This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nILoqrksd_HPNpt5xQbg5v4cXMQ.roa File: nILoqrksd_HPNpt5xQbg5v4cXMQ.roa (raw, json) Hash identifier: 8+wJNiwr319+sSr4A1VAB2cSUpZeLM3zeh1T+vEUy1o= Subject key identifier: 9C:82:E8:AA:B9:2C:77:F1:CF:36:9B:79:C5:06:E0:E6:FE:1C:5C:C4 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38B1A754DB409EDD8996E17A30DF7D Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nILoqrksd_HPNpt5xQbg5v4cXMQ.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213137 IP address blocks: 195.178.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:a7:54:db:40:9e:dd:89:96:e1:7a:30:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c82e8aab92c77f1cf369b79c506e0e6fe1c5cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:8a:2c:1d:06:f1:21:87:01:1e:13:1c:6a: b8:cc:6b:9f:69:57:1d:55:06:6f:ba:75:26:99:5e: d6:8a:51:36:99:d1:bb:3a:9e:ff:63:8f:14:fc:3f: 44:f7:26:60:d7:ea:55:2e:b5:5d:f2:c8:eb:76:f3: 12:23:c4:5a:0a:93:d8:22:2b:cb:5b:78:ef:9a:4f: 2c:e1:17:79:7f:04:ba:c0:8d:e8:79:24:a3:e6:3e: f4:26:71:cf:bd:02:fb:6e:b0:17:94:7a:c4:5e:af: 13:2b:5e:ab:4c:5a:3b:82:72:8c:bd:38:2f:a0:b0: ab:b8:bb:e0:10:fe:d5:02:dd:84:cd:17:66:8c:76: 3c:13:6c:84:60:43:a4:88:f2:8b:b7:71:48:50:cb: 68:a2:92:f7:a8:ab:0c:56:f9:76:8e:c0:16:29:8b: c1:44:5f:d3:53:0a:65:f4:12:01:30:6b:df:50:cd: 04:da:4e:41:7a:2b:68:15:60:bc:f2:ae:a0:48:f9: c5:cb:07:f0:ec:70:19:bd:bb:e7:b8:23:a4:93:88: 46:ba:4e:b5:fb:3f:e6:64:17:2d:42:5e:6c:9e:22: f0:6f:94:b4:75:89:b8:75:0f:10:88:80:d7:07:95: 96:55:ed:af:63:7f:29:bf:29:74:9b:80:39:b0:a7: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:82:E8:AA:B9:2C:77:F1:CF:36:9B:79:C5:06:E0:E6:FE:1C:5C:C4 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nILoqrksd_HPNpt5xQbg5v4cXMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.136.0/24 Signature Algorithm: sha256WithRSAEncryption 48:8b:55:46:e5:bd:28:cb:48:53:eb:68:48:a3:0c:63:cb:93: 77:95:db:21:6c:fd:62:8a:b1:26:6c:9b:ef:d1:c5:cb:3d:11: 7e:ff:1f:15:49:f9:9e:b4:ab:f8:fb:ef:b3:1f:e6:3d:15:05: 92:cf:43:35:f7:0f:5a:8e:3b:92:ca:a5:a9:e6:56:65:3a:60: d4:a8:03:7f:b8:e5:09:c0:01:58:43:5b:fc:23:4c:43:95:c9: 21:6e:d0:73:ca:3e:b4:43:9f:00:45:67:f6:d2:8a:64:09:55: ff:75:52:1b:f8:64:f2:d8:93:08:44:1f:bb:4c:21:06:1c:7f: a5:d6:7e:e4:2a:9c:05:a5:8f:74:f2:42:99:af:dc:f7:6b:74: b4:47:27:4b:c5:2c:76:02:72:82:e4:06:a9:13:15:88:72:40: cd:bf:03:5d:07:cc:9d:d6:ea:d5:06:d8:70:01:72:0d:7b:b4: a2:bb:40:6e:fc:de:1d:3b:74:2b:8a:1e:08:e2:68:3b:24:86: 60:f8:ef:e6:e2:4b:dc:9e:af:38:b3:af:f6:9a:45:b4:7e:1a: 87:4c:2f:ef:2c:c3:b5:ed:bb:bd:41:a1:f2:40:a2:68:93:ea: 6f:af:f7:28:29:5c:3a:f9:ca:17:d9:db:86:3e:bf:0e:12:c1: f2:62:b5:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLGnVNtAnt2JluF6MN99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzgyZThhYWI5MmM3N2YxY2YzNjliNzljNTA2ZTBlNmZlMWM1Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSKKLB0G8SGHAR4THGq4zGufaVcd VQZvunUmmV7WilE2mdG7Op7/Y48U/D9E9yZg1+pVLrVd8sjrdvMSI8RaCpPYIivL W3jvmk8s4Rd5fwS6wI3oeSSj5j70JnHPvQL7brAXlHrEXq8TK16rTFo7gnKMvTgv oLCruLvgEP7VAt2EzRdmjHY8E2yEYEOkiPKLt3FIUMtoopL3qKsMVvl2jsAWKYvB RF/TUwpl9BIBMGvfUM0E2k5BeitoFWC88q6gSPnFywfw7HAZvbvnuCOkk4hGuk61 +z/mZBctQl5sniLwb5S0dYm4dQ8QiIDXB5WWVe2vY38pvyl0m4A5sKdPKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJyC6Kq5LHfxzzabecUG4Ob+HFzEMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvbklMb3Fya3NkX0hQTnB0NXhRYmc1djRjWE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KIMA0G CSqGSIb3DQEBCwUAA4IBAQBIi1VG5b0oy0hT62hIowxjy5N3ldshbP1iirEmbJvv 0cXLPRF+/x8VSfmetKv4+++zH+Y9FQWSz0M19w9ajjuSyqWp5lZlOmDUqAN/uOUJ wAFYQ1v8I0xDlckhbtBzyj60Q58ARWf20opkCVX/dVIb+GTy2JMIRB+7TCEGHH+l 1n7kKpwFpY908kKZr9z3a3S0RydLxSx2AnKC5AapExWIckDNvwNdB8yd1urVBthw AXINe7Siu0Bu/N4dO3Qrih4I4mg7JIZg+O/m4kvcnq84s6/2mkW0fhqHTC/vLMO1 7bu9QaHyQKJok+pvr/coKVw6+coX2duGPr8OEsHyYrV/ -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:26 2026 by rpki-client