This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/NfntwoXD_O0scdxf60MFJ4QAEsM.roa File: NfntwoXD_O0scdxf60MFJ4QAEsM.roa (raw, json) Hash identifier: fJxzALYVA6cDE1yHGT4WjIHIwKWY+JaHack97oaMMaY= Subject key identifier: 35:F9:ED:C2:85:C3:FC:ED:2C:71:DC:5F:EB:43:05:27:84:00:12:C3 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BB28365E3629C7B1943D46874535C23C3 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/NfntwoXD_O0scdxf60MFJ4QAEsM.roa Signing time: Mon 12 Jan 2026 14:01:54 +0000 ROA not before: Mon 12 Jan 2026 14:01:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202413 IP address blocks: 2a0d:d940:90a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:83:65:e3:62:9c:7b:19:43:d4:68:74:53:5c:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 12 14:01:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35f9edc285c3fced2c71dc5feb430527840012c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:89:c5:3c:fe:e4:c1:0c:40:f9:0c:7b:6d: f3:36:8c:57:44:e8:9d:44:85:1d:2b:b1:b4:05:19: 88:42:fb:f7:d5:f7:17:d1:44:d9:09:ea:40:4d:ba: 5f:2b:31:ae:b5:a8:21:25:2c:d4:f0:54:ce:e7:e3: c1:06:af:e8:fc:cb:44:76:57:00:3b:aa:e2:ab:d1: ae:c2:99:b8:45:c3:91:81:4e:62:15:30:4b:c5:4e: e4:7b:6c:54:4b:cc:16:b5:8a:84:5a:bf:91:02:e6: 93:a6:82:73:a7:e4:2f:de:d3:f9:49:e7:48:10:4a: 43:9e:32:31:4d:60:15:5c:79:f2:4a:53:7b:9d:3e: ee:b0:20:9f:e8:86:d1:3f:5d:80:a3:aa:81:90:be: 7b:b9:71:73:b2:22:c3:a8:8b:73:a2:65:95:43:21: a8:90:93:b2:33:e8:2d:75:67:76:1a:2a:be:90:6c: 7e:74:19:e8:83:af:0c:8d:55:b1:ef:37:54:17:f8: 8d:f4:ba:d2:ac:fc:08:b2:7a:8a:a3:db:ab:bd:87: 6e:b6:0a:b1:69:e9:1e:73:83:88:86:76:ed:ef:80: f3:a3:6c:87:06:07:1f:6c:f2:71:e3:ae:f6:ed:f6: 4b:5f:e3:95:76:53:eb:59:c2:da:a5:8b:ee:90:f9: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:ED:C2:85:C3:FC:ED:2C:71:DC:5F:EB:43:05:27:84:00:12:C3 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/NfntwoXD_O0scdxf60MFJ4QAEsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:90a6::/48 Signature Algorithm: sha256WithRSAEncryption 60:27:48:c2:1a:b8:82:c6:f6:cf:3b:a2:ef:e4:ac:58:fe:3a: 07:fa:6b:23:55:3c:da:37:ec:f9:2c:63:0f:16:c8:4a:6b:84: be:ae:33:4d:53:59:c1:48:f8:ee:74:4b:2e:a3:94:8d:d6:52: c2:8f:34:3a:df:b9:23:2e:c4:03:2d:a7:a9:c0:12:3f:ac:09: cc:31:17:0a:11:d1:13:8e:c8:b4:bb:5a:cc:4d:6a:8d:aa:f3: d4:44:8f:c9:94:04:c9:05:f9:e9:56:1e:1d:4a:e8:3b:99:66: b9:2b:84:9c:a2:69:72:28:2f:21:d3:46:2b:69:15:a0:18:ac: 94:f2:8b:5b:8c:94:d0:66:ce:c9:d7:cb:7c:14:90:fb:68:5c: 51:e0:c1:82:cc:22:52:11:da:e7:e7:57:fc:88:96:b7:df:99: e2:c1:de:5d:2c:b8:f8:ef:70:22:2a:43:46:f1:9b:34:d4:26: 7f:e0:bf:76:d7:84:7e:d2:35:84:6e:53:23:23:a2:0d:a7:41: 97:53:0c:4f:28:59:09:85:89:8d:65:eb:cb:c4:37:a5:89:e2: 5a:f9:11:2b:9e:20:ed:1d:01:b2:33:60:9b:67:3f:96:60:ef: 79:25:37:4c:2c:d1:e1:ac:74:9f:45:eb:07:fc:b4:18:43:7e: fa:e5:d2:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuyg2XjYpx7GUPUaHRTXCPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTEyMTQwMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWY5ZWRjMjg1YzNmY2VkMmM3MWRjNWZlYjQzMDUyNzg0MDAxMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy2JxTz+5MEMQPkMe23zNoxXROid RIUdK7G0BRmIQvv31fcX0UTZCepATbpfKzGutaghJSzU8FTO5+PBBq/o/MtEdlcA O6riq9Guwpm4RcORgU5iFTBLxU7ke2xUS8wWtYqEWr+RAuaTpoJzp+Qv3tP5SedI EEpDnjIxTWAVXHnySlN7nT7usCCf6IbRP12Ao6qBkL57uXFzsiLDqItzomWVQyGo kJOyM+gtdWd2Giq+kGx+dBnog68MjVWx7zdUF/iN9LrSrPwIsnqKo9urvYdutgqx aekec4OIhnbt74Dzo2yHBgcfbPJx46727fZLX+OVdlPrWcLapYvukPlJWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDX57cKFw/ztLHHcX+tDBSeEABLDMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvTmZudHdvWERfTzBzY2R4ZjYwTUZKNFFBRXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJCm MA0GCSqGSIb3DQEBCwUAA4IBAQBgJ0jCGriCxvbPO6Lv5KxY/joH+msjVTzaN+z5 LGMPFshKa4S+rjNNU1nBSPjudEsuo5SN1lLCjzQ637kjLsQDLaepwBI/rAnMMRcK EdETjsi0u1rMTWqNqvPURI/JlATJBfnpVh4dSug7mWa5K4ScomlyKC8h00YraRWg GKyU8otbjJTQZs7J18t8FJD7aFxR4MGCzCJSEdrn51f8iJa335niwd5dLLj473Ai KkNG8Zs01CZ/4L9214R+0jWEblMjI6INp0GXUwxPKFkJhYmNZevLxDelieJa+REr niDtHQGyM2CbZz+WYO95JTdMLNHhrHSfResH/LQYQ3765dLY -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:07 2026 by rpki-client