This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/p-NLwsw4XZb2x84j5S8WR2nP2QY.roa File: p-NLwsw4XZb2x84j5S8WR2nP2QY.roa (raw, json) Hash identifier: dy84ZCh6OBzC5pABeBNPTTlXjsQiBBFHY7p7FUFXzcQ= Subject key identifier: A7:E3:4B:C2:CC:38:5D:96:F6:C7:CE:23:E5:2F:16:47:69:CF:D9:06 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019AF6AA07EB1AE984E4905AAA85F4CA5A1E Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/p-NLwsw4XZb2x84j5S8WR2nP2QY.roa Signing time: Sun 07 Dec 2025 02:35:29 +0000 ROA not before: Sun 07 Dec 2025 02:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 31.170.55.0/24 maxlen: 24 37.49.145.0/24 maxlen: 24 94.74.173.0/24 maxlen: 24 109.203.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:aa:07:eb:1a:e9:84:e4:90:5a:aa:85:f4:ca:5a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Dec 7 02:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7e34bc2cc385d96f6c7ce23e52f164769cfd906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:ea:65:e3:48:67:51:85:8f:98:80:63:6a: 69:24:c7:7a:62:ee:b9:9e:31:a0:4a:67:5f:7e:82: d7:65:c3:64:48:da:dc:40:87:a0:95:35:ca:8e:76: 63:c5:88:9c:38:4b:1c:33:db:a1:16:46:3c:5a:68: cd:0b:de:60:4c:99:f6:47:69:6e:2c:f7:84:31:97: ce:6a:93:96:3e:16:38:ca:51:07:ad:3e:55:fa:f9: c6:f7:5f:62:0a:83:d5:b3:1e:7e:1d:cf:15:db:94: 4b:ee:39:bc:d4:84:bd:b5:df:f5:1b:e3:22:78:fe: 65:42:3a:9e:c0:36:75:f1:5a:2e:62:3c:b4:8e:e8: e7:98:88:62:1c:61:5e:66:a6:ad:c5:3f:a2:07:e5: 8c:dc:95:16:e2:89:e5:3c:76:3e:b3:cb:65:6f:5f: 68:a8:aa:8f:b8:bf:dc:16:71:14:91:81:c0:14:d7: c1:f6:15:48:87:b5:c3:ea:f9:0d:6c:5e:f8:2c:2d: cc:4f:70:58:2b:66:4c:3a:4d:fd:2c:4f:26:19:53: 90:7f:23:48:32:a1:a2:af:ea:4d:da:82:28:f9:72: bd:a0:c0:ec:4f:aa:4a:92:06:24:d8:73:2e:c9:e5: 41:21:e1:40:2a:a4:c2:ef:bc:27:d1:f2:93:6f:89: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:4B:C2:CC:38:5D:96:F6:C7:CE:23:E5:2F:16:47:69:CF:D9:06 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/p-NLwsw4XZb2x84j5S8WR2nP2QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.55.0/24 37.49.145.0/24 94.74.173.0/24 109.203.180.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:e4:33:4d:a4:c6:74:bc:6b:fd:49:56:9c:b3:92:3c:d4:eb: a8:7d:2f:e7:d7:9d:1f:6e:cf:24:2b:fc:81:ca:eb:18:15:3e: 0a:d9:c2:16:85:f6:52:5e:7d:94:1d:2a:c7:8a:50:6b:b7:da: 41:e1:2a:4c:8e:62:1f:5e:80:75:f4:f9:4c:af:21:04:1c:f6: 1c:54:37:93:80:0d:e5:5f:18:7a:fb:14:9b:e5:ef:84:90:03: 37:a4:f8:b8:0f:09:a8:2b:89:b6:81:2b:56:3d:80:0a:42:b2: 6f:b9:5f:04:43:73:57:02:4a:12:9a:c7:dd:17:9c:9a:35:84: bb:20:c8:45:12:8a:ce:97:ce:ae:8c:ca:4d:ae:3c:d5:fb:95: 25:dc:d2:c8:43:5a:d8:ec:fc:67:6b:65:19:f0:66:56:be:e7: 55:4d:62:3e:03:30:3f:a9:f4:bc:28:fa:a9:6f:7c:3a:ce:59: 5f:80:69:72:38:25:b5:11:b8:db:b9:62:83:3b:ff:c1:18:6a: fd:6c:8c:21:eb:87:e5:31:24:da:f2:8e:3f:6d:0b:3b:c1:f2: ee:57:2a:c6:0e:7c:0f:33:3a:50:d8:dc:fe:42:53:87:cb:e1: 18:1d:df:c9:2b:5d:b9:b6:15:2a:3c:86:be:60:67:56:0c:f5: 66:47:5e:1d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr2qgfrGumE5JBaqoX0yloeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMjA3MDIzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2UzNGJjMmNjMzg1ZDk2ZjZjN2NlMjNlNTJmMTY0NzY5Y2ZkOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rqZeNIZ1GFj5iAY2ppJMd6Yu65 njGgSmdffoLXZcNkSNrcQIeglTXKjnZjxYicOEscM9uhFkY8WmjNC95gTJn2R2lu LPeEMZfOapOWPhY4ylEHrT5V+vnG919iCoPVsx5+Hc8V25RL7jm81IS9td/1G+Mi eP5lQjqewDZ18VouYjy0jujnmIhiHGFeZqatxT+iB+WM3JUW4onlPHY+s8tlb19o qKqPuL/cFnEUkYHAFNfB9hVIh7XD6vkNbF74LC3MT3BYK2ZMOk39LE8mGVOQfyNI MqGir+pN2oIo+XK9oMDsT6pKkgYk2HMuyeVBIeFAKqTC77wn0fKTb4n6YQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKfjS8LMOF2W9sfOI+UvFkdpz9kGMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvcC1OTHdzdzRYWmIyeDg0ajVTOFdSMm5QMlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH6o3AwQA JTGRAwQAXkqtAwQCbcu0MA0GCSqGSIb3DQEBCwUAA4IBAQCf5DNNpMZ0vGv9SVac s5I81OuofS/n150fbs8kK/yByusYFT4K2cIWhfZSXn2UHSrHilBrt9pB4SpMjmIf XoB19PlMryEEHPYcVDeTgA3lXxh6+xSb5e+EkAM3pPi4DwmoK4m2gStWPYAKQrJv uV8EQ3NXAkoSmsfdF5yaNYS7IMhFEorOl86ujMpNrjzV+5Ul3NLIQ1rY7Pxna2UZ 8GZWvudVTWI+AzA/qfS8KPqpb3w6zllfgGlyOCW1EbjbuWKDO//BGGr9bIwh64fl MSTa8o4/bQs7wfLuVyrGDnwPMzpQ2Nz+QlOHy+EYHd/JK125thUqPIa+YGdWDPVm R14d -----END CERTIFICATE-----Generated at Sun Dec 7 23:10:23 2025 by rpki-client