This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/nF-YJnDe36GSTrMdE4OaqcL2ytE.roa File: nF-YJnDe36GSTrMdE4OaqcL2ytE.roa (raw, json) Hash identifier: Vy2/IceEB6KcpqIu9v4108H+Hr6sCPfLoeeW13cg1mQ= Subject key identifier: 9C:5F:98:26:70:DE:DF:A1:92:4E:B3:1D:13:83:9A:A9:C2:F6:CA:D1 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B7D5CBC9439C543C39A2CDFBED884105F Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/nF-YJnDe36GSTrMdE4OaqcL2ytE.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 178.239.128.0/20 maxlen: 24 195.93.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bc:94:39:c5:43:c3:9a:2c:df:be:d8:84:10:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c5f982670dedfa1924eb31d13839aa9c2f6cad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:02:46:e5:c8:3b:9f:ff:2a:46:c4:13:eb: cb:6c:0c:e3:0f:c9:18:e4:11:de:9d:85:bc:2d:18: 18:2e:54:b1:bb:75:0a:7f:05:ce:b8:8b:81:2f:78: 44:05:8b:e7:fa:a0:dc:c4:33:d3:77:d5:2d:88:ea: 35:ce:91:ac:52:a8:fe:a3:da:ce:81:65:52:c5:0c: 4c:e4:f5:96:e6:8f:ed:ec:4e:dc:27:bb:cd:48:06: f6:5c:c3:94:f9:b2:0d:98:18:e0:f4:92:03:6d:2c: 3d:58:17:5d:20:9f:ba:b2:5d:b6:2b:0c:06:60:8b: 3e:2d:4a:cf:48:3b:31:24:0c:f8:bd:71:9e:8b:ae: 14:6c:28:69:f9:85:0a:ea:71:b1:a0:0c:99:63:ac: 0c:85:d0:90:f5:73:e4:f9:e8:13:19:ad:20:e1:cf: 83:62:0c:9b:93:0b:50:40:58:e4:db:6e:34:32:db: dc:e5:d7:2a:69:27:83:8b:6c:7b:4b:af:22:39:00: ca:20:93:d8:6f:53:d7:63:70:16:7c:19:20:df:72: bc:de:c1:47:99:85:7e:47:89:e1:36:34:52:e6:c6: da:b8:54:f0:d7:89:94:07:ce:8c:50:8f:b8:04:90: d0:4a:07:80:47:d7:16:3b:d0:6e:a0:55:d0:4d:2b: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5F:98:26:70:DE:DF:A1:92:4E:B3:1D:13:83:9A:A9:C2:F6:CA:D1 X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/nF-YJnDe36GSTrMdE4OaqcL2ytE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.128.0/20 195.93.178.0/23 Signature Algorithm: sha256WithRSAEncryption 11:b8:b6:14:37:a2:82:a8:db:d7:21:9a:83:d6:c2:d3:5d:b3: 49:1a:8e:f8:26:7d:f9:68:61:d1:9d:bf:a3:de:8e:53:18:0a: ce:ff:47:61:ef:aa:2e:3f:bf:e3:53:2c:50:84:fc:4d:85:d4: 95:ca:b2:28:f6:de:51:20:c9:92:91:86:2e:c2:02:a7:2f:ea: 15:eb:fb:73:47:80:f8:79:f6:48:5a:af:a1:99:fa:77:66:aa: da:7c:df:81:9c:3d:d9:b8:75:eb:95:da:dc:19:45:56:49:20: 04:68:8d:8c:ae:25:74:21:e5:86:04:4b:28:de:ad:04:82:e8: 77:82:c1:ab:da:01:bb:b4:d5:fb:d1:f7:0e:8c:9e:43:77:d3: 49:df:70:76:e8:3b:dd:e5:34:1f:98:4a:a1:be:22:ee:31:55: 48:60:65:e1:85:48:a3:ec:e1:56:23:e4:ee:fc:c4:46:7e:68: 41:50:ea:3e:ca:0d:23:ba:b9:e7:92:19:41:1d:f0:18:f1:69: c4:f1:a2:8e:b7:97:62:c0:6f:9d:11:89:c1:38:f7:af:a4:fe: 34:96:e9:17:27:d8:06:e3:d5:4b:65:e7:49:fb:b3:49:3b:68: e8:87:87:e0:39:08:1a:a6:a2:7a:21:b4:ba:de:54:3e:80:c6: 45:3f:59:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XLyUOcVDw5os377YhBBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzVmOTgyNjcwZGVkZmExOTI0ZWIzMWQxMzgzOWFhOWMyZjZjYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBYCRuXIO5//KkbEE+vLbAzjD8kY 5BHenYW8LRgYLlSxu3UKfwXOuIuBL3hEBYvn+qDcxDPTd9UtiOo1zpGsUqj+o9rO gWVSxQxM5PWW5o/t7E7cJ7vNSAb2XMOU+bINmBjg9JIDbSw9WBddIJ+6sl22KwwG YIs+LUrPSDsxJAz4vXGei64UbChp+YUK6nGxoAyZY6wMhdCQ9XPk+egTGa0g4c+D YgybkwtQQFjk2240Mtvc5dcqaSeDi2x7S68iOQDKIJPYb1PXY3AWfBkg33K83sFH mYV+R4nhNjRS5sbauFTw14mUB86MUI+4BJDQSgeAR9cWO9BuoFXQTSsyTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJxfmCZw3t+hkk6zHRODmqnC9srRMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvbkYtWUpuRGUzNkdTVHJNZEU0T2FxY0wyeXRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEsu+AAwQB w12yMA0GCSqGSIb3DQEBCwUAA4IBAQARuLYUN6KCqNvXIZqD1sLTXbNJGo74Jn35 aGHRnb+j3o5TGArO/0dh76ouP7/jUyxQhPxNhdSVyrIo9t5RIMmSkYYuwgKnL+oV 6/tzR4D4efZIWq+hmfp3ZqrafN+BnD3ZuHXrldrcGUVWSSAEaI2MriV0IeWGBEso 3q0Eguh3gsGr2gG7tNX70fcOjJ5Dd9NJ33B26Dvd5TQfmEqhviLuMVVIYGXhhUij 7OFWI+Tu/MRGfmhBUOo+yg0jurnnkhlBHfAY8WnE8aKOt5diwG+dEYnBOPevpP40 lukXJ9gG49VLZedJ+7NJO2joh4fgOQgapqJ6IbS63lQ+gMZFP1kZ -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:10 2026 by rpki-client