This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/ngZw_Aqalo4a-WBAo61UeGloX7M.roa File: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (raw, json) Hash identifier: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo= Subject key identifier: 9E:06:70:FC:0A:9A:96:8E:1A:F9:60:40:A3:AD:54:78:69:68:5F:B3 Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Certificate serial: 019B7C11AE095BDA84BE5080F17BFCF27F60 Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/ngZw_Aqalo4a-WBAo61UeGloX7M.roa Signing time: Fri 02 Jan 2026 00:18:11 +0000 ROA not before: Fri 02 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.98.156.0/24 maxlen: 24 193.102.132.0/24 maxlen: 24 194.115.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ae:09:5b:da:84:be:50:80:f1:7b:fc:f2:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Validity Not Before: Jan 2 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0670fc0a9a968e1af96040a3ad547869685fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:58:7c:87:1a:42:a8:1a:4d:2a:2a:fe:a3:d8: 31:57:c0:7a:9e:2f:43:79:30:7f:e1:88:01:72:12: b9:64:ec:87:c3:1a:6f:8c:87:23:ca:ce:d3:1e:ec: 90:ba:b9:7d:4b:12:62:6e:66:d5:bf:39:aa:af:a9: 9e:cc:8d:8f:14:32:d0:30:e7:14:d8:f0:85:a0:70: 87:88:f7:f0:8c:53:d2:f8:02:64:b4:3c:d2:c9:97: 63:5d:5a:e3:dd:52:0a:96:47:c1:18:00:f6:9f:c1: 49:dd:87:ae:62:a1:81:cb:32:93:73:38:f9:f1:a8: 2c:b9:64:4a:d7:55:b7:98:2d:97:aa:c4:d4:04:23: 49:21:aa:b0:3a:c8:53:8e:57:2d:17:88:ae:44:7b: 43:66:2b:08:39:5c:6a:c8:7b:bf:ea:01:d7:e5:2f: 93:16:7e:b6:91:f5:a3:fd:53:2e:1e:a0:c1:86:92: b5:a4:6a:36:40:42:4f:89:8e:5d:72:cc:93:13:79: 9b:0d:e7:d3:d7:6f:34:03:6c:5b:dc:93:ce:25:41: 61:24:68:4a:e1:8b:5b:f9:02:ea:31:9e:3d:91:3a: dd:32:60:d8:d8:45:48:b1:44:39:a7:05:fb:64:bb: fe:eb:25:13:79:79:29:07:2a:8a:f9:a5:3e:5e:82: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:70:FC:0A:9A:96:8E:1A:F9:60:40:A3:AD:54:78:69:68:5F:B3 X509v3 Authority Key Identifier: keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/ngZw_Aqalo4a-WBAo61UeGloX7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.98.156.0/24 193.102.132.0/24 194.115.212.0/22 Signature Algorithm: sha256WithRSAEncryption a3:56:6c:91:2d:64:bd:43:c8:c6:76:5e:3e:d4:02:e2:58:09: f5:5a:97:74:fe:ee:1c:fc:36:ce:4f:46:a5:12:12:ad:ce:db: e6:03:ef:0f:42:91:67:d8:9c:09:17:60:7b:a9:f6:46:dd:7f: 62:4a:1d:da:68:95:29:8e:04:6f:54:56:ce:2e:1e:cf:3b:80: 4f:81:71:a0:b6:80:01:fc:f6:75:c8:b4:af:fe:4a:ed:e1:db: 10:fb:72:ca:35:08:b3:55:43:8a:19:4a:41:cc:5b:95:0d:e8: 1d:23:40:ba:aa:60:9b:bc:80:c5:aa:6b:39:42:5b:77:50:7c: d5:05:da:e5:63:24:d2:47:ab:05:f9:3f:17:bd:27:58:c1:d7: b6:26:43:26:53:c4:54:f2:a9:fb:00:f2:1a:39:ff:f6:9c:aa: 72:85:c2:d7:38:2a:4c:ee:80:45:d1:c6:36:9f:b5:c2:72:bd: 7e:2d:65:0b:25:f6:99:97:67:93:a6:10:cc:e4:69:05:b4:47: 88:5f:c2:69:43:aa:fe:ca:76:9e:43:17:bd:69:8d:b8:41:f1: ba:5c:67:19:cd:11:9d:ac:a2:e8:04:8b:6a:e7:de:17:3a:fe: db:55:d2:a1:f2:69:80:fc:ba:ad:67:3b:b3:f8:7d:4b:37:44: 89:c3:a1:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8Ea4JW9qEvlCA8Xv88n9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl M2ZlZjMwHhcNMjYwMTAyMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTA2NzBmYzBhOWE5NjhlMWFmOTYwNDBhM2FkNTQ3ODY5Njg1ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81h8hxpCqBpNKir+o9gxV8B6ni9D eTB/4YgBchK5ZOyHwxpvjIcjys7THuyQurl9SxJibmbVvzmqr6mezI2PFDLQMOcU 2PCFoHCHiPfwjFPS+AJktDzSyZdjXVrj3VIKlkfBGAD2n8FJ3YeuYqGByzKTczj5 8agsuWRK11W3mC2XqsTUBCNJIaqwOshTjlctF4iuRHtDZisIOVxqyHu/6gHX5S+T Fn62kfWj/VMuHqDBhpK1pGo2QEJPiY5dcsyTE3mbDefT1280A2xb3JPOJUFhJGhK 4Ytb+QLqMZ49kTrdMmDY2EVIsUQ5pwX7ZLv+6yUTeXkpByqK+aU+XoJuMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ4GcPwKmpaOGvlgQKOtVHhpaF+zMB8GA1UdIwQY MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt ZGNiZTUzZGE3ODYwLzEvbmdad19BcWFsbzRhLVdCQW82MVVlR2xvWDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwWKcAwQA wWaEAwQCwnPUMA0GCSqGSIb3DQEBCwUAA4IBAQCjVmyRLWS9Q8jGdl4+1ALiWAn1 Wpd0/u4c/DbOT0alEhKtztvmA+8PQpFn2JwJF2B7qfZG3X9iSh3aaJUpjgRvVFbO Lh7PO4BPgXGgtoAB/PZ1yLSv/krt4dsQ+3LKNQizVUOKGUpBzFuVDegdI0C6qmCb vIDFqms5Qlt3UHzVBdrlYyTSR6sF+T8XvSdYwde2JkMmU8RU8qn7APIaOf/2nKpy hcLXOCpM7oBF0cY2n7XCcr1+LWULJfaZl2eTphDM5GkFtEeIX8JpQ6r+ynaeQxe9 aY24QfG6XGcZzRGdrKLoBItq594XOv7bVdKh8mmA/LqtZzuz+H1LN0SJw6Fl -----END CERTIFICATE-----Generated at Wed Jan 21 12:21:04 2026 by rpki-client