This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa File: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (raw, json) Hash identifier: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s= Subject key identifier: 37:0C:F7:63:CF:07:9F:76:28:AD:2A:D8:C5:22:DA:16:E8:79:AE:4A Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c Certificate serial: 019B7FF28E1B8353425C443CC25D71E5F9B8 Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa Signing time: Fri 02 Jan 2026 18:22:41 +0000 ROA not before: Fri 02 Jan 2026 18:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 192.150.194.0/23 maxlen: 23 192.150.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8e:1b:83:53:42:5c:44:3c:c2:5d:71:e5:f9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=370cf763cf079f7628ad2ad8c522da16e879ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:79:fe:76:d6:af:96:32:a3:5e:90:7d:40: 4b:ed:56:6e:60:54:1f:43:91:9f:37:34:0c:1d:01: 56:eb:5f:ea:f3:62:af:87:85:a2:0e:22:99:cc:fe: c9:0a:61:6c:f6:33:8e:46:20:d6:bf:84:96:00:90: 11:74:e1:9e:7c:b5:1f:bd:55:4f:df:84:86:3b:97: d8:62:78:ae:d9:0a:bd:86:17:64:b6:9a:26:82:89: 6b:ed:67:6b:ec:61:d1:ba:26:30:5e:02:b5:96:0a: dc:4d:d1:bb:e0:43:f7:b9:50:46:5c:21:15:51:9b: e5:8a:87:88:58:98:2c:b0:88:f1:c3:bf:df:fe:98: 0c:32:92:64:10:2e:b1:52:57:e8:6c:7e:34:8f:40: 0b:ae:33:fb:c5:2f:ba:e0:6e:c5:a9:49:4e:49:f2: 3a:90:2b:47:80:01:9f:51:0a:f8:56:f5:20:33:39: 3c:19:df:4a:2b:b2:8d:64:f0:3f:58:93:25:3e:61: 1f:01:9f:ce:b0:5d:d7:8c:6b:1c:d5:75:c2:7a:14: d0:2f:15:68:c1:db:eb:4a:e2:13:f0:eb:b8:da:9c: 05:ac:14:fa:33:1c:d9:a1:5a:c6:8d:75:76:96:33: ca:67:96:e7:86:94:30:38:8d:90:6b:52:ee:cb:cd: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0C:F7:63:CF:07:9F:76:28:AD:2A:D8:C5:22:DA:16:E8:79:AE:4A X509v3 Authority Key Identifier: keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.150.194.0-192.150.196.255 Signature Algorithm: sha256WithRSAEncryption 38:66:9b:53:25:23:ff:24:27:cb:8e:20:84:7a:e6:81:2b:53: b6:de:90:51:e1:00:22:66:c8:07:a6:e3:6d:93:3a:71:73:1a: 3b:d6:0a:fd:51:b5:a4:ef:e4:80:1e:86:a6:8b:cd:ef:6f:36: 03:a3:4d:6e:8d:1a:d1:99:20:9e:da:73:3e:9a:b3:23:6a:f6: 64:54:7c:23:86:92:03:b0:cb:c3:4d:34:21:a0:12:ac:88:ef: 69:42:fa:b4:c1:82:5f:74:50:e0:bb:8b:be:bc:af:8e:c8:c5: a9:64:1c:35:18:4d:90:67:48:43:77:8a:9d:f8:b5:29:f9:b3: c9:8c:e4:c3:f1:ce:62:90:32:d5:06:48:06:16:c9:b3:c9:fe: 54:3c:09:1f:0b:d7:1d:c8:24:39:ca:1c:97:36:82:43:9f:ff: 64:b4:82:e5:c7:53:00:82:d3:6a:49:80:80:0c:d8:ae:d7:d9: c6:57:c8:40:f9:f1:00:c5:33:f8:df:a5:03:c2:9f:de:36:90: 47:c1:6d:b7:75:40:04:3a:43:22:7f:54:64:4c:e2:16:6a:8d: ef:34:f4:92:b8:f5:96:4c:df:8c:19:ee:fc:10:58:2b:7e:83: f8:2d:5e:32:3e:5e:fa:f6:67:08:a2:f6:7e:a1:e8:e0:51:59: 0d:5f:7a:8a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8o4bg1NCXEQ8wl1x5fm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzY0YzY2OGVmZjM0NzQwODE2ZWRhODVhNDU5ZDBjNDIy ZTA2M2MwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzBjZjc2M2NmMDc5Zjc2MjhhZDJhZDhjNTIyZGExNmU4NzlhZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+d5/nbWr5Yyo16QfUBL7VZuYFQf Q5GfNzQMHQFW61/q82Kvh4WiDiKZzP7JCmFs9jOORiDWv4SWAJARdOGefLUfvVVP 34SGO5fYYniu2Qq9hhdktpomgolr7Wdr7GHRuiYwXgK1lgrcTdG74EP3uVBGXCEV UZvlioeIWJgssIjxw7/f/pgMMpJkEC6xUlfobH40j0ALrjP7xS+64G7FqUlOSfI6 kCtHgAGfUQr4VvUgMzk8Gd9KK7KNZPA/WJMlPmEfAZ/OsF3XjGsc1XXCehTQLxVo wdvrSuIT8Ou42pwFrBT6MxzZoVrGjXV2ljPKZ5bnhpQwOI2Qa1Luy829+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDcM92PPB592KK0q2MUi2hboea5KMB8GA1UdIwQY MBaAFJPGTGaO/zR0CBbtqFpFnQxCLgY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzIt MTQ3ZWM5NmVhNzMwLzEvTnd6M1k4OEhuM1lvclNyWXhTTGFGdWg1cmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzItMTQ3ZWM5NmVhNzMw LzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHAlsID BADAlsQwDQYJKoZIhvcNAQELBQADggEBADhmm1MlI/8kJ8uOIIR65oErU7bekFHh ACJmyAem422TOnFzGjvWCv1RtaTv5IAehqaLze9vNgOjTW6NGtGZIJ7acz6asyNq 9mRUfCOGkgOwy8NNNCGgEqyI72lC+rTBgl90UOC7i768r47IxalkHDUYTZBnSEN3 ip34tSn5s8mM5MPxzmKQMtUGSAYWybPJ/lQ8CR8L1x3IJDnKHJc2gkOf/2S0guXH UwCC02pJgIAM2K7X2cZXyED58QDFM/jfpQPCn942kEfBbbd1QAQ6QyJ/VGRM4hZq je809JK49ZZM34wZ7vwQWCt+g/gtXjI+Xvr2Zwii9n6h6OBRWQ1feoo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:11 2026 by rpki-client