This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/NV3f3XuOFAsDnfAaCg6nF83CLX0.roa File: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (raw, json) Hash identifier: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc= Subject key identifier: 35:5D:DF:DD:7B:8E:14:0B:03:9D:F0:1A:0A:0E:A7:17:CD:C2:2D:7D Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f Certificate serial: 019B7B356D99F8EF587032F798152839BFAD Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/NV3f3XuOFAsDnfAaCg6nF83CLX0.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60255 IP address blocks: 45.153.135.0/24 maxlen: 24 194.55.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6d:99:f8:ef:58:70:32:f7:98:15:28:39:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=355ddfdd7b8e140b039df01a0a0ea717cdc22d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:3a:b8:76:f9:5d:0b:bb:3f:91:f1:31:48: da:8e:95:b1:dd:2f:4c:c3:9f:2b:18:95:a2:7b:ad: ee:6c:df:ae:f8:05:30:b0:fa:63:e5:a9:a8:ae:d9: 67:de:b2:8b:8f:1d:e5:bd:1f:78:16:c6:f2:65:9f: b1:c0:43:18:9c:cd:c1:55:83:5b:8b:f2:dd:20:e5: d4:ad:f7:59:2f:16:b6:45:6c:8e:1f:1e:5b:c8:26: 9b:ff:f8:cd:1b:7f:8f:da:09:a8:9a:49:8e:ce:24: 43:43:d0:29:dc:ec:54:3a:cb:3e:42:31:00:f7:82: 57:06:ce:0f:81:73:1f:03:cf:e5:9c:14:ff:58:8b: 5a:d0:94:77:8f:3c:64:4e:5d:0d:87:c6:e4:6e:89: 74:60:26:8e:d8:19:bc:5e:e3:e1:1b:66:b4:32:1c: 39:69:4c:68:8d:41:38:df:0c:7f:40:4d:a3:da:a1: c3:df:7c:56:6f:9c:a7:08:93:fa:de:9e:c3:6e:77: cf:24:ba:dc:94:e9:72:66:8d:ca:98:89:7f:30:f0: a3:82:c2:d5:cc:5b:8a:d6:de:f9:3d:53:6f:05:3b: bd:ab:52:36:bf:bb:30:c1:b7:b2:4b:7a:cb:d2:3f: a9:56:d3:33:85:d1:c3:74:5e:5d:1b:9a:16:14:1e: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5D:DF:DD:7B:8E:14:0B:03:9D:F0:1A:0A:0E:A7:17:CD:C2:2D:7D X509v3 Authority Key Identifier: keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/NV3f3XuOFAsDnfAaCg6nF83CLX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.135.0/24 194.55.157.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ac:e3:5c:44:cf:22:94:c8:3b:08:07:13:94:a9:f1:1e:27: 77:8e:ac:a7:bf:37:7d:5c:a0:92:f3:70:2e:86:4a:25:54:d5: 5a:b6:9f:7b:44:bf:ef:39:80:83:d2:af:a5:28:94:69:8f:2a: 71:c4:1c:ab:20:0b:8d:48:14:c4:4f:eb:5a:1a:e0:7e:64:5b: f9:c9:fb:0e:6d:66:b9:c8:5e:7f:76:a4:72:e4:8f:1a:e2:0a: 63:47:62:a6:97:01:3e:6d:76:27:46:19:30:f1:2f:0a:b9:73: 59:44:68:98:89:99:5c:98:83:26:fb:13:b4:ec:1f:a4:f7:78: be:8e:2f:75:2c:f6:40:a4:52:28:21:94:6c:e4:0f:d6:ab:15: 26:e5:a9:ce:bf:1c:d9:f4:b5:61:08:d8:79:e9:15:63:a6:2d: f8:55:71:9c:05:09:e7:34:36:2b:3a:3f:3b:19:74:70:df:80: e3:f3:fb:4b:39:8a:a6:23:72:87:6d:c8:a6:ef:75:3e:3d:d6: db:74:44:46:3f:c1:14:b2:40:dd:5b:22:b4:9b:c3:3b:e0:8d: 61:c0:57:cb:3c:ed:d9:a0:38:18:cf:be:34:76:b4:fe:31:a4: cc:58:ca:f4:36:4e:fd:f9:02:dd:48:bd:3f:14:88:09:be:be: 51:64:c0:e8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NW2Z+O9YcDL3mBUoOb+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMjRhODI2MjAyMDkxYWM4MzE5ZjBmMDZlYjc5NmZkODI0 MjJiMGYwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTVkZGZkZDdiOGUxNDBiMDM5ZGYwMWEwYTBlYTcxN2NkYzIyZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwE6uHb5XQu7P5HxMUjajpWx3S9M w58rGJWie63ubN+u+AUwsPpj5amortln3rKLjx3lvR94FsbyZZ+xwEMYnM3BVYNb i/LdIOXUrfdZLxa2RWyOHx5byCab//jNG3+P2gmomkmOziRDQ9Ap3OxUOss+QjEA 94JXBs4PgXMfA8/lnBT/WIta0JR3jzxkTl0Nh8bkbol0YCaO2Bm8XuPhG2a0Mhw5 aUxojUE43wx/QE2j2qHD33xWb5ynCJP63p7DbnfPJLrclOlyZo3KmIl/MPCjgsLV zFuK1t75PVNvBTu9q1I2v7swwbeyS3rL0j+pVtMzhdHDdF5dG5oWFB6zwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDVd3917jhQLA53wGgoOpxfNwi19MB8GA1UdIwQY MBaAFOwkqCYgIJGsgxnw8G63lv2CQisPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0NTb0ppQWdrYXlER2ZEd2JyZVdfWUpDS3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODZmZTktODdjYy00ZDI5LTg4NmUt ZDBhYzFlMDQ4ZjY3LzEvTlYzZjNYdU9GQXNEbmZBYUNnNm5GODNDTFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODZmZTktODdjYy00ZDI5LTg4NmUtZDBhYzFlMDQ4ZjY3 LzEvN0NTb0ppQWdrYXlER2ZEd2JyZVdfWUpDS3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZmHAwQA wjedMA0GCSqGSIb3DQEBCwUAA4IBAQADrONcRM8ilMg7CAcTlKnxHid3jqynvzd9 XKCS83AuhkolVNVatp97RL/vOYCD0q+lKJRpjypxxByrIAuNSBTET+taGuB+ZFv5 yfsObWa5yF5/dqRy5I8a4gpjR2KmlwE+bXYnRhkw8S8KuXNZRGiYiZlcmIMm+xO0 7B+k93i+ji91LPZApFIoIZRs5A/WqxUm5anOvxzZ9LVhCNh56RVjpi34VXGcBQnn NDYrOj87GXRw34Dj8/tLOYqmI3KHbcim73U+PdbbdERGP8EUskDdWyK0m8M74I1h wFfLPO3ZoDgYz740drT+MaTMWMr0Nk79+QLdSL0/FIgJvr5RZMDo -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:36 2026 by rpki-client