This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/NvNBBzczdvedzfA0zmq_oqTjNy0.roa File: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (raw, json) Hash identifier: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k= Subject key identifier: 36:F3:41:07:37:33:76:F7:9D:CD:F0:34:CE:6A:BF:A2:A4:E3:37:2D Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Certificate serial: 019B7C12C38BCADE01D7C8185374E9E371AE Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/NvNBBzczdvedzfA0zmq_oqTjNy0.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41008 IP address blocks: 195.14.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c3:8b:ca:de:01:d7:c8:18:53:74:e9:e3:71:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f34107373376f79dcdf034ce6abfa2a4e3372d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:68:32:8c:5e:0c:f3:81:63:5e:51:9a:a7: 29:54:c1:c8:f4:d0:f0:7c:68:65:cc:e6:95:23:2a: 47:55:b1:ff:b5:9e:62:ec:01:7c:0b:9b:8a:eb:cc: 13:ec:22:61:8a:14:fd:81:79:a1:23:e0:2f:31:06: 17:95:ad:60:f0:03:ce:67:4e:48:a4:ac:55:0e:fe: 5c:a5:de:3a:83:b2:6a:ec:f0:68:e9:cc:c1:24:0e: c9:27:01:5e:c5:3c:64:e8:b2:7f:1e:51:d0:41:cf: 19:f4:fa:d4:a7:1b:7f:2e:9a:83:4f:30:6d:54:5d: 0d:cc:88:ec:9a:5c:15:6e:fc:dc:b3:2d:f1:7a:65: bc:cd:e3:98:10:a9:48:03:23:4f:6b:a9:fa:88:aa: 0e:8d:db:78:79:df:24:95:16:b4:e7:22:15:9b:fa: 8b:c8:2c:13:95:75:06:4b:e2:d1:bd:ca:96:62:c7: 4f:db:e3:2e:a1:cf:d2:b9:54:23:56:75:d8:af:ff: 84:42:f2:c7:88:b7:41:ed:4a:ce:70:b7:31:5e:a5: d3:ef:9d:45:57:e1:e5:34:cc:6d:38:b6:81:ac:99: de:43:28:e1:45:fb:ef:28:ca:f7:74:89:cb:6a:35: 8f:eb:47:42:ba:f6:49:6d:70:65:73:75:c7:67:d8: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:41:07:37:33:76:F7:9D:CD:F0:34:CE:6A:BF:A2:A4:E3:37:2D X509v3 Authority Key Identifier: keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/NvNBBzczdvedzfA0zmq_oqTjNy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.14.29.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:74:19:8f:49:a7:fa:a4:ca:27:c2:93:4d:9d:8b:1d:a6:a6: 15:0d:f3:97:98:db:f2:65:6c:ae:04:12:8e:46:4a:3c:6b:28: a8:3e:f1:1d:70:7c:d9:99:e6:33:85:a2:5e:8f:f4:cf:fd:a6: b7:71:b3:05:b4:1e:cc:f7:1f:20:d6:63:3e:4d:3a:71:4c:5d: 2e:73:67:76:72:ee:c2:c5:2a:25:8f:2e:2f:42:fb:b7:2e:80: e8:67:d2:ec:ff:26:f9:f0:81:7a:a9:14:a1:04:a2:e1:b9:2f: b1:50:28:78:e1:3e:9e:d1:f8:89:70:bd:d4:b9:a0:a0:20:60: 9a:ee:66:71:54:2d:35:ad:1a:94:9a:f0:3a:e2:16:6c:fe:00: bd:b0:52:e1:f8:39:fe:4e:e2:1b:2e:67:db:3f:64:b9:ab:cf: de:b6:2d:18:f7:bd:34:90:1d:8c:33:29:0b:7a:d3:d6:1d:3f: 32:a4:d6:08:a8:b5:86:b4:7d:21:1c:9a:a2:69:e4:fc:b1:80: 74:5c:0f:58:24:01:99:1d:3f:be:8f:c8:58:9d:62:12:fa:2b: fc:5a:13:8c:f8:e6:bc:1f:da:81:e3:01:60:98:99:9d:96:3c: 8e:bf:6f:52:d7:1d:13:50:df:81:19:cb:69:c5:01:86:6b:e0: 6d:07:3d:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsOLyt4B18gYU3Tp43GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj OWE1YjUwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmYzNDEwNzM3MzM3NmY3OWRjZGYwMzRjZTZhYmZhMmE0ZTMzNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2exoMoxeDPOBY15RmqcpVMHI9NDw fGhlzOaVIypHVbH/tZ5i7AF8C5uK68wT7CJhihT9gXmhI+AvMQYXla1g8APOZ05I pKxVDv5cpd46g7Jq7PBo6czBJA7JJwFexTxk6LJ/HlHQQc8Z9PrUpxt/LpqDTzBt VF0NzIjsmlwVbvzcsy3xemW8zeOYEKlIAyNPa6n6iKoOjdt4ed8klRa05yIVm/qL yCwTlXUGS+LRvcqWYsdP2+Muoc/SuVQjVnXYr/+EQvLHiLdB7UrOcLcxXqXT751F V+HlNMxtOLaBrJneQyjhRfvvKMr3dInLajWP60dCuvZJbXBlc3XHZ9jcHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbzQQc3M3b3nc3wNM5qv6Kk4zctMB8GA1UdIwQY MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt ZjE5OTBiMGM3MDVhLzEvTnZOQkJ6Y3pkdmVkemZBMHptcV9vcVRqTnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww4dMA0G CSqGSIb3DQEBCwUAA4IBAQCOdBmPSaf6pMonwpNNnYsdpqYVDfOXmNvyZWyuBBKO Rko8ayioPvEdcHzZmeYzhaJej/TP/aa3cbMFtB7M9x8g1mM+TTpxTF0uc2d2cu7C xSoljy4vQvu3LoDoZ9Ls/yb58IF6qRShBKLhuS+xUCh44T6e0fiJcL3UuaCgIGCa 7mZxVC01rRqUmvA64hZs/gC9sFLh+Dn+TuIbLmfbP2S5q8/eti0Y9700kB2MMykL etPWHT8ypNYIqLWGtH0hHJqiaeT8sYB0XA9YJAGZHT++j8hYnWIS+iv8WhOM+Oa8 H9qB4wFgmJmdljyOv29S1x0TUN+BGctpxQGGa+BtBz2C -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:01 2026 by rpki-client