This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/NzRF1KMW-RjrnCQ45Ns__CGotH0.roa File: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (raw, json) Hash identifier: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4= Subject key identifier: 37:34:45:D4:A3:16:F9:18:EB:9C:24:38:E4:DB:3F:FC:21:A8:B4:7D Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019B7CEE0BD9637A7654B386453C86ACFBDC Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/NzRF1KMW-RjrnCQ45Ns__CGotH0.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200384 IP address blocks: 195.16.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:d9:63:7a:76:54:b3:86:45:3c:86:ac:fb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373445d4a316f918eb9c2438e4db3ffc21a8b47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:06:67:17:8c:93:c1:7a:fe:9f:d0:9b:88:ee: 61:84:1d:4a:5b:36:33:86:a4:77:8c:3f:a5:61:e2: fc:89:bb:ae:80:cb:5a:f2:be:10:3b:0a:99:a1:11: 7c:aa:23:7d:5a:08:a2:a1:3f:a9:1f:ea:b8:8c:83: 8b:84:d3:a5:f5:34:b1:29:d4:83:35:d5:ff:a6:05: 9e:c6:af:ca:49:d7:1c:e8:62:82:fa:76:c1:0b:cd: a7:a8:19:e4:5b:93:5d:4c:bd:14:9c:b2:5e:9d:25: bf:97:5a:71:75:67:f6:41:a2:82:c1:e0:64:30:0e: a0:68:4c:a7:fb:46:e9:f5:c3:70:b8:ef:e6:71:4b: de:41:a3:c6:36:f8:5f:14:8c:a6:64:23:58:d5:95: bb:55:cd:c5:0a:c8:4c:95:2d:2f:be:86:4c:c2:a9: 98:b5:32:3d:58:74:fb:15:0d:f8:8b:c1:c5:8e:92: 6f:f9:1f:fb:d3:48:86:c7:4e:43:35:de:11:35:6d: 35:11:bb:6c:d8:d0:9d:38:09:33:5b:d0:f9:ae:f7: 08:66:59:dd:91:c8:fb:dc:ab:5c:c1:8d:2f:7b:ca: c5:26:01:ca:6b:d5:cf:76:ff:56:4b:6c:e0:3f:4e: 2a:e2:cf:d7:39:64:a6:a7:66:fd:d4:fa:25:26:bb: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:45:D4:A3:16:F9:18:EB:9C:24:38:E4:DB:3F:FC:21:A8:B4:7D X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/NzRF1KMW-RjrnCQ45Ns__CGotH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.16.252.0/24 Signature Algorithm: sha256WithRSAEncryption 08:c2:c1:85:09:23:6a:8d:d0:31:0b:0f:00:c0:51:02:ba:6e: fb:45:45:4f:26:d6:de:4d:f2:a0:d6:13:f6:9f:12:ac:c5:e1: 38:91:5f:1d:ca:ef:8a:cd:67:9e:cd:41:76:b2:72:3a:ec:94: 09:b1:9b:62:62:aa:02:ae:c9:48:69:1d:82:61:db:43:9b:86: 4a:d7:75:77:21:c7:3e:35:07:d5:dd:40:39:a9:94:d0:b3:db: c2:1d:9d:d8:75:8c:81:5a:d4:51:1f:cc:7c:95:37:29:fb:43: 1a:ac:4d:af:5f:1e:a8:25:8c:0a:a9:80:ec:c9:e3:53:8c:cb: 6a:8f:2a:23:de:fc:ac:e2:d5:9f:a7:a5:67:d8:83:5f:fa:22: 5a:ff:29:15:4f:13:5d:2f:9d:57:f7:57:17:4b:8a:7c:42:74: 2f:8e:10:04:5c:db:a4:d5:87:be:96:b9:53:8d:2b:41:83:6a: 7c:d4:ec:d6:c4:78:f0:f5:35:49:8f:b0:d1:11:1e:d8:ac:2a: 21:44:f6:da:e3:47:d8:39:d6:74:c8:42:9e:f2:a2:3f:5e:af: 24:08:d6:df:4c:d3:35:f1:32:16:5b:62:cc:9f:e0:6b:eb:66: 74:4f:03:99:c0:97:ad:35:8a:f3:18:8b:cb:c6:c7:fc:bd:22: 91:2c:bd:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gvZY3p2VLOGRTyGrPvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzM0NDVkNGEzMTZmOTE4ZWI5YzI0MzhlNGRiM2ZmYzIxYThiNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wZnF4yTwXr+n9CbiO5hhB1KWzYz hqR3jD+lYeL8ibuugMta8r4QOwqZoRF8qiN9WgiioT+pH+q4jIOLhNOl9TSxKdSD NdX/pgWexq/KSdcc6GKC+nbBC82nqBnkW5NdTL0UnLJenSW/l1pxdWf2QaKCweBk MA6gaEyn+0bp9cNwuO/mcUveQaPGNvhfFIymZCNY1ZW7Vc3FCshMlS0vvoZMwqmY tTI9WHT7FQ34i8HFjpJv+R/700iGx05DNd4RNW01Ebts2NCdOAkzW9D5rvcIZlnd kcj73KtcwY0ve8rFJgHKa9XPdv9WS2zgP04q4s/XOWSmp2b91PolJruTmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDc0RdSjFvkY65wkOOTbP/whqLR9MB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvTnpSRjFLTVctUmpybkNRNDVOc19fQ0dvdEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxD8MA0G CSqGSIb3DQEBCwUAA4IBAQAIwsGFCSNqjdAxCw8AwFECum77RUVPJtbeTfKg1hP2 nxKsxeE4kV8dyu+KzWeezUF2snI67JQJsZtiYqoCrslIaR2CYdtDm4ZK13V3Icc+ NQfV3UA5qZTQs9vCHZ3YdYyBWtRRH8x8lTcp+0MarE2vXx6oJYwKqYDsyeNTjMtq jyoj3vys4tWfp6Vn2INf+iJa/ykVTxNdL51X91cXS4p8QnQvjhAEXNuk1Ye+lrlT jStBg2p81OzWxHjw9TVJj7DRER7YrCohRPba40fYOdZ0yEKe8qI/Xq8kCNbfTNM1 8TIWW2LMn+Br62Z0TwOZwJetNYrzGIvLxsf8vSKRLL3Z -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:36 2026 by rpki-client