This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/ng1Tkoik0468H1Ss1bWCZlgGMXA.roa File: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (raw, json) Hash identifier: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE= Subject key identifier: 9E:0D:53:92:88:A4:D3:8E:BC:1F:54:AC:D5:B5:82:66:58:06:31:70 Certificate issuer: /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52 Certificate serial: 019B79EBCC78EEA5CF63F785791C352B3412 Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/ng1Tkoik0468H1Ss1bWCZlgGMXA.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206215 IP address blocks: 167.150.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cc:78:ee:a5:cf:63:f7:85:79:1c:35:2b:34:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0d539288a4d38ebc1f54acd5b5826658063170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:d0:8f:f9:c0:16:e8:50:bc:df:df:57:4c: 1e:cc:44:25:a5:0e:2b:e0:6b:cb:b3:ae:f8:12:b8: 9b:04:a1:8c:57:ad:37:c3:8e:4d:be:41:ab:bd:88: 9b:ee:33:7b:bc:c6:67:24:41:85:0b:65:1b:8e:36: d2:4f:eb:12:8f:b5:fa:7e:55:88:0f:d6:a9:40:fc: 72:03:78:e3:a7:27:24:48:15:b6:16:b2:2d:a6:4a: be:cf:81:67:53:30:63:27:9f:83:bc:5b:10:f2:17: 6b:fa:a1:eb:ee:9d:3e:f6:b3:90:70:fd:7d:1f:e3: 6a:87:70:a7:a4:94:56:9d:76:09:05:a8:41:73:47: e4:dc:be:c6:f9:bc:76:61:62:29:f3:ed:5f:85:5d: 69:cf:be:5b:9f:8f:8b:8c:e9:47:6f:52:73:e8:30: 64:90:9a:5e:08:1b:d6:58:ab:dd:b7:88:93:19:d7: 98:a5:aa:2d:2f:ab:79:7c:0a:79:3a:f4:61:14:a2: 0e:88:61:3f:63:18:27:ed:7e:4b:8f:65:6c:31:bd: a4:09:c6:45:30:7f:12:6c:3e:41:54:a0:f5:3a:e2: 64:07:a9:ca:da:00:a7:60:cf:10:ec:39:82:5e:68: 59:68:d7:92:87:d5:41:c3:4d:6a:54:65:7a:aa:20: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:53:92:88:A4:D3:8E:BC:1F:54:AC:D5:B5:82:66:58:06:31:70 X509v3 Authority Key Identifier: keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/ng1Tkoik0468H1Ss1bWCZlgGMXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.223.0/24 Signature Algorithm: sha256WithRSAEncryption b3:55:b2:78:f8:78:fc:33:36:e3:72:5b:69:11:96:27:84:dc: bb:72:a3:cb:50:86:d3:0a:8a:6c:fa:fe:dc:0a:b9:75:8b:7b: c2:55:8c:d2:d8:1a:19:08:6f:68:81:13:7e:07:bf:cb:7c:87: df:6a:50:96:08:e4:9a:32:ec:a6:c1:b9:b0:eb:d4:a1:c6:d1: 43:93:8d:00:4a:03:ce:dc:de:b6:06:22:39:87:a8:65:e9:ca: 2e:3f:44:d6:86:b2:a7:3f:d2:20:a8:9a:4f:e4:90:50:af:0c: c5:f2:e7:08:40:eb:0e:e2:35:64:33:a6:bc:5a:82:dd:52:4d: a1:74:79:ae:18:dc:9f:5f:25:54:7b:ae:65:3f:46:1d:47:96: 57:ad:83:7a:50:4b:7c:ee:cf:83:c3:3e:66:14:42:35:11:e5: c1:4e:bc:a2:bb:9e:58:49:24:ef:2d:a5:c9:99:16:0e:bc:a6: cd:6a:96:dc:92:0c:ab:2b:66:18:9b:93:31:4a:c4:bc:2f:15: 68:35:55:0c:1a:72:f0:b0:31:e7:bf:cd:b1:c5:f5:9d:82:d8: db:c9:e2:6d:5d:75:70:ae:9e:fa:63:c3:e0:c6:46:9d:ab:6f: c3:31:22:94:38:8c:b1:ab:e6:09:29:cc:44:ea:d5:53:34:3b: 8f:ed:21:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568x47qXPY/eFeRw1KzQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDQxZTdlN2QxODRkNWRiYWQ3MTQyOWUzNjViOWYwYWM3 NmNhNTIwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTBkNTM5Mjg4YTRkMzhlYmMxZjU0YWNkNWI1ODI2NjU4MDYzMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6bQj/nAFuhQvN/fV0wezEQlpQ4r 4GvLs674EribBKGMV603w45NvkGrvYib7jN7vMZnJEGFC2UbjjbST+sSj7X6flWI D9apQPxyA3jjpyckSBW2FrItpkq+z4FnUzBjJ5+DvFsQ8hdr+qHr7p0+9rOQcP19 H+Nqh3CnpJRWnXYJBahBc0fk3L7G+bx2YWIp8+1fhV1pz75bn4+LjOlHb1Jz6DBk kJpeCBvWWKvdt4iTGdeYpaotL6t5fAp5OvRhFKIOiGE/Yxgn7X5Lj2VsMb2kCcZF MH8SbD5BVKD1OuJkB6nK2gCnYM8Q7DmCXmhZaNeSh9VBw01qVGV6qiBdWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4NU5KIpNOOvB9UrNW1gmZYBjFwMB8GA1UdIwQY MBaAFOcEHn59GE1dutcUKeNlufCsdspSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUt MGUxYzRhZDAzOTU2LzEvbmcxVGtvaWswNDY4SDFTczFiV0NabGdHTVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUtMGUxYzRhZDAzOTU2 LzEvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5bfMA0G CSqGSIb3DQEBCwUAA4IBAQCzVbJ4+Hj8MzbjcltpEZYnhNy7cqPLUIbTCops+v7c Crl1i3vCVYzS2BoZCG9ogRN+B7/LfIffalCWCOSaMuymwbmw69ShxtFDk40ASgPO 3N62BiI5h6hl6couP0TWhrKnP9IgqJpP5JBQrwzF8ucIQOsO4jVkM6a8WoLdUk2h dHmuGNyfXyVUe65lP0YdR5ZXrYN6UEt87s+Dwz5mFEI1EeXBTryiu55YSSTvLaXJ mRYOvKbNapbckgyrK2YYm5MxSsS8LxVoNVUMGnLwsDHnv82xxfWdgtjbyeJtXXVw rp76Y8Pgxkadq2/DMSKUOIyxq+YJKcxE6tVTNDuP7SFy -----END CERTIFICATE-----Generated at Tue Jan 20 00:28:22 2026 by rpki-client