This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/nVkaAqSfL68oakAlVtLj1dtBZ5U.roa File: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (raw, json) Hash identifier: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w= Subject key identifier: 9D:59:1A:02:A4:9F:2F:AF:28:6A:40:25:56:D2:E3:D5:DB:41:67:95 Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef Certificate serial: 019B78A20F6F004515111E11C06EA735F842 Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/nVkaAqSfL68oakAlVtLj1dtBZ5U.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38915 IP address blocks: 194.104.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 23:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:0f:6f:00:45:15:11:1e:11:c0:6e:a7:35:f8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d591a02a49f2faf286a402556d2e3d5db416795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:b6:d3:af:be:2e:89:95:59:ec:3c:2a:a5: c6:bb:db:31:bf:b6:3b:70:70:2c:b2:ba:24:9d:23: 21:90:09:24:4d:30:8d:6c:c9:ce:72:0c:23:87:21: 3e:90:29:35:6b:cf:f2:0a:24:98:64:2a:11:88:e4: 4d:36:4c:22:55:6f:fc:68:b0:44:5e:ce:f4:f4:b0: a0:6a:14:02:94:6c:d6:28:2c:41:fd:34:e5:06:5e: 9a:32:07:55:e8:5d:ad:86:ba:f5:7b:46:92:06:e3: a5:75:78:d7:7e:7b:65:c0:ed:70:8c:29:a6:3a:e5: d6:35:e3:31:4d:bc:2b:9f:44:63:29:44:3c:4e:f4: a9:c3:d1:2f:ef:f4:6c:98:01:e0:e2:93:20:9d:ca: 74:44:64:b6:b8:a9:e5:b9:f0:74:e1:5e:83:cd:87: d1:72:d4:aa:52:dc:a7:3c:b3:cb:2a:07:e4:2c:09: 7f:c3:6e:6a:09:83:73:ab:2e:f7:d7:3b:ed:dc:3f: 3c:26:df:83:76:d3:b9:76:e8:3e:ab:62:83:a3:70: 59:e8:df:9a:ea:df:0d:9b:f6:19:46:a1:5f:19:53: e9:78:e8:71:bc:3d:30:cb:b9:0b:e8:62:2e:2f:59: 2a:a4:dd:60:12:cd:5e:34:d5:1a:13:91:f9:d2:59: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:59:1A:02:A4:9F:2F:AF:28:6A:40:25:56:D2:E3:D5:DB:41:67:95 X509v3 Authority Key Identifier: keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/nVkaAqSfL68oakAlVtLj1dtBZ5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.157.0/24 Signature Algorithm: sha256WithRSAEncryption 74:b2:ef:4e:d1:a4:07:42:29:b5:1e:5f:1d:57:ba:4a:3d:36: 29:c0:50:b8:79:89:69:01:8a:7d:1b:cf:4a:59:ad:92:9d:85: 20:4e:94:26:12:f4:c2:48:33:c4:f5:74:cf:aa:7d:20:e5:ee: e6:f4:09:ea:36:f0:fa:ba:63:b6:51:c5:4c:f7:d1:b8:ba:54: cb:4a:0b:90:df:7a:35:9c:55:d9:86:4b:03:04:a4:ea:dd:d8: 39:ef:4d:82:4a:ac:a5:9f:a3:50:51:02:f7:4c:5b:bf:27:f5: 94:23:e3:2d:72:87:f3:d8:3c:2e:c7:13:2c:d4:b6:f2:19:f5: 31:a4:c9:99:74:9f:5b:0b:ef:a5:7d:06:bb:dd:f5:98:ef:3b: 7a:df:7b:ae:a0:51:0a:06:dd:d3:d2:9a:d8:94:ff:22:67:83: cf:06:31:e1:ce:7c:48:ee:f1:3f:a6:5f:e9:a4:d1:8e:b8:a3: f0:e4:2b:5f:a5:6b:37:11:49:11:42:9a:07:63:2a:11:d7:0d: 0a:23:5d:d8:11:70:20:58:6a:39:1a:f3:b0:34:2b:9c:e3:04: 08:79:4c:80:06:c8:0f:2b:92:6c:d8:7d:e0:48:67:63:cc:81: 21:20:3a:cc:b7:c5:74:cd:7e:24:36:17:78:cb:0b:af:20:f8: c9:3d:ff:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4og9vAEUVER4RwG6nNfhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl NTE0ZWYwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDU5MWEwMmE0OWYyZmFmMjg2YTQwMjU1NmQyZTNkNWRiNDE2Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthK206++LomVWew8KqXGu9sxv7Y7 cHAssroknSMhkAkkTTCNbMnOcgwjhyE+kCk1a8/yCiSYZCoRiORNNkwiVW/8aLBE Xs709LCgahQClGzWKCxB/TTlBl6aMgdV6F2thrr1e0aSBuOldXjXfntlwO1wjCmm OuXWNeMxTbwrn0RjKUQ8TvSpw9Ev7/RsmAHg4pMgncp0RGS2uKnlufB04V6DzYfR ctSqUtynPLPLKgfkLAl/w25qCYNzqy731zvt3D88Jt+DdtO5dug+q2KDo3BZ6N+a 6t8Nm/YZRqFfGVPpeOhxvD0wy7kL6GIuL1kqpN1gEs1eNNUaE5H50lmxxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1ZGgKkny+vKGpAJVbS49XbQWeVMB8GA1UdIwQY MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt NWQzM2UxOGE2OWEwLzEvblZrYUFxU2ZMNjhvYWtBbFZ0TGoxZHRCWjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmidMA0G CSqGSIb3DQEBCwUAA4IBAQB0su9O0aQHQim1Hl8dV7pKPTYpwFC4eYlpAYp9G89K Wa2SnYUgTpQmEvTCSDPE9XTPqn0g5e7m9AnqNvD6umO2UcVM99G4ulTLSguQ33o1 nFXZhksDBKTq3dg5702CSqyln6NQUQL3TFu/J/WUI+Mtcofz2DwuxxMs1LbyGfUx pMmZdJ9bC++lfQa73fWY7zt633uuoFEKBt3T0prYlP8iZ4PPBjHhznxI7vE/pl/p pNGOuKPw5CtfpWs3EUkRQpoHYyoR1w0KI13YEXAgWGo5GvOwNCuc4wQIeUyABsgP K5Js2H3gSGdjzIEhIDrMt8V0zX4kNhd4ywuvIPjJPf9y -----END CERTIFICATE-----Generated at Tue Jan 13 06:06:57 2026 by rpki-client