This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/NPRTFimJGsBmacQOAQQPr9jae44.roa File: NPRTFimJGsBmacQOAQQPr9jae44.roa (raw, json) Hash identifier: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM= Subject key identifier: 34:F4:53:16:29:89:1A:C0:66:69:C4:0E:01:04:0F:AF:D8:DA:7B:8E Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B7B35C87DAAADCE228EA1F5E791AB2F61 Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/NPRTFimJGsBmacQOAQQPr9jae44.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198381 IP address blocks: 141.105.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c8:7d:aa:ad:ce:22:8e:a1:f5:e7:91:ab:2f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f4531629891ac06669c40e01040fafd8da7b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:63:69:20:2a:bf:7d:cb:d8:5b:24:eb:06: a7:12:1f:06:da:d5:ab:a9:11:be:3c:b4:b1:93:7d: 87:8d:c7:67:77:4b:ce:3e:87:fc:61:2d:66:a3:9b: e5:68:ac:1c:7f:07:97:b9:d5:6a:ba:47:8c:ab:bc: dc:b1:17:6a:39:b5:7b:6d:e0:0b:cc:ac:83:92:80: 9c:de:c8:d9:db:9b:d7:8e:6f:56:77:c4:51:78:da: 38:79:52:39:30:f4:b6:a1:0b:d5:c5:62:89:d3:12: 14:0a:47:35:e0:52:dc:9f:4c:41:7d:b3:fd:46:9c: d5:b4:7e:06:ee:bf:6a:2b:59:b0:37:9a:15:08:0a: 2c:c5:ab:28:d9:c2:08:98:00:f0:0d:cd:98:b8:55: 9a:aa:b0:b7:77:a3:d9:23:7c:e8:1d:52:0b:92:11: d9:61:5f:10:a7:3a:09:87:9a:1d:ec:98:c0:b0:8a: a2:45:dc:18:37:bd:0c:8f:e3:c8:bd:fe:69:27:11: 22:ee:3a:d9:0b:e2:10:b7:77:79:b8:85:6e:0f:81: 07:14:ee:64:2e:24:14:0a:6d:e2:82:bc:7b:4c:79: 4c:56:43:dd:16:c9:b5:26:91:85:f7:fa:5a:1b:2e: 60:df:55:63:43:05:88:59:91:bc:5f:e1:35:49:ee: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:53:16:29:89:1A:C0:66:69:C4:0E:01:04:0F:AF:D8:DA:7B:8E X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/NPRTFimJGsBmacQOAQQPr9jae44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.162.0/23 Signature Algorithm: sha256WithRSAEncryption c2:cf:1b:16:ab:8b:06:78:ae:64:8d:9a:89:60:e8:f8:a8:48: ca:fd:7e:d0:d6:8a:3e:1c:7c:12:cc:a1:ce:c4:f5:37:72:4d: 71:8d:84:e4:23:2d:28:59:5e:ab:1c:76:1c:d5:b3:1c:6e:43: e4:aa:61:05:4f:49:fd:a3:8f:d6:8b:10:da:db:89:52:bb:18: 79:80:ee:f9:38:e0:29:c5:f4:ef:8a:ed:0e:d2:7e:16:0f:38: d3:e2:d9:83:b3:9b:d2:b6:79:3e:38:7d:e0:56:ab:1a:6f:8a: f4:13:d0:c8:83:19:07:c3:04:3c:fe:15:ba:cf:ff:8c:01:91: e5:46:1c:ed:98:bb:26:98:85:69:3c:43:26:69:1f:bb:96:86: 35:74:70:40:f7:ad:6b:21:ad:59:b5:5a:7e:2e:1e:e2:ba:ee: 2a:6d:5f:ab:8d:95:40:67:45:20:54:d5:2a:09:65:e7:13:ae: 46:5e:64:d9:e0:ab:04:93:6d:34:3c:3d:1f:d0:44:af:07:63: 17:44:b3:1d:1a:3a:2d:19:d3:99:86:c6:5b:dd:ef:a4:25:80: 5f:04:4d:8f:43:c5:cd:a3:ae:9a:62:ef:35:cc:29:32:f0:4b: 33:5f:79:01:82:dc:e6:4c:05:3f:6b:e7:85:73:8c:11:fa:fa: ce:03:32:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nch9qq3OIo6h9eeRqy9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGY0NTMxNjI5ODkxYWMwNjY2OWM0MGUwMTA0MGZhZmQ4ZGE3YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK5jaSAqv33L2Fsk6wanEh8G2tWr qRG+PLSxk32Hjcdnd0vOPof8YS1mo5vlaKwcfweXudVqukeMq7zcsRdqObV7beAL zKyDkoCc3sjZ25vXjm9Wd8RReNo4eVI5MPS2oQvVxWKJ0xIUCkc14FLcn0xBfbP9 RpzVtH4G7r9qK1mwN5oVCAosxaso2cIImADwDc2YuFWaqrC3d6PZI3zoHVILkhHZ YV8QpzoJh5od7JjAsIqiRdwYN70Mj+PIvf5pJxEi7jrZC+IQt3d5uIVuD4EHFO5k LiQUCm3igrx7THlMVkPdFsm1JpGF9/paGy5g31VjQwWIWZG8X+E1Se5bTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDT0UxYpiRrAZmnEDgEED6/Y2nuOMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvTlBSVEZpbUpHc0JtYWNRT0FRUVByOWphZTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjWmiMA0G CSqGSIb3DQEBCwUAA4IBAQDCzxsWq4sGeK5kjZqJYOj4qEjK/X7Q1oo+HHwSzKHO xPU3ck1xjYTkIy0oWV6rHHYc1bMcbkPkqmEFT0n9o4/WixDa24lSuxh5gO75OOAp xfTviu0O0n4WDzjT4tmDs5vStnk+OH3gVqsab4r0E9DIgxkHwwQ8/hW6z/+MAZHl RhztmLsmmIVpPEMmaR+7loY1dHBA961rIa1ZtVp+Lh7iuu4qbV+rjZVAZ0UgVNUq CWXnE65GXmTZ4KsEk200PD0f0ESvB2MXRLMdGjotGdOZhsZb3e+kJYBfBE2PQ8XN o66aYu81zCky8EszX3kBgtzmTAU/a+eFc4wR+vrOAzKa -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:56 2026 by rpki-client