This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa File: NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa (raw, json) Hash identifier: 4t65GeCqspIJ7i8BhQoAjY6xatOQordkuTZDORD2YyM= Subject key identifier: 36:05:7F:B0:71:9B:36:45:BE:E1:6C:FA:BC:76:05:BD:23:9E:ED:54 Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf Certificate serial: 019B7CED919FBF267694C0C3037876F7E872 Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39093 IP address blocks: 45.158.144.0/22 maxlen: 22 88.81.96.0/19 maxlen: 19 185.46.252.0/22 maxlen: 22 185.212.184.0/24 maxlen: 24 2a02:3d8::/32 maxlen: 32 2a0f:6380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:91:9f:bf:26:76:94:c0:c3:03:78:76:f7:e8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36057fb0719b3645bee16cfabc7605bd239eed54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:68:32:f9:57:e9:da:d6:96:29:21:7f:e9: ea:f7:ce:1e:2b:e5:6a:6c:db:c3:8a:ba:a4:4b:a1: 47:22:91:42:76:53:bb:4d:b4:fe:a4:d6:cb:25:52: b6:5f:cc:67:23:f7:04:fb:4f:86:4b:84:46:cd:15: 42:3d:45:70:e3:1d:da:d9:91:dc:28:99:ca:f7:6f: ad:0f:1a:63:35:6b:69:44:88:7e:41:80:40:ca:0b: e4:eb:e6:ae:89:17:ea:fe:82:94:ee:fc:41:74:3f: e8:88:c1:c9:0a:f1:d9:ba:41:7e:40:34:8d:2d:6c: e2:48:11:4a:96:d7:c6:29:e2:9d:d5:4d:91:40:a6: 51:65:88:05:83:52:69:b7:e5:99:e9:02:11:5d:67: 85:1c:d0:ab:22:96:4f:ee:eb:5c:6a:53:62:db:fa: 6a:93:b2:9f:1e:8f:dc:79:21:97:bc:98:52:b4:e5: a4:39:5f:52:2b:c3:35:30:a2:fd:2c:3d:c9:c8:7c: 0d:0f:51:08:06:9e:89:f5:3e:32:0f:7e:ac:ad:b6: 7c:ac:b3:f7:87:8d:83:60:86:0d:ff:31:e3:33:a4: 50:43:e2:8d:34:5f:40:86:51:0a:58:43:d8:09:7e: c7:c0:a1:65:1d:e4:65:f6:53:6a:89:30:ee:32:a1: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:7F:B0:71:9B:36:45:BE:E1:6C:FA:BC:76:05:BD:23:9E:ED:54 X509v3 Authority Key Identifier: keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.144.0/22 88.81.96.0/19 185.46.252.0/22 185.212.184.0/24 IPv6: 2a02:3d8::/32 2a0f:6380::/29 Signature Algorithm: sha256WithRSAEncryption 2a:5b:24:de:00:68:6b:42:6d:6d:c4:38:76:cf:e2:f7:0c:d8: 08:52:71:63:83:a1:87:ce:0f:ba:e2:ad:de:1b:d4:df:3f:7e: 8c:7b:ee:1b:ac:6f:0c:ff:32:bb:86:a4:d7:46:a5:70:ef:10: ff:00:f2:3b:39:fa:b3:05:f9:79:84:02:87:6d:a4:77:65:61: 84:8d:ed:22:41:6a:dc:89:7f:7e:e3:1e:c5:84:fa:2a:9f:b2: 33:72:a6:ae:f5:90:4b:23:33:10:e2:96:53:19:b6:8b:22:5b: e1:d0:b3:9f:0c:27:6d:d2:65:4c:72:56:88:d7:ac:98:78:7f: 1c:5f:47:66:fd:fa:90:11:77:05:8b:74:64:32:01:dc:91:d2: 14:42:f5:50:6f:70:ae:07:65:f9:27:d8:04:f8:90:aa:6f:e2: 92:01:16:77:31:a1:31:d5:af:15:a5:97:a5:6a:53:bb:2a:5a: cc:14:6f:d3:39:3f:0a:aa:55:cc:28:bc:4c:6f:74:7b:16:6d: fd:69:33:e4:d6:3f:05:42:68:8e:cd:9d:0f:16:d8:a4:7f:8d: 56:8e:e9:65:42:ba:aa:60:68:ea:e9:c4:9e:dd:ce:b0:eb:df: e7:49:4e:27:0c:cb:63:96:8d:3b:e4:28:51:95:8d:ab:7b:16: 01:8c:17:87 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt87ZGfvyZ2lMDDA3h29+hyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZmI0NzZmY2YzMTNjZmYyOTVkZTBkMTcwOTE1NmFmMDI1 M2Q3Y2YwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjA1N2ZiMDcxOWIzNjQ1YmVlMTZjZmFiYzc2MDViZDIzOWVlZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1oMvlX6drWlikhf+nq984eK+Vq bNvDirqkS6FHIpFCdlO7TbT+pNbLJVK2X8xnI/cE+0+GS4RGzRVCPUVw4x3a2ZHc KJnK92+tDxpjNWtpRIh+QYBAygvk6+auiRfq/oKU7vxBdD/oiMHJCvHZukF+QDSN LWziSBFKltfGKeKd1U2RQKZRZYgFg1Jpt+WZ6QIRXWeFHNCrIpZP7utcalNi2/pq k7KfHo/ceSGXvJhStOWkOV9SK8M1MKL9LD3JyHwND1EIBp6J9T4yD36srbZ8rLP3 h42DYIYN/zHjM6RQQ+KNNF9AhlEKWEPYCX7HwKFlHeRl9lNqiTDuMqGrPQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFDYFf7BxmzZFvuFs+rx2Bb0jnu1UMB8GA1UdIwQY MBaAFCz7R2/PMTz/KV3g0XCRVq8CU9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQt ZmE0ZGQyMWFlM2RjLzEvTmdWX3NIR2JOa1ctNFd6NnZIWUZ2U09lN1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQtZmE0ZGQyMWFlM2Rj LzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCLZ6QAwQF WFFgAwQCuS78AwQAudS4MBQEAgACMA4DBQAqAgPYAwUDKg9jgDANBgkqhkiG9w0B AQsFAAOCAQEAKlsk3gBoa0JtbcQ4ds/i9wzYCFJxY4Ohh84PuuKt3hvU3z9+jHvu G6xvDP8yu4ak10alcO8Q/wDyOzn6swX5eYQCh22kd2VhhI3tIkFq3Il/fuMexYT6 Kp+yM3KmrvWQSyMzEOKWUxm2iyJb4dCznwwnbdJlTHJWiNesmHh/HF9HZv36kBF3 BYt0ZDIB3JHSFEL1UG9wrgdl+SfYBPiQqm/ikgEWdzGhMdWvFaWXpWpTuypazBRv 0zk/CqpVzCi8TG90exZt/Wkz5NY/BUJojs2dDxbYpH+NVo7pZUK6qmBo6unEnt3O sOvf50lOJwzLY5aNO+QoUZWNq3sWAYwXhw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:20 2026 by rpki-client