This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/N3r4w-QIKvt5t1EKPBx4W22sMKU.roa File: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (raw, json) Hash identifier: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E= Subject key identifier: 37:7A:F8:C3:E4:08:2A:FB:79:B7:51:0A:3C:1C:78:5B:6D:AC:30:A5 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B7EA72F22DF72A71B63B26EA81AF34487 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/N3r4w-QIKvt5t1EKPBx4W22sMKU.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201769 IP address blocks: 78.93.50.0/24 maxlen: 24 185.114.68.0/24 maxlen: 24 212.93.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:22:df:72:a7:1b:63:b2:6e:a8:1a:f3:44:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377af8c3e4082afb79b7510a3c1c785b6dac30a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:f5:fc:9e:81:40:27:22:96:65:5f:84:87: 38:ed:d8:bb:80:0f:01:d7:4f:a3:10:a5:b6:18:88: ba:e3:09:91:64:8d:6a:de:c3:09:bc:58:a6:17:a5: f9:d5:9b:5f:d2:c7:cb:c8:e6:eb:38:fa:e6:d0:35: 76:73:78:ae:ff:2f:b2:93:54:84:6c:35:0f:07:7b: 03:3b:09:2c:3a:00:94:d1:0d:d6:3b:7a:b2:52:eb: 4e:56:da:fe:4b:59:d2:49:b9:69:ed:d0:c9:f1:97: dc:b6:d1:db:f5:5f:21:f5:b4:13:91:f0:12:08:0d: c4:3c:06:75:24:81:2b:74:8b:c1:58:70:e5:76:ae: ba:26:29:00:bd:29:9a:37:d0:36:45:99:bc:f0:ad: db:90:cb:a4:f3:c2:9e:ce:1b:bb:dd:20:60:bf:c0: 02:fc:f5:4a:0c:99:90:50:ca:14:20:c1:41:8f:cf: 13:d3:e7:4c:44:f2:64:f9:50:87:f3:60:8a:5e:55: 7c:f4:d7:07:e3:ae:c0:08:35:77:c7:77:7a:18:d0: 36:6b:74:73:3f:6b:b0:26:31:f4:66:29:56:97:ef: b7:ac:41:04:b5:d7:f2:46:ad:71:25:86:2c:c6:1e: 16:65:8e:10:8a:d2:97:99:63:25:96:5e:f3:47:a1: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:F8:C3:E4:08:2A:FB:79:B7:51:0A:3C:1C:78:5B:6D:AC:30:A5 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/N3r4w-QIKvt5t1EKPBx4W22sMKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.93.50.0/24 185.114.68.0/24 212.93.196.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:7c:ba:34:68:af:01:40:48:4c:54:40:91:91:e6:ac:89:e4: 6b:0b:d4:7f:df:b3:59:30:2a:9d:63:35:07:87:e0:85:b2:3b: 99:1a:26:cc:9c:2a:cd:a3:a1:6d:e6:5e:62:a6:57:4f:2c:ac: b2:de:af:3a:e6:95:4d:19:de:46:ab:ad:4b:61:67:4f:27:e8: 25:d7:5c:4a:7f:55:18:da:4c:24:16:44:3f:54:06:e8:1a:3f: c3:dd:62:1d:9b:88:de:46:9b:74:93:bb:03:c6:b1:79:78:4c: ca:11:d0:d7:d5:be:08:57:a5:7d:0d:96:d6:30:71:04:0d:80: 09:22:c2:7d:87:d1:90:f8:ae:90:64:39:39:8a:d2:20:ca:4c: 74:08:f6:66:b2:32:e4:6b:2b:20:3f:04:dd:0f:b9:18:54:d5: 0c:f6:43:19:fd:ed:4d:22:22:c3:27:32:df:45:56:0d:82:a6: 0a:c3:f0:7e:40:fd:6e:58:d5:50:0d:ed:b1:1b:55:61:35:e3: 10:1e:30:5c:d1:80:71:d3:e4:28:73:53:f3:22:b1:44:c4:b6: 16:22:fd:07:84:8c:b4:b3:76:42:77:ff:4b:e5:6a:91:74:a6: dd:fd:27:91:9d:46:91:2b:b0:ed:bd:e9:fb:c6:71:7d:04:51: ad:bb:d0:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+py8i33KnG2Oybqga80SHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzdhZjhjM2U0MDgyYWZiNzliNzUxMGEzYzFjNzg1YjZkYWMzMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswP1/J6BQCcilmVfhIc47di7gA8B 10+jEKW2GIi64wmRZI1q3sMJvFimF6X51Ztf0sfLyObrOPrm0DV2c3iu/y+yk1SE bDUPB3sDOwksOgCU0Q3WO3qyUutOVtr+S1nSSblp7dDJ8ZfcttHb9V8h9bQTkfAS CA3EPAZ1JIErdIvBWHDldq66JikAvSmaN9A2RZm88K3bkMuk88Kezhu73SBgv8AC /PVKDJmQUMoUIMFBj88T0+dMRPJk+VCH82CKXlV89NcH467ACDV3x3d6GNA2a3Rz P2uwJjH0ZilWl++3rEEEtdfyRq1xJYYsxh4WZY4QitKXmWMlll7zR6HIZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDd6+MPkCCr7ebdRCjwceFttrDClMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvTjNyNHctUUlLdnQ1dDFFS1BCeDRXMjJzTUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATl0yAwQA uXJEAwQA1F3EMA0GCSqGSIb3DQEBCwUAA4IBAQCafLo0aK8BQEhMVECRkeasieRr C9R/37NZMCqdYzUHh+CFsjuZGibMnCrNo6Ft5l5ipldPLKyy3q865pVNGd5Gq61L YWdPJ+gl11xKf1UY2kwkFkQ/VAboGj/D3WIdm4jeRpt0k7sDxrF5eEzKEdDX1b4I V6V9DZbWMHEEDYAJIsJ9h9GQ+K6QZDk5itIgykx0CPZmsjLkaysgPwTdD7kYVNUM 9kMZ/e1NIiLDJzLfRVYNgqYKw/B+QP1uWNVQDe2xG1VhNeMQHjBc0YBx0+Qoc1Pz IrFExLYWIv0HhIy0s3ZCd/9L5WqRdKbd/SeRnUaRK7Dtven7xnF9BFGtu9DR -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:01 2026 by rpki-client