This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa File: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (raw, json) Hash identifier: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ= Subject key identifier: 34:82:22:F9:0F:06:58:E0:1F:EB:2E:F1:80:DE:85:1F:20:50:BC:B4 Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e Certificate serial: 019B7B36D5A1542418B7CB57BA34AD68D4A6 Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204647 IP address blocks: 185.244.116.0/22 maxlen: 24 2a0d:2c80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d5:a1:54:24:18:b7:cb:57:ba:34:ad:68:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348222f90f0658e01feb2ef180de851f2050bcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:09:0f:99:bf:4c:b5:3c:10:7f:37:1a:af: ad:65:ce:ee:32:08:39:25:54:43:14:10:0e:03:c7: 28:f0:2a:4d:bf:8b:51:1f:8c:c4:7d:fe:d6:1c:b6: 78:f3:a0:02:3f:d4:d4:77:52:aa:7d:f3:84:5c:c5: 40:2c:d1:b7:b0:6a:2a:a4:4c:0b:12:3e:27:3d:f1: 6d:66:74:48:e1:9a:1b:59:91:23:e7:8d:5f:71:7f: 63:ae:07:cc:42:aa:08:52:43:c2:01:53:31:f3:15: 80:c5:5e:51:a9:ba:9e:89:4b:d1:fb:5f:76:69:95: 9b:c6:60:6f:3b:2f:d0:42:97:04:83:13:c0:5d:74: fa:ff:b5:84:77:ab:be:67:8f:cf:90:94:cb:58:f4: aa:a7:1d:79:53:d7:3c:f3:4c:00:fa:f4:5e:e4:da: 48:bb:2e:bc:c6:cf:e2:ad:c6:ef:75:61:eb:d5:c0: ff:ae:b3:60:89:38:e3:1a:53:98:6e:43:e5:83:c3: 5b:be:b5:ec:f1:6d:51:b4:5b:38:db:f5:d9:22:01: 4a:3c:5a:ca:cb:7e:65:85:38:49:a1:16:6f:df:44: 4e:52:5b:9c:7c:2a:53:46:07:a1:1a:af:a3:c7:55: 22:49:0a:e7:25:92:df:74:ea:5e:f2:21:ac:fd:d7: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:82:22:F9:0F:06:58:E0:1F:EB:2E:F1:80:DE:85:1F:20:50:BC:B4 X509v3 Authority Key Identifier: keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.116.0/22 IPv6: 2a0d:2c80::/29 Signature Algorithm: sha256WithRSAEncryption 6a:3e:46:2e:c4:69:62:c8:b2:53:2f:a4:27:7f:c1:13:71:cc: 8a:05:d3:35:ca:d2:26:c3:48:3a:ad:f9:9e:f5:2e:ed:ad:1d: 24:42:24:bf:24:b8:2e:3d:16:01:37:98:fa:2c:09:7a:aa:6d: 4e:37:5b:23:69:17:8d:9c:c9:f6:9e:bf:6b:a5:18:83:4d:40: 05:77:59:fc:53:14:d1:4d:0b:18:3c:75:9a:7e:04:ac:50:6a: 2b:c1:c0:91:f5:82:8d:cb:48:f8:96:c3:eb:86:d4:32:61:ec: 0b:73:ff:04:5b:91:25:a8:1a:d3:c7:cd:45:04:bb:53:67:36: e7:d0:b5:4a:e0:a1:8e:9f:a2:fb:fe:e1:25:46:87:06:46:2a: 6c:f0:54:fb:03:79:a4:a0:24:c3:5b:98:3b:fc:58:2d:20:a7: ef:1a:ce:11:d7:ca:f2:f2:af:cf:ca:a0:19:d4:86:ac:ba:60: 1e:ec:58:6b:86:f3:04:00:0e:d8:61:69:82:71:37:04:91:f4: 90:89:a4:3d:b1:dd:99:04:8b:ae:c9:08:4f:72:fb:15:59:92: 1d:d9:16:e6:52:a0:54:24:1e:47:88:f3:13:33:ea:64:be:5b: 90:3d:6d:9f:e7:fe:9f:b8:d1:05:2a:33:12:73:00:6c:a8:5b: 66:bd:b9:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NtWhVCQYt8tXujStaNSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWZkMzU3YzNmYjhlYTMwZTEyMDc4MjNiNjQ2ZTEyNTMx ODM4MGUwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgyMjJmOTBmMDY1OGUwMWZlYjJlZjE4MGRlODUxZjIwNTBiY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTsJD5m/TLU8EH83Gq+tZc7uMgg5 JVRDFBAOA8co8CpNv4tRH4zEff7WHLZ486ACP9TUd1KqffOEXMVALNG3sGoqpEwL Ej4nPfFtZnRI4ZobWZEj541fcX9jrgfMQqoIUkPCAVMx8xWAxV5RqbqeiUvR+192 aZWbxmBvOy/QQpcEgxPAXXT6/7WEd6u+Z4/PkJTLWPSqpx15U9c880wA+vRe5NpI uy68xs/ircbvdWHr1cD/rrNgiTjjGlOYbkPlg8NbvrXs8W1RtFs42/XZIgFKPFrK y35lhThJoRZv30ROUlucfCpTRgehGq+jx1UiSQrnJZLfdOpe8iGs/dfV/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDSCIvkPBljgH+su8YDehR8gULy0MB8GA1UdIwQY MBaAFDSf01fD+46jDhIHgjtkbhJTGDgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTIt MWU4NGYwOGMxZGNiLzEvTklJaS1ROEdXT0FmNnk3eGdONkZIeUJRdkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTItMWU4NGYwOGMxZGNi LzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufR0MA0E AgACMAcDBQMqDSyAMA0GCSqGSIb3DQEBCwUAA4IBAQBqPkYuxGliyLJTL6Qnf8ET ccyKBdM1ytImw0g6rfme9S7trR0kQiS/JLguPRYBN5j6LAl6qm1ON1sjaReNnMn2 nr9rpRiDTUAFd1n8UxTRTQsYPHWafgSsUGorwcCR9YKNy0j4lsPrhtQyYewLc/8E W5ElqBrTx81FBLtTZzbn0LVK4KGOn6L7/uElRocGRips8FT7A3mkoCTDW5g7/Fgt IKfvGs4R18ry8q/PyqAZ1IasumAe7FhrhvMEAA7YYWmCcTcEkfSQiaQ9sd2ZBIuu yQhPcvsVWZId2RbmUqBUJB5HiPMTM+pkvluQPW2f5/6fuNEFKjMScwBsqFtmvbkq -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:27 2026 by rpki-client