This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NZoSwUkLAmMwbEjAu-trHqR_V_k.roa File: NZoSwUkLAmMwbEjAu-trHqR_V_k.roa (raw, json) Hash identifier: 02rAztVjRcsdeDVwgkma6YqQyIyFyzIJO8lNQo5lD9o= Subject key identifier: 35:9A:12:C1:49:0B:02:63:30:6C:48:C0:BB:EB:6B:1E:A4:7F:57:F9 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B78348F5C34F08FC85CB793DA63EABEAF Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NZoSwUkLAmMwbEjAu-trHqR_V_k.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 5.199.160.0/20 maxlen: 32 5.199.165.0/24 maxlen: 32 46.166.160.0/20 maxlen: 32 87.232.136.0/21 maxlen: 21 93.115.24.0/21 maxlen: 32 109.109.164.0/22 maxlen: 22 185.8.104.0/22 maxlen: 32 185.150.116.0/22 maxlen: 32 188.214.128.0/21 maxlen: 32 2a02:ae00::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:5c:34:f0:8f:c8:5c:b7:93:da:63:ea:be:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=359a12c1490b0263306c48c0bbeb6b1ea47f57f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:6e:d6:e8:cf:89:d6:4e:c8:e4:3e:a5:0e: a4:79:4c:e7:c2:91:e7:f9:88:95:b7:75:7e:42:0d: 8e:0c:9a:5a:6b:76:83:b0:24:e9:27:ae:e4:1b:75: 6e:b4:e0:ce:96:7b:94:d0:c1:17:d0:53:e0:88:ff: f9:b3:1e:c3:32:90:dc:14:38:fd:08:fb:87:3a:a6: 42:c1:37:6f:30:5e:63:82:07:5e:98:d9:27:2c:f9: aa:fe:af:f9:1d:cb:6b:9f:84:9f:5c:67:27:bf:25: e6:3a:86:69:ce:3f:98:d6:82:83:11:3d:ab:28:68: f0:c8:c4:74:92:71:fc:64:ba:4a:58:8a:4c:03:ef: 9f:6a:56:ea:dc:80:46:83:53:d0:9d:13:03:92:86: 84:8e:a9:56:39:02:b5:08:df:e7:eb:e5:d4:6e:24: e3:72:31:c9:aa:66:01:58:b4:e7:40:53:72:15:a6: 49:62:3e:e6:9d:a2:90:a0:78:61:3e:41:60:eb:77: f2:8e:51:24:e8:1e:aa:14:b8:25:06:2b:3c:87:65: 35:1e:09:b4:f9:ce:65:b3:87:63:51:5e:bb:45:2e: 7c:d5:f5:42:cb:d9:cf:9d:76:71:a7:c6:94:90:91: 4f:2a:f1:64:66:09:cc:42:d0:87:8b:f3:dd:da:19: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9A:12:C1:49:0B:02:63:30:6C:48:C0:BB:EB:6B:1E:A4:7F:57:F9 X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NZoSwUkLAmMwbEjAu-trHqR_V_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.160.0/20 46.166.160.0/20 87.232.136.0/21 93.115.24.0/21 109.109.164.0/22 185.8.104.0/22 185.150.116.0/22 188.214.128.0/21 IPv6: 2a02:ae00::/36 Signature Algorithm: sha256WithRSAEncryption 63:e1:e7:1e:fd:90:91:d7:26:88:c4:60:99:dd:4f:03:62:1d: 4a:17:d1:40:b0:03:d6:92:f3:fa:07:06:56:31:24:5b:70:36: b4:41:41:b6:9e:7d:32:2f:1f:eb:bf:b1:1b:6e:90:a4:60:7a: 32:9a:e0:92:95:d0:81:c5:81:e1:96:4b:1f:2a:bd:88:f5:d5: 5c:b0:e6:3d:4e:2b:f3:74:ce:21:06:71:be:7a:7b:c2:29:db: dd:f9:37:bb:fb:54:76:85:78:ee:f4:ef:c8:19:76:86:70:56: da:57:c7:d5:fa:d0:f4:66:77:70:28:fc:a3:96:3d:02:03:0c: 1f:47:5e:8d:cf:1e:a3:97:33:81:92:9f:c0:6f:d5:e3:22:30: cc:f1:ba:6b:91:63:a5:81:22:d8:1a:7e:f8:e2:93:da:70:52: bc:45:2a:7e:35:b8:82:de:19:60:3f:43:f5:1f:6d:9f:b4:b9: cf:41:96:f5:de:f3:9e:eb:86:e4:74:df:86:e2:e4:39:c6:85: e6:96:13:03:81:e2:ee:cf:08:24:be:6d:86:9f:4a:65:93:59: 69:a3:c9:48:15:14:71:a2:79:5e:e4:d7:34:bf:38:f8:94:49: d8:01:ee:fe:10:60:4b:2f:63:d1:ec:fa:ff:a8:28:60:7e:d7: 9e:42:14:f1 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt4NI9cNPCPyFy3k9pj6r6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTlhMTJjMTQ5MGIwMjYzMzA2YzQ4YzBiYmViNmIxZWE0N2Y1N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFu1ujPidZOyOQ+pQ6keUznwpHn +YiVt3V+Qg2ODJpaa3aDsCTpJ67kG3VutODOlnuU0MEX0FPgiP/5sx7DMpDcFDj9 CPuHOqZCwTdvMF5jggdemNknLPmq/q/5Hctrn4SfXGcnvyXmOoZpzj+Y1oKDET2r KGjwyMR0knH8ZLpKWIpMA++falbq3IBGg1PQnRMDkoaEjqlWOQK1CN/n6+XUbiTj cjHJqmYBWLTnQFNyFaZJYj7mnaKQoHhhPkFg63fyjlEk6B6qFLglBis8h2U1Hgm0 +c5ls4djUV67RS581fVCy9nPnXZxp8aUkJFPKvFkZgnMQtCHi/Pd2hnrPQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFDWaEsFJCwJjMGxIwLvrax6kf1f5MB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTlpvU3dVa0xBbU13YkVqQXUtdHJIcVJfVl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA2BAIAATAwAwQEBcegAwQE LqagAwQDV+iIAwQDXXMYAwQCbW2kAwQCuQhoAwQCuZZ0AwQDvNaAMA4EAgACMAgD BgQqAq4AADANBgkqhkiG9w0BAQsFAAOCAQEAY+HnHv2QkdcmiMRgmd1PA2IdShfR QLAD1pLz+gcGVjEkW3A2tEFBtp59Mi8f67+xG26QpGB6MprgkpXQgcWB4ZZLHyq9 iPXVXLDmPU4r83TOIQZxvnp7winb3fk3u/tUdoV47vTvyBl2hnBW2lfH1frQ9GZ3 cCj8o5Y9AgMMH0dejc8eo5czgZKfwG/V4yIwzPG6a5FjpYEi2Bp++OKT2nBSvEUq fjW4gt4ZYD9D9R9tn7S5z0GW9d7znuuG5HTfhuLkOcaF5pYTA4Hi7s8IJL5thp9K ZZNZaaPJSBUUcaJ5XuTXNL84+JRJ2AHu/hBgSy9j0ez6/6goYH7XnkIU8Q== -----END CERTIFICATE-----Generated at Wed Jan 21 03:06:23 2026 by rpki-client