This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/Nffyfowdb4DCXyl-CUibDbck5aw.roa File: Nffyfowdb4DCXyl-CUibDbck5aw.roa (raw, json) Hash identifier: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0= Subject key identifier: 35:F7:F2:7E:8C:1D:6F:80:C2:5F:29:7E:09:48:9B:0D:B7:24:E5:AC Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019B7B35B59A7F6795EE81D2B394BF0864D9 Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/Nffyfowdb4DCXyl-CUibDbck5aw.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 2a0c:b6c0::/34 maxlen: 34 2a0c:b6c0:4000::/34 maxlen: 34 2a0c:b6c0:8000::/34 maxlen: 34 2a0c:b6c1::/34 maxlen: 34 2a0c:b6c1:4000::/34 maxlen: 34 2a0c:b6c1:8000::/34 maxlen: 34 2a0c:b6c2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b5:9a:7f:67:95:ee:81:d2:b3:94:bf:08:64:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35f7f27e8c1d6f80c25f297e09489b0db724e5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:01:b5:f5:30:07:c7:9d:23:68:d8:20:c0: a6:a7:a6:8d:f0:3b:bd:9d:db:d2:cf:1a:ef:a8:08: 24:da:a1:ec:65:f4:8f:2c:fd:ff:7a:03:61:5c:c9: d4:b2:d5:c0:30:e4:89:c1:f9:86:8b:54:52:ff:25: 26:e3:fb:68:ec:ea:45:9c:9b:bb:0a:4c:97:98:b9: 53:dc:7a:7c:95:6f:be:42:b6:fc:ba:e8:85:da:6d: 2b:cb:05:0a:db:fb:4c:29:d4:b0:3f:fc:6c:9e:db: 7c:bc:2d:03:bc:ec:e8:6c:a9:a4:f4:22:ac:4f:aa: 47:59:c7:f3:e9:c6:c0:8b:9e:06:e8:99:d8:39:8d: b2:9c:27:1c:e9:1c:17:93:38:aa:2f:2f:40:ab:f4: 0a:95:34:06:23:28:9f:4f:3f:a6:af:41:e0:1c:11: 89:95:fa:75:e4:4f:5e:06:b4:7c:f6:60:3d:38:d3: d5:3f:9a:73:f5:bb:1e:72:cd:a0:d4:e0:fd:64:d1: b1:89:c3:9f:f4:7b:40:77:4d:f0:3f:90:fb:d1:b3: c9:6f:31:91:a2:43:f5:24:4c:c1:54:68:a3:79:80: b8:e9:59:81:ea:a3:86:9c:14:16:5e:09:15:e7:d3: ab:9f:f2:5c:8f:5c:b0:79:c0:55:05:06:4a:f6:2f: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F7:F2:7E:8C:1D:6F:80:C2:5F:29:7E:09:48:9B:0D:B7:24:E5:AC X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/Nffyfowdb4DCXyl-CUibDbck5aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b6c0::-2a0c:b6c0:bfff:ffff:ffff:ffff:ffff:ffff 2a0c:b6c1::-2a0c:b6c1:bfff:ffff:ffff:ffff:ffff:ffff 2a0c:b6c2::/32 Signature Algorithm: sha256WithRSAEncryption 10:c1:89:24:56:7e:fe:1c:5b:18:b4:b6:55:4b:a8:3a:95:64: 27:bd:91:30:37:a6:76:15:b5:bb:98:d3:c2:fc:46:3c:cd:4d: 3a:74:3a:d5:68:e5:bb:95:04:02:57:e0:a3:2a:53:33:65:4f: e9:83:16:3d:3c:76:85:04:8c:86:df:0e:2a:50:b5:ed:18:e6: 2c:e0:56:4c:ff:ad:4e:01:28:78:a9:40:4e:a3:20:e0:8e:64: 15:bf:dc:d5:52:7e:40:ee:72:7c:18:3a:8e:b4:2f:6d:36:60: 9a:ff:7d:e9:bd:16:f7:b3:34:66:0e:aa:ac:ee:3b:58:70:34: b1:8b:0c:6b:f1:65:99:e1:28:b5:63:70:27:7f:04:ee:5d:6f: a9:d4:23:28:4c:1c:9d:b1:cb:4e:93:14:96:44:ed:c0:0e:6c: b5:4e:34:84:61:51:3e:eb:ea:b3:ef:83:c2:b3:2c:d2:3f:ef: 6f:5b:8c:d9:85:8e:c7:53:ce:77:5d:d2:86:ec:d1:12:0a:0f: 45:72:69:9c:04:5c:3d:13:06:61:55:ae:d2:eb:2d:72:0f:12: eb:90:36:03:88:98:5c:fe:e3:45:19:9a:67:00:8e:08:91:9d: 66:bf:a7:b3:f6:77:b3:f0:30:62:90:b4:25:48:9f:ae:79:99: 43:e5:ca:49 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NbWaf2eV7oHSs5S/CGTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWY3ZjI3ZThjMWQ2ZjgwYzI1ZjI5N2UwOTQ4OWIwZGI3MjRlNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgEBtfUwB8edI2jYIMCmp6aN8Du9 ndvSzxrvqAgk2qHsZfSPLP3/egNhXMnUstXAMOSJwfmGi1RS/yUm4/to7OpFnJu7 CkyXmLlT3Hp8lW++Qrb8uuiF2m0rywUK2/tMKdSwP/xsntt8vC0DvOzobKmk9CKs T6pHWcfz6cbAi54G6JnYOY2ynCcc6RwXkziqLy9Aq/QKlTQGIyifTz+mr0HgHBGJ lfp15E9eBrR89mA9ONPVP5pz9bsecs2g1OD9ZNGxicOf9HtAd03wP5D70bPJbzGR okP1JEzBVGijeYC46VmB6qOGnBQWXgkV59Orn/Jcj1ywecBVBQZK9i9quwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDX38n6MHW+Awl8pfglImw23JOWsMB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvTmZmeWZvd2RiNERDWHlsLUNVaWJEYmNrNWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAAjApMA8DBQYqDLbA AwYGKgy2wIAwDwMFACoMtsEDBgYqDLbBgAMFACoMtsIwDQYJKoZIhvcNAQELBQAD ggEBABDBiSRWfv4cWxi0tlVLqDqVZCe9kTA3pnYVtbuY08L8RjzNTTp0OtVo5buV BAJX4KMqUzNlT+mDFj08doUEjIbfDipQte0Y5izgVkz/rU4BKHipQE6jIOCOZBW/ 3NVSfkDucnwYOo60L202YJr/fem9FvezNGYOqqzuO1hwNLGLDGvxZZnhKLVjcCd/ BO5db6nUIyhMHJ2xy06TFJZE7cAObLVONIRhUT7r6rPvg8KzLNI/729bjNmFjsdT zndd0obs0RIKD0VyaZwEXD0TBmFVrtLrLXIPEuuQNgOImFz+40UZmmcAjgiRnWa/ p7P2d7PwMGKQtCVIn655mUPlykk= -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:34 2026 by rpki-client