This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRlwI2k3E1kstDWIpmcx4fyjfMk.roa File: NRlwI2k3E1kstDWIpmcx4fyjfMk.roa (raw, json) Hash identifier: bFUROw5LmiPwjdz7Dn7LaAIuLfNM5U20ilBqo2JhryA= Subject key identifier: 35:19:70:23:69:37:13:59:2C:B4:35:88:A6:67:31:E1:FC:A3:7C:C9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149926E238DF0169107433AE2AB532 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRlwI2k3E1kstDWIpmcx4fyjfMk.roa Signing time: Fri 02 Jan 2026 14:20:14 +0000 ROA not before: Fri 02 Jan 2026 14:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 62.192.124.0/23 maxlen: 23 213.169.196.0/23 maxlen: 23 213.169.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:99:26:e2:38:df:01:69:10:74:33:ae:2a:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35197023693713592cb43588a66731e1fca37cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:ae:33:5b:5c:3a:b1:a6:f8:6d:f6:08:84: 01:e3:6c:73:dd:85:05:7b:aa:b4:7f:81:c0:27:f2: 34:68:d5:0d:38:cb:b9:9c:65:1b:21:c9:9f:ed:4c: 77:76:e9:32:69:49:fc:af:39:7b:5d:b9:54:1e:27: 22:9e:f8:c8:be:c2:6a:e6:c5:ad:f3:f9:33:89:2a: 0e:dc:c6:e9:40:0c:27:2f:85:44:56:5f:7f:f7:21: d2:c3:15:ef:04:43:10:7f:6d:74:93:be:a3:4a:fc: 37:40:20:b9:da:5d:da:0d:58:62:0f:30:5e:c1:e9: c3:0e:ab:2b:10:be:10:2d:7b:f1:c3:2a:e8:9c:f3: 89:97:22:fa:56:74:0d:37:c4:ac:1c:dd:2e:8b:4a: 84:f2:eb:9c:a1:7a:bb:c9:dc:cf:89:df:2b:71:4c: 6a:8b:cf:4e:17:f6:24:d3:fa:a3:c2:6f:be:b0:77: 34:d2:23:19:10:43:79:b5:b0:75:4a:0c:5a:88:69: c0:fb:c0:3f:8a:6a:36:a5:e1:36:a0:12:dc:16:ba: 0f:1b:6a:4c:c8:f2:37:98:5c:7a:f9:46:c2:ea:b5: c4:6a:68:65:a8:e3:bf:6e:76:9d:1f:a0:43:c6:e5: cc:cf:ad:4a:84:5c:2f:f6:43:9c:6a:cc:60:ac:ae: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:70:23:69:37:13:59:2C:B4:35:88:A6:67:31:E1:FC:A3:7C:C9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/NRlwI2k3E1kstDWIpmcx4fyjfMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.124.0/23 213.169.196.0/23 213.169.202.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:f0:8e:51:07:e1:cc:5d:06:31:20:06:28:b4:71:fe:e7:8f: f5:8e:68:6d:db:f5:75:f4:fd:21:5f:2d:07:5a:8c:9b:80:c6: 19:b2:8f:ce:d2:e1:be:49:9a:fe:07:53:ed:ca:32:bf:9d:49: 92:e4:89:34:9d:3f:c9:65:bb:b2:a3:0e:03:0e:1b:92:12:3b: b8:55:63:43:2e:6c:fa:3a:28:b5:09:8a:2a:8c:0e:28:75:7d: 4f:da:e8:84:ee:23:b2:90:15:38:56:44:10:0a:09:fc:ee:bd: 31:44:14:de:5f:e8:a0:db:a6:d6:98:55:66:ae:b3:fd:5f:9d: 7b:1b:4a:93:9b:47:5c:2b:fc:50:45:1d:10:29:e6:08:87:e8: 30:ba:cb:bc:3d:bb:c0:04:6b:68:08:14:d6:cf:9c:cc:6c:dd: 9b:51:cd:37:08:b4:29:54:d8:34:72:82:b4:ef:9a:17:d6:45: 19:52:64:bf:9d:fc:53:02:57:d3:da:b5:18:65:4a:06:80:8b: ff:77:92:46:f4:53:1d:c5:06:f3:e3:10:02:10:af:d5:f2:46: 81:8a:8b:ac:b6:b2:c0:0e:1c:1d:e8:ac:7b:24:91:6d:2a:f1: c4:aa:f5:64:ff:a5:cf:6c:10:7b:be:8e:af:f2:75:01:28:9b: 9a:c8:f7:10 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FJkm4jjfAWkQdDOuKrUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTE5NzAyMzY5MzcxMzU5MmNiNDM1ODhhNjY3MzFlMWZjYTM3Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTCuM1tcOrGm+G32CIQB42xz3YUF e6q0f4HAJ/I0aNUNOMu5nGUbIcmf7Ux3dukyaUn8rzl7XblUHicinvjIvsJq5sWt 8/kziSoO3MbpQAwnL4VEVl9/9yHSwxXvBEMQf210k76jSvw3QCC52l3aDVhiDzBe wenDDqsrEL4QLXvxwyronPOJlyL6VnQNN8SsHN0ui0qE8uucoXq7ydzPid8rcUxq i89OF/Yk0/qjwm++sHc00iMZEEN5tbB1SgxaiGnA+8A/imo2peE2oBLcFroPG2pM yPI3mFx6+UbC6rXEamhlqOO/bnadH6BDxuXMz61KhFwv9kOcasxgrK4QIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDUZcCNpNxNZLLQ1iKZnMeH8o3zJMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvTlJsd0kyazNFMWtzdERXSXBtY3g0ZnlqZk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBPsB8AwQB 1anEAwQB1anKMA0GCSqGSIb3DQEBCwUAA4IBAQCK8I5RB+HMXQYxIAYotHH+54/1 jmht2/V19P0hXy0HWoybgMYZso/O0uG+SZr+B1PtyjK/nUmS5Ik0nT/JZbuyow4D DhuSEju4VWNDLmz6Oii1CYoqjA4odX1P2uiE7iOykBU4VkQQCgn87r0xRBTeX+ig 26bWmFVmrrP9X517G0qTm0dcK/xQRR0QKeYIh+gwusu8PbvABGtoCBTWz5zMbN2b Uc03CLQpVNg0coK075oX1kUZUmS/nfxTAlfT2rUYZUoGgIv/d5JG9FMdxQbz4xAC EK/V8kaBioustrLADhwd6Kx7JJFtKvHEqvVk/6XPbBB7vo6v8nUBKJuayPcQ -----END CERTIFICATE-----Generated at Thu Jan 8 17:35:03 2026 by rpki-client