This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/isNFxDMxMO_jCRsot29OR1lOtZ4.roa File: isNFxDMxMO_jCRsot29OR1lOtZ4.roa (raw, json) Hash identifier: zhnPH4ETfrhVo9bikf8ExJ78o9KtLZ7fPA9NFAQkp+4= Subject key identifier: 8A:C3:45:C4:33:31:30:EF:E3:09:1B:28:B7:6F:4E:47:59:4E:B5:9E Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019BC69961E517E1131DBA499A98A4BCB42E Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/isNFxDMxMO_jCRsot29OR1lOtZ4.roa Signing time: Fri 16 Jan 2026 11:38:19 +0000 ROA not before: Fri 16 Jan 2026 11:38:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206576 IP address blocks: 5.181.72.0/22 maxlen: 24 45.137.44.0/22 maxlen: 24 83.150.252.0/22 maxlen: 24 185.90.0.0/22 maxlen: 24 185.182.200.0/23 maxlen: 24 185.229.4.0/22 maxlen: 24 185.246.132.0/22 maxlen: 24 185.247.200.0/22 maxlen: 24 185.248.252.0/22 maxlen: 24 185.248.252.0/24 maxlen: 24 185.248.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:99:61:e5:17:e1:13:1d:ba:49:9a:98:a4:bc:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jan 16 11:38:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac345c4333130efe3091b28b76f4e47594eb59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:15:e0:22:73:e0:25:24:be:2e:67:7d:02: e0:2a:c7:42:19:65:d4:aa:6a:c5:fa:b3:f4:7f:61: 86:56:bd:39:8f:f6:d5:d8:b2:d8:4e:e6:50:35:3b: 7f:99:6d:c5:e3:c6:af:79:9d:a7:a5:3f:5d:84:83: d5:ba:ce:3f:f0:8c:44:60:0c:e2:2b:cb:07:8d:76: a4:98:c6:e6:61:ae:bb:78:53:52:b3:27:e4:3e:da: 52:46:ba:40:03:f1:33:56:bc:90:bf:f8:95:c4:c0: 3b:5f:f1:d5:1a:52:f7:f4:09:11:c0:cb:70:4e:1b: 14:47:51:bc:dc:9d:9a:58:6f:f0:cf:9c:2f:00:c0: b4:2b:9e:c2:ea:90:50:12:25:17:26:af:eb:1e:2a: b3:0f:a2:c0:47:82:c9:2b:01:c0:92:96:31:4c:5e: 8b:84:15:ab:e8:9a:f8:23:7f:f4:97:e0:6f:53:b6: d1:25:db:e8:6f:94:b7:d5:09:38:29:18:7b:c4:d6: f5:0d:17:51:4e:8f:b7:a7:7e:dc:69:7f:45:0b:28: 28:58:88:82:53:11:b8:ca:97:8e:e5:c4:75:c9:8e: 9a:f7:0e:de:40:02:c8:76:f0:df:b1:00:a7:0e:91: d6:53:3b:9b:2b:d6:d6:cf:c4:f3:a9:ff:82:2f:a9: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:45:C4:33:31:30:EF:E3:09:1B:28:B7:6F:4E:47:59:4E:B5:9E X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/isNFxDMxMO_jCRsot29OR1lOtZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.72.0/22 45.137.44.0/22 83.150.252.0/22 185.90.0.0/22 185.182.200.0/23 185.229.4.0/22 185.246.132.0/22 185.247.200.0/22 185.248.252.0/22 Signature Algorithm: sha256WithRSAEncryption 80:24:a6:25:f1:e9:52:de:32:cf:92:ba:a8:e3:b8:35:37:aa: 74:49:bf:13:ea:81:d9:d6:7b:f3:4e:a5:c6:c1:66:d5:f8:41: ab:b3:fb:1f:0a:e9:c3:33:c4:19:15:42:b5:e5:4d:39:8d:c1: 17:9c:76:53:37:ec:93:e7:e9:dd:5a:5e:70:1a:da:02:13:3a: b7:9f:ef:8a:96:09:a8:2e:9a:39:15:8f:de:6d:96:80:8e:2d: e1:00:bd:7d:60:65:4b:08:3f:6d:1a:08:28:8b:ba:54:6c:cb: 29:8c:18:31:c9:56:47:02:dc:fe:bf:0e:d7:e5:91:f2:dd:84: 93:a1:d5:51:74:15:fe:9d:97:98:e1:fa:5f:25:c6:87:95:9f: f8:45:ac:72:80:75:bc:5c:9d:30:4c:48:ec:65:3c:63:e7:c9: 7b:f1:a2:b3:0b:0e:6e:3e:2f:19:2f:03:4a:a4:58:f9:cd:a1: 66:0d:7c:21:4d:11:e0:82:f3:b7:62:46:3c:e2:fa:93:7e:f7: 0b:3b:a4:5b:60:31:74:6d:c7:b8:99:62:8c:84:86:bb:5d:b8: a1:3f:44:f7:68:80:27:15:b8:a3:8b:57:3e:0f:79:72:80:e1: 70:d0:52:35:28:3b:fe:39:e4:50:ba:26:60:1b:a4:bf:96:8f: 43:1d:0d:62 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvGmWHlF+ETHbpJmpikvLQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjYwMTE2MTEzODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWMzNDVjNDMzMzEzMGVmZTMwOTFiMjhiNzZmNGU0NzU5NGViNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DsV4CJz4CUkvi5nfQLgKsdCGWXU qmrF+rP0f2GGVr05j/bV2LLYTuZQNTt/mW3F48aveZ2npT9dhIPVus4/8IxEYAzi K8sHjXakmMbmYa67eFNSsyfkPtpSRrpAA/EzVryQv/iVxMA7X/HVGlL39AkRwMtw ThsUR1G83J2aWG/wz5wvAMC0K57C6pBQEiUXJq/rHiqzD6LAR4LJKwHAkpYxTF6L hBWr6Jr4I3/0l+BvU7bRJdvob5S31Qk4KRh7xNb1DRdRTo+3p37caX9FCygoWIiC UxG4ypeO5cR1yY6a9w7eQALIdvDfsQCnDpHWUzubK9bWz8Tzqf+CL6lvzQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIrDRcQzMTDv4wkbKLdvTkdZTrWeMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvaXNORnhETXhNT19qQ1Jzb3QyOU9SMWxPdFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCBbVIAwQC LYksAwQCU5b8AwQCuVoAAwQBubbIAwQCueUEAwQCufaEAwQCuffIAwQCufj8MA0G CSqGSIb3DQEBCwUAA4IBAQCAJKYl8elS3jLPkrqo47g1N6p0Sb8T6oHZ1nvzTqXG wWbV+EGrs/sfCunDM8QZFUK15U05jcEXnHZTN+yT5+ndWl5wGtoCEzq3n++Klgmo Lpo5FY/ebZaAji3hAL19YGVLCD9tGggoi7pUbMspjBgxyVZHAtz+vw7X5ZHy3YST odVRdBX+nZeY4fpfJcaHlZ/4RaxygHW8XJ0wTEjsZTxj58l78aKzCw5uPi8ZLwNK pFj5zaFmDXwhTRHggvO3YkY84vqTfvcLO6RbYDF0bce4mWKMhIa7XbihP0T3aIAn Fbiji1c+D3lygOFw0FI1KDv+OeRQuiZgG6S/lo9DHQ1i -----END CERTIFICATE-----Generated at Fri Jan 23 19:18:18 2026 by rpki-client