This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhWW-oasRFVajcRDyxva3gKYHMU.roa File: NhWW-oasRFVajcRDyxva3gKYHMU.roa (raw, json) Hash identifier: TTi+q728uwxvc0ldyp1w32onbO+lfcp6sxmkmvIM4ao= Subject key identifier: 36:15:96:FA:86:AC:44:55:5A:8D:C4:43:CB:1B:DA:DE:02:98:1C:C5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CAD524ECA5527AB155F4DE9F4C8F7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhWW-oasRFVajcRDyxva3gKYHMU.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42394 IP address blocks: 2a0e:97c7:160::/44 maxlen: 48 2a0e:b107:ff0::/48 maxlen: 48 2a0e:b107:fff::/48 maxlen: 48 2a0e:b107:1110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ad:52:4e:ca:55:27:ab:15:5f:4d:e9:f4:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=361596fa86ac44555a8dc443cb1bdade02981cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:30:bf:80:93:14:a4:28:82:7f:9f:d9:ac: 73:ff:8b:84:82:10:bd:e4:16:66:79:c3:95:58:95: ff:da:39:de:06:d3:ee:70:44:de:30:4c:7c:72:fb: 2f:70:81:74:20:27:56:67:28:f5:10:5d:20:4f:7b: 62:6a:8e:59:69:b0:75:a9:08:e0:04:b0:6a:f8:0c: c3:fb:33:34:40:f8:d6:b3:1e:95:4d:2a:57:6d:f5: 3d:47:57:e0:76:48:77:2d:73:1e:4f:82:d0:ba:0a: be:fd:14:28:1e:8f:f8:fb:f9:2e:7a:75:3f:8f:8f: 74:b0:99:46:33:00:b0:90:32:2f:dd:b6:82:f4:06: e7:2a:96:32:84:cc:b4:f4:0f:df:61:28:0b:07:6c: 11:89:b9:ca:8e:5f:8d:6b:4e:0d:1a:c9:b3:a5:6d: 44:ef:1c:c7:46:7f:a4:5b:41:2c:cf:f8:b7:12:06: 0c:8a:66:2b:30:b7:97:64:44:4a:7a:0b:7d:2d:f1: c2:05:26:91:60:a2:34:44:86:4f:5c:9d:7f:4f:8d: bd:30:d1:5f:9f:d5:47:64:fc:f8:37:07:26:fa:05: a4:cc:cf:fb:44:5c:20:a6:e6:c2:ee:02:1e:9a:d6: 72:78:48:04:d8:13:f1:d0:34:5d:83:1a:21:f0:f8: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:15:96:FA:86:AC:44:55:5A:8D:C4:43:CB:1B:DA:DE:02:98:1C:C5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhWW-oasRFVajcRDyxva3gKYHMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c7:160::/44 2a0e:b107:ff0::/48 2a0e:b107:fff::/48 2a0e:b107:1110::/44 Signature Algorithm: sha256WithRSAEncryption 80:c6:9f:d3:19:57:e2:7d:85:ee:63:65:9e:8a:dd:27:5b:03: 49:eb:08:a9:ae:b2:f6:41:b2:72:30:46:26:c7:d4:8f:84:8d: 99:d9:9a:16:42:6f:d0:de:f6:23:9f:7b:2c:f6:d0:50:90:7b: cf:4c:c9:50:07:2d:01:76:d4:b0:38:01:8f:03:ee:93:db:a9: 82:e7:5e:8a:03:f0:0f:21:a6:37:9e:f6:55:98:46:55:70:50: bc:4a:1d:ce:7e:ff:99:6d:b8:3b:20:15:44:66:5e:5b:e3:17: f5:d0:a6:6a:c7:41:d4:37:7a:3c:00:91:d5:9e:01:c6:ef:c8: a2:eb:8b:a1:30:8e:dd:2f:6b:c3:4b:b8:40:dc:9d:52:23:d3: a2:31:2a:19:8b:c2:c2:7a:70:d6:37:69:28:87:15:a2:87:a4: 95:81:af:b1:90:83:c4:66:81:29:d9:f2:4b:2c:51:45:2a:0e: 71:5e:5c:e4:eb:b0:f8:9d:e4:e4:c5:c3:b0:c4:3f:ce:fe:81: 0f:3e:5a:eb:14:d5:35:29:36:dd:73:9a:fd:58:89:33:6d:f9: 8d:98:b8:68:bd:be:ba:fe:7f:77:95:9a:eb:40:0e:a9:ce:9e: ea:75:dd:b0:77:99:6b:1a:4e:1f:4c:7b:e4:01:1c:b7:1d:ff: 3b:e0:84:b2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XK1STspVJ6sVX03p9Mj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjE1OTZmYTg2YWM0NDU1NWE4ZGM0NDNjYjFiZGFkZTAyOTgxY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnMwv4CTFKQogn+f2axz/4uEghC9 5BZmecOVWJX/2jneBtPucETeMEx8cvsvcIF0ICdWZyj1EF0gT3tiao5ZabB1qQjg BLBq+AzD+zM0QPjWsx6VTSpXbfU9R1fgdkh3LXMeT4LQugq+/RQoHo/4+/kuenU/ j490sJlGMwCwkDIv3baC9AbnKpYyhMy09A/fYSgLB2wRibnKjl+Na04NGsmzpW1E 7xzHRn+kW0Esz/i3EgYMimYrMLeXZERKegt9LfHCBSaRYKI0RIZPXJ1/T429MNFf n9VHZPz4Nwcm+gWkzM/7RFwgpubC7gIemtZyeEgE2BPx0DRdgxoh8PhWQwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDYVlvqGrERVWo3EQ8sb2t4CmBzFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTmhXVy1vYXNSRlZhamNSRHl4dmEzZ0tZSE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKg6XxwFg AwcAKg6xBw/wAwcAKg6xBw//AwcEKg6xBxEQMA0GCSqGSIb3DQEBCwUAA4IBAQCA xp/TGVfifYXuY2Weit0nWwNJ6wiprrL2QbJyMEYmx9SPhI2Z2ZoWQm/Q3vYjn3ss 9tBQkHvPTMlQBy0BdtSwOAGPA+6T26mC516KA/APIaY3nvZVmEZVcFC8Sh3Ofv+Z bbg7IBVEZl5b4xf10KZqx0HUN3o8AJHVngHG78ii64uhMI7dL2vDS7hA3J1SI9Oi MSoZi8LCenDWN2kohxWih6SVga+xkIPEZoEp2fJLLFFFKg5xXlzk67D4neTkxcOw xD/O/oEPPlrrFNU1KTbdc5r9WIkzbfmNmLhovb66/n93lZrrQA6pzp7qdd2wd5lr Gk4fTHvkARy3Hf874ISy -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:03 2026 by rpki-client