This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa File: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (raw, json) Hash identifier: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE= Subject key identifier: 9C:07:F9:8F:E4:B3:E9:DE:D5:18:82:2F:01:0B:25:03:CF:C4:45:D5 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C64899AD91D51CF46DD453B3CE53 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12844 IP address blocks: 62.100.196.0/22 maxlen: 24 62.100.208.0/24 maxlen: 24 185.71.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:48:99:ad:91:d5:1c:f4:6d:d4:53:b3:ce:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c07f98fe4b3e9ded518822f010b2503cfc445d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:0e:b7:1f:7c:f6:40:32:93:44:f5:e0:74: 66:85:df:47:2c:78:68:7b:bd:06:a4:7f:91:ed:e8: 23:02:3c:96:de:63:d6:e8:d0:74:f4:57:42:82:a5: eb:9d:a4:fb:ec:01:b3:e0:aa:f5:ea:f3:3f:9d:c9: a9:98:0f:eb:06:38:c2:67:68:0d:0e:08:53:6d:22: 47:6e:0b:ae:7d:1e:8b:33:0e:18:e6:6d:de:f8:16: 5f:4e:11:38:b4:16:9c:93:af:ba:2a:af:13:09:c5: 5d:3c:6a:ff:c9:8f:17:bc:91:ff:01:af:4b:94:5f: 2e:0e:65:55:0e:93:b7:b3:fc:ef:7e:3d:82:3a:7b: d6:a0:0d:db:3d:9d:14:f9:d2:95:fb:85:fb:76:c0: db:77:59:77:2a:29:ea:c4:aa:7e:ee:c1:81:00:c9: 22:de:fb:ac:a6:40:43:0f:4c:97:ed:7d:cd:7c:3c: ef:29:e1:e9:00:1b:cd:33:e8:fb:f2:8e:fe:e3:2e: 7a:90:66:7a:93:b9:a7:bf:fc:cc:d2:63:8c:59:35: 88:17:72:9c:2c:54:09:94:f3:af:fc:4f:03:90:22: f1:87:5f:b5:d8:81:1a:8f:64:a6:4e:09:c5:ab:74: c5:78:4d:08:24:af:d1:2a:aa:07:26:4e:37:74:14: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:07:F9:8F:E4:B3:E9:DE:D5:18:82:2F:01:0B:25:03:CF:C4:45:D5 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.196.0/22 62.100.208.0/24 185.71.220.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:67:84:61:11:b3:60:32:77:df:cf:6c:d1:74:97:04:43:2a: 18:59:cb:60:05:f2:52:70:26:66:e2:17:ef:30:9c:f0:6a:60: b8:73:13:9a:dd:ad:6c:62:7b:3f:e2:60:bb:4c:b9:16:fe:ff: ea:cd:d5:6e:7c:94:fe:14:27:83:e0:1c:c6:6c:b0:0e:55:8b: 61:dc:a6:73:78:0c:41:90:2d:44:f6:48:c0:03:5d:97:c7:4b: a9:b6:9a:dd:b9:84:ed:30:39:9a:82:33:47:2a:10:52:37:06: 9f:f5:f0:bb:fa:54:20:65:31:8c:b1:2d:b9:87:33:8b:e3:fd: 5e:e3:d0:19:08:64:a0:18:1e:c8:69:49:cd:86:70:83:6e:73: 4c:43:e4:2f:e6:e2:8b:26:03:9b:e6:9b:78:a0:2e:25:4e:70: cc:8d:65:62:4c:8c:e2:3a:41:7c:99:9f:b9:70:64:b4:02:17: 04:51:90:1e:b6:5b:e1:d5:1e:e6:98:f2:c3:6d:dc:ed:34:f2: 75:33:ac:ea:09:37:79:86:fc:31:ab:fd:f0:8a:83:5a:20:4a: 0c:22:cd:41:34:ea:4f:e4:a1:ff:de:5a:e8:68:23:b9:51:f0: e7:8b:9b:f8:41:65:06:02:39:d4:07:10:21:53:f5:05:fd:65: bc:4b:12:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xsZIma2R1Rz0bdRTs85TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA3Zjk4ZmU0YjNlOWRlZDUxODgyMmYwMTBiMjUwM2NmYzQ0NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DQOtx989kAyk0T14HRmhd9HLHho e70GpH+R7egjAjyW3mPW6NB09FdCgqXrnaT77AGz4Kr16vM/ncmpmA/rBjjCZ2gN DghTbSJHbguufR6LMw4Y5m3e+BZfThE4tBack6+6Kq8TCcVdPGr/yY8XvJH/Aa9L lF8uDmVVDpO3s/zvfj2COnvWoA3bPZ0U+dKV+4X7dsDbd1l3KinqxKp+7sGBAMki 3vuspkBDD0yX7X3NfDzvKeHpABvNM+j78o7+4y56kGZ6k7mnv/zM0mOMWTWIF3Kc LFQJlPOv/E8DkCLxh1+12IEaj2SmTgnFq3TFeE0IJK/RKqoHJk43dBSxmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJwH+Y/ks+ne1RiCLwELJQPPxEXVMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbkFmNWotU3o2ZDdWR0lJdkFRc2xBOF9FUmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCPmTEAwQA PmTQAwQBuUfcMA0GCSqGSIb3DQEBCwUAA4IBAQAKZ4RhEbNgMnffz2zRdJcEQyoY WctgBfJScCZm4hfvMJzwamC4cxOa3a1sYns/4mC7TLkW/v/qzdVufJT+FCeD4BzG bLAOVYth3KZzeAxBkC1E9kjAA12Xx0uptprduYTtMDmagjNHKhBSNwaf9fC7+lQg ZTGMsS25hzOL4/1e49AZCGSgGB7IaUnNhnCDbnNMQ+Qv5uKLJgOb5pt4oC4lTnDM jWViTIziOkF8mZ+5cGS0AhcEUZAetlvh1R7mmPLDbdztNPJ1M6zqCTd5hvwxq/3w ioNaIEoMIs1BNOpP5KH/3lroaCO5UfDni5v4QWUGAjnUBxAhU/UF/WW8SxJQ -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:10 2026 by rpki-client