This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/ntTY6bNs75yEDx8qQmeYR0RBDCE.roa File: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (raw, json) Hash identifier: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI= Subject key identifier: 9E:D4:D8:E9:B3:6C:EF:9C:84:0F:1F:2A:42:67:98:47:44:41:0C:21 Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Certificate serial: 019B775927C93087B642DD683AC4E04A04F3 Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/ntTY6bNs75yEDx8qQmeYR0RBDCE.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 37.252.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:27:c9:30:87:b6:42:dd:68:3a:c4:e0:4a:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ed4d8e9b36cef9c840f1f2a4267984744410c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:81:b9:59:2d:5e:13:73:24:c3:50:38:fb: b2:be:51:dd:ee:c7:bf:b4:b4:d1:00:8d:2c:7f:c8: 15:9d:72:ca:d8:1a:de:f8:11:1a:a3:47:0d:c7:b2: 6a:aa:7a:7b:da:be:c0:92:ea:ad:21:b9:7b:01:4e: ee:62:45:01:6a:dd:e3:e9:95:d8:46:8c:5e:7e:d7: 2a:2a:f9:f5:c4:77:21:34:28:cc:9d:5d:29:c1:38: 40:6a:f6:5e:f2:d2:43:43:d7:ba:06:c3:67:cb:c4: 5c:10:1f:f6:fd:76:ae:86:52:77:8a:81:c1:66:e1: 19:02:07:6b:ca:59:27:5f:19:9e:01:c7:53:f8:ca: a4:ae:66:fd:d9:88:c1:e0:ca:68:19:e1:77:a0:31: ab:e1:a1:8a:3a:93:db:78:75:cb:fa:c6:a6:14:cc: a1:bf:3c:70:c6:cc:67:42:8b:e2:79:0e:e6:c7:67: e8:12:a4:cc:0b:e3:c7:79:de:1f:ae:b1:74:6e:39: 70:2d:b5:79:79:4f:b2:23:b7:db:47:ca:07:33:87: 61:9f:d3:6f:c5:44:f7:ea:22:47:8d:35:88:3a:6e: 2a:69:ca:e1:da:58:ab:c4:5b:60:29:ab:c4:8a:e5: 33:62:ce:a8:97:0f:78:68:a4:08:0a:61:2a:f5:1f: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:D8:E9:B3:6C:EF:9C:84:0F:1F:2A:42:67:98:47:44:41:0C:21 X509v3 Authority Key Identifier: keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/ntTY6bNs75yEDx8qQmeYR0RBDCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.192.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:63:a0:98:6e:d9:c6:b1:24:33:53:d9:16:78:30:cf:a9:3e: 05:eb:28:1c:01:aa:54:81:90:93:0c:92:0b:66:d8:14:0a:8d: e0:ed:f2:44:99:c3:34:80:89:a0:77:db:20:fc:f0:7b:6d:cf: 78:85:55:d7:ac:42:63:a1:bb:52:9e:4a:0c:6d:f5:10:db:13: 4a:56:31:94:5b:70:45:08:08:a5:f7:79:9e:a2:3a:6a:86:97: d3:11:81:8b:c6:0f:cc:bb:38:23:36:5e:a3:50:da:fb:0a:33: 17:32:d2:17:44:35:ef:71:da:3d:c1:f7:49:04:56:9b:78:6d: c7:41:74:b2:54:c7:4f:8b:b4:c3:60:de:7b:19:71:96:c0:7c: d2:64:f7:17:e2:7e:2c:2d:47:dc:f0:dc:cd:ff:3a:56:55:6b: 6c:03:c0:9e:8b:57:a4:7a:b9:39:2c:78:ce:e8:93:c2:da:a6: 2b:79:f8:db:bb:6d:1c:cd:b0:63:7f:04:1b:8e:50:df:12:70: 06:cc:fe:bd:8b:e4:97:ec:a8:5b:58:eb:55:0e:aa:5d:3e:be: fe:9e:49:e4:70:bd:a7:4e:d1:c7:e6:52:f8:9f:10:e7:07:1d: 27:68:d9:08:31:fc:36:6a:57:be:2f:50:55:ae:68:32:f0:c4: 63:04:d3:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSfJMIe2Qt1oOsTgSgTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj YjUxOTgwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWQ0ZDhlOWIzNmNlZjljODQwZjFmMmE0MjY3OTg0NzQ0NDEwYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqOBuVktXhNzJMNQOPuyvlHd7se/ tLTRAI0sf8gVnXLK2Bre+BEao0cNx7Jqqnp72r7AkuqtIbl7AU7uYkUBat3j6ZXY RoxeftcqKvn1xHchNCjMnV0pwThAavZe8tJDQ9e6BsNny8RcEB/2/XauhlJ3ioHB ZuEZAgdrylknXxmeAcdT+Mqkrmb92YjB4MpoGeF3oDGr4aGKOpPbeHXL+samFMyh vzxwxsxnQovieQ7mx2foEqTMC+PHed4frrF0bjlwLbV5eU+yI7fbR8oHM4dhn9Nv xUT36iJHjTWIOm4qacrh2lirxFtgKavEiuUzYs6olw94aKQICmEq9R+wAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7U2OmzbO+chA8fKkJnmEdEQQwhMB8GA1UdIwQY MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct ZGIzNmVlYTgzMDdmLzEvbnRUWTZiTnM3NXlFRHg4cVFtZVlSMFJCRENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJfzAMA0G CSqGSIb3DQEBCwUAA4IBAQA6Y6CYbtnGsSQzU9kWeDDPqT4F6ygcAapUgZCTDJIL ZtgUCo3g7fJEmcM0gImgd9sg/PB7bc94hVXXrEJjobtSnkoMbfUQ2xNKVjGUW3BF CAil93meojpqhpfTEYGLxg/MuzgjNl6jUNr7CjMXMtIXRDXvcdo9wfdJBFabeG3H QXSyVMdPi7TDYN57GXGWwHzSZPcX4n4sLUfc8NzN/zpWVWtsA8Cei1ekerk5LHjO 6JPC2qYrefjbu20czbBjfwQbjlDfEnAGzP69i+SX7KhbWOtVDqpdPr7+nknkcL2n TtHH5lL4nxDnBx0naNkIMfw2ale+L1BVrmgy8MRjBNMc -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:55 2026 by rpki-client