This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa File: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (raw, json) Hash identifier: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ= Subject key identifier: 37:2A:89:DC:77:02:FB:70:EA:4D:18:CF:11:91:DA:7F:5B:D5:A6:69 Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee Certificate serial: 019B76EB7215827F8AD46AC7B0BAF5515650 Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.116.168.0/24 maxlen: 24 185.116.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:72:15:82:7f:8a:d4:6a:c7:b0:ba:f5:51:56:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372a89dc7702fb70ea4d18cf1191da7f5bd5a669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:b5:7e:a8:3b:4d:49:6c:fb:bf:9b:70:22: 99:1a:9d:32:d7:d1:bb:f5:ea:c4:f4:09:d3:b2:03: 6d:1f:df:a4:d8:1f:8e:29:a8:15:ee:8a:bd:8e:e1: 86:d0:a7:fb:03:86:c0:fb:f1:69:bd:99:51:24:4b: 71:91:e6:10:cd:72:3b:07:ba:ad:fa:f9:b8:1c:bd: 36:c1:4f:b1:94:55:91:ca:a5:e1:2e:c2:2a:dc:c5: 3d:bf:9e:d2:68:bd:69:3d:15:cf:f9:0f:ce:d8:2c: f6:ea:21:f5:ff:b7:17:d8:98:02:b0:ed:ec:aa:d8: 2f:b3:1a:c8:45:59:6e:0d:87:2c:d9:7d:44:5a:61: 00:3b:99:04:eb:dd:73:4d:5f:e6:4b:f6:52:bf:1f: fc:22:e2:84:c8:ed:ac:16:e0:a8:95:b8:dd:c8:42: 04:6b:00:a5:cd:c2:1e:5b:89:db:64:9e:fb:7d:00: 3c:0d:6d:65:b9:11:ce:02:9b:9d:cf:23:16:fe:bb: 93:36:69:47:87:ce:62:97:7b:2a:4f:05:c3:aa:fc: 28:79:bf:36:b7:52:40:d6:f3:d5:db:ca:36:0e:e0: fc:38:a8:d9:c4:e8:8b:e0:1f:f1:61:63:aa:0a:a7: 80:49:1e:e6:14:d0:ea:b4:08:1c:4c:f6:00:e2:33: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:89:DC:77:02:FB:70:EA:4D:18:CF:11:91:DA:7F:5B:D5:A6:69 X509v3 Authority Key Identifier: keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.168.0/23 Signature Algorithm: sha256WithRSAEncryption 76:24:de:6c:cd:7f:2d:77:1d:5e:44:27:77:59:22:e9:4f:42: a2:ff:5f:31:f5:b5:34:b6:1a:34:fd:2f:89:aa:7a:68:7f:5b: 04:58:c7:63:aa:54:7b:ed:d1:9c:d8:32:88:71:27:93:16:0e: e0:ba:6d:52:c9:80:67:10:70:b5:66:5a:7c:d2:1c:ac:67:ae: c7:e8:1a:82:fc:41:67:13:dd:0a:e6:3b:c1:6f:a3:c6:4d:14: 41:04:5f:80:9b:5e:24:32:6a:bd:8a:29:da:56:d1:5b:cc:1e: c3:75:01:c9:f0:16:6f:f7:cf:5b:6d:b9:ab:9c:3d:5f:d4:21: 99:ab:30:86:6d:8d:65:7d:78:c4:03:65:00:cb:4d:15:10:0d: 2b:05:fa:7b:31:0a:56:4e:a2:b4:b1:60:42:6d:ea:1a:db:18: f5:26:60:d6:0d:bd:f4:d4:01:3c:8a:10:0b:cd:c1:f7:2d:2e: 80:2d:b7:6f:97:33:dc:50:eb:de:a9:9d:ba:84:a6:76:99:2a: c7:39:08:35:d6:c5:91:0d:eb:37:73:5b:da:24:28:f5:6e:c0: fb:87:05:e0:d0:67:bd:c1:1e:ce:00:6b:ec:70:9e:44:a8:39: 6f:6c:48:61:fe:d5:0a:3b:b8:ec:e8:11:db:04:21:35:a8:78: 0c:c0:2f:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263IVgn+K1GrHsLr1UVZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx NWMyZWUwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzJhODlkYzc3MDJmYjcwZWE0ZDE4Y2YxMTkxZGE3ZjViZDVhNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSi1fqg7TUls+7+bcCKZGp0y19G7 9erE9AnTsgNtH9+k2B+OKagV7oq9juGG0Kf7A4bA+/FpvZlRJEtxkeYQzXI7B7qt +vm4HL02wU+xlFWRyqXhLsIq3MU9v57SaL1pPRXP+Q/O2Cz26iH1/7cX2JgCsO3s qtgvsxrIRVluDYcs2X1EWmEAO5kE691zTV/mS/ZSvx/8IuKEyO2sFuColbjdyEIE awClzcIeW4nbZJ77fQA8DW1luRHOApudzyMW/ruTNmlHh85il3sqTwXDqvwoeb82 t1JA1vPV28o2DuD8OKjZxOiL4B/xYWOqCqeASR7mFNDqtAgcTPYA4jNnCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcqidx3Avtw6k0YzxGR2n9b1aZpMB8GA1UdIwQY MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt NjM2ODU3ZWUxNzkyLzEvTnlxSjNIY0MtM0RxVFJqUEVaSGFmMXZWcG1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXSoMA0G CSqGSIb3DQEBCwUAA4IBAQB2JN5szX8tdx1eRCd3WSLpT0Ki/18x9bU0tho0/S+J qnpof1sEWMdjqlR77dGc2DKIcSeTFg7gum1SyYBnEHC1Zlp80hysZ67H6BqC/EFn E90K5jvBb6PGTRRBBF+Am14kMmq9iinaVtFbzB7DdQHJ8BZv989bbbmrnD1f1CGZ qzCGbY1lfXjEA2UAy00VEA0rBfp7MQpWTqK0sWBCbeoa2xj1JmDWDb301AE8ihAL zcH3LS6ALbdvlzPcUOveqZ26hKZ2mSrHOQg11sWRDes3c1vaJCj1bsD7hwXg0Ge9 wR7OAGvscJ5EqDlvbEhh/tUKO7js6BHbBCE1qHgMwC9C -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:11 2026 by rpki-client