This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa File: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (raw, json) Hash identifier: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8= Subject key identifier: 34:9E:D1:05:96:8F:16:BB:5D:8A:E5:1D:56:06:90:FB:11:AF:A2:17 Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Certificate serial: 019B7C7F5007FD0644C6A6E2CCC33E10DDD5 Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa Signing time: Fri 02 Jan 2026 02:17:56 +0000 ROA not before: Fri 02 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207544 IP address blocks: 212.6.61.0/24 maxlen: 24 2a0b:6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:50:07:fd:06:44:c6:a6:e2:cc:c3:3e:10:dd:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=349ed105968f16bb5d8ae51d560690fb11afa217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:10:6a:2c:d6:82:a5:64:3e:12:c2:b9:72: 7d:ee:20:2a:ef:3d:e7:fa:f2:14:df:81:99:1b:b7: f3:e9:b6:a7:c0:20:43:45:9d:4b:6a:2d:74:62:d9: a8:a4:56:1d:0f:24:c0:1a:fa:1e:5c:76:af:4f:43: 1e:3d:c4:a0:4d:b7:af:bb:36:18:d6:47:3a:c8:c3: 62:81:be:ab:64:2e:fd:33:32:57:fd:74:7a:0f:87: 95:84:5f:54:cd:6f:36:15:dd:2e:f6:f7:f9:40:28: 4b:72:28:e9:db:06:56:0d:08:5b:17:7b:3b:9e:3b: bd:5a:2a:d6:b0:e3:65:a0:9c:94:d8:c8:39:cf:48: f5:b0:9f:fd:21:2c:d9:ec:de:0f:a3:9d:0d:88:6c: 7f:16:ca:9a:56:97:1a:44:4d:e2:7f:b7:7f:ae:0a: 27:34:39:63:4a:cc:ef:1f:eb:a3:6e:d4:f3:37:a1: 9e:a3:57:32:7a:11:48:ba:3e:68:19:a8:2b:76:cb: 63:f4:6c:82:46:a9:f8:2e:a7:2f:4c:5e:fa:36:c5: 63:2c:3e:bd:b0:f1:24:3e:63:1d:3e:2b:0a:4b:bf: d4:35:4f:7c:a5:9d:77:9b:ea:90:83:76:62:a2:04: 26:60:0e:26:ea:cc:4c:be:99:e9:4d:f0:f5:c3:a0: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:D1:05:96:8F:16:BB:5D:8A:E5:1D:56:06:90:FB:11:AF:A2:17 X509v3 Authority Key Identifier: keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.61.0/24 IPv6: 2a0b:6c0::/29 Signature Algorithm: sha256WithRSAEncryption ba:19:ee:05:69:dd:01:86:69:fe:a8:6d:0e:df:ff:3f:d7:f9: 59:97:19:dd:c2:07:42:a9:24:5b:5c:fa:7e:61:67:79:3e:6d: bd:bd:11:8b:d0:1c:0d:30:5f:5c:5e:4b:4a:43:4a:be:21:5d: d4:4a:15:80:fe:fd:d3:bc:18:2c:d2:67:db:1e:51:95:49:bd: 76:47:4f:7b:48:fb:5c:b7:0e:ac:8f:df:f7:85:95:30:fa:b9: 85:f6:de:73:6a:dd:96:83:8d:4a:1a:7a:df:88:a7:1d:5c:0b: 7f:2a:f2:ac:bc:b0:ea:f6:35:0d:c0:7e:ec:64:30:1d:66:38: 08:ee:d8:87:21:7c:c3:1f:be:0e:e6:bc:59:a4:1d:76:d7:58: d8:bf:bd:28:e0:2f:29:5e:d4:97:78:a6:98:a0:00:0c:ae:68: f3:81:e2:d2:7b:ee:59:19:fc:04:6a:73:77:fa:27:3e:a9:bd: 59:30:bb:91:1f:12:ba:4f:ce:6b:cf:13:7c:1e:23:7a:62:58: 43:18:86:e0:44:97:68:2a:c3:00:5b:09:b1:1a:8a:e0:54:2d: b9:64:58:b7:8e:f1:02:25:df:f0:1e:49:91:07:da:c5:ac:90: b8:76:49:f3:9e:2d:74:4a:ee:af:f9:f1:88:22:fb:95:be:2c: 54:d4:9d:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f1AH/QZExqbizMM+EN3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw NGI1ZGMwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDllZDEwNTk2OGYxNmJiNWQ4YWU1MWQ1NjA2OTBmYjExYWZhMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1loQaizWgqVkPhLCuXJ97iAq7z3n +vIU34GZG7fz6banwCBDRZ1Lai10YtmopFYdDyTAGvoeXHavT0MePcSgTbevuzYY 1kc6yMNigb6rZC79MzJX/XR6D4eVhF9UzW82Fd0u9vf5QChLcijp2wZWDQhbF3s7 nju9WirWsONloJyU2Mg5z0j1sJ/9ISzZ7N4Po50NiGx/FsqaVpcaRE3if7d/rgon NDljSszvH+ujbtTzN6Geo1cyehFIuj5oGagrdstj9GyCRqn4LqcvTF76NsVjLD69 sPEkPmMdPisKS7/UNU98pZ13m+qQg3ZiogQmYA4m6sxMvpnpTfD1w6BlvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDSe0QWWjxa7XYrlHVYGkPsRr6IXMB8GA1UdIwQY MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt MzFjNzMzMTk3MDczLzEvTko3UkJaYVBGcnRkaXVVZFZnYVEteEd2b2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1AY9MA0E AgACMAcDBQMqCwbAMA0GCSqGSIb3DQEBCwUAA4IBAQC6Ge4Fad0Bhmn+qG0O3/8/ 1/lZlxndwgdCqSRbXPp+YWd5Pm29vRGL0BwNMF9cXktKQ0q+IV3UShWA/v3TvBgs 0mfbHlGVSb12R097SPtctw6sj9/3hZUw+rmF9t5zat2Wg41KGnrfiKcdXAt/KvKs vLDq9jUNwH7sZDAdZjgI7tiHIXzDH74O5rxZpB1211jYv70o4C8pXtSXeKaYoAAM rmjzgeLSe+5ZGfwEanN3+ic+qb1ZMLuRHxK6T85rzxN8HiN6YlhDGIbgRJdoKsMA WwmxGorgVC25ZFi3jvECJd/wHkmRB9rFrJC4dknzni10Su6v+fGIIvuVvixU1J3F -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:56 2026 by rpki-client