This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa
File: NGjdUubhTaDpN7BWGdqVsarGKK4.roa (raw, json)
Hash identifier: WEVoIWeksgLWhIoYIU2Xs8oUAeGV+4dGK/PL2s/49yo=
Subject key identifier: 34:68:DD:52:E6:E1:4D:A0:E9:37:B0:56:19:DA:95:B1:AA:C6:28:AE
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019C1AF32EC23829F5EA3F2017DD71BCF3FD
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa
Signing time: Sun 01 Feb 2026 20:44:30 +0000
ROA not before: Sun 01 Feb 2026 20:44:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133153
IP address blocks: 212.66.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1a:f3:2e:c2:38:29:f5:ea:3f:20:17:dd:71:bc:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Feb 1 20:44:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3468dd52e6e14da0e937b05619da95b1aac628ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:59:3f:7c:2b:84:ee:8a:18:7c:3e:6f:7d:
39:cb:84:e9:a1:94:20:da:bf:33:30:21:82:5e:43:
e2:ea:5a:e6:05:83:a5:9a:6d:f0:6b:3b:70:c6:d7:
0f:ca:69:2f:22:da:51:0f:14:23:06:43:72:d6:f3:
5e:a0:8c:56:80:c9:f7:f7:e4:61:20:35:c4:2b:7e:
dc:76:14:c2:b7:12:6e:51:0b:b2:ce:0c:03:63:f1:
b8:cb:0d:b5:c7:ce:5f:f4:23:f9:32:dd:ec:59:03:
d5:82:66:7b:a4:12:9d:bf:3c:3c:2a:29:4c:c0:32:
38:95:d6:8f:c7:df:b0:0b:db:00:48:22:fe:8e:c4:
e7:aa:f0:1a:e0:a5:23:8a:ff:e6:af:91:16:79:b1:
0e:cf:22:9f:8b:ee:ab:54:bc:69:ca:63:40:44:45:
0f:1c:d9:72:2c:0e:77:92:43:8e:ed:dd:db:99:a0:
8c:29:23:23:1b:f1:4a:30:59:19:39:43:8a:4c:dd:
21:b1:e4:de:a6:15:35:3e:7a:84:45:10:f0:d2:77:
b9:32:a0:e7:e7:5b:1b:dc:63:44:11:54:7a:69:9f:
24:7f:f6:8e:8c:c9:01:7b:50:ee:41:b8:85:e4:00:
49:84:ce:f3:50:1f:8d:16:fc:37:1e:51:13:a3:05:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:DD:52:E6:E1:4D:A0:E9:37:B0:56:19:DA:95:B1:AA:C6:28:AE
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.53.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5c:2d:54:68:de:c5:15:dd:ba:a7:c2:f0:9c:08:72:fe:1f:
bb:54:0e:1f:e7:fd:a0:77:66:c5:26:cc:9b:ea:39:dc:f7:4c:
1a:e6:d1:e8:c6:a5:1b:3b:48:eb:d4:e2:27:09:d5:37:72:9f:
5d:4a:c1:5a:0d:31:a7:cd:84:f0:1e:d5:e3:4e:ff:8b:68:b2:
a1:64:ec:00:9d:6f:2e:02:19:04:3c:f9:d0:98:dc:32:24:66:
b5:70:24:7c:92:28:a6:c1:95:1e:c0:9c:10:b4:ba:9b:14:68:
11:85:77:a3:a5:89:fa:f7:f3:e7:bb:d3:28:17:42:79:1c:66:
8f:8b:42:7b:7b:f8:16:53:8f:57:9f:70:34:56:9f:87:5b:a6:
3c:e4:f9:2e:da:3a:e4:19:a9:5d:2c:06:c6:70:19:6d:ca:94:
52:7f:ac:87:cc:2f:9c:33:f0:49:eb:6d:e4:21:16:7f:61:1c:
ab:0f:84:6f:2a:d0:9b:76:c8:fa:c0:fe:28:2f:3e:6d:83:56:
3e:80:eb:a6:f5:fc:98:5d:77:55:4b:19:fe:6c:66:7f:ad:66:
8e:6a:a9:10:fb:b9:7f:5b:6b:57:48:3d:68:bb:e2:7a:d4:85:
8d:09:4a:3b:c8:4f:b1:49:f4:e6:3f:40:15:69:b2:d0:37:00:
96:0f:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 15:43:43 2026 by rpki-client