This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa File: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (raw, json) Hash identifier: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I= Subject key identifier: 9D:C3:A3:2B:38:C0:25:9D:2B:5D:06:59:7B:1C:BD:6B:91:ED:84:14 Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Certificate serial: 019B7B35C136B74362D59B1D9D5B5CE4317A Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 93.155.104.0/22 maxlen: 24 2a00:1d30::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:36:b7:43:62:d5:9b:1d:9d:5b:5c:e4:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc3a32b38c0259d2b5d06597b1cbd6b91ed8414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:0e:e3:46:33:67:9d:24:f3:44:4f:73:9e: e1:3e:20:c9:3d:01:f8:66:79:c4:30:0b:8b:10:aa: a0:4f:9d:66:dc:ff:66:43:b7:39:b1:a5:a4:2d:78: a7:05:d1:b0:76:14:6d:3f:b8:cc:68:61:82:cb:14: 7d:b7:22:f0:6a:3d:a7:a1:4f:7f:02:43:ac:f1:a1: a4:a6:d8:4e:ba:5c:e0:c1:f6:89:8d:2a:88:fc:6d: 47:a4:b8:de:11:05:92:36:91:4d:40:43:f1:3f:3c: 3d:ed:b9:d2:c2:07:2c:60:7e:fc:6a:d9:5a:7b:9b: 98:69:06:bc:4b:65:5e:b6:52:f6:7a:45:61:7b:86: 19:07:af:7d:b2:c3:50:85:23:2a:32:57:f7:86:b0: bd:50:02:dc:8c:1f:a8:d3:c9:53:e3:0b:3b:b6:85: 0b:aa:4a:e3:2e:7b:06:1a:d8:13:4a:a1:a8:d4:11: 52:6c:5e:39:5f:d7:bb:ab:d8:22:8e:1e:a1:e1:49: a7:1c:eb:be:07:09:ba:be:7a:31:47:85:11:7d:81: 7e:24:65:d3:80:b8:33:f2:bc:29:02:ce:63:3e:ca: ff:46:af:de:3d:3c:a9:47:ef:42:d9:db:9a:7b:66: 92:5b:91:ae:00:8b:2e:65:0f:26:ef:36:0e:10:cf: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:A3:2B:38:C0:25:9D:2B:5D:06:59:7B:1C:BD:6B:91:ED:84:14 X509v3 Authority Key Identifier: keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.155.104.0/22 IPv6: 2a00:1d30::/29 Signature Algorithm: sha256WithRSAEncryption 45:fc:a9:63:e5:51:ab:c4:99:80:d7:53:93:44:e1:38:bc:59: 09:7e:9c:7e:2a:1c:5d:15:7b:18:93:70:f1:08:31:37:7c:00: 24:24:df:9b:a2:29:c4:ee:fe:0e:96:e5:0e:9f:c3:e5:d1:3b: 58:21:b1:78:e4:df:4b:4a:1a:ad:0b:e7:5d:6a:ee:48:c1:ad: 3f:20:4c:7a:a1:66:57:3e:95:28:82:a1:c3:9a:3d:57:d6:3a: 34:54:29:44:80:b4:6e:e3:37:e7:04:9f:04:ed:45:ab:c3:4c: 69:f8:a3:49:2f:f4:41:84:b7:ba:10:b9:23:df:6f:ca:93:d7: ef:96:86:10:16:d4:b9:68:fc:38:a9:34:f8:5c:71:e3:9b:a2: 4f:72:9f:b3:25:23:92:00:87:32:4d:0a:56:76:b5:6e:a9:0f: 37:16:75:d0:70:ed:b8:32:4f:67:21:48:b9:fb:99:cf:6a:64: a0:bd:59:e7:01:27:4f:b6:ce:fe:dd:1f:af:b1:b6:e8:b0:8b: 73:95:2f:7c:bf:a3:58:6d:9d:e5:e2:68:60:26:b7:7e:6b:b2: 61:21:8a:e0:f7:1b:c9:70:3b:42:9f:44:d9:28:80:bf:c3:45: 1b:46:93:4e:1c:72:46:e3:04:2c:9f:ea:d8:40:52:f0:0d:a2: 1f:3c:f3:f6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NcE2t0Ni1ZsdnVtc5DF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5 MzViODgwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGMzYTMyYjM4YzAyNTlkMmI1ZDA2NTk3YjFjYmQ2YjkxZWQ4NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYEO40YzZ50k80RPc57hPiDJPQH4 ZnnEMAuLEKqgT51m3P9mQ7c5saWkLXinBdGwdhRtP7jMaGGCyxR9tyLwaj2noU9/ AkOs8aGkpthOulzgwfaJjSqI/G1HpLjeEQWSNpFNQEPxPzw97bnSwgcsYH78atla e5uYaQa8S2VetlL2ekVhe4YZB699ssNQhSMqMlf3hrC9UALcjB+o08lT4ws7toUL qkrjLnsGGtgTSqGo1BFSbF45X9e7q9gijh6h4UmnHOu+Bwm6vnoxR4URfYF+JGXT gLgz8rwpAs5jPsr/Rq/ePTypR+9C2duae2aSW5GuAIsuZQ8m7zYOEM+sbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ3Doys4wCWdK10GWXscvWuR7YQUMB8GA1UdIwQY MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt ZmM2MGZiMTI1NTczLzEvbmNPakt6akFKWjByWFFaWmV4eTlhNUh0aEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXZtoMA0E AgACMAcDBQMqAB0wMA0GCSqGSIb3DQEBCwUAA4IBAQBF/Klj5VGrxJmA11OTROE4 vFkJfpx+KhxdFXsYk3DxCDE3fAAkJN+boinE7v4OluUOn8Pl0TtYIbF45N9LShqt C+ddau5Iwa0/IEx6oWZXPpUogqHDmj1X1jo0VClEgLRu4zfnBJ8E7UWrw0xp+KNJ L/RBhLe6ELkj32/Kk9fvloYQFtS5aPw4qTT4XHHjm6JPcp+zJSOSAIcyTQpWdrVu qQ83FnXQcO24Mk9nIUi5+5nPamSgvVnnASdPts7+3R+vsbbosItzlS98v6NYbZ3l 4mhgJrd+a7JhIYrg9xvJcDtCn0TZKIC/w0UbRpNOHHJG4wQsn+rYQFLwDaIfPPP2 -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:28 2026 by rpki-client