This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NgDDngqsRJCZ5t17aUfK8mlZK60.roa File: NgDDngqsRJCZ5t17aUfK8mlZK60.roa (raw, json) Hash identifier: pLhtaCRoy3Tv/UuBNnXUG0ylEtSQJ3ngA+i9MlDBlP0= Subject key identifier: 36:00:C3:9E:0A:AC:44:90:99:E6:DD:7B:69:47:CA:F2:69:59:2B:AD Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758AE4C4B4445A86A7D828F75381114 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NgDDngqsRJCZ5t17aUfK8mlZK60.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47952 IP address blocks: 91.106.216.0/24 maxlen: 24 91.106.217.0/24 maxlen: 24 91.106.218.0/24 maxlen: 24 91.106.219.0/24 maxlen: 24 185.185.235.0/24 maxlen: 24 193.35.204.0/24 maxlen: 24 193.35.205.0/24 maxlen: 24 193.35.206.0/24 maxlen: 24 193.35.207.0/24 maxlen: 24 194.127.116.0/24 maxlen: 24 194.127.117.0/24 maxlen: 24 194.127.118.0/24 maxlen: 24 194.127.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ae:4c:4b:44:45:a8:6a:7d:82:8f:75:38:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3600c39e0aac449099e6dd7b6947caf269592bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:45:64:33:7c:1e:55:05:78:fa:db:7d:e8: e8:4b:e6:e9:9f:ce:e0:14:57:84:03:88:27:c0:22: f6:19:fe:94:26:26:3e:63:be:f5:75:fa:52:66:9b: 91:23:0a:f3:cd:93:65:4e:d2:ea:26:25:ad:1d:43: 94:57:15:89:24:09:f2:2f:05:31:01:b5:49:18:e1: 50:e1:df:65:21:82:15:3e:3f:89:9f:3a:97:82:7e: 11:0a:5f:7c:af:4f:53:2c:c5:62:a8:77:11:d2:26: f0:0f:d5:ef:aa:49:db:0b:2f:ea:6d:19:2d:e9:1d: 39:65:d6:72:49:55:30:38:51:8b:a7:b7:9e:07:0f: 9b:07:be:22:a1:76:e1:21:1e:09:0e:a2:c0:49:f2: 15:3d:2e:08:f4:da:81:dd:75:bc:f7:73:b1:eb:bd: aa:8b:14:c5:7f:a1:b8:b2:9c:c5:26:e3:93:29:f8: f9:e6:64:49:8b:51:da:cd:c4:76:47:96:07:49:3e: 17:10:0d:8b:0b:75:d7:6f:be:18:3a:51:1c:6c:8c: 50:ba:69:48:d2:7e:2d:3b:14:0b:b7:0e:f4:3c:0e: 4b:fe:53:c2:32:0e:bb:7e:d5:f8:6b:2c:7e:8b:a9: f4:35:43:15:ba:63:ef:5e:da:13:2f:ad:56:04:b5: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:00:C3:9E:0A:AC:44:90:99:E6:DD:7B:69:47:CA:F2:69:59:2B:AD X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NgDDngqsRJCZ5t17aUfK8mlZK60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.216.0/22 185.185.235.0/24 193.35.204.0/22 194.127.116.0/22 Signature Algorithm: sha256WithRSAEncryption af:68:e4:fa:93:95:86:a3:3a:88:30:fb:b6:de:b0:1b:db:ec: 08:64:78:6e:f9:7e:d5:48:15:fb:74:cf:dc:bd:7e:48:5e:12: c5:e1:57:49:06:0c:ca:db:a0:3b:cc:b2:f6:b7:9c:dc:ff:73: 58:08:e7:6b:45:2b:ee:be:1e:41:33:a9:32:39:c2:bf:49:9e: c1:97:4f:ba:37:69:86:3e:e1:c7:b6:3f:70:47:0d:9e:5d:2d: e1:79:1a:30:18:2c:95:ab:c0:cc:cf:29:20:0c:2f:de:52:f4: c4:dc:12:98:f1:01:48:e5:2c:5e:26:8f:74:11:90:c0:ee:32: 5a:58:f2:25:55:47:04:ed:12:b9:70:c3:4d:7b:31:e5:f1:db: 53:06:7d:ba:97:d3:60:c9:3a:3c:5c:64:b5:b7:93:9a:ae:56: bb:2b:ff:ca:11:94:b9:70:de:b8:b1:2c:7f:a4:dc:ed:76:21: 31:52:b9:b0:51:08:b6:d0:f4:df:80:01:79:9b:ad:2b:77:21: 71:80:7c:82:25:4c:b2:89:ac:f6:e1:ca:f9:6b:27:e1:26:bd: f8:62:93:a7:b2:1c:d7:84:ab:a8:1b:29:29:10:5f:0d:b4:f6: 9a:9a:a6:de:4e:5e:ea:13:53:d6:92:f8:d4:b7:3d:ea:f8:04: ee:00:7d:cc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WK5MS0RFqGp9go91OBEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjAwYzM5ZTBhYWM0NDkwOTllNmRkN2I2OTQ3Y2FmMjY5NTkyYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRFZDN8HlUFePrbfejoS+bpn87g FFeEA4gnwCL2Gf6UJiY+Y771dfpSZpuRIwrzzZNlTtLqJiWtHUOUVxWJJAnyLwUx AbVJGOFQ4d9lIYIVPj+JnzqXgn4RCl98r09TLMViqHcR0ibwD9XvqknbCy/qbRkt 6R05ZdZySVUwOFGLp7eeBw+bB74ioXbhIR4JDqLASfIVPS4I9NqB3XW893Ox672q ixTFf6G4spzFJuOTKfj55mRJi1HazcR2R5YHST4XEA2LC3XXb74YOlEcbIxQumlI 0n4tOxQLtw70PA5L/lPCMg67ftX4ayx+i6n0NUMVumPvXtoTL61WBLVarQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDYAw54KrESQmebde2lHyvJpWSutMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvTmdERG5ncXNSSkNaNXQxN2FVZks4bWxaSzYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW2rYAwQA ubnrAwQCwSPMAwQCwn90MA0GCSqGSIb3DQEBCwUAA4IBAQCvaOT6k5WGozqIMPu2 3rAb2+wIZHhu+X7VSBX7dM/cvX5IXhLF4VdJBgzK26A7zLL2t5zc/3NYCOdrRSvu vh5BM6kyOcK/SZ7Bl0+6N2mGPuHHtj9wRw2eXS3heRowGCyVq8DMzykgDC/eUvTE 3BKY8QFI5SxeJo90EZDA7jJaWPIlVUcE7RK5cMNNezHl8dtTBn26l9NgyTo8XGS1 t5Oarla7K//KEZS5cN64sSx/pNztdiExUrmwUQi20PTfgAF5m60rdyFxgHyCJUyy iaz24cr5ayfhJr34YpOnshzXhKuoGykpEF8NtPaamqbeTl7qE1PWkvjUtz3q+ATu AH3M -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:05 2026 by rpki-client