This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ncndsKezJQGt8lwhXye13lFVDKY.roa File: ncndsKezJQGt8lwhXye13lFVDKY.roa (raw, json) Hash identifier: EztwDopCAG7NiYwncGdC1BTlT154Op70FdEqpNkE6tM= Subject key identifier: 9D:C9:DD:B0:A7:B3:25:01:AD:F2:5C:21:5F:27:B5:DE:51:55:0C:A6 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854F52FCA162D7674A1DEA4F29A2AC Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ncndsKezJQGt8lwhXye13lFVDKY.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47585 IP address blocks: 62.76.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4f:52:fc:a1:62:d7:67:4a:1d:ea:4f:29:a2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc9ddb0a7b32501adf25c215f27b5de51550ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:bd:3d:e6:19:ea:f2:0c:fb:4e:fe:b1:60: 6b:dc:0b:2d:7c:7b:c6:03:58:7a:14:2b:86:f8:ca: 3d:4d:13:5f:c8:1f:b0:17:28:9d:c9:ef:f8:a3:8b: a8:2f:fe:5c:72:aa:a5:e6:81:c5:db:78:08:57:b2: ca:76:44:9b:1e:a9:d7:fc:e5:60:c4:32:1a:74:e0: 56:dc:3a:c0:8f:07:69:0c:40:eb:c0:3b:c9:11:75: d9:77:10:18:f4:e2:3c:9e:29:93:06:40:39:f6:2a: f5:34:f7:41:37:df:be:17:ab:7a:4e:6b:1b:9d:f5: c6:68:79:a2:c7:2b:bb:8c:e4:4e:ba:41:50:af:39: 85:90:b4:86:34:62:1b:9d:73:fb:8d:d5:95:a8:24: 36:cd:ea:a7:c6:a4:6a:3b:43:7c:a6:35:b7:70:86: d2:5d:57:bd:03:dc:fe:32:e6:5e:f8:22:bb:d7:fa: a1:33:cf:29:19:20:f1:78:b6:19:ab:e0:c5:01:2b: 7a:08:1e:b1:f5:9b:31:e5:5b:a2:db:9c:fe:e1:00: a9:5f:92:60:a5:4a:a8:00:31:e7:a5:31:f7:55:7c: 34:1f:c4:2f:7d:e4:13:69:dd:68:eb:97:11:3c:31: fb:c6:b5:e6:08:c7:15:d9:80:bc:93:f2:97:81:57: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:DD:B0:A7:B3:25:01:AD:F2:5C:21:5F:27:B5:DE:51:55:0C:A6 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ncndsKezJQGt8lwhXye13lFVDKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.230.0/24 Signature Algorithm: sha256WithRSAEncryption 78:29:15:93:ae:9d:b4:18:4d:e8:c7:3c:25:b7:a5:34:76:2c: c8:43:ed:aa:0b:5a:cb:e3:80:ad:9a:40:0d:81:2d:a8:4b:b3: 0a:69:a8:af:37:f7:4f:a9:0c:17:0a:b8:95:38:57:18:5f:48: dc:62:f5:4e:af:ea:32:01:be:cf:26:69:a0:60:7a:96:4b:59: 79:f0:c2:b2:12:46:a9:73:74:f2:22:b0:4d:b1:da:3a:79:57: c9:20:a0:50:8d:2a:5f:9c:ce:f3:63:00:d2:18:74:4c:65:0d: 44:8c:4c:74:df:ef:2e:f7:11:80:42:b9:b3:62:02:16:7b:7c: b0:1f:87:4c:ce:dc:ab:5d:1a:b9:5a:82:57:0e:6e:5e:36:70: 9b:13:c6:33:45:f8:07:2e:7f:b7:93:34:73:06:b5:39:44:01: 7a:35:b5:4c:fa:12:84:24:de:74:c1:12:42:e1:1d:18:cd:05: d9:93:6e:55:9d:72:f7:25:a5:ad:c6:65:fc:a7:13:4a:08:35: 91:af:66:f8:e9:4e:1f:41:59:37:87:02:c9:e8:6d:fd:10:50: b1:04:7e:1e:7b:a6:57:ef:fd:de:cd:dd:ab:57:10:b1:88:3a: c6:30:a0:59:76:86:f7:85:d3:22:89:c1:a5:c1:c9:c4:3a:f1: 95:33:98:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hU9S/KFi12dKHepPKaKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGM5ZGRiMGE3YjMyNTAxYWRmMjVjMjE1ZjI3YjVkZTUxNTUwY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzae9PeYZ6vIM+07+sWBr3AstfHvG A1h6FCuG+Mo9TRNfyB+wFyidye/4o4uoL/5ccqql5oHF23gIV7LKdkSbHqnX/OVg xDIadOBW3DrAjwdpDEDrwDvJEXXZdxAY9OI8nimTBkA59ir1NPdBN9++F6t6Tmsb nfXGaHmixyu7jOROukFQrzmFkLSGNGIbnXP7jdWVqCQ2zeqnxqRqO0N8pjW3cIbS XVe9A9z+MuZe+CK71/qhM88pGSDxeLYZq+DFASt6CB6x9Zsx5Vui25z+4QCpX5Jg pUqoADHnpTH3VXw0H8QvfeQTad1o65cRPDH7xrXmCMcV2YC8k/KXgVcLCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3J3bCnsyUBrfJcIV8ntd5RVQymMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvbmNuZHNLZXpKUUd0OGx3aFh5ZTEzbEZWREtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzmMA0G CSqGSIb3DQEBCwUAA4IBAQB4KRWTrp20GE3oxzwlt6U0dizIQ+2qC1rL44CtmkAN gS2oS7MKaaivN/dPqQwXCriVOFcYX0jcYvVOr+oyAb7PJmmgYHqWS1l58MKyEkap c3TyIrBNsdo6eVfJIKBQjSpfnM7zYwDSGHRMZQ1EjEx03+8u9xGAQrmzYgIWe3yw H4dMztyrXRq5WoJXDm5eNnCbE8YzRfgHLn+3kzRzBrU5RAF6NbVM+hKEJN50wRJC 4R0YzQXZk25VnXL3JaWtxmX8pxNKCDWRr2b46U4fQVk3hwLJ6G39EFCxBH4ee6ZX 7/3ezd2rVxCxiDrGMKBZdob3hdMiicGlwcnEOvGVM5g+ -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client