This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/N-nhcmtf4VXbPG95Fke-T4y6cxE.roa File: N-nhcmtf4VXbPG95Fke-T4y6cxE.roa (raw, json) Hash identifier: xYYYsHBj06laIvHrXkIBEGVHR61QyHRwXKsgeQHiEUo= Subject key identifier: 37:E9:E1:72:6B:5F:E1:55:DB:3C:6F:79:16:47:BE:4F:8C:BA:73:11 Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2 Certificate serial: 019B78A2E1E238D0242560D024A9139CC484 Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/N-nhcmtf4VXbPG95Fke-T4y6cxE.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35617 IP address blocks: 85.204.42.0/24 maxlen: 24 86.104.135.0/24 maxlen: 24 109.239.240.0/20 maxlen: 20 178.132.88.0/21 maxlen: 21 185.59.132.0/22 maxlen: 22 185.72.40.0/22 maxlen: 22 185.225.128.0/22 maxlen: 22 212.81.60.0/22 maxlen: 22 2a04:e240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:e2:38:d0:24:25:60:d0:24:a9:13:9c:c4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37e9e1726b5fe155db3c6f791647be4f8cba7311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:ae:41:86:e8:54:ca:c2:8b:18:5c:89:45: 55:db:18:60:75:0a:42:02:43:04:c9:c6:c7:d3:60: cb:e7:de:37:96:e5:bc:2a:7a:bc:1d:dc:f1:ea:fa: 71:50:cf:f0:bc:48:af:8f:8a:a3:89:91:64:bb:b3: 33:9a:34:e3:51:ae:3e:aa:a3:86:08:22:2a:ae:71: 78:9e:43:5b:ea:07:d1:82:cd:6b:49:c2:06:b9:7f: f2:38:6b:2e:89:ad:22:03:a8:ee:df:6f:d3:5e:b3: 97:cc:51:ab:b9:e5:e3:8e:19:b6:17:59:81:3b:d1: 7b:5b:31:04:61:53:8d:09:a4:cf:c3:95:47:f2:9f: 51:ba:51:2a:fa:22:cb:85:55:26:f1:17:a8:06:43: 52:27:0c:cd:5e:f5:89:79:b1:47:b0:6e:5f:70:da: e9:c6:cf:45:2e:1c:dd:af:35:f6:17:0a:a8:33:59: 89:9b:f1:41:7e:33:67:91:7b:84:bc:82:7f:5c:d6: 52:27:14:76:3c:a5:b4:ba:18:6c:e0:f1:4f:f2:ce: 9f:20:c4:c4:48:f9:06:35:ee:7c:9e:d9:89:49:67: d2:36:32:11:c7:22:e4:51:7e:8a:00:ce:ab:62:78: 62:1f:6a:a0:35:62:13:1c:4b:24:cd:10:ca:9c:54: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E9:E1:72:6B:5F:E1:55:DB:3C:6F:79:16:47:BE:4F:8C:BA:73:11 X509v3 Authority Key Identifier: keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/N-nhcmtf4VXbPG95Fke-T4y6cxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.42.0/24 86.104.135.0/24 109.239.240.0/20 178.132.88.0/21 185.59.132.0/22 185.72.40.0/22 185.225.128.0/22 212.81.60.0/22 IPv6: 2a04:e240::/29 Signature Algorithm: sha256WithRSAEncryption 24:9d:96:64:b2:57:b4:7b:9f:02:72:71:37:56:bd:cb:18:d2: 