This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/NnIeD7Oxn1SYizd0wbtW04eiFek.roa File: NnIeD7Oxn1SYizd0wbtW04eiFek.roa (raw, json) Hash identifier: tNo52za6sFrqb7l6ADAKsf1PPEqsHXF944nHimoWDRw= Subject key identifier: 36:72:1E:0F:B3:B1:9F:54:98:8B:37:74:C1:BB:56:D3:87:A2:15:E9 Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Certificate serial: 019B7910B68387EAEC34FA25D2A7C290A931 Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/NnIeD7Oxn1SYizd0wbtW04eiFek.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42649 IP address blocks: 128.76.64.0/18 maxlen: 18 178.239.48.0/20 maxlen: 20 185.24.248.0/22 maxlen: 22 185.149.56.0/24 maxlen: 24 185.149.57.0/24 maxlen: 24 185.149.58.0/24 maxlen: 24 185.149.59.0/24 maxlen: 24 185.195.92.0/24 maxlen: 24 185.195.93.0/24 maxlen: 24 185.195.94.0/24 maxlen: 24 185.195.95.0/24 maxlen: 24 2a0a:56c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b6:83:87:ea:ec:34:fa:25:d2:a7:c2:90:a9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36721e0fb3b19f54988b3774c1bb56d387a215e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:1e:24:54:d7:99:0e:1c:50:df:c3:1a:52: 4f:87:9b:45:8c:a7:3d:34:2f:53:e2:de:c3:80:ca: 82:be:02:6c:31:91:8b:83:e2:fc:a3:9e:01:a4:6f: 1c:24:4e:d7:14:3d:c8:80:5f:02:ac:70:92:a0:99: 72:12:6d:2f:db:3f:fc:8b:ea:88:5a:6d:e0:cc:c2: fa:24:91:6a:7d:82:11:71:b4:89:4f:4c:a4:ab:05: 53:5c:d2:b0:4a:f0:a1:f6:7d:3e:58:6f:4e:e2:a4: 67:19:fb:98:53:96:29:f1:f2:50:cc:a0:b4:10:99: ee:73:08:62:f0:11:cb:7a:ea:68:7a:05:f6:73:6a: 59:60:e4:90:4b:71:5e:8c:9f:6c:03:c2:6b:e9:18: 98:b4:96:72:d5:97:22:e7:fd:55:d6:73:b3:0c:b3: 92:0b:23:b9:5b:f1:79:f6:aa:6c:a5:a1:c8:88:c5: ea:10:39:3b:df:65:76:1d:b7:6a:80:1b:1b:10:30: da:7b:ec:7c:18:42:21:ab:6b:3a:48:53:2e:41:c1: f5:56:40:d8:2e:98:99:fd:54:c2:d3:81:7b:e6:3b: 2a:14:f7:5a:24:b7:bc:2a:c2:0e:81:8c:26:66:fa: 8d:a0:73:21:34:41:35:a6:2b:ba:0d:99:02:96:fe: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:1E:0F:B3:B1:9F:54:98:8B:37:74:C1:BB:56:D3:87:A2:15:E9 X509v3 Authority Key Identifier: keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/NnIeD7Oxn1SYizd0wbtW04eiFek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.76.64.0/18 178.239.48.0/20 185.24.248.0/22 185.149.56.0/22 185.195.92.0/22 IPv6: 2a0a:56c0::/29 Signature Algorithm: sha256WithRSAEncryption 10:4a:e9:96:0a:7d:c0:4a:d8:fb:67:ec:c9:4c:3f:e5:0b:ba: 08:e2:62:1f:29:da:e3:36:60:f7:9e:37:92:1d:df:4e:ea:09: cd:fc:f9:88:1e:98:c8:f4:b5:88:b9:fb:9d:ea:f3:cc:ed:c2: 31:3e:ce:64:87:3e:a9:2b:74:f5:78:33:e2:59:fc:68:6e:02: 82:cc:a7:e1:d0:6a:67:6f:85:64:56:e3:02:9c:e3:b1:00:be: cd:e4:e4:87:b9:97:3a:17:3f:23:f5:3b:58:f1:74:71:72:2e: 6c:40:52:56:44:c4:25:13:9a:dd:5c:2f:e9:2d:7d:0b:67:0b: 0e:7c:31:31:cd:b1:96:f8:0c:a4:6e:70:87:55:6a:9b:de:a3: ab:9d:a8:43:61:8f:03:dd:29:1e:4d:19:2f:21:3e:77:8e:a7: 6a:ca:5b:9f:6c:a1:ce:9b:1d:ad:24:55:aa:18:d3:73:b4:93: 3e:15:6f:d1:bd:2a:f1:99:07:7f:f3:f8:a5:24:d7:fc:56:5a: 48:5a:2b:c6:29:6d:14:1b:9e:c8:5f:74:76:f8:4a:49:77:5d: 59:14:3d:48:bd:f3:53:ab:69:63:40:fd:91:30:64:7b:c5:39: d3:9e:07:92:e5:13:a0:c0:9b:31:ff:bb:b5:a2:52:e9:bb:25: 96:91:93:53 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5ELaDh+rsNPol0qfCkKkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk NzM2OWQwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjcyMWUwZmIzYjE5ZjU0OTg4YjM3NzRjMWJiNTZkMzg3YTIxNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzoeJFTXmQ4cUN/DGlJPh5tFjKc9 NC9T4t7DgMqCvgJsMZGLg+L8o54BpG8cJE7XFD3IgF8CrHCSoJlyEm0v2z/8i+qI Wm3gzML6JJFqfYIRcbSJT0ykqwVTXNKwSvCh9n0+WG9O4qRnGfuYU5Yp8fJQzKC0 EJnucwhi8BHLeupoegX2c2pZYOSQS3FejJ9sA8Jr6RiYtJZy1Zci5/1V1nOzDLOS CyO5W/F59qpspaHIiMXqEDk732V2HbdqgBsbEDDae+x8GEIhq2s6SFMuQcH1VkDY LpiZ/VTC04F75jsqFPdaJLe8KsIOgYwmZvqNoHMhNEE1piu6DZkClv6Y+wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFDZyHg+zsZ9UmIs3dMG7VtOHohXpMB8GA1UdIwQY MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt OWNlNDc2N2RhMmMxLzEvTm5JZUQ3T3huMVNZaXpkMHdidFcwNGVpRmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGgExAAwQE su8wAwQCuRj4AwQCuZU4AwQCucNcMA0EAgACMAcDBQMqClbAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSumWCn3AStj7Z+zJTD/lC7oI4mIfKdrjNmD3njeSHd9O6gnN/PmI HpjI9LWIufud6vPM7cIxPs5khz6pK3T1eDPiWfxobgKCzKfh0Gpnb4VkVuMCnOOx AL7N5OSHuZc6Fz8j9TtY8XRxci5sQFJWRMQlE5rdXC/pLX0LZwsOfDExzbGW+Ayk bnCHVWqb3qOrnahDYY8D3SkeTRkvIT53jqdqylufbKHOmx2tJFWqGNNztJM+FW/R vSrxmQd/8/ilJNf8VlpIWivGKW0UG57IX3R2+EpJd11ZFD1IvfNTq2ljQP2RMGR7 xTnTngeS5ROgwJsx/7u1olLpuyWWkZNT -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:38 2026 by rpki-client