This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/NfMAyoJTTlfTXofMhxWF0UP-5NM.roa File: NfMAyoJTTlfTXofMhxWF0UP-5NM.roa (raw, json) Hash identifier: qIrqKt/eTqEcw7nBDpqcjINUCE3KnQXTWSeB3+cApcw= Subject key identifier: 35:F3:00:CA:82:53:4E:57:D3:5E:87:CC:87:15:85:D1:43:FE:E4:D3 Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Certificate serial: 019B78A3074AEEF4F1CA49F31573275ED144 Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/NfMAyoJTTlfTXofMhxWF0UP-5NM.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205500 IP address blocks: 45.152.168.0/22 maxlen: 22 45.152.171.0/24 maxlen: 24 185.216.16.0/22 maxlen: 22 2a0f:5000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:07:4a:ee:f4:f1:ca:49:f3:15:73:27:5e:d1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35f300ca82534e57d35e87cc871585d143fee4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:3f:62:d1:01:f1:47:f7:54:89:cb:0c:9c: e7:b5:e9:e6:28:48:d6:b9:82:9e:2f:28:53:de:9a: ce:7a:67:12:97:cc:21:55:33:6b:4f:7c:77:7d:6b: 81:e7:5c:16:48:e1:4e:27:f8:1a:f6:bd:63:1e:af: d9:63:74:da:77:cb:79:85:3b:0e:04:79:9a:d3:12: e7:86:15:ad:e2:fe:c8:1d:53:60:f7:ff:0f:99:4e: b6:b6:10:44:b7:f9:83:5d:3e:5c:a8:00:ba:46:ee: 00:23:b6:c6:8c:79:8c:a4:97:63:80:31:24:71:6b: ad:00:23:3d:e1:4d:a9:f7:72:71:36:03:e4:81:fc: 2d:6e:99:2c:8b:b0:02:25:9f:2f:ee:b7:74:e8:c1: 47:d5:09:0b:ae:88:c2:18:5a:5f:d2:f5:86:29:c7: 7c:7f:a0:84:77:1c:b1:ba:cf:64:db:70:93:d5:62: 54:e4:05:c1:2d:98:f2:34:f0:45:57:13:1f:1e:75: 3d:58:13:86:09:3e:8e:e3:44:e0:0a:04:f7:72:d4: aa:b8:87:a9:da:30:54:f1:b6:46:b8:9d:7e:68:b7: c9:2e:04:6f:99:72:a0:28:d2:e7:cd:34:8d:46:7e: 7e:9f:ac:ec:ee:98:53:2e:ca:90:fe:29:34:d2:77: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F3:00:CA:82:53:4E:57:D3:5E:87:CC:87:15:85:D1:43:FE:E4:D3 X509v3 Authority Key Identifier: keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/NfMAyoJTTlfTXofMhxWF0UP-5NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.168.0/22 185.216.16.0/22 IPv6: 2a0f:5000::/29 Signature Algorithm: sha256WithRSAEncryption 54:d7:59:34:5b:db:54:b9:42:9f:37:f9:5a:cf:01:68:a4:c6: a0:50:d4:c9:d1:0c:1b:3b:54:9e:12:c5:46:dd:a7:cf:36:1e: 69:48:1c:95:7b:c9:ab:c5:74:6c:06:bb:f4:7d:28:bd:c3:a1: f4:4a:a2:da:71:e6:02:f8:74:27:b9:06:c4:80:6e:58:e1:ed: 49:70:b1:53:90:bf:11:6c:7a:6c:78:c4:a0:04:bb:d6:65:b7: 44:16:9a:32:f7:4c:9c:05:7d:cf:d7:1b:51:03:51:9d:7b:a1: 79:60:e4:a0:22:8f:97:fe:53:72:78:a2:27:5c:3a:32:ea:8b: 85:a5:14:4e:4a:07:11:26:2d:f0:6b:ea:01:ac:91:0c:1c:db: 1d:ee:61:aa:71:cc:6c:be:0e:b0:46:fa:65:2e:1b:49:83:fe: e2:77:19:6c:9c:57:6f:3e:bd:e9:63:9a:5a:c2:20:82:86:68: 29:6e:c7:92:1f:a6:8f:e6:b5:6c:61:f1:78:e0:e0:2c:75:74: 9a:71:11:bd:e6:87:ba:4d:ce:22:58:89:3a:b5:21:31:90:01: b7:d9:55:c1:ac:a3:ea:26:85:34:2e:20:75:6b:03:43:b8:a2: 59:61:fd:fd:db:36:17:d7:3f:5b:8d:60:d0:09:e5:44:00:ee: 52:04:a4:70 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4owdK7vTxyknzFXMnXtFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTEwYmVmOWM1Yjk2YTgzMWM3YWJmOTU1OTI3NDRiYmFm MWVlNjcwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWYzMDBjYTgyNTM0ZTU3ZDM1ZTg3Y2M4NzE1ODVkMTQzZmVlNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gs/YtEB8Uf3VInLDJzntenmKEjW uYKeLyhT3prOemcSl8whVTNrT3x3fWuB51wWSOFOJ/ga9r1jHq/ZY3Tad8t5hTsO BHma0xLnhhWt4v7IHVNg9/8PmU62thBEt/mDXT5cqAC6Ru4AI7bGjHmMpJdjgDEk cWutACM94U2p93JxNgPkgfwtbpksi7ACJZ8v7rd06MFH1QkLrojCGFpf0vWGKcd8 f6CEdxyxus9k23CT1WJU5AXBLZjyNPBFVxMfHnU9WBOGCT6O40TgCgT3ctSquIep 2jBU8bZGuJ1+aLfJLgRvmXKgKNLnzTSNRn5+n6zs7phTLsqQ/ik00netyQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDXzAMqCU05X016HzIcVhdFD/uTTMB8GA1UdIwQY MBaAFMwRC++cW5aoMcer+VWSdEu68e5nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2Qt YzhhY2I3MTczYjYyLzEvTmZNQXlvSlRUbGZUWG9mTWh4V0YwVVAtNU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2QtYzhhY2I3MTczYjYy LzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZioAwQC udgQMA0EAgACMAcDBQMqD1AAMA0GCSqGSIb3DQEBCwUAA4IBAQBU11k0W9tUuUKf N/lazwFopMagUNTJ0QwbO1SeEsVG3afPNh5pSByVe8mrxXRsBrv0fSi9w6H0SqLa ceYC+HQnuQbEgG5Y4e1JcLFTkL8RbHpseMSgBLvWZbdEFpoy90ycBX3P1xtRA1Gd e6F5YOSgIo+X/lNyeKInXDoy6ouFpRROSgcRJi3wa+oBrJEMHNsd7mGqccxsvg6w RvplLhtJg/7idxlsnFdvPr3pY5pawiCChmgpbseSH6aP5rVsYfF44OAsdXSacRG9 5oe6Tc4iWIk6tSExkAG32VXBrKPqJoU0LiB1awNDuKJZYf392zYX1z9bjWDQCeVE AO5SBKRw -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:31 2026 by rpki-client