This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Nf1KmnayELNON1rFZ5D2GMZ1e74.roa File: Nf1KmnayELNON1rFZ5D2GMZ1e74.roa (raw, json) Hash identifier: iaW9mhXzwAepX4ZS/RZwTXqY2ZK6L+AOV/mjj2kBCqY= Subject key identifier: 35:FD:4A:9A:76:B2:10:B3:4E:37:5A:C5:67:90:F6:18:C6:75:7B:BE Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3827B118D5E87D1C8DF1F642BA0C2C Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Nf1KmnayELNON1rFZ5D2GMZ1e74.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56380 IP address blocks: 5.101.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:27:b1:18:d5:e8:7d:1c:8d:f1:f6:42:ba:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35fd4a9a76b210b34e375ac56790f618c6757bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:47:4e:73:40:9f:66:f7:df:a7:6b:a3:ee: e2:21:0b:60:fa:b7:e8:bd:92:76:fd:54:4c:6d:a9: 33:a9:07:bf:ba:8c:cc:66:ac:ff:ed:18:09:90:c4: 5c:3e:ec:10:94:ee:b7:12:96:e6:7a:71:07:0c:83: 96:50:01:27:58:f1:e1:0b:e4:4b:e8:f0:41:5e:43: f0:98:cb:22:a7:5e:68:1d:37:b4:b0:69:68:4d:a3: bd:94:b1:67:af:cc:df:02:48:16:3a:3a:cc:ca:bd: a4:89:51:ba:fa:65:a5:be:c3:f1:9e:a4:19:d5:0b: b2:64:29:ea:c6:62:1c:9f:73:35:38:33:29:c3:86: ce:ce:63:78:f5:c3:b2:77:92:54:11:3f:21:6b:be: 3a:61:d2:c9:9d:a1:30:7c:b1:b5:43:c2:1e:51:91: 89:00:7a:2a:8d:19:29:44:64:0d:63:6e:a1:4a:93: 0b:05:e2:4b:0c:39:81:5f:97:79:94:9b:7d:58:6b: 14:16:c5:c5:f2:86:56:5d:1e:9e:21:18:dc:86:97: 1c:3e:5e:d0:d2:ae:88:b3:67:7f:a1:f6:bc:07:2c: 10:9d:e3:0c:01:6d:22:51:cc:87:6d:ce:3a:3d:0c: 60:0d:77:6b:dc:f6:82:4a:71:ec:14:97:bb:04:d3: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FD:4A:9A:76:B2:10:B3:4E:37:5A:C5:67:90:F6:18:C6:75:7B:BE X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Nf1KmnayELNON1rFZ5D2GMZ1e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.87.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c2:fb:c0:ee:06:7f:45:a1:25:ec:73:a5:d1:19:81:d8:3c: 1a:86:c0:25:01:66:f4:2d:b9:19:2e:8d:10:01:65:6b:35:c5: 06:65:0e:29:63:54:db:69:21:5e:67:77:f7:f7:bb:0a:2e:7b: 93:5b:ef:a6:46:32:8b:64:bf:4c:6d:52:f0:51:a6:97:ad:e4: ab:ea:5e:7a:8f:13:e6:b4:46:33:16:af:3a:76:d1:c9:43:02: a7:10:f6:9b:a5:df:6e:0f:e7:3f:d0:77:4c:39:55:d8:ce:d1: 80:fb:a0:27:51:fe:bc:90:84:02:12:b0:fe:b9:a3:02:d9:c7: 4c:37:c1:1c:14:2c:b8:91:a4:71:77:32:74:7a:91:91:a1:52: 38:83:e9:38:1e:05:aa:14:ed:c1:9e:45:bf:61:a5:0b:12:3b: 65:ea:22:2e:80:e2:c5:01:ad:71:e9:51:da:7e:81:b8:20:63: aa:8c:b6:46:96:f4:4b:5b:d4:1d:37:90:d9:e4:3b:67:4c:49: b2:85:c3:e3:20:cf:5a:1b:d0:55:f0:6e:7d:46:cb:ea:37:f2: 2b:8a:d4:50:5f:46:01:16:80:ec:f1:97:c1:0d:c3:2f:7d:46: c1:cf:24:fe:ba:51:8d:93:62:aa:e0:76:ee:a0:45:c0:2d:96: 06:88:a9:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCexGNXofRyN8fZCugwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWZkNGE5YTc2YjIxMGIzNGUzNzVhYzU2NzkwZjYxOGM2NzU3YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVNHTnNAn2b336dro+7iIQtg+rfo vZJ2/VRMbakzqQe/uozMZqz/7RgJkMRcPuwQlO63EpbmenEHDIOWUAEnWPHhC+RL 6PBBXkPwmMsip15oHTe0sGloTaO9lLFnr8zfAkgWOjrMyr2kiVG6+mWlvsPxnqQZ 1QuyZCnqxmIcn3M1ODMpw4bOzmN49cOyd5JUET8ha746YdLJnaEwfLG1Q8IeUZGJ AHoqjRkpRGQNY26hSpMLBeJLDDmBX5d5lJt9WGsUFsXF8oZWXR6eIRjchpccPl7Q 0q6Is2d/ofa8BywQneMMAW0iUcyHbc46PQxgDXdr3PaCSnHsFJe7BNO7yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDX9Spp2shCzTjdaxWeQ9hjGdXu+MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvTmYxS21uYXlFTE5PTjFyRlo1RDJHTVoxZTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWVXMA0G CSqGSIb3DQEBCwUAA4IBAQA4wvvA7gZ/RaEl7HOl0RmB2DwahsAlAWb0LbkZLo0Q AWVrNcUGZQ4pY1TbaSFeZ3f397sKLnuTW++mRjKLZL9MbVLwUaaXreSr6l56jxPm tEYzFq86dtHJQwKnEPabpd9uD+c/0HdMOVXYztGA+6AnUf68kIQCErD+uaMC2cdM N8EcFCy4kaRxdzJ0epGRoVI4g+k4HgWqFO3BnkW/YaULEjtl6iIugOLFAa1x6VHa foG4IGOqjLZGlvRLW9QdN5DZ5DtnTEmyhcPjIM9aG9BV8G59RsvqN/IritRQX0YB FoDs8ZfBDcMvfUbBzyT+ulGNk2Kq4HbuoEXALZYGiKn1 -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:15 2026 by rpki-client