0a:09:f3:b8:2b:de:ae:d8:40:9e:2a:8e:7c:17:5f:a4:8e:8d: 9e:ec:b6:b9:65:db:1b:c2:df:ea:8a:46:60:d2:55:14:25:5b: fd:0f:ef:03:0b:f2:c8:14:e3:b4:0e:78:e1:4b:73:2c:1b:02: 5a:ec:65:26:d7:3d:06:27:20:93:0b:bb:88:88:65:a5:58:a2: 42:ab:6a:34:54:c9:98:a9:87:43:81:ad:b0:ce:50:00:14:ba: 32:3f:86:ca:0d:02:1e:92:f4:5f:72:bc:40:8e:ca:35:3b:45: 63:26:88:5d:a6:ef:50:4c:db:64:3a:5d:ad:8f:52:29:4c:48: ee:55:9b:ce:ed:49:1a:08:2d:2e:cb:fa:08:58:48:b9:36:47: e4:24:1c:1f:1c:6c:94:91:76:e0:1a:09:ca:d0:d2:eb:08:f5: 4b:ea:e8:7e:8d:4d:2e:f8:60:56:48:46:ef:2a:83:4c:d2:e2: 8f:e1:9b:87:09:6f:ba:97:88:ef:ad:98:28:c0:4f:3d:5b:1f: a8:7d:e6:4c:7c:fd:8b:89:98:c3:cf:de:6e:b7:1f:7c:38:09: 97:7a:de:2d:5a:df:82:9a:a8:76:b3:72:d8:d6:f5:50:3f:2c: 31:00:69:75 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt4ouHiONAkJWDQJKkTnMSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NDI3NTlhMDRmY2ZkOWRkMzg2NDg2ZjA0ODIwZTRhMDYw Mzk3ZjIwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2U5ZTE3MjZiNWZlMTU1ZGIzYzZmNzkxNjQ3YmU0ZjhjYmE3MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd6uQYboVMrCixhciUVV2xhgdQpC AkMEycbH02DL5943luW8Knq8Hdzx6vpxUM/wvEivj4qjiZFku7MzmjTjUa4+qqOG CCIqrnF4nkNb6gfRgs1rScIGuX/yOGsuia0iA6ju32/TXrOXzFGrueXjjhm2F1mB O9F7WzEEYVONCaTPw5VH8p9RulEq+iLLhVUm8ReoBkNSJwzNXvWJebFHsG5fcNrp xs9FLhzdrzX2FwqoM1mJm/FBfjNnkXuEvIJ/XNZSJxR2PKW0uhhs4PFP8s6fIMTE SPkGNe58ntmJSWfSNjIRxyLkUX6KAM6rYnhiH2qgNWITHEskzRDKnFTW1wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFDfp4XJrX+FV2zxveRZHvk+MunMRMB8GA1UdIwQY MBaAFAhCdZoE/P2d04ZIbwSCDkoGA5fyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEt NzAyNWUxODgwNjhjLzEvTi1uaGNtdGY0VlhiUEc5NUZrZS1UNHk2Y3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEtNzAyNWUxODgwNjhj LzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQAVcwqAwQA VmiHAwQEbe/wAwQDsoRYAwQCuTuEAwQCuUgoAwQCueGAAwQC1FE8MA0EAgACMAcD BQMqBOJAMA0GCSqGSIb3DQEBCwUAA4IBAQAknZZksle0e58CcnE3Vr3LGNIKCfO4 K96u2ECeKo58F1+kjo2e7La5Zdsbwt/qikZg0lUUJVv9D+8DC/LIFOO0DnjhS3Ms GwJa7GUm1z0GJyCTC7uIiGWlWKJCq2o0VMmYqYdDga2wzlAAFLoyP4bKDQIekvRf crxAjso1O0VjJohdpu9QTNtkOl2tj1IpTEjuVZvO7UkaCC0uy/oIWEi5NkfkJBwf HGyUkXbgGgnK0NLrCPVL6uh+jU0u+GBWSEbvKoNM0uKP4ZuHCW+6l4jvrZgowE89 Wx+ofeZMfP2LiZjDz95utx98OAmXet4tWt+Cmqh2s3LY1vVQPywxAGl1 -----END CERTIFICATE-----Generated at Tue Jan 27 16:39:24 2026 by rpki-client