This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ndSWlzNvRRwRX_149mZiIEsmPAE.roa File: ndSWlzNvRRwRX_149mZiIEsmPAE.roa (raw, json) Hash identifier: 3wzf4DOOF2YX/jyKQSv2xfaCWEbQLjfQJMUl2DPsgOE= Subject key identifier: 9D:D4:96:97:33:6F:45:1C:11:5F:FD:78:F6:66:62:20:4B:26:3C:01 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A78C5C2D3A6788CE1333F94BD8BB9093B Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ndSWlzNvRRwRX_149mZiIEsmPAE.roa Signing time: Wed 12 Nov 2025 15:53:37 +0000 ROA not before: Wed 12 Nov 2025 15:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203872 IP address blocks: 194.87.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:c5:c2:d3:a6:78:8c:e1:33:3f:94:bd:8b:b9:09:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 12 15:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9dd49697336f451c115ffd78f66662204b263c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:31:f0:f3:26:f4:31:5e:11:73:91:82:87: fa:b9:3a:8e:43:2f:d9:d0:78:be:34:99:b1:29:de: 9b:c8:c6:fe:50:c8:c7:83:9b:92:6e:c7:78:58:7a: 4e:e4:c9:d3:b0:9e:0a:93:35:e2:e0:6c:19:86:93: 29:f2:86:04:83:2e:e7:ed:f1:ca:93:02:39:56:d8: f5:5f:94:79:01:3f:93:e8:fc:b1:dc:92:78:51:ca: 33:22:8a:c0:9d:23:82:62:1a:cc:43:ae:cc:28:9d: 20:09:30:be:15:b9:d9:e2:2b:76:86:36:d3:be:57: 50:e2:b5:f7:6b:f0:75:e0:e0:a5:87:8f:a3:0d:fc: 8d:dd:23:8e:a6:43:9b:0c:96:bd:a0:14:0e:d2:b3: 46:b5:e3:d2:f9:8b:b5:ac:da:c8:3b:73:fb:b3:96: e8:f7:36:b1:e6:55:4d:5f:88:6a:0e:d5:72:af:0c: 31:9d:d9:43:28:8c:55:bd:0d:50:b7:4f:b6:64:ed: 92:6f:b1:e1:58:a7:54:fe:3c:97:b7:01:59:e0:85: cf:67:db:90:9d:0d:38:4f:f8:3a:5b:19:66:e8:86: 94:1f:3e:6d:87:61:b8:93:96:b9:03:1b:12:0d:a5: a2:0e:00:06:5b:cc:f4:1b:c1:ac:7c:96:2c:c4:56: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:96:97:33:6F:45:1C:11:5F:FD:78:F6:66:62:20:4B:26:3C:01 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ndSWlzNvRRwRX_149mZiIEsmPAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.192.0/24 Signature Algorithm: sha256WithRSAEncryption 48:49:0a:83:f3:b1:8c:62:f0:73:f3:af:6e:c0:b4:d1:89:0b: d3:01:ed:32:34:8a:be:b3:e3:1d:69:07:9b:28:4c:1a:c1:13: ee:9b:24:fc:fd:ec:54:e5:b2:cc:16:29:55:09:8c:92:9b:87: 12:aa:c1:eb:80:7c:49:73:8b:a2:95:9b:f9:23:6b:d6:f8:d4: 7d:1b:a2:15:06:77:cd:53:cd:da:72:db:c5:9a:25:2f:13:4a: d9:91:43:24:e8:d8:81:4a:51:66:0d:d4:a6:44:bf:1c:71:1d: 9f:81:87:ca:7e:35:fe:ae:96:3a:06:3e:e8:d8:2f:35:d5:86: 48:82:17:fd:b6:4e:40:47:6e:75:a3:29:e7:c7:3f:ed:5c:0d: f5:3b:fc:bc:2b:f0:74:a3:0c:3a:e0:c6:78:5e:e6:a6:00:96: 8b:4a:ac:ca:d7:5a:d7:c0:3f:4e:fc:d6:29:7b:d3:f2:f0:7c: 01:44:5e:9b:47:59:49:b8:93:71:a6:18:51:d1:e3:84:9b:d0: 83:52:35:db:7d:5e:f1:86:e4:47:0c:77:02:06:ff:0b:53:a0: c1:de:6d:5a:98:8f:17:c0:61:20:01:91:67:83:1d:0a:05:31: 90:a2:ee:b4:80:9e:4b:e8:40:6d:ad:ec:07:d5:74:4c:4f:0c: e0:da:a7:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp4xcLTpniM4TM/lL2LuQk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTEyMTU1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQ0OTY5NzMzNmY0NTFjMTE1ZmZkNzhmNjY2NjIyMDRiMjYzYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vEx8PMm9DFeEXORgof6uTqOQy/Z 0Hi+NJmxKd6byMb+UMjHg5uSbsd4WHpO5MnTsJ4KkzXi4GwZhpMp8oYEgy7n7fHK kwI5Vtj1X5R5AT+T6Pyx3JJ4UcozIorAnSOCYhrMQ67MKJ0gCTC+FbnZ4it2hjbT vldQ4rX3a/B14OClh4+jDfyN3SOOpkObDJa9oBQO0rNGtePS+Yu1rNrIO3P7s5bo 9zax5lVNX4hqDtVyrwwxndlDKIxVvQ1Qt0+2ZO2Sb7HhWKdU/jyXtwFZ4IXPZ9uQ nQ04T/g6Wxlm6IaUHz5th2G4k5a5AxsSDaWiDgAGW8z0G8GsfJYsxFa6AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3Ulpczb0UcEV/9ePZmYiBLJjwBMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvbmRTV2x6TnZSUndSWF8xNDltWmlJRXNtUEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfAMA0G CSqGSIb3DQEBCwUAA4IBAQBISQqD87GMYvBz869uwLTRiQvTAe0yNIq+s+MdaQeb KEwawRPumyT8/exU5bLMFilVCYySm4cSqsHrgHxJc4uilZv5I2vW+NR9G6IVBnfN U83actvFmiUvE0rZkUMk6NiBSlFmDdSmRL8ccR2fgYfKfjX+rpY6Bj7o2C811YZI ghf9tk5AR251oynnxz/tXA31O/y8K/B0oww64MZ4XuamAJaLSqzK11rXwD9O/NYp e9Py8HwBRF6bR1lJuJNxphhR0eOEm9CDUjXbfV7xhuRHDHcCBv8LU6DB3m1amI8X wGEgAZFngx0KBTGQou60gJ5L6EBtrewH1XRMTwzg2qdb -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:48 2025 by rpki-client