This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nwRskVFO7jVpgv0FgU_I-l_JL24.roa File: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (raw, json) Hash identifier: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE= Subject key identifier: 9F:04:6C:91:51:4E:EE:35:69:82:FD:05:81:4F:C8:FA:5F:C9:2F:6E Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B8E7A4F7349729E4D460781963ED9FA6A Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nwRskVFO7jVpgv0FgU_I-l_JL24.roa Signing time: Mon 05 Jan 2026 14:05:39 +0000 ROA not before: Mon 05 Jan 2026 14:05:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 85.239.154.0/24 maxlen: 24 178.239.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:7a:4f:73:49:72:9e:4d:46:07:81:96:3e:d9:fa:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 5 14:05:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f046c91514eee356982fd05814fc8fa5fc92f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:81:be:3b:f4:ba:88:7b:81:f0:5c:69:f4: 1c:0e:b6:5f:6c:38:35:2f:eb:79:52:a7:76:95:6d: 73:ec:44:44:c9:7b:65:d6:c1:f2:60:e6:8d:8c:5a: 3f:e0:dd:da:fe:e1:b4:da:4a:87:6f:6a:50:6a:45: f2:4e:75:f4:83:62:a6:f1:11:12:bb:f9:ca:10:09: bd:fb:02:bb:11:43:4d:5f:32:66:df:fd:31:c5:11: 08:8e:39:2a:0d:12:ea:59:c4:96:72:d4:de:47:95: af:8e:7a:b2:a2:7f:99:d9:0f:e0:05:91:45:b8:3a: 4b:74:61:ea:e6:26:de:02:46:90:a3:59:02:4f:1d: 36:57:62:93:15:92:e3:9b:c1:ae:27:44:00:4d:50: d8:96:ec:3c:fa:3e:28:00:5c:80:89:ba:45:9e:5f: c0:e7:6f:fb:98:d8:b2:59:49:4f:fc:4c:9a:f8:fd: 38:ce:de:9f:b3:06:79:96:f1:95:25:6e:1a:3b:46: c0:8f:d5:6e:28:6f:af:25:03:35:1b:b8:33:e8:c7: d3:b8:69:ce:9b:e4:cb:ea:36:1e:67:fc:c8:14:2c: b8:51:71:ad:8e:09:2e:c1:27:a6:bc:72:81:1f:b4: 05:f3:5f:a8:fd:0e:da:eb:25:6d:22:21:7a:f8:e0: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:6C:91:51:4E:EE:35:69:82:FD:05:81:4F:C8:FA:5F:C9:2F:6E X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/nwRskVFO7jVpgv0FgU_I-l_JL24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.154.0/24 178.239.120.0/24 Signature Algorithm: sha256WithRSAEncryption ae:3e:07:11:9e:6e:43:9d:9e:ea:a3:5f:bd:f3:35:b6:f8:41: fa:33:4b:e4:82:7c:b3:55:54:69:ef:7e:f3:2a:2f:8a:c8:67: 10:e9:44:45:e1:ba:b9:01:8f:df:de:4c:c3:5e:c3:f7:f1:08: 37:a2:35:7f:37:96:14:a3:d8:47:ae:7c:91:51:29:b0:4b:ef: 6f:ac:5a:12:a8:c9:5a:21:7c:bd:c3:86:31:38:6f:33:6c:dd: 7e:a1:2f:b7:7b:db:23:af:ec:37:1a:fa:00:d2:50:c2:5f:2f: ce:7a:e9:ba:1e:8c:a3:6e:77:d4:3b:1c:d5:52:8a:06:61:24: aa:22:45:ed:6f:98:2f:8f:b8:c4:3a:6f:7a:e8:62:14:e1:18: a3:57:78:5b:1b:b2:fc:1d:43:7f:9b:79:9a:6f:cd:05:fa:df: a4:9f:a8:03:47:b3:83:bb:4d:1a:7a:f6:2e:42:e5:69:0b:f0: e8:34:95:6e:60:bf:ab:dc:6c:1e:2a:13:ce:01:82:a7:fb:99: f8:21:b2:f0:2e:1b:70:74:c9:eb:04:9b:19:ce:20:7d:f3:8b: 0c:1c:8b:ff:fa:ce:5f:dc:72:6b:97:77:e1:76:dd:30:a1:05: 20:3b:77:ac:01:26:41:62:8b:29:3e:a0:82:f1:6e:f0:1a:09: 7d:50:f8:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuOek9zSXKeTUYHgZY+2fpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTA1MTQwNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjA0NmM5MTUxNGVlZTM1Njk4MmZkMDU4MTRmYzhmYTVmYzkyZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXeBvjv0uoh7gfBcafQcDrZfbDg1 L+t5Uqd2lW1z7EREyXtl1sHyYOaNjFo/4N3a/uG02kqHb2pQakXyTnX0g2Km8RES u/nKEAm9+wK7EUNNXzJm3/0xxREIjjkqDRLqWcSWctTeR5Wvjnqyon+Z2Q/gBZFF uDpLdGHq5ibeAkaQo1kCTx02V2KTFZLjm8GuJ0QATVDYluw8+j4oAFyAibpFnl/A 52/7mNiyWUlP/Eya+P04zt6fswZ5lvGVJW4aO0bAj9VuKG+vJQM1G7gz6MfTuGnO m+TL6jYeZ/zIFCy4UXGtjgkuwSemvHKBH7QF81+o/Q7a6yVtIiF6+OCsAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ8EbJFRTu41aYL9BYFPyPpfyS9uMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvbndSc2tWRk83alZwZ3YwRmdVX0ktbF9KTDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVe+aAwQA su94MA0GCSqGSIb3DQEBCwUAA4IBAQCuPgcRnm5DnZ7qo1+98zW2+EH6M0vkgnyz VVRp737zKi+KyGcQ6URF4bq5AY/f3kzDXsP38Qg3ojV/N5YUo9hHrnyRUSmwS+9v rFoSqMlaIXy9w4YxOG8zbN1+oS+3e9sjr+w3GvoA0lDCXy/Oeum6HoyjbnfUOxzV UooGYSSqIkXtb5gvj7jEOm966GIU4RijV3hbG7L8HUN/m3mab80F+t+kn6gDR7OD u00aevYuQuVpC/DoNJVuYL+r3GweKhPOAYKn+5n4IbLwLhtwdMnrBJsZziB984sM HIv/+s5f3HJrl3fhdt0woQUgO3esASZBYospPqCC8W7wGgl9UPhG -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:49 2026 by rpki-client