This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ncgiaP2Kd_BauEXe2zt3rXcwSVI.roa File: ncgiaP2Kd_BauEXe2zt3rXcwSVI.roa (raw, json) Hash identifier: cBQRIgQ6OEeHziIJox4LS4b+DxkxZD5dytsMLqoSvRY= Subject key identifier: 9D:C8:22:68:FD:8A:77:F0:5A:B8:45:DE:DB:3B:77:AD:77:30:49:52 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AB7787476FF2359F22B8A246567425A30 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ncgiaP2Kd_BauEXe2zt3rXcwSVI.roa Signing time: Mon 24 Nov 2025 20:05:15 +0000 ROA not before: Mon 24 Nov 2025 20:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207252 IP address blocks: 5.83.152.0/24 maxlen: 24 5.231.29.0/24 maxlen: 24 77.90.12.0/24 maxlen: 24 77.90.42.0/24 maxlen: 24 85.93.8.0/24 maxlen: 24 89.106.83.0/24 maxlen: 24 89.144.15.0/24 maxlen: 24 185.119.16.0/22 maxlen: 24 185.119.16.0/24 maxlen: 24 185.119.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:78:74:76:ff:23:59:f2:2b:8a:24:65:67:42:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 24 20:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9dc82268fd8a77f05ab845dedb3b77ad77304952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:e4:8f:24:a4:38:fc:ce:19:18:d3:fa:8d: 0a:e7:dc:1a:75:69:3e:62:a7:c1:bb:de:43:04:1f: e8:9e:82:97:e4:8b:25:1f:41:37:b4:fd:ce:a6:5d: b7:7a:05:57:4c:e1:00:10:dc:78:ec:e3:a8:b4:78: 9b:7f:b1:19:45:27:46:41:09:ce:c7:0b:97:bc:dd: e7:86:07:d6:1c:3d:cd:2b:76:da:28:a5:90:08:a0: d8:9d:d0:39:a3:22:27:9a:f7:96:65:d1:de:b7:7d: 03:9a:43:af:2b:97:01:47:3f:d2:77:bf:03:a3:7b: a2:6b:2c:73:7e:f3:44:be:ff:eb:02:75:8c:fe:70: cd:23:76:e5:96:74:80:6f:3c:28:25:bd:cd:b8:5d: 15:ad:2e:15:19:16:df:09:64:17:38:25:1d:94:7d: bc:7c:fa:63:12:b8:c3:3c:e1:25:83:15:0a:e4:3d: f5:c3:30:55:57:29:54:ba:26:39:3f:ef:ca:f6:55: db:0b:8b:ba:9e:1f:cf:e8:2d:7d:56:2c:95:df:b5: 96:10:82:d7:45:e8:6b:21:95:ca:74:fb:49:71:10: 3c:15:95:8b:31:8a:80:4c:27:76:db:aa:c8:38:55: ae:5c:6c:11:c0:69:15:c1:2f:22:72:2e:0e:f4:1d: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C8:22:68:FD:8A:77:F0:5A:B8:45:DE:DB:3B:77:AD:77:30:49:52 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ncgiaP2Kd_BauEXe2zt3rXcwSVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.152.0/24 5.231.29.0/24 77.90.12.0/24 77.90.42.0/24 85.93.8.0/24 89.106.83.0/24 89.144.15.0/24 185.119.16.0/22 Signature Algorithm: sha256WithRSAEncryption 29:c4:b2:af:3f:b0:d6:d1:61:d8:47:0d:14:a7:94:b8:fe:11: f3:2b:fb:98:3c:e1:d7:e2:e9:f3:b7:99:b2:1f:ef:7b:ce:c3: 90:0e:cd:a8:b9:d9:68:0e:91:d1:c7:b0:18:45:b0:eb:8d:9c: 13:42:4b:f3:34:9a:99:17:70:19:3d:1c:97:ce:b2:41:a1:ea: b1:fb:5d:52:23:6a:d3:ed:a8:04:e2:c7:02:4d:2e:dc:7d:2b: 6f:ea:ea:ab:ae:96:6e:a8:aa:28:4e:c2:5f:99:d2:76:ec:a3: 72:56:5a:0a:13:bb:7c:ec:bb:b3:50:10:4e:ba:8a:41:1e:c2: bd:54:cc:89:32:b7:fd:6a:75:f0:ce:f2:81:4c:a7:0b:7a:b4: 7c:7c:e2:d6:bc:c2:eb:6b:98:c1:9b:d9:63:eb:67:3d:66:bd: e4:f8:f9:d6:d6:38:b4:6d:22:bb:d0:91:2f:85:de:36:4f:1a: 73:a4:14:71:9f:aa:92:d8:c0:f0:70:65:5a:6d:4a:45:79:7a: 01:dc:0d:5c:3d:50:7f:9d:dd:1c:e6:cd:82:5b:b8:88:5b:e2: 99:62:72:ee:bc:4c:aa:cc:73:71:f4:51:60:0d:72:ce:3c:c4: f6:e5:20:9b:d1:de:e4:7d:50:8e:30:9d:32:09:26:ba:7b:b6: ca:df:13:f8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZq3eHR2/yNZ8iuKJGVnQlowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI0MjAwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGM4MjI2OGZkOGE3N2YwNWFiODQ1ZGVkYjNiNzdhZDc3MzA0OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7fkjySkOPzOGRjT+o0K59wadWk+ YqfBu95DBB/onoKX5IslH0E3tP3Opl23egVXTOEAENx47OOotHibf7EZRSdGQQnO xwuXvN3nhgfWHD3NK3baKKWQCKDYndA5oyInmveWZdHet30DmkOvK5cBRz/Sd78D o3uiayxzfvNEvv/rAnWM/nDNI3bllnSAbzwoJb3NuF0VrS4VGRbfCWQXOCUdlH28 fPpjErjDPOElgxUK5D31wzBVVylUuiY5P+/K9lXbC4u6nh/P6C19ViyV37WWEILX RehrIZXKdPtJcRA8FZWLMYqATCd226rIOFWuXGwRwGkVwS8ici4O9B3ZHQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFJ3IImj9infwWrhF3ts7d613MElSMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvbmNnaWFQMktkX0JhdUVYZTJ6dDNyWGN3U1ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABVOYAwQA BecdAwQATVoMAwQATVoqAwQAVV0IAwQAWWpTAwQAWZAPAwQCuXcQMA0GCSqGSIb3 DQEBCwUAA4IBAQApxLKvP7DW0WHYRw0Up5S4/hHzK/uYPOHX4unzt5myH+97zsOQ Ds2oudloDpHRx7AYRbDrjZwTQkvzNJqZF3AZPRyXzrJBoeqx+11SI2rT7agE4scC TS7cfStv6uqrrpZuqKooTsJfmdJ27KNyVloKE7t87LuzUBBOuopBHsK9VMyJMrf9 anXwzvKBTKcLerR8fOLWvMLra5jBm9lj62c9Zr3k+PnW1ji0bSK70JEvhd42Txpz pBRxn6qS2MDwcGVabUpFeXoB3A1cPVB/nd0c5s2CW7iIW+KZYnLuvEyqzHNx9FFg DXLOPMT25SCb0d7kfVCOMJ0yCSa6e7bK3xP4 -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:55 2025 by rpki-client