This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/rNGlVa8TkjQC_3M9tVgFauOAU3E.roa File: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (raw, json) Hash identifier: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM= Subject key identifier: AC:D1:A5:55:AF:13:92:34:02:FF:73:3D:B5:58:05:6A:E3:80:53:71 Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9 Certificate serial: 019B7AC8295A7A6BEB2800DB13D65FC0BC49 Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/rNGlVa8TkjQC_3M9tVgFauOAU3E.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 193.84.53.0/24 maxlen: 24 193.84.55.0/24 maxlen: 24 193.84.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:29:5a:7a:6b:eb:28:00:db:13:d6:5f:c0:bc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9 Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acd1a555af13923402ff733db558056ae3805371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:c7:40:3f:5f:2f:30:d4:7e:ec:59:d9:a7: c4:a8:00:74:cd:27:a1:04:8a:c0:50:09:bf:5a:82: 07:3a:ef:dd:d9:bc:e4:95:21:58:50:a0:0a:72:f2: 6b:8c:fb:04:0a:25:33:e5:d7:6e:cd:69:91:ec:58: 4d:3e:01:de:eb:6b:7f:76:ff:44:b1:19:b6:fb:d8: e5:56:64:a7:12:f8:3f:55:85:74:40:5e:44:71:44: ad:63:13:3a:6d:ee:49:2c:fe:0d:80:ad:6c:b9:05: 94:0d:4b:01:0e:78:44:ef:e1:8e:c4:48:04:77:d5: 48:30:60:dd:b5:29:37:df:87:d7:fe:b5:60:86:6c: 71:0f:ae:33:53:25:1b:41:e2:ea:e0:0c:52:ef:a7: a2:2f:8a:7b:74:a0:c7:d9:e1:96:cd:1f:17:fd:d7: 55:68:15:41:7a:85:56:51:f3:b5:fd:60:37:c1:cb: 95:9e:a6:48:1b:c0:bb:4a:7a:41:55:b4:15:04:07: 5c:7e:ed:a6:f8:02:a4:3c:f5:88:8b:f8:b4:1c:99: 28:7f:16:04:f4:87:5e:21:47:8f:3d:ba:5c:d3:d7: 29:f1:8d:8b:a3:f8:2e:56:37:91:95:46:e1:1e:1d: c6:54:ed:5f:24:c8:fd:33:6a:44:11:60:7f:95:69: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:A5:55:AF:13:92:34:02:FF:73:3D:B5:58:05:6A:E3:80:53:71 X509v3 Authority Key Identifier: keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/rNGlVa8TkjQC_3M9tVgFauOAU3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.53.0/24 193.84.55.0-193.84.63.255 Signature Algorithm: sha256WithRSAEncryption 32:4f:4f:77:8f:8c:7f:a2:ed:d2:ad:da:a1:de:1e:20:7c:f2: 0d:9d:ed:8a:89:f5:42:89:e3:5b:45:6d:54:4a:f4:86:76:e3: 0e:a4:62:84:be:f8:01:b2:33:8f:c7:4b:23:19:6b:5f:79:e4: b9:30:ab:af:ef:44:d3:81:65:64:8c:f0:35:77:17:a2:7d:62: 0b:f6:97:8e:f9:2d:41:fc:7c:d6:c3:52:eb:b5:08:c8:8d:78: 5b:d2:fe:de:0e:93:8f:e9:07:38:fa:4a:84:74:34:02:55:dc: 45:7f:e5:11:d1:ad:a4:34:2a:72:de:b9:67:95:9c:c9:ff:58: cc:f7:96:19:b3:d3:23:32:f2:b2:a7:88:26:74:db:c4:00:77: 81:60:83:c1:fe:2c:06:7a:d9:1e:a5:be:82:a6:51:18:fc:8e: 1b:6c:d2:8f:7a:e4:cd:74:d9:c2:38:a4:e8:d0:df:4e:76:cb: df:88:4f:20:45:cb:ad:4a:e5:7b:ca:52:4d:ae:c4:d4:ec:ec: a9:12:f9:db:c3:4a:46:e2:5f:97:e9:62:d9:c6:7e:cb:b1:b0: 5c:1d:07:64:c0:1c:56:18:6d:0f:98:3b:b6:42:73:d9:e9:e9: 82:c0:93:e5:9d:34:15:e6:27:37:96:3e:99:c5:e4:de:e4:6a: d0:31:fb:a6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yClaemvrKADbE9ZfwLxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1 ZmY5ZDkwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2QxYTU1NWFmMTM5MjM0MDJmZjczM2RiNTU4MDU2YWUzODA1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2HHQD9fLzDUfuxZ2afEqAB0zSeh BIrAUAm/WoIHOu/d2bzklSFYUKAKcvJrjPsECiUz5dduzWmR7FhNPgHe62t/dv9E sRm2+9jlVmSnEvg/VYV0QF5EcUStYxM6be5JLP4NgK1suQWUDUsBDnhE7+GOxEgE d9VIMGDdtSk334fX/rVghmxxD64zUyUbQeLq4AxS76eiL4p7dKDH2eGWzR8X/ddV aBVBeoVWUfO1/WA3wcuVnqZIG8C7SnpBVbQVBAdcfu2m+AKkPPWIi/i0HJkofxYE 9IdeIUePPbpc09cp8Y2Lo/guVjeRlUbhHh3GVO1fJMj9M2pEEWB/lWknUwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKzRpVWvE5I0Av9zPbVYBWrjgFNxMB8GA1UdIwQY MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt ODExNDRmZDAxNTY0LzEvck5HbFZhOFRralFDXzNNOXRWZ0ZhdU9BVTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0 LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwVQ1MAwD BADBVDcDBAbBVAAwDQYJKoZIhvcNAQELBQADggEBADJPT3ePjH+i7dKt2qHeHiB8 8g2d7YqJ9UKJ41tFbVRK9IZ24w6kYoS++AGyM4/HSyMZa1955Lkwq6/vRNOBZWSM 8DV3F6J9Ygv2l475LUH8fNbDUuu1CMiNeFvS/t4Ok4/pBzj6SoR0NAJV3EV/5RHR raQ0KnLeuWeVnMn/WMz3lhmz0yMy8rKniCZ028QAd4Fgg8H+LAZ62R6lvoKmURj8 jhts0o965M102cI4pOjQ3052y9+ITyBFy61K5XvKUk2uxNTs7KkS+dvDSkbiX5fp YtnGfsuxsFwdB2TAHFYYbQ+YO7ZCc9np6YLAk+WdNBXmJzeWPpnF5N7katAx+6Y= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:57 2026 by rpki-client