This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NAErYGyu2OxGuf_6AEnvFZF3m00.roa File: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (raw, json) Hash identifier: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E= Subject key identifier: 34:01:2B:60:6C:AE:D8:EC:46:B9:FF:FA:00:49:EF:15:91:77:9B:4D Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC41F4B0EBC83366AD119645E8B19D Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NAErYGyu2OxGuf_6AEnvFZF3m00.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44341 IP address blocks: 195.211.160.0/24 maxlen: 24 195.211.161.0/24 maxlen: 24 195.211.162.0/24 maxlen: 24 195.211.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:41:f4:b0:eb:c8:33:66:ad:11:96:45:e8:b1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34012b606caed8ec46b9fffa0049ef1591779b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:ab:39:26:68:2d:0f:f5:74:b6:6f:b0:bf: e2:da:b2:3a:6f:2f:85:05:ee:84:22:94:55:29:c1: 4d:af:55:20:27:38:a8:83:b7:57:d9:cc:45:29:28: e1:84:7a:e4:15:74:f7:f2:a2:13:a8:85:eb:1b:a7: 4a:d4:db:7d:da:51:83:b7:b4:53:11:a8:6f:cd:fb: ad:5e:98:4b:6f:66:58:4c:2e:9c:00:17:27:f7:b0: 4b:7b:04:fc:c1:d4:1e:5d:2c:71:3d:59:7b:ba:39: b2:b5:56:6e:a1:0a:59:2e:39:c9:27:49:06:24:db: 2a:c8:85:09:35:d7:4f:00:45:b1:cc:a3:af:8b:41: 8f:e6:91:ca:a8:6d:1c:42:4b:be:4e:56:7d:82:84: 89:fa:10:d6:9f:0e:7c:5d:92:71:bc:ed:3b:f5:14: c4:8a:5d:ea:9a:1a:e8:6b:a8:92:47:fa:04:eb:2d: 41:73:34:87:67:14:65:df:cb:63:f2:42:68:31:1a: 83:3b:80:0f:c0:0e:4b:92:ad:e7:56:d9:d7:95:09: 06:f2:3c:59:a7:08:18:19:be:06:25:11:5f:77:d9: c8:72:0b:e5:17:4c:1b:14:65:59:17:56:7e:bd:87: 85:30:49:6c:c8:0e:25:63:49:4e:58:70:4a:6b:2c: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:2B:60:6C:AE:D8:EC:46:B9:FF:FA:00:49:EF:15:91:77:9B:4D X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NAErYGyu2OxGuf_6AEnvFZF3m00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.160.0/22 Signature Algorithm: sha256WithRSAEncryption af:8b:fd:cb:89:b4:b0:ac:0b:8d:82:f5:85:c9:2d:16:86:37: de:4d:23:a5:82:f1:43:de:e7:0b:0c:30:76:35:43:a0:2e:93: c2:0d:d8:e2:05:63:0c:4f:58:48:55:86:8d:49:72:4e:2c:e4: f9:fb:69:a3:7a:b7:28:c0:fe:f4:f5:10:98:92:a8:03:53:d6: 9b:b3:97:b7:76:d2:4b:29:2b:31:f4:8f:72:d7:66:da:42:7a: 8c:d0:22:bc:ad:74:c5:57:84:54:7e:90:6a:10:14:74:36:ff: fa:f4:0f:06:25:50:8d:4d:88:8d:ab:f0:7f:42:d8:d4:7e:73: 6f:4c:29:77:6e:d0:55:af:1d:89:43:60:59:75:40:6f:2b:24: 39:e8:8c:bd:1e:24:ea:c6:54:7b:4d:7e:22:f8:2e:19:e5:f0: 62:d5:99:c3:25:34:77:32:d3:e3:aa:93:4a:85:26:46:52:79: b0:62:ed:5b:d2:42:b4:64:49:e1:e3:9a:c2:70:90:e8:b1:92: fe:fa:39:b0:3a:8a:13:17:fc:f3:d6:e5:16:9b:58:df:31:f0: eb:24:64:15:a3:39:cc:11:5c:a6:80:e9:47:ab:c7:0b:7d:15: bd:76:58:47:da:a5:93:7e:25:b8:51:6b:ea:58:0d:24:d4:f8: 84:a5:aa:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EH0sOvIM2atEZZF6LGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDAxMmI2MDZjYWVkOGVjNDZiOWZmZmEwMDQ5ZWYxNTkxNzc5YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GKrOSZoLQ/1dLZvsL/i2rI6by+F Be6EIpRVKcFNr1UgJziog7dX2cxFKSjhhHrkFXT38qITqIXrG6dK1Nt92lGDt7RT EahvzfutXphLb2ZYTC6cABcn97BLewT8wdQeXSxxPVl7ujmytVZuoQpZLjnJJ0kG JNsqyIUJNddPAEWxzKOvi0GP5pHKqG0cQku+TlZ9goSJ+hDWnw58XZJxvO079RTE il3qmhroa6iSR/oE6y1BczSHZxRl38tj8kJoMRqDO4APwA5Lkq3nVtnXlQkG8jxZ pwgYGb4GJRFfd9nIcgvlF0wbFGVZF1Z+vYeFMElsyA4lY0lOWHBKayz/EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQBK2BsrtjsRrn/+gBJ7xWRd5tNMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvTkFFcllHeXUyT3hHdWZfNkFFbnZGWkYzbTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9OgMA0G CSqGSIb3DQEBCwUAA4IBAQCvi/3LibSwrAuNgvWFyS0WhjfeTSOlgvFD3ucLDDB2 NUOgLpPCDdjiBWMMT1hIVYaNSXJOLOT5+2mjercowP709RCYkqgDU9abs5e3dtJL KSsx9I9y12baQnqM0CK8rXTFV4RUfpBqEBR0Nv/69A8GJVCNTYiNq/B/QtjUfnNv TCl3btBVrx2JQ2BZdUBvKyQ56Iy9HiTqxlR7TX4i+C4Z5fBi1ZnDJTR3MtPjqpNK hSZGUnmwYu1b0kK0ZEnh45rCcJDosZL++jmwOooTF/zz1uUWm1jfMfDrJGQVoznM EVymgOlHq8cLfRW9dlhH2qWTfiW4UWvqWA0k1PiEparw -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:47 2026 by rpki-client