This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NpomuMBzJVKQYcl-LphdVCYzfR0.roa File: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (raw, json) Hash identifier: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE= Subject key identifier: 36:9A:26:B8:C0:73:25:52:90:61:C9:7E:2E:98:5D:54:26:33:7D:1D Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B38FD593190276A9AAE19F66D6ED4 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NpomuMBzJVKQYcl-LphdVCYzfR0.roa Signing time: Thu 01 Jan 2026 16:19:17 +0000 ROA not before: Thu 01 Jan 2026 16:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400696 IP address blocks: 45.152.148.0/24 maxlen: 24 2a11:f880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:38:fd:59:31:90:27:6a:9a:ae:19:f6:6d:6e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=369a26b8c07325529061c97e2e985d5426337d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:08:5b:99:bc:c9:9c:4d:56:8c:45:39:e5: 30:34:71:8d:0e:69:bc:6d:f7:fb:8d:82:fc:ee:90: aa:04:1d:4e:5f:0b:27:89:80:55:4b:9b:20:84:b7: 57:49:1b:52:f9:f1:c6:4f:17:d0:90:a0:e3:68:a2: cb:09:d5:65:2e:e5:bf:23:29:fe:7b:c5:e3:ab:e9: f2:02:1c:ca:76:25:e8:4e:36:59:97:b1:40:69:ed: 69:ed:f6:e8:57:df:95:9f:7a:be:35:32:2b:47:78: 79:33:36:98:d5:69:d3:45:b4:f1:a0:ea:13:97:5b: 0f:73:ce:55:5c:a4:67:2a:91:ce:46:c1:33:c0:6c: 43:a2:0e:48:69:20:2e:7c:81:f4:28:27:76:f3:0b: 16:bc:2a:ab:70:f7:6f:53:ab:3a:c6:6a:eb:ee:4e: 04:7c:d5:0d:47:dd:59:ca:5f:99:d1:8d:7e:2c:67: 22:25:27:ab:1c:60:74:a4:cf:99:c6:38:fe:a9:a1: 36:eb:d1:f0:08:20:67:90:37:a3:ba:2d:4d:74:8c: 13:88:9e:36:b0:fb:59:db:e9:9a:b4:80:84:05:5c: ce:f0:c6:09:b7:e8:42:5c:c0:35:51:f6:94:d6:18: ad:7d:76:f1:8d:fd:41:d8:df:c7:df:89:ac:fc:92: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:26:B8:C0:73:25:52:90:61:C9:7E:2E:98:5D:54:26:33:7D:1D X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/NpomuMBzJVKQYcl-LphdVCYzfR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.148.0/24 IPv6: 2a11:f880::/32 Signature Algorithm: sha256WithRSAEncryption 3d:34:98:dd:90:d0:97:51:24:a7:c4:9f:74:5d:d1:01:94:0d: b6:81:b3:aa:c6:cb:f0:eb:06:10:b3:d6:b5:d9:b5:83:02:f6: 0f:13:eb:f4:f9:02:b9:9c:c0:32:07:a6:fb:83:3b:87:f6:09: be:67:d9:6b:71:a8:1a:6d:d2:16:d8:93:45:70:fa:d8:f2:89: 0a:f6:42:c6:5f:b1:e6:e8:38:0a:df:34:eb:88:25:79:45:51: 6b:d9:aa:16:99:35:85:f2:16:99:ce:c4:ed:c6:79:8b:3e:3b: 9a:67:12:52:f4:3c:c7:9d:4f:28:77:dc:f0:af:01:55:35:13: ce:32:2e:b6:21:96:78:dc:e4:5b:3f:49:ef:43:67:22:20:8d: da:de:d0:3e:07:84:b7:3f:fe:6e:49:bd:4c:c3:79:a9:35:4b: 21:34:b2:95:f0:cc:d9:c6:43:41:4c:d6:74:37:30:c9:57:c0: 4d:02:8f:4a:10:78:05:6a:67:3b:39:d4:8d:27:e5:e2:b6:02: 4a:84:ba:06:80:81:f5:3c:b7:7d:15:d9:ac:7a:75:bc:76:4d: e1:26:8a:69:36:89:0e:ba:df:28:c8:1d:d0:79:d4:3c:91:6a: 66:11:35:82:1d:0a:52:d9:29:cf:fc:e0:fe:92:38:26:51:fb: 8d:f2:69:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wzj9WTGQJ2qarhn2bW7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlhMjZiOGMwNzMyNTUyOTA2MWM5N2UyZTk4NWQ1NDI2MzM3ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgIW5m8yZxNVoxFOeUwNHGNDmm8 bff7jYL87pCqBB1OXwsniYBVS5sghLdXSRtS+fHGTxfQkKDjaKLLCdVlLuW/Iyn+ e8Xjq+nyAhzKdiXoTjZZl7FAae1p7fboV9+Vn3q+NTIrR3h5MzaY1WnTRbTxoOoT l1sPc85VXKRnKpHORsEzwGxDog5IaSAufIH0KCd28wsWvCqrcPdvU6s6xmrr7k4E fNUNR91Zyl+Z0Y1+LGciJSerHGB0pM+Zxjj+qaE269HwCCBnkDejui1NdIwTiJ42 sPtZ2+matICEBVzO8MYJt+hCXMA1UfaU1hitfXbxjf1B2N/H34ms/JJmvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDaaJrjAcyVSkGHJfi6YXVQmM30dMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvTnBvbXVNQnpKVktRWWNsLUxwaGRWQ1l6ZlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZiUMA0E AgACMAcDBQAqEfiAMA0GCSqGSIb3DQEBCwUAA4IBAQA9NJjdkNCXUSSnxJ90XdEB lA22gbOqxsvw6wYQs9a12bWDAvYPE+v0+QK5nMAyB6b7gzuH9gm+Z9lrcagabdIW 2JNFcPrY8okK9kLGX7Hm6DgK3zTriCV5RVFr2aoWmTWF8haZzsTtxnmLPjuaZxJS 9DzHnU8od9zwrwFVNRPOMi62IZZ43ORbP0nvQ2ciII3a3tA+B4S3P/5uSb1Mw3mp NUshNLKV8MzZxkNBTNZ0NzDJV8BNAo9KEHgFamc7OdSNJ+XitgJKhLoGgIH1PLd9 FdmsenW8dk3hJoppNokOut8oyB3QedQ8kWpmETWCHQpS2SnP/OD+kjgmUfuN8mnt -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client