This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa File: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (raw, json) Hash identifier: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA= Subject key identifier: 36:F9:29:E0:E1:F2:D1:78:E6:35:97:04:F1:F5:F9:67:E2:AE:78:34 Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Certificate serial: 019BBE3935B9BA183F164D907F0A15E12AF4 Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa Signing time: Wed 14 Jan 2026 20:36:18 +0000 ROA not before: Wed 14 Jan 2026 20:36:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202274 IP address blocks: 2a02:f440::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:39:35:b9:ba:18:3f:16:4d:90:7f:0a:15:e1:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6 Validity Not Before: Jan 14 20:36:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f929e0e1f2d178e6359704f1f5f967e2ae7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:d7:03:03:f5:a8:73:37:49:08:2c:9d:56: 35:50:2f:f3:3e:86:02:9a:58:7e:66:61:78:2c:a6: 94:ea:62:12:ba:e2:b5:44:a3:7e:b3:21:e1:ef:e8: 21:71:4a:fc:5e:bf:9d:11:0c:05:52:23:e5:62:ec: 9b:20:68:9f:47:48:69:d1:47:03:df:a7:e4:de:47: e3:17:68:90:74:7e:8d:9f:f6:6d:60:ac:5a:02:34: 56:80:26:4a:a9:9d:0d:8c:1e:d1:12:7f:ed:a0:d2: e6:ce:17:34:58:5a:f9:54:df:8d:c9:cf:85:b0:50: 1e:67:a5:f4:d7:d6:51:d9:61:b7:2b:11:0f:6a:c4: bd:da:3d:e4:09:ac:ed:09:17:58:66:ef:9f:a0:b7: ab:48:7c:36:f6:cd:3a:71:c7:39:54:13:90:6b:c5: 90:1f:f0:43:18:28:68:93:51:5d:1a:39:69:c8:b4: c4:bb:4f:55:49:dc:ea:3d:ea:7b:38:e9:ec:50:7b: fb:3c:d4:b0:9c:08:1b:05:08:5b:4f:79:a2:f3:b1: 4a:fb:16:fe:d3:fb:25:b2:53:e4:6e:fb:da:63:1e: a1:27:6c:2f:4f:ad:c1:d5:29:5c:0f:1c:83:97:46: 5e:3b:ce:24:f0:98:95:f8:7b:a6:99:3b:ae:4c:b2: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F9:29:E0:E1:F2:D1:78:E6:35:97:04:F1:F5:F9:67:E2:AE:78:34 X509v3 Authority Key Identifier: keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f440::/29 Signature Algorithm: sha256WithRSAEncryption 63:20:d7:b3:71:d0:e8:2d:83:8b:48:86:e9:39:33:d4:63:78: 3d:d1:0d:b2:60:f4:9b:d0:37:0b:88:52:ad:11:f0:56:74:10: c0:e2:68:62:3e:7d:8f:20:47:bf:e2:40:a6:88:99:bf:e5:c0: 51:ae:22:0f:b9:7a:f5:ad:31:e9:9f:22:17:a0:91:74:69:b6: 2c:c8:b8:31:7e:b4:0a:39:02:91:45:b5:bf:76:8b:3e:f6:40: bd:73:ed:fe:b4:30:e7:52:d3:99:ea:0d:4f:71:a7:3c:a9:54: 56:54:9f:8c:7f:07:e1:54:12:a6:ed:ef:8e:c7:4c:21:89:8c: 2a:63:d4:7f:8f:8f:8a:95:d8:0f:4a:26:87:5e:8a:fc:23:23: 95:db:ef:ab:11:5b:2a:9d:1f:a6:a0:59:8e:41:9f:30:d1:3f: cc:e8:da:19:b3:99:a1:f6:74:c1:c4:4b:8b:d9:ae:1e:08:58: 67:48:7a:55:66:d3:15:26:46:21:9d:ef:03:9c:51:82:d5:39: 0d:76:29:f8:d1:34:c1:c6:44:49:5a:55:89:e6:f2:5a:17:47: 3f:37:e1:9f:8b:64:f8:f4:4f:1d:e9:fb:77:22:c1:6e:e4:2f: fe:75:9d:94:0f:3b:fa:5c:a5:92:22:40:63:d1:ee:18:42:7e: ab:f0:42:25 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZu+OTW5uhg/Fk2QfwoV4Sr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2 N2JkYzYwHhcNMjYwMTE0MjAzNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmY5MjllMGUxZjJkMTc4ZTYzNTk3MDRmMWY1Zjk2N2UyYWU3ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3XAwP1qHM3SQgsnVY1UC/zPoYC mlh+ZmF4LKaU6mISuuK1RKN+syHh7+ghcUr8Xr+dEQwFUiPlYuybIGifR0hp0UcD 36fk3kfjF2iQdH6Nn/ZtYKxaAjRWgCZKqZ0NjB7REn/toNLmzhc0WFr5VN+Nyc+F sFAeZ6X019ZR2WG3KxEPasS92j3kCaztCRdYZu+foLerSHw29s06ccc5VBOQa8WQ H/BDGChok1FdGjlpyLTEu09VSdzqPep7OOnsUHv7PNSwnAgbBQhbT3mi87FK+xb+ 0/slslPkbvvaYx6hJ2wvT63B1SlcDxyDl0ZeO84k8JiV+HummTuuTLJkEQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDb5KeDh8tF45jWXBPH1+Wfirng0MB8GA1UdIwQY MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt MmQzOGIzOTNiMTIzLzEvTnZrcDRPSHkwWGptTlpjRThmWDVaLUt1ZURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgL0QDAN BgkqhkiG9w0BAQsFAAOCAQEAYyDXs3HQ6C2Di0iG6Tkz1GN4PdENsmD0m9A3C4hS rRHwVnQQwOJoYj59jyBHv+JApoiZv+XAUa4iD7l69a0x6Z8iF6CRdGm2LMi4MX60 CjkCkUW1v3aLPvZAvXPt/rQw51LTmeoNT3GnPKlUVlSfjH8H4VQSpu3vjsdMIYmM KmPUf4+PipXYD0omh16K/CMjldvvqxFbKp0fpqBZjkGfMNE/zOjaGbOZofZ0wcRL i9muHghYZ0h6VWbTFSZGIZ3vA5xRgtU5DXYp+NE0wcZESVpViebyWhdHPzfhn4tk +PRPHen7dyLBbuQv/nWdlA87+lylkiJAY9HuGEJ+q/BCJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:45:37 2026 by rpki-client