This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDrp-vDIbGCMCAcjS2VYx3C3m10.roa File: NDrp-vDIbGCMCAcjS2VYx3C3m10.roa (raw, json) Hash identifier: q3cj73laUcfCnBUuqXZCL5jgsiipFEmV/YBNC16pQyo= Subject key identifier: 34:3A:E9:FA:F0:C8:6C:60:8C:08:07:23:4B:65:58:C7:70:B7:9B:5D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31A19C3216923A16B4F2E558065B6 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDrp-vDIbGCMCAcjS2VYx3C3m10.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151966 IP address blocks: 45.129.86.0/23 maxlen: 24 185.252.176.0/24 maxlen: 24 193.35.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:19:c3:21:69:23:a1:6b:4f:2e:55:80:65:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=343ae9faf0c86c608c0807234b6558c770b79b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:26:db:0a:e5:9a:53:1e:f6:02:e1:6c:d5: 0d:5a:31:7f:7c:c1:f3:75:e4:97:06:bc:c9:ab:dd: ca:02:2e:28:86:4f:0d:c0:4c:31:d4:7c:3b:a6:51: 8a:9c:b5:d4:47:b1:78:75:75:6c:6e:6e:bd:12:f9: 56:5c:d0:23:7f:39:25:7e:68:f3:c2:9d:3c:12:de: af:7e:2a:5d:5e:ed:b0:fb:43:80:79:3d:e3:cd:a9: ec:b2:64:ae:f1:37:f5:1f:83:30:3d:f4:1b:91:38: 8a:2a:2f:37:11:ad:08:a3:65:3e:af:9b:1c:8b:8e: 92:04:2d:ea:68:16:62:9c:8e:47:7b:eb:f2:a3:ea: f0:27:f7:43:a6:98:a6:1e:61:53:43:c8:c2:fc:e0: 5f:7a:e9:f1:ff:ee:c8:ad:7d:b4:52:7f:f5:4d:7d: 4a:16:e7:05:61:06:79:62:d3:0a:dc:d5:08:1a:19: d0:aa:73:62:44:11:fe:87:2b:2d:d4:1b:b7:e1:cf: 33:bb:c2:32:47:4b:14:3c:60:bf:da:8f:ae:eb:9f: c9:55:f3:7e:11:a6:c5:ba:1a:6c:dd:3d:dc:5f:64: 36:f9:da:f4:10:2f:f0:9b:b3:d7:17:b6:0b:9c:ef: ef:7d:30:5b:38:ca:2e:fb:02:e1:f5:fd:60:d7:2a: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:E9:FA:F0:C8:6C:60:8C:08:07:23:4B:65:58:C7:70:B7:9B:5D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDrp-vDIbGCMCAcjS2VYx3C3m10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.86.0/23 185.252.176.0/24 193.35.19.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:37:04:28:c8:e7:65:98:bf:29:52:35:20:a9:56:18:3c:35: c8:cc:ed:f5:56:b8:33:1c:8d:8f:15:88:58:e8:45:87:c2:8e: 5a:24:a9:4d:44:4a:95:a0:0b:c5:0f:86:b3:de:f8:7a:94:bb: e5:a6:87:60:bb:f9:0e:88:9d:08:d4:f8:02:2a:31:d1:c6:a5: 00:66:91:a6:4c:32:ec:ce:bc:c7:59:cc:a9:1b:e1:3e:b5:39: f8:4f:d7:66:5d:9b:7e:7b:24:6e:78:4e:c3:b1:1a:15:c9:06: 1d:fc:4b:32:9f:f9:d5:42:2c:50:cc:68:bf:73:f3:fe:ce:71: 10:12:62:bb:80:5c:b9:18:c7:32:d0:05:06:5a:00:f7:7e:2e: e4:aa:b5:1c:12:40:86:90:4e:46:f3:ba:68:93:99:d3:9b:67: 0c:9b:b1:dd:bc:7c:c4:2e:87:68:6e:17:52:44:25:c9:81:94: 25:67:e2:a0:47:1d:3f:f2:06:47:5f:3e:44:a7:92:c6:c0:89: cd:c9:39:79:d8:13:2c:38:33:c2:6c:99:b1:b4:36:7d:c7:5a: a2:0e:65:04:cc:ac:b2:76:4e:43:e8:5b:cc:b2:46:e3:8f:fa: e8:d7:87:0e:69:91:03:25:40:65:bd:20:32:04:c9:93:32:e3: 84:c2:c5:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oxoZwyFpI6FrTy5VgGW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDNhZTlmYWYwYzg2YzYwOGMwODA3MjM0YjY1NThjNzcwYjc5YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEUm2wrlmlMe9gLhbNUNWjF/fMHz deSXBrzJq93KAi4ohk8NwEwx1Hw7plGKnLXUR7F4dXVsbm69EvlWXNAjfzklfmjz wp08Et6vfipdXu2w+0OAeT3jzanssmSu8Tf1H4MwPfQbkTiKKi83Ea0Io2U+r5sc i46SBC3qaBZinI5He+vyo+rwJ/dDppimHmFTQ8jC/OBfeunx/+7IrX20Un/1TX1K FucFYQZ5YtMK3NUIGhnQqnNiRBH+hyst1Bu34c8zu8IyR0sUPGC/2o+u65/JVfN+ EabFuhps3T3cX2Q2+dr0EC/wm7PXF7YLnO/vfTBbOMou+wLh9f1g1yo/SwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDQ66frwyGxgjAgHI0tlWMdwt5tdMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTkRycC12REliR0NNQ0FjalMyVll4M0MzbTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYFWAwQA ufywAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQAuNwQoyOdlmL8pUjUgqVYYPDXI zO31VrgzHI2PFYhY6EWHwo5aJKlNREqVoAvFD4az3vh6lLvlpodgu/kOiJ0I1PgC KjHRxqUAZpGmTDLszrzHWcypG+E+tTn4T9dmXZt+eyRueE7DsRoVyQYd/Esyn/nV QixQzGi/c/P+znEQEmK7gFy5GMcy0AUGWgD3fi7kqrUcEkCGkE5G87pok5nTm2cM m7HdvHzELodobhdSRCXJgZQlZ+KgRx0/8gZHXz5Ep5LGwInNyTl52BMsODPCbJmx tDZ9x1qiDmUEzKyydk5D6FvMskbjj/ro14cOaZEDJUBlvSAyBMmTMuOEwsUG -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:12 2026 by rpki-client