This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/NjFTWAITqtXkX8ho3Skr9Pp4rlc.roa File: NjFTWAITqtXkX8ho3Skr9Pp4rlc.roa (raw, json) Hash identifier: c1GgwCiaU4VxxQHZOScOAW3pt5JnM4YNabIqdNefJ1o= Subject key identifier: 36:31:53:58:02:13:AA:D5:E4:5F:C8:68:DD:29:2B:F4:FA:78:AE:57 Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Certificate serial: 019B7F827DCF600316EE9CF4B706DD0C0C54 Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/NjFTWAITqtXkX8ho3Skr9Pp4rlc.roa Signing time: Fri 02 Jan 2026 16:20:16 +0000 ROA not before: Fri 02 Jan 2026 16:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60989 IP address blocks: 5.181.192.0/22 maxlen: 24 185.21.248.0/22 maxlen: 24 2a04:1d80::/29 maxlen: 32 2a0e:1000::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:7d:cf:60:03:16:ee:9c:f4:b7:06:dd:0c:0c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Validity Not Before: Jan 2 16:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363153580213aad5e45fc868dd292bf4fa78ae57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:a9:03:a9:ee:57:a3:7f:02:ba:a7:2c:2f: 51:9b:06:2e:67:05:5c:c4:af:f2:38:e3:07:ff:98: b6:d6:9b:1c:10:e8:dd:61:35:e7:27:30:a0:bb:de: 4b:06:12:d9:19:ac:87:7c:70:42:69:05:b6:b5:ac: 6c:44:48:69:fc:88:ed:22:13:1a:27:fc:94:4c:4d: 39:3c:c0:f4:ec:e9:98:b7:55:af:86:97:b5:70:e4: 59:e0:e6:70:c8:ae:2b:df:5d:74:29:a4:c4:41:4b: 03:09:bf:97:86:fe:da:c9:48:c0:e0:f6:8d:c0:0f: f7:ca:6a:9d:ca:d5:69:81:1b:a2:4c:93:4a:d5:03: 66:10:05:73:83:19:82:ac:60:74:f8:96:4d:33:23: d4:fe:0a:3d:0e:00:e3:d4:68:b3:c7:70:42:3b:d3: aa:2e:5c:ef:e3:11:cf:60:3d:96:55:61:ce:55:d8: 1a:58:f2:c8:42:7a:8a:66:f1:4d:df:99:d9:a9:35: c8:2e:1a:4f:79:86:23:95:54:7d:67:dd:e3:b9:74: 38:4c:4c:03:75:33:3f:05:3a:e1:88:bc:9e:71:87: 49:be:f8:aa:86:09:1a:51:b4:d5:fe:a0:8e:a9:9f: a6:8a:35:92:2d:8f:31:d1:58:7f:f1:7c:15:6b:89: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:31:53:58:02:13:AA:D5:E4:5F:C8:68:DD:29:2B:F4:FA:78:AE:57 X509v3 Authority Key Identifier: keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/NjFTWAITqtXkX8ho3Skr9Pp4rlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.192.0/22 185.21.248.0/22 IPv6: 2a04:1d80::/29 2a0e:1000::/29 Signature Algorithm: sha256WithRSAEncryption 34:74:dc:c5:09:56:de:30:97:0a:eb:f0:5c:b2:dc:bf:09:75: 2a:c1:5d:fb:5c:81:38:18:95:3d:41:18:fe:88:e4:ce:58:cc: e1:c8:a5:96:88:90:62:ff:82:ac:be:7a:2b:dc:f4:40:54:cf: b0:75:e3:84:13:0e:2c:a4:45:4e:ee:0f:4c:93:39:02:2b:01: a6:4a:88:93:96:6a:9a:d3:3c:bf:36:04:17:8d:5b:a2:8c:30: c5:1b:f9:4e:85:fc:82:77:88:a3:27:4b:5c:09:07:d4:f7:17: e6:2c:58:8c:c9:d2:56:eb:27:a2:cc:d3:0f:01:d3:dd:ba:5e: ec:0f:a1:99:08:8f:76:96:9d:fe:de:07:ea:2a:79:8d:95:0d: f2:82:39:43:39:0d:12:5a:21:34:66:62:d7:49:e9:80:0e:f8: d9:d4:93:56:80:cd:7c:19:a3:51:73:0d:da:08:b9:ce:3e:a2: 26:91:d9:35:72:52:27:3c:cb:ff:a7:47:16:7b:4c:1a:6d:6a: 69:f3:6c:1c:f9:41:2c:68:a7:b8:d2:9f:42:91:89:32:be:88: d0:2d:5e:cc:6b:36:f5:3e:87:78:c2:34:26:50:5c:33:08:2c: 17:4d:48:6b:f5:1a:f3:74:1c:2d:62:46:3a:fb:de:4d:1d:3b: 34:e8:e1:15 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/gn3PYAMW7pz0twbdDAxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3 MzMwZjIwHhcNMjYwMTAyMTYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjMxNTM1ODAyMTNhYWQ1ZTQ1ZmM4NjhkZDI5MmJmNGZhNzhhZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I2pA6nuV6N/ArqnLC9RmwYuZwVc xK/yOOMH/5i21pscEOjdYTXnJzCgu95LBhLZGayHfHBCaQW2taxsREhp/IjtIhMa J/yUTE05PMD07OmYt1Wvhpe1cORZ4OZwyK4r3110KaTEQUsDCb+Xhv7ayUjA4PaN wA/3ymqdytVpgRuiTJNK1QNmEAVzgxmCrGB0+JZNMyPU/go9DgDj1Gizx3BCO9Oq Llzv4xHPYD2WVWHOVdgaWPLIQnqKZvFN35nZqTXILhpPeYYjlVR9Z93juXQ4TEwD dTM/BTrhiLyecYdJvviqhgkaUbTV/qCOqZ+mijWSLY8x0Vh/8XwVa4ngmwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDYxU1gCE6rV5F/IaN0pK/T6eK5XMB8GA1UdIwQY MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt NGMxZTQ5ZWM4ZjE2LzEvTmpGVFdBSVRxdFhrWDhobzNTa3I5UHA0cmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2 LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCBbXAAwQC uRX4MBQEAgACMA4DBQMqBB2AAwUDKg4QADANBgkqhkiG9w0BAQsFAAOCAQEANHTc xQlW3jCXCuvwXLLcvwl1KsFd+1yBOBiVPUEY/ojkzljM4cilloiQYv+CrL56K9z0 QFTPsHXjhBMOLKRFTu4PTJM5AisBpkqIk5ZqmtM8vzYEF41boowwxRv5ToX8gneI oydLXAkH1PcX5ixYjMnSVusnoszTDwHT3bpe7A+hmQiPdpad/t4H6ip5jZUN8oI5 QzkNElohNGZi10npgA742dSTVoDNfBmjUXMN2gi5zj6iJpHZNXJSJzzL/6dHFntM Gm1qafNsHPlBLGinuNKfQpGJMr6I0C1ezGs29T6HeMI0JlBcMwgsF01Ia/Ua83Qc LWJGOvveTR07NOjhFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:31 2026 by rpki-client