This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/NIt5HAEHP3eGIkRaRfmU_TQEUio.roa File: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (raw, json) Hash identifier: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o= Subject key identifier: 34:8B:79:1C:01:07:3F:77:86:22:44:5A:45:F9:94:FD:34:04:52:2A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019B7C7EF3EA8E22BFDBC4B981BD8522D855 Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/NIt5HAEHP3eGIkRaRfmU_TQEUio.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 2.58.176.0/22 maxlen: 22 2.58.176.0/23 maxlen: 23 2.58.178.0/23 maxlen: 23 45.80.250.0/23 maxlen: 23 152.89.228.0/22 maxlen: 22 152.89.228.0/23 maxlen: 23 152.89.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f3:ea:8e:22:bf:db:c4:b9:81:bd:85:22:d8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348b791c01073f778622445a45f994fd3404522a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:8a:9a:c5:dc:72:36:f4:a3:b3:ea:55:cc: c5:8d:46:b8:65:f7:79:ac:32:30:29:59:87:27:29: d5:ce:d1:bf:df:0d:7e:51:3c:ae:58:13:76:6e:48: 7c:94:8d:d2:1d:56:9d:48:b2:46:94:88:0d:8c:5f: a1:e2:14:95:48:af:38:0f:ad:a4:ae:95:3b:f3:3d: 4b:71:ca:f2:66:ae:31:cc:1c:8e:95:f5:2d:6e:45: 42:3f:5c:0b:8a:da:e3:6a:38:97:4e:dc:0b:bd:93: fa:da:02:e4:b5:bc:68:05:14:e4:47:ab:ed:26:4d: 8a:dd:23:ba:2d:03:ba:d0:7e:b1:5e:32:a0:32:71: 56:12:97:ad:18:89:dd:f0:a2:c5:80:28:ec:74:08: 02:d4:5f:bb:bd:ee:57:76:78:e9:7b:40:eb:c2:bb: 25:8b:cc:70:72:54:e5:df:b0:e8:29:45:ab:7d:e4: 56:88:fc:19:a8:25:1a:00:83:09:89:46:53:e3:7f: ab:99:47:28:ad:1d:05:f6:92:4a:de:99:78:e9:09: 72:1e:f6:83:20:ca:b0:2d:55:f6:59:6b:52:a2:0f: 76:f7:58:41:3b:e2:12:85:e9:94:a4:4c:54:8e:a5: e4:0f:23:47:a4:af:50:73:92:c5:aa:7a:79:c1:37: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:79:1C:01:07:3F:77:86:22:44:5A:45:F9:94:FD:34:04:52:2A X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/NIt5HAEHP3eGIkRaRfmU_TQEUio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.176.0/22 45.80.250.0/23 152.89.228.0/22 Signature Algorithm: sha256WithRSAEncryption 01:48:b9:24:0f:bc:b2:c3:00:7b:69:14:c8:ae:69:ab:03:3d: 91:f1:1d:f4:f3:9e:22:eb:c4:89:bc:b6:68:84:ca:dc:75:05: 1e:ae:ba:97:c4:c4:6b:f8:8f:fb:21:85:5a:a0:7a:a5:f6:1e: 23:64:98:a4:e9:be:51:24:8f:d2:59:fa:f3:9e:7c:b3:4a:ed: 91:b0:3f:1c:04:a1:85:dd:4e:b9:5e:4f:ed:8b:f6:43:10:b0: 61:e8:d2:11:fb:00:8d:c8:cb:47:56:56:a3:80:6b:e5:79:a6: 76:17:8d:72:96:45:c7:09:f5:83:c8:2c:34:57:70:6e:51:62: 41:66:80:e5:07:dc:a3:77:d8:9e:74:33:17:72:e5:36:79:00: 64:bc:60:aa:b6:cc:78:45:93:a4:f5:3a:6b:46:40:23:ec:6b: a5:34:6b:f2:04:aa:f2:2f:9e:e1:8e:6d:9c:30:dd:f0:36:2b: 63:7d:81:1b:86:31:21:18:a8:48:1f:46:30:29:e1:37:66:31: 4d:35:81:9d:f3:fc:56:6a:d5:54:0e:5f:ee:17:a3:5e:d5:ce: 15:f2:af:09:d2:a2:4c:c6:9d:aa:8a:19:ab:f9:e2:ab:29:83: 6b:80:bd:d1:36:ea:d3:c2:f3:45:88:ed:72:24:93:4a:a6:26: b1:76:15:18 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8fvPqjiK/28S5gb2FIthVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDhiNzkxYzAxMDczZjc3ODYyMjQ0NWE0NWY5OTRmZDM0MDQ1MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwyKmsXccjb0o7PqVczFjUa4Zfd5 rDIwKVmHJynVztG/3w1+UTyuWBN2bkh8lI3SHVadSLJGlIgNjF+h4hSVSK84D62k rpU78z1LccryZq4xzByOlfUtbkVCP1wLitrjajiXTtwLvZP62gLktbxoBRTkR6vt Jk2K3SO6LQO60H6xXjKgMnFWEpetGInd8KLFgCjsdAgC1F+7ve5Xdnjpe0Drwrsl i8xwclTl37DoKUWrfeRWiPwZqCUaAIMJiUZT43+rmUcorR0F9pJK3pl46QlyHvaD IMqwLVX2WWtSog9291hBO+IShemUpExUjqXkDyNHpK9Qc5LFqnp5wTfjWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDSLeRwBBz93hiJEWkX5lP00BFIqMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEvTkl0NUhBRUhQM2VHSWtSYVJmbVVfVFFFVWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjqwAwQB LVD6AwQCmFnkMA0GCSqGSIb3DQEBCwUAA4IBAQABSLkkD7yywwB7aRTIrmmrAz2R 8R30854i68SJvLZohMrcdQUerrqXxMRr+I/7IYVaoHql9h4jZJik6b5RJI/SWfrz nnyzSu2RsD8cBKGF3U65Xk/ti/ZDELBh6NIR+wCNyMtHVlajgGvleaZ2F41ylkXH CfWDyCw0V3BuUWJBZoDlB9yjd9iedDMXcuU2eQBkvGCqtsx4RZOk9TprRkAj7Gul NGvyBKryL57hjm2cMN3wNitjfYEbhjEhGKhIH0YwKeE3ZjFNNYGd8/xWatVUDl/u F6Ne1c4V8q8J0qJMxp2qihmr+eKrKYNrgL3RNurTwvNFiO1yJJNKpiaxdhUY -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client