This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NgMsux-odmw_2otfxo6fwQPz6nk.roa File: NgMsux-odmw_2otfxo6fwQPz6nk.roa (raw, json) Hash identifier: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ= Subject key identifier: 36:03:2C:BB:1F:A8:76:6C:3F:DA:8B:5F:C6:8E:9F:C1:03:F3:EA:79 Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C78D639BB308A2F63C644BCA2BAF Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NgMsux-odmw_2otfxo6fwQPz6nk.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 171.22.60.0/24 maxlen: 24 171.22.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c7:8d:63:9b:b3:08:a2:f6:3c:64:4b:ca:2b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36032cbb1fa8766c3fda8b5fc68e9fc103f3ea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:f7:92:62:97:d4:d7:3c:22:41:88:5d:7c: 75:10:27:19:7b:c7:f2:71:b1:a4:b0:47:76:cb:c0: 65:e3:74:53:b2:6f:62:95:f5:91:63:39:93:d7:c0: 71:7d:42:72:b9:57:ad:c4:3f:a5:82:79:9e:f7:ed: 6c:58:ba:f6:58:95:b3:22:f3:d3:04:85:bb:7f:66: 64:01:88:d6:4d:92:9a:6d:ba:8b:fa:6e:f3:09:37: 97:96:7b:cd:3f:1e:04:5a:e5:0c:cd:5c:1b:f4:61: cb:4a:24:30:57:7c:0a:77:41:a0:7f:cc:04:b2:ea: 2b:00:94:fb:3f:10:0a:cf:23:fa:6e:42:6a:39:ba: 65:d3:f9:65:a8:ca:45:52:52:6c:1c:3c:f8:9d:53: 5f:35:ae:79:7a:54:7b:31:a8:9b:b1:03:f1:07:49: d5:4d:4d:be:61:f8:42:5e:0e:92:74:fc:67:79:9b: ba:e3:db:24:36:bf:2b:42:b2:b1:f1:83:58:1e:e3: bd:47:65:4a:42:58:c7:78:e4:d1:40:f4:d9:8a:52: 20:30:fe:3f:9b:be:11:77:03:ff:7a:3a:29:33:ee: 41:e8:42:de:5f:48:d8:d6:bc:e4:37:8d:3c:51:be: dd:e5:0c:bb:14:00:1e:24:24:03:9e:28:c0:b4:15: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:2C:BB:1F:A8:76:6C:3F:DA:8B:5F:C6:8E:9F:C1:03:F3:EA:79 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NgMsux-odmw_2otfxo6fwQPz6nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.60.0/23 Signature Algorithm: sha256WithRSAEncryption b1:c6:03:03:41:50:3c:ea:1c:6e:67:d1:b3:4f:73:03:00:1d: f1:d6:9b:2f:1a:71:49:76:2d:6c:7e:3d:34:10:02:e5:bc:59: 80:49:7f:e0:0e:30:30:2e:0e:65:32:d7:0c:2c:00:e2:59:d3: 1d:f8:ed:87:0b:53:62:c3:9d:ac:bb:55:c5:02:24:c1:cb:5e: ad:66:16:2d:36:ab:7c:06:62:6d:c0:7c:0a:9b:23:09:52:1c: 40:9c:a0:06:80:3c:68:14:8f:7c:d5:35:a6:cb:2a:c9:92:4c: d4:3c:eb:ba:03:fe:46:46:7d:db:86:27:70:4e:c6:1f:2c:b6: 85:1d:b8:54:0d:47:0c:0e:be:91:a9:64:43:df:6f:16:38:89: 29:ef:41:35:a9:2a:f0:8a:f3:b1:03:b8:a1:1c:99:c2:ed:88: a5:db:3c:30:a3:ab:72:84:9d:55:5c:7b:d9:8c:94:ad:6b:f1: c0:6e:6d:1a:90:f8:f3:18:55:48:81:c5:42:52:3d:43:09:da: d6:6d:97:cd:bf:d9:21:07:ef:83:44:f4:b1:c8:a4:e9:12:15: d8:4a:2e:d8:86:2d:b6:5e:f2:b2:1d:5c:b9:94:f6:fd:9f:5c: b8:be:55:cc:a2:e9:12:99:d8:96:40:23:3f:40:e9:db:8c:99: 33:5f:a1:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8eNY5uzCKL2PGRLyiuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjAzMmNiYjFmYTg3NjZjM2ZkYThiNWZjNjhlOWZjMTAzZjNlYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP73kmKX1Nc8IkGIXXx1ECcZe8fy cbGksEd2y8Bl43RTsm9ilfWRYzmT18BxfUJyuVetxD+lgnme9+1sWLr2WJWzIvPT BIW7f2ZkAYjWTZKabbqL+m7zCTeXlnvNPx4EWuUMzVwb9GHLSiQwV3wKd0Ggf8wE suorAJT7PxAKzyP6bkJqObpl0/llqMpFUlJsHDz4nVNfNa55elR7MaibsQPxB0nV TU2+YfhCXg6SdPxneZu649skNr8rQrKx8YNYHuO9R2VKQljHeOTRQPTZilIgMP4/ m74RdwP/ejopM+5B6ELeX0jY1rzkN408Ub7d5Qy7FAAeJCQDnijAtBW0iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYDLLsfqHZsP9qLX8aOn8ED8+p5MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvTmdNc3V4LW9kbXdfMm90ZnhvNmZ3UVB6Nm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqxY8MA0G CSqGSIb3DQEBCwUAA4IBAQCxxgMDQVA86hxuZ9GzT3MDAB3x1psvGnFJdi1sfj00 EALlvFmASX/gDjAwLg5lMtcMLADiWdMd+O2HC1Niw52su1XFAiTBy16tZhYtNqt8 BmJtwHwKmyMJUhxAnKAGgDxoFI981TWmyyrJkkzUPOu6A/5GRn3bhidwTsYfLLaF HbhUDUcMDr6RqWRD328WOIkp70E1qSrwivOxA7ihHJnC7Yil2zwwo6tyhJ1VXHvZ jJSta/HAbm0akPjzGFVIgcVCUj1DCdrWbZfNv9khB++DRPSxyKTpEhXYSi7Yhi22 XvKyHVy5lPb9n1y4vlXMoukSmdiWQCM/QOnbjJkzX6E6 -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:59 2026 by rpki-client