This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/NP9SfFGYsYXsch7Dr3qELq74PLU.roa File: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (raw, json) Hash identifier: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM= Subject key identifier: 34:FF:52:7C:51:98:B1:85:EC:72:1E:C3:AF:7A:84:2E:AE:F8:3C:B5 Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Certificate serial: 019B7F14F43C3D2A7EB49DE187BF7F3BA74B Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/NP9SfFGYsYXsch7Dr3qELq74PLU.roa Signing time: Fri 02 Jan 2026 14:20:38 +0000 ROA not before: Fri 02 Jan 2026 14:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209721 IP address blocks: 194.26.120.0/21 maxlen: 21 2001:67c:2e0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f4:3c:3d:2a:7e:b4:9d:e1:87:bf:7f:3b:a7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055 Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34ff527c5198b185ec721ec3af7a842eaef83cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:34:7a:41:0e:65:9e:a2:6f:b9:f4:72:27: b7:95:71:b9:e3:21:97:d9:8f:a8:c2:7f:16:77:a3: 41:14:99:aa:cf:ff:97:f7:c7:59:15:4b:d5:9a:e2: 58:06:97:10:a2:dc:ee:a6:56:e3:e7:89:a9:15:3c: b3:84:43:b8:0f:1e:44:1b:9d:2d:0d:16:41:f9:8b: 4f:53:93:b1:98:e3:22:7d:17:7d:28:b9:3e:92:67: 17:64:2f:47:65:49:84:6c:ec:3f:b0:4f:d5:0a:42: 68:46:10:c9:9a:20:65:0c:61:26:2d:d4:c7:fa:c3: f5:67:e4:92:1a:fc:7f:cf:4d:41:3e:28:27:65:9b: e3:5c:3e:02:3e:b2:8c:d2:05:01:b1:7d:9d:cb:50: 01:c6:24:fd:62:af:9c:8a:70:44:a9:c7:5e:1c:57: bd:87:3f:8e:7f:3c:2d:15:a9:8e:90:7f:7c:c0:78: 22:23:85:e2:10:d4:73:49:14:73:49:14:0b:0c:82: c0:e3:7f:56:34:16:63:81:a5:80:5d:2b:fe:e8:ac: cc:9e:97:bd:72:11:1e:c8:c6:15:1d:32:0e:23:df: 11:d1:d5:02:9f:85:e5:ad:d4:d6:18:09:16:bc:b1: 72:b5:a2:cf:ea:63:6d:f8:97:30:8b:e0:14:4e:f6: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FF:52:7C:51:98:B1:85:EC:72:1E:C3:AF:7A:84:2E:AE:F8:3C:B5 X509v3 Authority Key Identifier: keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/NP9SfFGYsYXsch7Dr3qELq74PLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.120.0/21 IPv6: 2001:67c:2e0c::/48 Signature Algorithm: sha256WithRSAEncryption 38:08:49:51:23:7b:6f:cf:73:a8:80:2b:60:1a:e2:c7:66:c8: 31:f0:83:7d:96:12:97:ce:d7:dc:cb:62:0b:b5:e6:1b:85:a7: 95:e6:13:af:99:64:49:f9:a3:01:b1:db:96:cd:7c:9c:06:49: 27:e4:7c:41:23:a6:75:5a:21:c7:31:6f:8e:d4:e7:29:fc:44: 83:fb:d1:12:be:5b:26:9a:e3:e5:d1:a4:41:6a:03:d1:38:d0: e7:85:97:8e:db:34:35:50:1d:98:e0:0b:1c:0d:e8:7e:b0:af: ce:94:56:22:6a:75:f6:c5:91:2d:c6:32:28:b6:20:9d:45:a7: 05:c2:9b:ef:98:b9:55:8a:a0:e5:e8:25:26:97:32:b7:3c:7f: 59:1f:45:0b:90:15:d5:1f:0d:b5:48:ad:a4:ce:4f:1e:9b:40: db:08:f3:38:fd:b0:22:8e:31:76:24:6b:5b:d3:91:f7:7a:e6: c2:c9:2c:77:1a:6b:d9:f8:13:62:e7:e2:da:57:e7:f4:15:e1: 07:3f:50:cc:3c:17:00:44:27:75:e4:8c:e8:c8:2a:54:73:ca: ba:ed:ec:f8:03:48:0e:29:16:79:af:e9:84:e6:b8:a4:c7:12: 46:aa:f0:a3:9e:74:1f:6d:22:5f:0b:73:27:fd:d0:af:47:6b: d3:e2:46:75 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FPQ8PSp+tJ3hh79/O6dLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1 NGIwNTUwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGZmNTI3YzUxOThiMTg1ZWM3MjFlYzNhZjdhODQyZWFlZjgzY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu80ekEOZZ6ib7n0cie3lXG54yGX 2Y+own8Wd6NBFJmqz/+X98dZFUvVmuJYBpcQotzuplbj54mpFTyzhEO4Dx5EG50t DRZB+YtPU5OxmOMifRd9KLk+kmcXZC9HZUmEbOw/sE/VCkJoRhDJmiBlDGEmLdTH +sP1Z+SSGvx/z01BPignZZvjXD4CPrKM0gUBsX2dy1ABxiT9Yq+cinBEqcdeHFe9 hz+OfzwtFamOkH98wHgiI4XiENRzSRRzSRQLDILA439WNBZjgaWAXSv+6KzMnpe9 chEeyMYVHTIOI98R0dUCn4XlrdTWGAkWvLFytaLP6mNt+Jcwi+AUTvax1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDT/UnxRmLGF7HIew696hC6u+Dy1MB8GA1UdIwQY MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt MmY3NTE5NTIxNmI5LzEvTlA5U2ZGR1lzWVhzY2g3RHIzcUVMcTc0UExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5 LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwhp4MA8E AgACMAkDBwAgAQZ8LgwwDQYJKoZIhvcNAQELBQADggEBADgISVEje2/Pc6iAK2Aa 4sdmyDHwg32WEpfO19zLYgu15huFp5XmE6+ZZEn5owGx25bNfJwGSSfkfEEjpnVa Iccxb47U5yn8RIP70RK+Wyaa4+XRpEFqA9E40OeFl47bNDVQHZjgCxwN6H6wr86U ViJqdfbFkS3GMii2IJ1FpwXCm++YuVWKoOXoJSaXMrc8f1kfRQuQFdUfDbVIraTO Tx6bQNsI8zj9sCKOMXYka1vTkfd65sLJLHcaa9n4E2Ln4tpX5/QV4Qc/UMw8FwBE J3XkjOjIKlRzyrrt7PgDSA4pFnmv6YTmuKTHEkaq8KOedB9tIl8Lcyf90K9Ha9Pi RnU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:56 2026 by rpki-client