This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa File: nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa (raw, json) Hash identifier: TDSKC81PAYDavcfZed5v/E88qBB6XxHDAxUBaCYBTgk= Subject key identifier: 9D:28:D5:0C:59:75:04:8E:42:49:07:03:FD:3F:A1:96:9A:BA:D1:38 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E377D1D6A683EBB82604AA30679E Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35478 IP address blocks: 194.50.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e3:77:d1:d6:a6:83:eb:b8:26:04:aa:30:67:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d28d50c5975048e42490703fd3fa1969abad138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:62:98:03:37:5b:0f:d7:b8:6d:69:87:c5: 66:81:67:31:85:27:58:e3:b5:bf:37:f7:8d:05:af: fd:d4:e2:1e:8d:58:9c:c8:ca:69:25:c5:68:8e:0b: ee:47:e4:9d:5d:6a:bd:ea:58:f7:7f:e6:17:67:af: 6b:da:7e:68:e7:5e:76:f1:47:ca:77:9c:43:03:9b: 10:3c:e9:b3:89:bd:d3:5b:3e:2f:10:28:e6:9f:63: e9:31:b9:e8:dd:d3:8a:c9:a5:16:40:de:69:71:47: 5c:21:4d:50:0b:38:32:3c:1a:ce:72:61:d4:de:12: 0e:52:8e:da:e9:a5:04:44:b0:5b:34:16:ed:8c:4d: 93:f5:0e:fd:b7:f1:17:20:4d:c2:a6:6a:ac:3e:b0: c1:84:fa:e8:f9:ee:90:ee:11:a5:8b:fe:5c:5a:fd: 0e:e1:5f:3e:84:94:39:d1:df:73:70:cd:9b:71:fb: 15:4f:4d:2e:49:ce:b3:eb:ea:8d:0f:56:70:7b:ec: 5f:8d:2f:57:d2:6b:a7:a6:5f:0c:eb:41:d9:19:3b: 5e:f3:3f:d6:78:dc:b4:fd:73:37:3b:c5:fd:fb:03: dc:a5:38:be:8f:c5:42:f1:b9:a0:5b:09:52:8b:38: 39:5d:32:af:52:f1:04:7f:95:b9:fa:0b:5f:6a:cf: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:28:D5:0C:59:75:04:8E:42:49:07:03:FD:3F:A1:96:9A:BA:D1:38 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.82.0/24 Signature Algorithm: sha256WithRSAEncryption 63:dc:bf:f6:a1:2f:55:d1:f8:f2:86:ae:62:c1:76:e0:44:35: d3:7c:f8:ed:68:2a:df:35:4e:40:45:cd:45:dd:03:9a:d3:6b: 64:23:11:ce:5a:9b:ce:4f:1c:3c:38:50:70:fb:57:f0:47:c2: 9e:6d:d2:21:30:4b:12:f9:a3:d2:2c:ea:9e:6f:b2:d7:f5:db: e2:df:aa:29:df:14:c4:50:af:bd:1e:84:e1:1b:d4:11:10:2d: f8:79:ca:2c:63:73:ea:26:61:fc:ec:7b:7c:19:57:6e:be:9e: d7:c6:c7:77:a9:99:ab:fc:18:e3:dc:ce:bc:a5:47:6c:4c:96: 35:1b:f3:8f:99:74:dc:94:1c:6c:4a:2b:07:4c:cf:0a:98:cc: 3f:fb:d4:8c:6d:59:e5:61:fc:64:e3:be:cc:94:5b:ea:f3:15: 16:f2:98:a8:8d:18:d0:1d:b9:da:aa:b5:38:e6:99:a8:41:f1: 48:13:df:fd:e1:f8:a7:74:56:d0:33:63:7f:80:62:51:23:51: fa:43:b0:67:e8:bd:dd:0e:16:83:46:2e:72:0f:29:1b:01:ff: 84:90:a0:76:99:eb:d0:36:73:a8:da:59:40:2e:45:2a:ec:bf: 46:1c:4e:56:c8:80:f0:5c:de:76:ac:91:6c:2c:9d:65:e2:50: b7:be:20:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+N30damg+u4JgSqMGeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDI4ZDUwYzU5NzUwNDhlNDI0OTA3MDNmZDNmYTE5NjlhYmFkMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OBimAM3Ww/XuG1ph8VmgWcxhSdY 47W/N/eNBa/91OIejVicyMppJcVojgvuR+SdXWq96lj3f+YXZ69r2n5o51528UfK d5xDA5sQPOmzib3TWz4vECjmn2PpMbno3dOKyaUWQN5pcUdcIU1QCzgyPBrOcmHU 3hIOUo7a6aUERLBbNBbtjE2T9Q79t/EXIE3CpmqsPrDBhPro+e6Q7hGli/5cWv0O 4V8+hJQ50d9zcM2bcfsVT00uSc6z6+qND1Zwe+xfjS9X0munpl8M60HZGTte8z/W eNy0/XM3O8X9+wPcpTi+j8VC8bmgWwlSizg5XTKvUvEEf5W5+gtfas9ndQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0o1QxZdQSOQkkHA/0/oZaautE4MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvblNqVkRGbDFCSTVDU1FjRF9ULWhscHE2MFRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJSMA0G CSqGSIb3DQEBCwUAA4IBAQBj3L/2oS9V0fjyhq5iwXbgRDXTfPjtaCrfNU5ARc1F 3QOa02tkIxHOWpvOTxw8OFBw+1fwR8KebdIhMEsS+aPSLOqeb7LX9dvi36op3xTE UK+9HoThG9QREC34ecosY3PqJmH87Ht8GVduvp7Xxsd3qZmr/Bjj3M68pUdsTJY1 G/OPmXTclBxsSisHTM8KmMw/+9SMbVnlYfxk477MlFvq8xUW8piojRjQHbnaqrU4 5pmoQfFIE9/94findFbQM2N/gGJRI1H6Q7Bn6L3dDhaDRi5yDykbAf+EkKB2mevQ NnOo2llALkUq7L9GHE5WyIDwXN52rJFsLJ1l4lC3viAY -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:41 2026 by rpki-client