This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/NgcHdwJ_cA-f43Kf0JF-l9NWh90.roa File: NgcHdwJ_cA-f43Kf0JF-l9NWh90.roa (raw, json) Hash identifier: 5D495LQRPc9ptsFZZcRjh7PskexuQ+rys3YRuRmVhiA= Subject key identifier: 36:07:07:77:02:7F:70:0F:9F:E3:72:9F:D0:91:7E:97:D3:56:87:DD Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1302562BA712F3268852483C52C32F Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/NgcHdwJ_cA-f43Kf0JF-l9NWh90.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204970 IP address blocks: 194.209.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:02:56:2b:a7:12:f3:26:88:52:48:3c:52:c3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36070777027f700f9fe3729fd0917e97d35687dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:15:16:0a:ea:69:d3:60:54:88:b1:9c:e7: 3c:8d:b3:b2:a0:7b:a7:9f:62:45:ad:29:39:36:5a: 83:c7:bf:b3:89:96:73:2f:b8:1c:8d:d5:f9:9e:9d: 7f:e1:be:1e:ce:64:01:29:4f:b8:6d:cd:0f:ec:82: c9:3d:ac:40:8c:43:f6:32:b4:f5:64:4c:d5:9f:53: 30:81:8b:39:2e:f8:29:f9:fe:10:ef:0d:c8:7d:c5: cf:b9:13:82:e9:19:0c:ae:60:52:03:91:55:5a:87: f0:91:cb:7f:2d:0f:4b:a2:02:6d:7e:0b:cc:14:aa: a9:32:09:ee:74:5a:e0:8a:15:a3:09:13:24:b2:cf: fc:20:12:fe:45:cc:0c:da:06:37:d4:06:7c:9e:69: 3e:05:51:f1:59:cd:71:d0:b5:4a:7a:ff:48:0b:09: e2:16:02:77:49:77:0e:98:11:eb:e9:da:6f:22:3a: 11:7d:8e:45:09:ad:58:b4:87:e6:8b:dc:e2:14:72: be:68:47:eb:16:04:9e:2a:d8:7b:73:c7:ad:d0:95: 77:4c:12:f3:86:49:60:5d:0d:b8:8b:87:7b:56:70: 35:54:b7:fa:b8:40:ea:11:78:b8:35:42:87:6a:d0: 65:c0:f5:0a:89:90:a5:19:e6:b6:a0:4a:75:38:fa: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:07:07:77:02:7F:70:0F:9F:E3:72:9F:D0:91:7E:97:D3:56:87:DD X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/NgcHdwJ_cA-f43Kf0JF-l9NWh90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.54.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1d:3c:41:75:aa:3e:fb:16:d7:0b:6a:4e:bc:4f:50:90:47: 52:5d:26:13:fb:61:82:a3:83:f1:93:fb:6b:9e:83:43:cb:91: f5:b9:f6:33:43:7a:2c:8f:14:50:69:35:f9:47:ea:06:70:10: d1:04:26:98:91:01:52:ff:69:bb:6e:0c:cc:34:9f:25:2d:da: 45:ce:c8:08:74:bc:b8:52:dd:f4:ca:90:a5:40:dd:58:0e:0d: 16:70:d6:92:65:19:07:92:6f:c4:16:e7:a2:50:0b:de:ad:c4: fd:f0:09:14:c3:ff:91:81:c8:3f:22:15:56:4c:66:81:0e:e5: e6:73:dd:56:c6:3f:56:78:6f:b2:be:be:19:da:e4:6e:22:0d: de:cb:07:9a:13:0c:44:d5:3e:69:33:c7:e2:e5:98:62:57:56: 3f:21:13:b8:65:96:d0:4a:f5:02:e4:76:27:00:81:e1:3e:67: d0:e4:96:3e:ee:8e:8b:b5:37:02:d6:2b:ec:ec:be:92:31:43: 5b:95:db:dc:e7:61:35:da:d5:27:ec:57:b5:0d:1e:1c:89:f0: a2:9d:0d:e5:12:f2:4f:16:17:a5:04:7a:be:71:30:49:22:38: ba:9a:9e:8e:ba:37:8d:ad:16:c3:29:e9:33:86:2c:87:d3:d9: f0:d1:e1:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwJWK6cS8yaIUkg8UsMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjA3MDc3NzAyN2Y3MDBmOWZlMzcyOWZkMDkxN2U5N2QzNTY4N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6EVFgrqadNgVIixnOc8jbOyoHun n2JFrSk5NlqDx7+ziZZzL7gcjdX5np1/4b4ezmQBKU+4bc0P7ILJPaxAjEP2MrT1 ZEzVn1MwgYs5Lvgp+f4Q7w3IfcXPuROC6RkMrmBSA5FVWofwkct/LQ9LogJtfgvM FKqpMgnudFrgihWjCRMkss/8IBL+RcwM2gY31AZ8nmk+BVHxWc1x0LVKev9ICwni FgJ3SXcOmBHr6dpvIjoRfY5FCa1YtIfmi9ziFHK+aEfrFgSeKth7c8et0JV3TBLz hklgXQ24i4d7VnA1VLf6uEDqEXi4NUKHatBlwPUKiZClGea2oEp1OPp+mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYHB3cCf3APn+Nyn9CRfpfTVofdMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvTmdjSGR3Sl9jQS1mNDNLZjBKRi1sOU5XaDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtE2MA0G CSqGSIb3DQEBCwUAA4IBAQCBHTxBdao++xbXC2pOvE9QkEdSXSYT+2GCo4Pxk/tr noNDy5H1ufYzQ3osjxRQaTX5R+oGcBDRBCaYkQFS/2m7bgzMNJ8lLdpFzsgIdLy4 Ut30ypClQN1YDg0WcNaSZRkHkm/EFueiUAvercT98AkUw/+Rgcg/IhVWTGaBDuXm c91Wxj9WeG+yvr4Z2uRuIg3eyweaEwxE1T5pM8fi5ZhiV1Y/IRO4ZZbQSvUC5HYn AIHhPmfQ5JY+7o6LtTcC1ivs7L6SMUNbldvc52E12tUn7Fe1DR4cifCinQ3lEvJP FhelBHq+cTBJIji6mp6OujeNrRbDKekzhiyH09nw0eH3 -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:26 2026 by rpki-client