This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa File: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (raw, json) Hash identifier: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g= Subject key identifier: 36:25:56:FB:50:E5:1A:BE:61:09:33:F2:0A:72:D6:85:F7:10:48:9D Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Certificate serial: 019B7A5AC476F5FCAA12632879C0A47E51D4 Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1741 IP address blocks: 130.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c4:76:f5:fc:aa:12:63:28:79:c0:a4:7e:51:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=362556fb50e51abe610933f20a72d685f710489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:bb:23:cc:17:2e:92:7f:71:48:b6:b1:09: aa:db:6c:53:52:08:19:e0:f8:f5:b8:8e:fa:5e:3b: 0d:5e:6c:dd:cb:eb:bd:9f:13:d6:70:26:57:e2:c6: a6:57:ee:bc:b3:a9:1b:2a:b3:77:14:80:70:21:77: f6:b0:07:12:5c:c4:3c:1e:58:2e:19:56:93:59:00: da:f7:e1:43:2d:9d:fb:09:2b:25:14:61:bc:a7:0e: 0a:b9:38:e0:a8:8c:ea:cf:5e:fc:7f:be:6f:a5:38: 1f:ac:d5:cb:a5:5c:33:f5:c4:bc:07:ee:8b:6c:94: d5:a9:5b:93:4a:60:79:53:92:86:46:cd:9b:ab:8c: a9:14:7f:4e:68:39:0f:cf:11:83:40:d1:09:34:fd: 31:ff:cd:c5:f6:a2:f3:85:00:e7:33:28:1d:60:af: 4b:5a:b8:5c:0a:25:4c:f1:36:db:7f:02:05:11:94: ef:09:44:55:63:65:aa:d4:54:7a:b6:45:89:11:5d: 07:c3:dc:ee:db:74:28:4c:5c:c1:df:14:62:02:37: 1a:2f:6d:25:f2:9d:3d:31:47:35:14:cf:20:79:05: f3:bb:f1:3c:28:c6:77:75:ea:18:90:9a:fc:c0:ea: 59:be:c1:8a:51:64:16:68:93:08:e0:1e:8d:67:2e: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:25:56:FB:50:E5:1A:BE:61:09:33:F2:0A:72:D6:85:F7:10:48:9D X509v3 Authority Key Identifier: keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:99:9f:0d:27:89:3e:0d:c1:96:19:c4:62:16:fe:00:61:ed: 37:79:15:9d:46:3c:b6:99:e2:c6:db:88:78:3c:69:12:a6:94: 30:fe:7b:56:93:40:aa:dc:c0:64:0d:07:87:8e:2e:64:54:cd: 26:28:de:21:b8:e0:3e:8d:64:f9:76:3e:d9:5d:dd:9d:db:6a: 70:bb:46:ef:52:81:f5:ce:1b:30:95:40:16:b8:25:f1:09:41: 58:bc:ff:88:46:c5:5a:a8:63:87:c5:ec:f0:7b:2c:4a:cb:64: de:fc:15:fa:8c:8e:3e:3a:58:f7:bd:1e:81:a2:98:be:dd:fd: 65:bf:78:52:70:c3:a6:a2:97:36:d6:b6:3b:68:05:7e:92:db: 65:2a:05:44:ca:e8:03:08:a0:05:0b:bd:28:5a:a6:bb:4e:6b: d4:c5:98:f0:d6:19:af:5c:2b:44:c9:db:6d:3b:36:56:67:9b: a4:18:9d:f0:a5:07:c4:b1:f2:62:26:21:45:15:cc:63:7d:8d: a8:43:87:5b:ec:d7:30:74:fb:40:f9:1d:ad:c5:ee:8a:68:41: 3d:95:3a:f0:e4:ff:d1:62:5c:85:f7:be:59:ff:53:14:38:4b: d5:cd:1a:3f:ea:6b:5a:7f:b9:0b:71:c2:ab:0d:c3:11:16:42: 95:25:66:77 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6WsR29fyqEmMoecCkflHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk NGJlYzAwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjI1NTZmYjUwZTUxYWJlNjEwOTMzZjIwYTcyZDY4NWY3MTA0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P27I8wXLpJ/cUi2sQmq22xTUggZ 4Pj1uI76XjsNXmzdy+u9nxPWcCZX4samV+68s6kbKrN3FIBwIXf2sAcSXMQ8Hlgu GVaTWQDa9+FDLZ37CSslFGG8pw4KuTjgqIzqz178f75vpTgfrNXLpVwz9cS8B+6L bJTVqVuTSmB5U5KGRs2bq4ypFH9OaDkPzxGDQNEJNP0x/83F9qLzhQDnMygdYK9L WrhcCiVM8TbbfwIFEZTvCURVY2Wq1FR6tkWJEV0Hw9zu23QoTFzB3xRiAjcaL20l 8p09MUc1FM8geQXzu/E8KMZ3deoYkJr8wOpZvsGKUWQWaJMI4B6NZy4dTwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDYlVvtQ5Rq+YQkz8gpy1oX3EEidMB8GA1UdIwQY MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt ZGU5NzEyYzZlN2M3LzEvTmlWVy0xRGxHcjVoQ1RQeUNuTFdoZmNRU0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3 LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgugwDQYJ KoZIhvcNAQELBQADggEBAAqZnw0niT4NwZYZxGIW/gBh7Td5FZ1GPLaZ4sbbiHg8 aRKmlDD+e1aTQKrcwGQNB4eOLmRUzSYo3iG44D6NZPl2Ptld3Z3banC7Ru9SgfXO GzCVQBa4JfEJQVi8/4hGxVqoY4fF7PB7LErLZN78FfqMjj46WPe9HoGimL7d/WW/ eFJww6ailzbWtjtoBX6S22UqBUTK6AMIoAULvShaprtOa9TFmPDWGa9cK0TJ2207 NlZnm6QYnfClB8Sx8mImIUUVzGN9jahDh1vs1zB0+0D5Ha3F7opoQT2VOvDk/9Fi XIX3vln/UxQ4S9XNGj/qa1p/uQtxwqsNwxEWQpUlZnc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:07 2026 by rpki-client