This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/nXrADfBP6wNtRforv4w6KFdo1Ns.roa File: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (raw, json) Hash identifier: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg= Subject key identifier: 9D:7A:C0:0D:F0:4F:EB:03:6D:45:FA:2B:BF:8C:3A:28:57:68:D4:DB Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C36664A8B2EF64D4310304A804125 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/nXrADfBP6wNtRforv4w6KFdo1Ns.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204131 IP address blocks: 185.60.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:36:66:4a:8b:2e:f6:4d:43:10:30:4a:80:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d7ac00df04feb036d45fa2bbf8c3a285768d4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:8e:f7:39:ec:a8:d5:b4:16:cb:57:cf:2b: b2:07:77:44:aa:08:b2:ba:50:3a:b2:3e:ee:57:da: f1:1a:da:73:22:2b:f9:5b:8c:fe:3b:90:33:f6:d6: 62:5a:92:f2:2f:61:d1:4e:7b:59:08:be:ae:74:6c: 78:9f:94:05:c8:fc:87:33:1a:78:57:2a:29:e2:c0: 22:92:98:a1:70:f6:1f:3d:f8:55:d9:de:47:22:66: dd:7c:c3:66:95:97:70:ca:2f:1e:4d:a2:79:9a:ae: ea:71:72:df:3b:89:88:54:b8:ba:d1:7e:81:87:2c: c9:19:42:42:50:c0:e1:b3:7c:87:55:ae:85:96:f1: fc:cb:67:40:0a:b9:fd:70:f4:60:20:29:ce:4e:7c: 39:aa:6f:49:fe:c7:0d:2d:94:97:c2:18:02:1d:31: 09:35:4b:66:37:d4:76:bc:cf:e8:ff:f5:fc:ee:82: fc:ba:96:86:33:0d:b0:2c:dd:14:1b:d2:86:71:b3: c9:4d:60:05:c0:9f:38:64:cd:86:9b:cc:7c:c2:50: 6f:66:1d:47:d5:2f:9f:70:61:f0:ea:69:59:46:56: 89:0c:cb:93:8c:c1:58:83:60:c1:f7:97:7c:ce:b3: 01:ab:ea:c2:47:79:03:5c:df:70:ba:92:ec:6b:e7: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7A:C0:0D:F0:4F:EB:03:6D:45:FA:2B:BF:8C:3A:28:57:68:D4:DB X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/nXrADfBP6wNtRforv4w6KFdo1Ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.229.0/24 Signature Algorithm: sha256WithRSAEncryption 41:50:4f:cc:b5:a4:1f:6c:2b:86:a3:54:58:4e:71:eb:f7:0f: 3e:35:df:e1:d2:bd:0e:44:fc:37:29:ae:7e:1e:76:5b:e6:66: 1b:48:ff:af:b5:6e:09:46:3b:18:41:60:11:56:49:e6:46:6d: 03:55:a9:ba:00:b3:1a:14:18:e9:46:2f:ee:92:99:ec:a2:11: 47:f0:c8:b0:a4:7b:1a:bf:95:50:57:5a:df:d1:65:98:85:d9: 8c:df:78:fc:e6:d2:73:f7:19:b3:93:a3:79:95:cb:e4:cf:bc: f5:8a:0e:43:f5:0f:34:f5:fe:2d:9a:4c:7f:f8:65:60:be:c9: 5c:a3:33:3f:75:c8:63:ac:d0:78:24:d8:ba:2d:9c:cb:ee:b2: 81:65:28:4a:98:7a:35:67:9f:49:f4:33:88:fb:7d:18:03:ee: 75:6a:16:4f:74:cf:8d:6a:bd:9b:d6:68:23:22:47:9c:c9:0c: 27:86:cb:fc:e3:6f:b5:07:86:bc:49:c9:21:fa:53:20:51:05: 1e:23:ed:e9:a4:f5:8d:0d:23:12:64:0e:41:d6:96:e7:79:72: 4d:57:9e:67:e4:81:f0:aa:3f:a3:d5:f8:04:7b:02:89:69:34: 18:d5:69:17:29:48:21:d6:1a:31:2c:f8:09:7c:16:4b:10:e4: 5e:0a:f6:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XDZmSosu9k1DEDBKgEElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDdhYzAwZGYwNGZlYjAzNmQ0NWZhMmJiZjhjM2EyODU3NjhkNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg2O9znsqNW0FstXzyuyB3dEqgiy ulA6sj7uV9rxGtpzIiv5W4z+O5Az9tZiWpLyL2HRTntZCL6udGx4n5QFyPyHMxp4 Vyop4sAikpihcPYfPfhV2d5HImbdfMNmlZdwyi8eTaJ5mq7qcXLfO4mIVLi60X6B hyzJGUJCUMDhs3yHVa6FlvH8y2dACrn9cPRgICnOTnw5qm9J/scNLZSXwhgCHTEJ NUtmN9R2vM/o//X87oL8upaGMw2wLN0UG9KGcbPJTWAFwJ84ZM2Gm8x8wlBvZh1H 1S+fcGHw6mlZRlaJDMuTjMFYg2DB95d8zrMBq+rCR3kDXN9wupLsa+cFlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ16wA3wT+sDbUX6K7+MOihXaNTbMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvblhyQURmQlA2d050UmZvcnY0dzZLRmRvMU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTzlMA0G CSqGSIb3DQEBCwUAA4IBAQBBUE/MtaQfbCuGo1RYTnHr9w8+Nd/h0r0ORPw3Ka5+ HnZb5mYbSP+vtW4JRjsYQWARVknmRm0DVam6ALMaFBjpRi/ukpnsohFH8MiwpHsa v5VQV1rf0WWYhdmM33j85tJz9xmzk6N5lcvkz7z1ig5D9Q809f4tmkx/+GVgvslc ozM/dchjrNB4JNi6LZzL7rKBZShKmHo1Z59J9DOI+30YA+51ahZPdM+Nar2b1mgj IkecyQwnhsv842+1B4a8Sckh+lMgUQUeI+3ppPWNDSMSZA5B1pbneXJNV55n5IHw qj+j1fgEewKJaTQY1WkXKUgh1hoxLPgJfBZLEOReCvYt -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:48 2026 by rpki-client