This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Npo8-tJ5nr2BUTjjLCDMJJ4s_pc.roa File: Npo8-tJ5nr2BUTjjLCDMJJ4s_pc.roa (raw, json) Hash identifier: 6DwvFmdHhl2Ua3ttystglYQQ+J2GIudV9o2uv2/5PsI= Subject key identifier: 36:9A:3C:FA:D2:79:9E:BD:81:51:38:E3:2C:20:CC:24:9E:2C:FE:97 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B360F23119EB69C8233CE07F4C1C0FB Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Npo8-tJ5nr2BUTjjLCDMJJ4s_pc.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207526 IP address blocks: 202.71.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0f:23:11:9e:b6:9c:82:33:ce:07:f4:c1:c0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=369a3cfad2799ebd815138e32c20cc249e2cfe97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:40:21:0c:77:15:66:83:ad:54:44:59:e5: f9:c4:79:a3:12:0c:42:ac:52:e9:be:7d:6a:12:74: 0f:50:a0:32:bb:0a:10:5d:8c:1a:55:32:a5:87:85: b4:1f:04:d1:ea:b4:d6:76:d4:f8:07:c5:6d:ef:93: 3c:ca:fc:56:5e:b2:95:a9:2a:63:f7:ea:83:db:31: 43:bd:12:49:9d:86:0d:e0:ef:42:0d:ab:0a:c5:d0: 71:df:d7:93:2a:86:fe:b1:3c:2f:7f:db:c3:90:37: 2a:fb:5c:ff:31:7f:02:49:24:39:d3:44:66:6c:61: 3a:7e:ba:23:b8:07:90:a8:d5:80:ee:c1:be:2e:24: 72:a4:e4:e4:30:1e:76:76:93:d5:0c:78:3e:7a:e4: e6:30:61:78:1d:48:7a:21:0c:59:b0:d3:60:99:ac: 70:39:1f:10:c8:ce:87:fd:13:b9:75:ba:c7:f4:b8: 88:07:6c:8c:a4:c9:c8:72:a3:87:a4:e5:e9:85:1b: f4:5c:38:9c:a3:af:29:88:a3:9e:1c:8b:68:26:fa: 9d:a4:23:be:53:63:0f:4c:85:59:c7:fb:c5:7b:c5: 39:f9:86:56:25:1e:c0:eb:91:24:6a:41:d5:04:2e: 4c:f7:a9:c0:b0:77:14:0c:c9:4e:6d:78:56:63:92: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:3C:FA:D2:79:9E:BD:81:51:38:E3:2C:20:CC:24:9E:2C:FE:97 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Npo8-tJ5nr2BUTjjLCDMJJ4s_pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.71.11.0/24 Signature Algorithm: sha256WithRSAEncryption 46:aa:21:6e:c5:68:57:8d:e3:e5:10:de:06:df:af:72:55:fd: ff:86:af:16:c9:fd:aa:c2:66:82:2b:f1:1a:51:87:61:99:88: 9b:64:69:a3:af:fd:49:ce:eb:cc:97:0c:83:d1:ac:5e:11:cb: 96:b8:44:a4:20:6e:43:c2:62:47:39:39:5e:d5:51:43:89:eb: d2:4c:39:e8:e6:e8:bc:48:74:b0:33:6b:56:fd:d4:4b:96:45: f0:da:07:ac:bb:a4:1e:cb:f1:10:48:5e:18:b4:b0:90:a4:8d: 67:32:25:4b:c9:92:b8:bd:43:76:94:95:99:eb:85:bf:4e:6f: 6d:22:f2:d6:a9:45:48:b2:2d:e1:4a:22:0e:be:cb:ed:6a:af: 88:9a:62:5a:8a:96:24:59:06:50:81:d6:12:78:80:6d:06:69: f1:7d:9b:27:b2:9c:b1:58:fd:18:5a:9f:01:d6:45:b0:b4:5e: 39:75:b9:5b:b4:80:16:52:11:e7:95:3d:8c:6e:03:38:61:0b: 53:f8:55:42:f4:d6:ed:7f:3b:7b:6f:d9:3e:7c:c5:b8:69:c3: 29:8f:28:07:84:cf:b1:df:ae:66:fc:68:c6:8f:24:a6:54:57: 65:0d:7a:e6:6e:b5:56:ed:2c:3c:f7:6e:63:5e:7d:c9:d8:7e: 4e:ea:98:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ng8jEZ62nIIzzgf0wcD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlhM2NmYWQyNzk5ZWJkODE1MTM4ZTMyYzIwY2MyNDllMmNmZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta1AIQx3FWaDrVREWeX5xHmjEgxC rFLpvn1qEnQPUKAyuwoQXYwaVTKlh4W0HwTR6rTWdtT4B8Vt75M8yvxWXrKVqSpj 9+qD2zFDvRJJnYYN4O9CDasKxdBx39eTKob+sTwvf9vDkDcq+1z/MX8CSSQ500Rm bGE6frojuAeQqNWA7sG+LiRypOTkMB52dpPVDHg+euTmMGF4HUh6IQxZsNNgmaxw OR8QyM6H/RO5dbrH9LiIB2yMpMnIcqOHpOXphRv0XDico68piKOeHItoJvqdpCO+ U2MPTIVZx/vFe8U5+YZWJR7A65EkakHVBC5M96nAsHcUDMlObXhWY5JS4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDaaPPrSeZ69gVE44ywgzCSeLP6XMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvTnBvOC10SjVucjJCVVRqakxDRE1KSjRzX3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykcLMA0G CSqGSIb3DQEBCwUAA4IBAQBGqiFuxWhXjePlEN4G369yVf3/hq8Wyf2qwmaCK/Ea UYdhmYibZGmjr/1JzuvMlwyD0axeEcuWuESkIG5DwmJHOTle1VFDievSTDno5ui8 SHSwM2tW/dRLlkXw2gesu6Qey/EQSF4YtLCQpI1nMiVLyZK4vUN2lJWZ64W/Tm9t IvLWqUVIsi3hSiIOvsvtaq+ImmJaipYkWQZQgdYSeIBtBmnxfZsnspyxWP0YWp8B 1kWwtF45dblbtIAWUhHnlT2MbgM4YQtT+FVC9Nbtfzt7b9k+fMW4acMpjygHhM+x 365m/GjGjySmVFdlDXrmbrVW7Sw8925jXn3J2H5O6piD -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:19 2026 by rpki-client