This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nggAXx6SGWphYuzA03heA6Ytu-g.roa File: nggAXx6SGWphYuzA03heA6Ytu-g.roa (raw, json) Hash identifier: y70Qoh7/HGQ+cxD2h3PXsAxwEFpbUOMBhuSNsX145OU= Subject key identifier: 9E:08:00:5F:1E:92:19:6A:61:62:EC:C0:D3:78:5E:03:A6:2D:BB:E8 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B0EB34BBAF5318E7279A07BEFFDE54B1C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nggAXx6SGWphYuzA03heA6Ytu-g.roa Signing time: Thu 11 Dec 2025 18:36:29 +0000 ROA not before: Thu 11 Dec 2025 18:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212384 IP address blocks: 163.5.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:b3:4b:ba:f5:31:8e:72:79:a0:7b:ef:fd:e5:4b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 11 18:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e08005f1e92196a6162ecc0d3785e03a62dbbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:ae:db:a3:c4:4d:f5:36:4f:89:cd:65:a7: 3a:6f:76:59:68:38:b7:bb:df:87:90:24:23:8b:d9: 21:8a:9a:7e:82:96:99:f8:25:0e:ef:27:1b:85:03: 25:1a:dc:b3:24:4c:27:28:69:b3:9a:ed:67:7e:17: 51:9e:e2:b8:de:c1:60:36:38:fb:e7:ff:9b:7d:7b: 7b:28:8e:c2:49:c5:42:9a:ff:4d:c0:4c:b3:35:26: 31:5b:6b:d1:d8:02:a3:5a:0c:13:96:97:8a:f5:98: 2d:c9:5c:9c:bf:10:2a:fc:ea:cf:a6:57:24:50:dd: 8a:98:54:aa:a7:fd:92:b6:44:cb:71:24:86:79:a9: 66:09:8d:45:4f:36:25:85:9c:3f:e5:32:d9:db:50: c6:7e:20:37:b3:b2:d5:ca:be:b1:f0:97:b8:a4:d7: 3d:64:2f:c7:7c:70:f3:37:2f:b3:99:05:a6:5b:d3: 65:2e:33:dc:e1:b6:8a:d5:1b:51:c6:b1:e2:c6:a9: 14:1c:43:83:86:61:95:ed:57:14:b6:5e:76:b0:3b: 8a:a4:a2:27:7b:e9:08:1d:de:38:21:46:f0:fb:3f: a6:ef:db:cd:72:a8:70:e3:8c:d9:e8:1b:dd:60:03: c0:bb:dd:38:e9:76:ba:34:c5:96:58:44:2b:45:f3: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:08:00:5F:1E:92:19:6A:61:62:EC:C0:D3:78:5E:03:A6:2D:BB:E8 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nggAXx6SGWphYuzA03heA6Ytu-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.12.0/24 Signature Algorithm: sha256WithRSAEncryption 04:f8:03:96:be:1d:e3:5e:b3:6c:e5:28:e9:4a:bf:bf:26:36: 7d:fd:79:79:35:d8:30:06:8c:ee:6b:9c:aa:9d:4d:2f:64:f9: ff:1c:ca:4b:3c:6d:69:c8:03:0e:d0:24:41:d3:0a:83:d0:30: 02:2a:ec:76:52:ee:c5:06:6a:83:4e:29:06:5a:9b:e9:3a:3e: a9:03:3e:2f:40:5a:d6:a9:b5:27:c6:9a:54:9d:8e:b2:4a:eb: 09:45:f2:74:f3:ad:ac:df:9e:8b:0c:d3:ff:26:69:23:0e:62: 81:d2:db:b1:72:5d:68:40:63:56:80:0b:a6:70:82:69:16:38: 69:72:44:fa:bd:7a:17:26:44:34:cc:8e:ce:6c:84:35:d5:fa: de:b7:22:cb:cc:75:05:e6:5e:77:53:30:a4:2f:ea:6a:a6:de: a7:0d:b4:10:3f:87:16:80:35:10:05:f8:a6:6f:cf:c6:14:76: 6e:a1:d7:20:cb:7a:be:e5:e2:48:9f:85:b0:8d:7a:96:af:ae: b4:c1:1a:61:d9:be:02:b2:80:c6:0b:b7:82:88:5a:68:bd:02: 21:16:54:ca:f7:52:de:45:54:a8:d3:82:39:66:4e:9d:6d:36: e2:bc:9b:8b:6e:29:4d:58:d0:8d:01:a2:86:ce:1e:7b:1d:98: d1:e3:50:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsOs0u69TGOcnmge+/95UscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjExMTgzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTA4MDA1ZjFlOTIxOTZhNjE2MmVjYzBkMzc4NWUwM2E2MmRiYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybiu26PETfU2T4nNZac6b3ZZaDi3 u9+HkCQji9khipp+gpaZ+CUO7ycbhQMlGtyzJEwnKGmzmu1nfhdRnuK43sFgNjj7 5/+bfXt7KI7CScVCmv9NwEyzNSYxW2vR2AKjWgwTlpeK9ZgtyVycvxAq/OrPplck UN2KmFSqp/2StkTLcSSGealmCY1FTzYlhZw/5TLZ21DGfiA3s7LVyr6x8Je4pNc9 ZC/HfHDzNy+zmQWmW9NlLjPc4baK1RtRxrHixqkUHEODhmGV7VcUtl52sDuKpKIn e+kIHd44IUbw+z+m79vNcqhw44zZ6BvdYAPAu9046Xa6NMWWWEQrRfMAgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4IAF8ekhlqYWLswNN4XgOmLbvoMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvbmdnQVh4NlNHV3BoWXV6QTAzaGVBNll0dS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUMMA0G CSqGSIb3DQEBCwUAA4IBAQAE+AOWvh3jXrNs5SjpSr+/JjZ9/Xl5NdgwBozua5yq nU0vZPn/HMpLPG1pyAMO0CRB0wqD0DACKux2Uu7FBmqDTikGWpvpOj6pAz4vQFrW qbUnxppUnY6ySusJRfJ0862s356LDNP/JmkjDmKB0tuxcl1oQGNWgAumcIJpFjhp ckT6vXoXJkQ0zI7ObIQ11fretyLLzHUF5l53UzCkL+pqpt6nDbQQP4cWgDUQBfim b8/GFHZuodcgy3q+5eJIn4WwjXqWr660wRph2b4CsoDGC7eCiFpovQIhFlTK91Le RVSo04I5Zk6dbTbivJuLbilNWNCNAaKGzh57HZjR41Bz -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:57 2025 by rpki-client