This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Nxgx3eD9ubbkdEckci6uqR7qTYo.roa File: Nxgx3eD9ubbkdEckci6uqR7qTYo.roa (raw, json) Hash identifier: /e7tUl0Qw6S9M15Bk5F/jXTuuSxWAB4BN95t1mHBni0= Subject key identifier: 37:18:31:DD:E0:FD:B9:B6:E4:74:47:24:72:2E:AE:A9:1E:EA:4D:8A Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B7D7FFA4590CDB88A149CD57DF8EEF767 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Nxgx3eD9ubbkdEckci6uqR7qTYo.roa Signing time: Fri 02 Jan 2026 06:58:17 +0000 ROA not before: Fri 02 Jan 2026 06:58:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211871 IP address blocks: 213.238.170.0/24 maxlen: 24 213.238.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:7f:fa:45:90:cd:b8:8a:14:9c:d5:7d:f8:ee:f7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 2 06:58:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371831dde0fdb9b6e4744724722eaea91eea4d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:ca:99:e6:a1:58:78:00:10:49:ab:e3:54: 48:bd:a9:9f:25:0a:5c:92:e7:74:a3:c4:4d:2e:0a: e6:d9:13:b7:f2:2f:67:22:d0:f2:2a:c0:e0:80:93: ac:22:eb:9b:7d:64:3e:1a:c2:c9:9b:6c:5b:44:93: ab:22:d9:68:3a:c6:0a:ca:5f:61:2a:b9:ab:4c:d9: d4:76:d0:59:46:01:f5:48:07:ea:a2:b2:d7:e7:2c: 5d:35:4f:f1:52:8a:9c:ff:2b:b6:51:05:c5:24:ff: 74:19:a8:5c:ee:0d:3e:70:bc:b2:3e:34:53:ca:7d: 72:5c:2a:4c:55:78:4a:0c:db:25:8d:dc:d1:9c:34: e8:48:28:f9:00:7c:cf:f4:21:37:87:71:36:71:bd: a1:b3:e0:e0:63:42:96:9a:37:7a:9f:a3:8e:89:39: d5:f0:83:ec:1f:2d:cb:51:11:35:ae:ec:19:f9:86: aa:25:42:44:97:f4:4b:49:40:b5:e3:94:bf:72:18: 03:c0:2c:9c:da:8e:a6:d5:b5:cf:15:ab:e8:ef:aa: 98:31:5c:0d:a8:79:db:e5:cd:5d:c0:62:22:d7:be: 70:8e:aa:00:47:a6:1d:0f:9a:e0:72:b6:57:e6:87: 2a:5d:61:9f:ca:c1:04:68:b9:0b:d9:80:40:33:52: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:18:31:DD:E0:FD:B9:B6:E4:74:47:24:72:2E:AE:A9:1E:EA:4D:8A X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/Nxgx3eD9ubbkdEckci6uqR7qTYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.170.0/24 213.238.190.0/24 Signature Algorithm: sha256WithRSAEncryption 31:67:11:20:3a:65:0f:e3:56:b0:95:5a:fe:68:ef:e4:91:99: 6e:7d:2b:ab:13:96:90:40:a7:7c:18:ec:19:52:61:c2:06:02: 8e:63:4a:3c:cd:71:c2:b8:c2:99:21:39:54:32:2d:90:14:7f: 52:f3:9c:df:a8:8f:41:3e:be:97:a7:aa:41:a8:29:d7:f1:16: 45:7c:79:e3:ff:33:ab:f8:17:ab:0c:97:f7:a2:37:ac:20:f8: 5b:5b:5b:72:11:e7:78:37:3d:b3:d0:35:a6:9d:5f:e8:5c:a4: b6:f9:06:7d:64:07:0e:fe:fd:3d:bf:bf:51:68:dc:d9:40:1f: 98:dd:7c:d3:0f:e6:bd:23:55:cb:0e:8a:82:e3:90:39:0d:fd: b3:1b:47:b3:b0:12:e6:d0:d0:4c:13:d9:8b:d5:76:cd:2b:ef: 6a:e0:c7:82:4b:67:4b:ea:6a:cd:9a:3f:46:1f:2d:08:1e:9b: 08:41:18:65:5c:97:10:3e:4c:76:17:b9:15:3a:db:2d:37:c3: 01:1e:1b:7e:8c:61:36:39:fe:b2:7c:12:a7:55:69:d6:dc:08: 0f:ec:84:1c:1b:c9:5b:6c:90:c6:c7:0c:8b:66:9d:23:70:20: a5:02:93:eb:1a:22:db:46:2e:1f:61:ff:86:31:b7:7b:76:ce: c2:72:c4:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9f/pFkM24ihSc1X347vdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAyMDY1ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzE4MzFkZGUwZmRiOWI2ZTQ3NDQ3MjQ3MjJlYWVhOTFlZWE0ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA023KmeahWHgAEEmr41RIvamfJQpc kud0o8RNLgrm2RO38i9nItDyKsDggJOsIuubfWQ+GsLJm2xbRJOrItloOsYKyl9h KrmrTNnUdtBZRgH1SAfqorLX5yxdNU/xUoqc/yu2UQXFJP90Gahc7g0+cLyyPjRT yn1yXCpMVXhKDNsljdzRnDToSCj5AHzP9CE3h3E2cb2hs+DgY0KWmjd6n6OOiTnV 8IPsHy3LURE1ruwZ+YaqJUJEl/RLSUC145S/chgDwCyc2o6m1bXPFavo76qYMVwN qHnb5c1dwGIi175wjqoAR6YdD5rgcrZX5ocqXWGfysEEaLkL2YBAM1JWiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDcYMd3g/bm25HRHJHIurqke6k2KMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvTnhneDNlRDl1YmJrZEVja2NpNnVxUjdxVFlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1e6qAwQA 1e6+MA0GCSqGSIb3DQEBCwUAA4IBAQAxZxEgOmUP41awlVr+aO/kkZlufSurE5aQ QKd8GOwZUmHCBgKOY0o8zXHCuMKZITlUMi2QFH9S85zfqI9BPr6Xp6pBqCnX8RZF fHnj/zOr+BerDJf3ojesIPhbW1tyEed4Nz2z0DWmnV/oXKS2+QZ9ZAcO/v09v79R aNzZQB+Y3XzTD+a9I1XLDoqC45A5Df2zG0ezsBLm0NBME9mL1XbNK+9q4MeCS2dL 6mrNmj9GHy0IHpsIQRhlXJcQPkx2F7kVOtstN8MBHht+jGE2Of6yfBKnVWnW3AgP 7IQcG8lbbJDGxwyLZp0jcCClApPrGiLbRi4fYf+GMbd7ds7CcsQN -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:56 2026 by rpki-client