This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/nLo0-4jE7ZgwPj4hcv3ORJmB8F0.roa File: nLo0-4jE7ZgwPj4hcv3ORJmB8F0.roa (raw, json) Hash identifier: uJPbhLFOq6opwPhv4mwtt+uR1id/DX3SO2T7pIktgGM= Subject key identifier: 9C:BA:34:FB:88:C4:ED:98:30:3E:3E:21:72:FD:CE:44:99:81:F0:5D Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Certificate serial: 019B7CED291066BAD4A534FB78DC4B167E80 Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/nLo0-4jE7ZgwPj4hcv3ORJmB8F0.roa Signing time: Fri 02 Jan 2026 04:17:55 +0000 ROA not before: Fri 02 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216334 IP address blocks: 194.55.238.0/24 maxlen: 24 194.55.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:29:10:66:ba:d4:a5:34:fb:78:dc:4b:16:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cba34fb88c4ed98303e3e2172fdce449981f05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:33:e7:b0:82:dd:32:ba:21:55:a8:ee:e3: b5:00:93:f7:bd:11:c7:9d:33:01:ec:01:c8:93:1b: 1b:8b:c8:43:22:00:b9:9b:e3:14:9f:29:de:74:98: 95:c7:b3:96:7a:69:40:84:39:b0:e9:fd:d0:3a:45: e2:16:56:8b:9e:4c:7d:ab:2f:e6:ee:c6:df:82:55: ef:9b:01:cb:09:c7:74:53:b4:9e:62:f5:4a:c5:7e: 99:99:15:12:c4:93:5e:b3:5a:08:a2:46:ba:c0:20: ad:b1:0c:d6:10:40:28:17:29:c7:2c:99:e9:0d:d0: 95:7e:79:b8:7e:8b:59:c0:79:1b:42:1d:4b:6f:07: 9d:1f:d4:6a:32:63:f6:75:bb:4f:31:6b:d3:fb:11: 10:2f:e9:6b:23:00:6a:7f:37:88:ed:d2:1a:22:6c: 6b:e1:2a:f2:f1:42:8f:16:bd:06:5f:65:21:4e:e1: e1:e9:e5:32:90:21:48:a9:c4:cc:50:6a:14:f2:91: 1b:d8:07:33:9b:5e:5d:f6:77:d7:21:6d:e0:00:ba: 35:c3:08:5e:28:27:67:29:51:57:07:9a:89:85:47: 9d:22:01:ec:e3:22:88:fb:df:97:0a:c4:00:33:aa: 1f:1e:fa:ad:d1:24:80:b2:86:47:1b:92:85:42:f2: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:34:FB:88:C4:ED:98:30:3E:3E:21:72:FD:CE:44:99:81:F0:5D X509v3 Authority Key Identifier: keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/nLo0-4jE7ZgwPj4hcv3ORJmB8F0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.238.0/23 Signature Algorithm: sha256WithRSAEncryption 96:2b:a7:e1:40:f7:e6:78:29:72:02:e2:df:32:30:af:09:a3: a1:80:88:83:38:80:99:55:da:5f:07:af:d1:48:b6:29:c6:c6: b8:ff:98:f8:79:c7:c9:67:89:be:95:08:c1:7e:d3:84:f4:9e: fd:f7:07:42:2e:3b:09:43:2c:86:e0:d4:5f:36:90:51:54:ad: 02:c0:ec:6f:e8:ad:ed:0b:43:16:37:6d:29:23:f2:91:06:9d: 06:f3:c8:99:83:b1:68:7a:71:89:96:3b:92:a2:80:e4:14:87: f5:f3:f5:f9:cf:80:14:14:f8:17:c5:f6:3c:3a:05:9b:78:d8: 0f:be:cc:7d:e2:f7:6d:c8:57:00:b4:83:ee:5e:b0:82:86:f9: 3f:61:45:fa:e4:8c:33:1e:c1:59:6b:47:50:ea:65:92:6c:a5: 5d:e6:a3:63:9c:5d:d4:26:b1:81:db:0b:d6:69:91:b6:d8:17: 79:04:ea:aa:75:e4:1d:03:9e:31:23:4e:c1:cb:af:25:d0:18: 22:86:e5:bb:ca:d3:03:ff:ef:7c:09:a8:62:7d:6c:8f:ef:55: d5:98:0a:81:bf:53:57:d6:36:33:c8:b5:fb:b5:5d:16:eb:9f: 7e:5e:3e:94:1d:d7:d5:3e:35:55:d6:5f:35:12:f9:bb:bc:47: a9:5e:f4:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SkQZrrUpTT7eNxLFn6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1 NmQyZWUwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JhMzRmYjg4YzRlZDk4MzAzZTNlMjE3MmZkY2U0NDk5ODFmMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRUz57CC3TK6IVWo7uO1AJP3vRHH nTMB7AHIkxsbi8hDIgC5m+MUnynedJiVx7OWemlAhDmw6f3QOkXiFlaLnkx9qy/m 7sbfglXvmwHLCcd0U7SeYvVKxX6ZmRUSxJNes1oIoka6wCCtsQzWEEAoFynHLJnp DdCVfnm4fotZwHkbQh1LbwedH9RqMmP2dbtPMWvT+xEQL+lrIwBqfzeI7dIaImxr 4Sry8UKPFr0GX2UhTuHh6eUykCFIqcTMUGoU8pEb2Aczm15d9nfXIW3gALo1wwhe KCdnKVFXB5qJhUedIgHs4yKI+9+XCsQAM6ofHvqt0SSAsoZHG5KFQvL6mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJy6NPuIxO2YMD4+IXL9zkSZgfBdMB8GA1UdIwQY MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt MDA3N2MyYmRiZjM3LzEvbkxvMC00akU3Wmd3UGo0aGN2M09SSm1COEYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3 LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjfuMA0G CSqGSIb3DQEBCwUAA4IBAQCWK6fhQPfmeClyAuLfMjCvCaOhgIiDOICZVdpfB6/R SLYpxsa4/5j4ecfJZ4m+lQjBftOE9J799wdCLjsJQyyG4NRfNpBRVK0CwOxv6K3t C0MWN20pI/KRBp0G88iZg7FoenGJljuSooDkFIf18/X5z4AUFPgXxfY8OgWbeNgP vsx94vdtyFcAtIPuXrCChvk/YUX65IwzHsFZa0dQ6mWSbKVd5qNjnF3UJrGB2wvW aZG22Bd5BOqqdeQdA54xI07By68l0BgihuW7ytMD/+98CahifWyP71XVmAqBv1NX 1jYzyLX7tV0W659+Xj6UHdfVPjVV1l81Evm7vEepXvQ0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:31 2026 by rpki-client