This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/NSzxR15lxLwAdc7Ga165-6mKacc.roa File: NSzxR15lxLwAdc7Ga165-6mKacc.roa (raw, json) Hash identifier: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk= Subject key identifier: 35:2C:F1:47:5E:65:C4:BC:00:75:CE:C6:6B:5E:B9:FB:A9:8A:69:C7 Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a Certificate serial: 019B7FF1764BBA0974E973038B3576005097 Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/NSzxR15lxLwAdc7Ga165-6mKacc.roa Signing time: Fri 02 Jan 2026 18:21:29 +0000 ROA not before: Fri 02 Jan 2026 18:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51826 IP address blocks: 185.222.60.0/24 maxlen: 24 2a13:a0c0::/29 maxlen: 29 2a13:a0c0::/32 maxlen: 32 2a13:a0c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:76:4b:ba:09:74:e9:73:03:8b:35:76:00:50:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a Validity Not Before: Jan 2 18:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=352cf1475e65c4bc0075cec66b5eb9fba98a69c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:58:b6:bc:6b:3d:71:cb:78:9a:d1:6e:01: a0:5f:8c:06:25:71:96:d1:c3:e5:70:d1:c2:c5:3a: d7:52:87:bf:73:d9:79:aa:83:22:ef:7e:b1:f7:db: f3:ff:29:6c:47:d7:cb:20:81:af:34:d5:8c:92:8d: 02:45:77:d6:18:d3:0e:03:44:f8:97:35:c4:68:ab: 03:98:87:09:af:f9:a7:6f:84:9b:4a:7f:97:d8:ee: 62:f3:77:44:20:f7:de:4d:dd:be:e3:2e:d8:84:69: 46:4e:20:95:01:d0:c2:6c:f8:82:a0:36:01:b5:76: 7f:6e:e4:ba:fe:ab:c0:82:9b:74:08:4b:31:f2:ed: e7:7a:50:ab:96:f4:93:35:65:83:b7:c1:3e:f4:2b: 4e:66:04:e1:a5:29:49:f7:a9:75:ab:75:29:d2:34: f3:7f:36:6d:75:5a:aa:d4:a5:f5:45:b9:5e:22:c3: f4:64:f3:e4:0c:79:d3:dd:d5:3b:16:90:a0:c5:0d: a9:73:10:9e:7a:bc:2b:f7:a9:84:df:70:e5:04:95: 67:dc:4e:18:98:8e:19:2a:19:74:df:87:ac:04:a1: 69:2c:4f:75:37:6e:db:7c:0e:1c:d7:4d:8c:a4:e7: 19:6e:82:4f:9e:47:76:5e:81:38:8b:ba:52:a8:ab: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2C:F1:47:5E:65:C4:BC:00:75:CE:C6:6B:5E:B9:FB:A9:8A:69:C7 X509v3 Authority Key Identifier: keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/NSzxR15lxLwAdc7Ga165-6mKacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.60.0/24 IPv6: 2a13:a0c0::/29 Signature Algorithm: sha256WithRSAEncryption 09:7c:2e:69:56:df:7f:bd:8f:9e:54:bb:ae:68:84:0b:98:be: 05:87:e4:c5:ba:87:b7:49:d7:5d:af:d9:58:55:85:82:1e:d0: 74:7b:8f:05:8e:e0:0b:f9:ac:b7:e8:4d:fd:d0:53:dc:f8:0a: a4:97:e8:6d:d4:0f:44:80:43:93:e6:e0:c7:7b:c3:0e:e2:9a: 1e:c3:f8:06:c7:a0:ab:0a:b2:94:45:5d:01:96:f2:79:42:4d: a1:56:9b:b2:75:d6:6e:d0:ac:67:52:5b:20:74:ac:22:e5:2f: 27:81:f4:d3:ff:41:9e:b5:b6:25:58:33:1a:4f:7f:21:ec:d7: 6d:55:7a:0d:ca:b6:df:9a:9b:91:e5:72:9d:f1:a7:fd:44:bd: a8:ff:aa:3b:31:a4:9e:1a:c2:52:e9:d4:f4:6e:8b:9b:e6:29: 72:d7:cd:b2:8d:f0:77:47:83:75:7f:82:29:f4:db:4c:b4:7e: 34:67:2f:08:2e:66:25:6c:9d:7b:53:42:a0:fe:40:1b:b3:b2: fb:fa:df:52:a9:e8:bb:c7:69:39:aa:27:3d:1f:f2:b0:6e:f0: f4:58:f2:11:fc:33:75:0b:9e:bd:a5:29:d4:84:17:a7:3b:97: 25:d7:7e:3a:09:2c:37:49:57:3b:20:9f:a7:cd:db:ad:93:04: 30:2d:5d:f8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8XZLugl06XMDizV2AFCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5 YjM5NmEwHhcNMjYwMTAyMTgyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTJjZjE0NzVlNjVjNGJjMDA3NWNlYzY2YjVlYjlmYmE5OGE2OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZYtrxrPXHLeJrRbgGgX4wGJXGW 0cPlcNHCxTrXUoe/c9l5qoMi736x99vz/ylsR9fLIIGvNNWMko0CRXfWGNMOA0T4 lzXEaKsDmIcJr/mnb4SbSn+X2O5i83dEIPfeTd2+4y7YhGlGTiCVAdDCbPiCoDYB tXZ/buS6/qvAgpt0CEsx8u3nelCrlvSTNWWDt8E+9CtOZgThpSlJ96l1q3Up0jTz fzZtdVqq1KX1RbleIsP0ZPPkDHnT3dU7FpCgxQ2pcxCeerwr96mE33DlBJVn3E4Y mI4ZKhl034esBKFpLE91N27bfA4c102MpOcZboJPnkd2XoE4i7pSqKv9GwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDUs8UdeZcS8AHXOxmteufupimnHMB8GA1UdIwQY MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt MzA1NWNiNzI5YmNmLzEvTlN6eFIxNWx4THdBZGM3R2ExNjUtNm1LYWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAud48MA0E AgACMAcDBQMqE6DAMA0GCSqGSIb3DQEBCwUAA4IBAQAJfC5pVt9/vY+eVLuuaIQL mL4Fh+TFuoe3Sdddr9lYVYWCHtB0e48FjuAL+ay36E390FPc+Aqkl+ht1A9EgEOT 5uDHe8MO4poew/gGx6CrCrKURV0BlvJ5Qk2hVpuyddZu0KxnUlsgdKwi5S8ngfTT /0GetbYlWDMaT38h7NdtVXoNyrbfmpuR5XKd8af9RL2o/6o7MaSeGsJS6dT0boub 5ily182yjfB3R4N1f4Ip9NtMtH40Zy8ILmYlbJ17U0Kg/kAbs7L7+t9Sqei7x2k5 qic9H/KwbvD0WPIR/DN1C569pSnUhBenO5cl1346CSw3SVc7IJ+nzdutkwQwLV34 -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:17 2026 by rpki-client