This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDE-qKzrZzust2SPr1S2PkNAc7M.roa File: NDE-qKzrZzust2SPr1S2PkNAc7M.roa (raw, json) Hash identifier: 94u8+soJXh0fZdtjtPmGr8bw6EdIV8cHqbMO4EfhdLY= Subject key identifier: 34:31:3E:A8:AC:EB:67:3B:AC:B7:64:8F:AF:54:B6:3E:43:40:73:B3 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B19B4A5F38D60E55027D4FC92EDB Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDE-qKzrZzust2SPr1S2PkNAc7M.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209371 IP address blocks: 88.216.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b1:9b:4a:5f:38:d6:0e:55:02:7d:4f:c9:2e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34313ea8aceb673bacb7648faf54b63e434073b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:97:0b:7e:b3:6a:42:e7:c8:48:88:3e:f8: 63:8d:20:0a:10:8c:5e:ef:7f:7c:80:4b:80:fe:8f: 4f:b2:4e:19:2d:35:64:11:d3:96:5b:57:e2:d6:ef: 88:80:00:e7:5c:50:d0:d0:ff:72:41:97:92:b4:ab: c9:07:3f:95:a3:29:b3:d9:07:93:c9:b5:35:b7:19: 47:03:8d:80:88:d8:02:e9:52:d9:c0:44:77:55:16: 73:c0:d7:7d:f2:23:f0:4e:fe:7b:cc:04:c8:df:8e: e7:fb:f7:a5:9b:8f:bc:b2:39:96:95:e3:59:2b:65: 11:3b:06:5a:83:22:ac:57:64:31:90:19:46:9e:6e: 76:bf:a4:63:3c:df:11:f5:2d:e1:46:ee:ff:12:d6: 6f:0c:26:ff:c3:4d:ed:74:00:a2:46:76:7e:99:bd: 1e:bb:e9:c3:36:34:d6:39:3c:48:d8:97:6a:c2:96: 86:6b:44:8f:74:85:55:e7:8e:42:12:ca:0b:21:fc: f4:55:1b:d4:2b:c0:50:71:e5:9a:2c:dc:bc:88:2e: 56:b8:be:9f:00:14:64:6a:bb:3f:03:35:6f:9d:ef: 2f:0c:5c:d1:98:b8:60:30:95:89:68:3a:15:e9:46: b3:79:df:65:93:0e:3f:61:8d:6d:db:54:88:ac:5b: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:31:3E:A8:AC:EB:67:3B:AC:B7:64:8F:AF:54:B6:3E:43:40:73:B3 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDE-qKzrZzust2SPr1S2PkNAc7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.96.0/24 Signature Algorithm: sha256WithRSAEncryption 66:5b:0b:a5:44:d9:6c:98:66:bb:bf:0b:6d:ac:16:09:bb:96: 5a:25:a6:8d:5b:08:03:fa:63:1a:15:0a:e4:ad:99:74:0c:8d: 3e:8c:a4:c2:92:7f:d9:49:b6:f5:55:db:a0:bf:42:33:bf:9a: 82:93:ba:2c:ad:9d:4e:f5:9f:60:65:4f:15:42:6f:00:43:fd: 7f:38:0c:3f:9d:85:47:04:bd:95:24:dd:20:18:bb:63:0d:12: 98:99:cc:79:a7:29:60:3a:45:dd:07:43:47:76:92:07:32:56: bf:28:35:1a:dd:ef:41:58:31:6d:04:02:a7:c8:af:df:69:d5: d0:7d:28:95:b7:4c:19:88:57:bb:d7:57:fc:46:f4:0a:2f:a0: 1d:68:22:76:9e:37:10:a9:4d:7a:ad:69:d6:68:8b:72:5f:ad: 76:79:a8:fa:6a:ce:8b:16:87:54:91:9d:82:c8:eb:dc:a6:28: f5:17:0c:bf:46:2a:da:e8:82:76:89:3e:99:5f:1c:a7:3d:07: 10:f5:de:b9:2b:cc:b9:6e:6a:6f:c7:b1:60:ab:13:32:79:b0: e9:40:a9:d9:ab:06:4d:56:f4:1d:72:22:90:02:bd:77:0e:09: 62:a6:2f:8e:e0:6c:40:42:f1:45:85:ae:ea:14:91:e5:df:ac: 09:e3:2d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLGbSl841g5VAn1PyS7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDMxM2VhOGFjZWI2NzNiYWNiNzY0OGZhZjU0YjYzZTQzNDA3M2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A2XC36zakLnyEiIPvhjjSAKEIxe 7398gEuA/o9Psk4ZLTVkEdOWW1fi1u+IgADnXFDQ0P9yQZeStKvJBz+Voymz2QeT ybU1txlHA42AiNgC6VLZwER3VRZzwNd98iPwTv57zATI347n+/elm4+8sjmWleNZ K2UROwZagyKsV2QxkBlGnm52v6RjPN8R9S3hRu7/EtZvDCb/w03tdACiRnZ+mb0e u+nDNjTWOTxI2JdqwpaGa0SPdIVV545CEsoLIfz0VRvUK8BQceWaLNy8iC5WuL6f ABRkars/AzVvne8vDFzRmLhgMJWJaDoV6Uazed9lkw4/YY1t21SIrFs3qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQxPqis62c7rLdkj69Utj5DQHOzMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvTkRFLXFLenJaenVzdDJTUHIxUzJQa05BYzdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNhgMA0G CSqGSIb3DQEBCwUAA4IBAQBmWwulRNlsmGa7vwttrBYJu5ZaJaaNWwgD+mMaFQrk rZl0DI0+jKTCkn/ZSbb1Vdugv0Izv5qCk7osrZ1O9Z9gZU8VQm8AQ/1/OAw/nYVH BL2VJN0gGLtjDRKYmcx5pylgOkXdB0NHdpIHMla/KDUa3e9BWDFtBAKnyK/fadXQ fSiVt0wZiFe711f8RvQKL6AdaCJ2njcQqU16rWnWaItyX612eaj6as6LFodUkZ2C yOvcpij1Fwy/Rira6IJ2iT6ZXxynPQcQ9d65K8y5bmpvx7FgqxMyebDpQKnZqwZN VvQdciKQAr13Dglipi+O4GxAQvFFha7qFJHl36wJ4y0k -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:31 2026 by rpki-client