d4: 1c:23:f6:64:00:0a:b0:c1:3a:2b:11:1d:51:17:1b:7a:82:0f: 38:3c:82:96:b0:45:8f:28:38:6c:14:d8:30:73:d6:72:a6:a7: e1:a7:dd:74:7e:bb:65:e4:f1:73:3c:80:d4:68:f8:b6:72:70: 3b:17:34:d6:33:d4:3e:09:c0:61:c4:1c:32:82:ef:69:e7:93: 54:16:75:4e:2c:4e:8f:cb:aa:2f:ea:cc:36:e0:fe:3e:f3:da: e1:3c:f1:17:c8:5e:b3:d9:6d:64:64:1a:05:60:ef:a2:38:0b: aa:d8:9b:15:78:73:14:ba:9b:63:9e:1d:48:8f:30:6d:60:bb: c7:4a:6c:c5:d7:86:42:8e:48:81:ef:b7:f9:9b:01:9e:95:e5: e3:3b:5c:d3:40:0c:9a:03:c2:b5:58:e5:8b:a1:2e:35:2b:bb: 58:39:51:2e:71:c1:ff:21:45:f0:bc:d0:55:9a:c0:db:9c:55: 41:31:a6:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fzQyQzGPn+oH+yZtuwn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi NWQ1YzkwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzAxZjcxZmRhMWIxMDMyOGY5NGRhYTg1MTdjN2Q1N2JhZDg0YjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogPjtkn0mCTrZUsNHbjI3IMPSbWE /arozfhNWkqxuEG0yoL8pUACF2DDcyIYAyLIQjV8YFNGnAMw++iDAPM8WjkDoyVO DXPwuWnejAgBHMcynIjWdu+aKBADkiWEaKx0uOq9dWLxHm0hY4vzN+DfqZs3PyKk Vr423tEyp92SnUfHSo2RO6fWbel/L2mdqCYoZP5z/69T/7lDSEfpb9heNkTZaQmJ WkDCFN8eKo09aQhJbVYTcbistv1Pc1ZIxRaRaSAEVjBG5OVFGrs+2Y/25refDYLq j1lLsiHWRUDpzJrc7nN+sqi5yI+pDKNw/VaCRf9U7q8dOokKUUi8FoUCswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwB9x/aGxAyj5TaqFF8fVe62EscMB8GA1UdIwQY MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt NDljNmZkYmJhZmI3LzEvbkFIM0g5b2JFREtQbE5xb1VYeDlWN3JZU3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3 LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBmMA0G CSqGSIb3DQEBCwUAA4IBAQB956bEtDRz4CWP0yjyQ1OZtQof2XnrBMvbSlt2GgHc S0jf8+f/r5dQqtxvhtXhLCF/jPnvKp5LAS8Taqtdhy0Xk5BDN8S2UdQcI/ZkAAqw wTorER1RFxt6gg84PIKWsEWPKDhsFNgwc9Zypqfhp910frtl5PFzPIDUaPi2cnA7 FzTWM9Q+CcBhxBwygu9p55NUFnVOLE6Py6ov6sw24P4+89rhPPEXyF6z2W1kZBoF YO+iOAuq2JsVeHMUuptjnh1IjzBtYLvHSmzF14ZCjkiB77f5mwGeleXjO1zTQAya A8K1WOWLoS41K7tYOVEuccH/IUXwvNBVmsDbnFVBMaan -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:55 2026 by rpki-client