This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/NDIauRSXxmTRxMaMxKWAcWs2hiY.roa File: NDIauRSXxmTRxMaMxKWAcWs2hiY.roa (raw, json) Hash identifier: niReydPhxoIGyEf8VzGlx6ngoJ93K3AzsN+453eTTKQ= Subject key identifier: 34:32:1A:B9:14:97:C6:64:D1:C4:C6:8C:C4:A5:80:71:6B:36:86:26 Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Certificate serial: 019B78A225AB7E600DDDFCC056EBBEB5326B Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/NDIauRSXxmTRxMaMxKWAcWs2hiY.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24593 IP address blocks: 193.110.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:25:ab:7e:60:0d:dd:fc:c0:56:eb:be:b5:32:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34321ab91497c664d1c4c68cc4a580716b368626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:01:8c:40:62:af:36:ad:8c:b3:6e:3f:0a: 6b:f2:ea:4c:5b:07:de:0a:ef:55:cb:95:e5:d1:1c: 16:c2:df:12:12:30:2c:fa:e2:4b:ab:ec:74:72:31: 78:c8:e0:16:26:db:69:08:fa:cc:6c:bf:1d:52:00: c1:f2:18:a5:f1:62:53:a9:e4:47:26:db:79:d4:5d: 3a:a3:6a:cd:6d:d4:12:da:08:c5:1e:a5:6a:87:5d: f0:d5:36:c0:5a:fc:01:b4:66:d4:3b:36:52:83:57: 2c:72:71:94:c5:8a:93:24:8f:4f:95:26:f4:27:18: ec:5b:43:d9:fa:82:ad:03:62:86:1d:17:7c:c9:3f: 14:ad:7d:e2:ec:e0:a6:82:ad:22:a5:dc:99:d6:a1: 83:0a:0f:b0:23:f8:17:f3:0d:cd:84:e8:18:9f:fe: 04:92:6e:19:0d:b5:73:0f:b7:3c:8b:59:33:85:01: 78:90:1d:d7:b5:c7:09:a1:2a:19:89:f0:25:ca:12: 5a:c4:f6:79:98:4b:a7:b9:2b:27:cb:18:39:be:33: 40:06:10:3b:9f:bb:3b:5b:77:92:ba:0c:05:ee:c5: a7:73:89:18:be:44:94:24:0f:e2:06:ad:d7:95:ce: 9b:d9:ad:a0:f2:24:1f:b6:9c:4e:b8:ab:11:ff:f3: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:32:1A:B9:14:97:C6:64:D1:C4:C6:8C:C4:A5:80:71:6B:36:86:26 X509v3 Authority Key Identifier: keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/NDIauRSXxmTRxMaMxKWAcWs2hiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.162.0/23 Signature Algorithm: sha256WithRSAEncryption 90:23:ea:4f:21:2c:8b:f4:07:50:80:01:8d:b7:cd:00:53:69: e3:5b:0c:c2:2d:ae:2d:08:1b:88:8e:b0:67:ea:54:aa:94:74: 56:c7:98:ef:f1:a3:40:d8:08:81:e3:d3:aa:22:2c:8a:76:d6: 34:03:f1:4f:fb:a3:f2:47:2e:ea:a6:c0:98:1e:5f:c8:f4:f9: bb:75:d2:bf:41:44:e9:aa:f0:db:5b:1a:99:c4:d2:80:99:4e: bc:c4:80:38:56:73:c2:cf:aa:75:9a:40:62:0b:a0:2f:17:37: 83:fc:f8:3f:c9:c1:36:3b:fc:e9:c8:e7:b5:f6:e3:47:1a:18: ce:ba:16:65:e0:23:df:44:d5:b9:0e:2e:f1:79:e8:26:30:15: 85:4c:dc:57:ef:4d:8a:37:a7:a2:fe:47:df:06:08:8e:30:c5: d9:56:88:28:55:10:4a:03:46:72:0f:fe:69:f6:64:5b:e6:44: 8d:a1:8a:a7:a8:82:31:99:0b:7a:38:4c:fc:af:a0:be:78:0a: 0d:c9:92:99:82:36:94:95:e9:b3:cb:ab:c3:30:1a:5a:79:a0: 62:2f:05:b3:9f:12:86:c2:76:57:4c:b7:9b:29:e5:71:42:59: 09:8a:c0:45:0b:c3:56:0e:1b:50:7b:c0:eb:b5:c5:b7:34:77: 9c:5c:86:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiWrfmAN3fzAVuu+tTJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTljZDYxMjQyMGI4NTkzNDkxZDg2ODZjZTRjNGFmODVi OTBhZDUwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDMyMWFiOTE0OTdjNjY0ZDFjNGM2OGNjNGE1ODA3MTZiMzY4NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ssBjEBirzatjLNuPwpr8upMWwfe Cu9Vy5Xl0RwWwt8SEjAs+uJLq+x0cjF4yOAWJttpCPrMbL8dUgDB8hil8WJTqeRH Jtt51F06o2rNbdQS2gjFHqVqh13w1TbAWvwBtGbUOzZSg1cscnGUxYqTJI9PlSb0 JxjsW0PZ+oKtA2KGHRd8yT8UrX3i7OCmgq0ipdyZ1qGDCg+wI/gX8w3NhOgYn/4E km4ZDbVzD7c8i1kzhQF4kB3XtccJoSoZifAlyhJaxPZ5mEunuSsnyxg5vjNABhA7 n7s7W3eSugwF7sWnc4kYvkSUJA/iBq3Xlc6b2a2g8iQftpxOuKsR//MwdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQyGrkUl8Zk0cTGjMSlgHFrNoYmMB8GA1UdIwQY MBaAFEuZzWEkILhZNJHYaGzkxK+FuQrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTct OTc0NzIwODg5ZmZhLzEvTkRJYXVSU1h4bVRSeE1hTXhLV0FjV3MyaGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTctOTc0NzIwODg5ZmZh LzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW6iMA0G CSqGSIb3DQEBCwUAA4IBAQCQI+pPISyL9AdQgAGNt80AU2njWwzCLa4tCBuIjrBn 6lSqlHRWx5jv8aNA2AiB49OqIiyKdtY0A/FP+6PyRy7qpsCYHl/I9Pm7ddK/QUTp qvDbWxqZxNKAmU68xIA4VnPCz6p1mkBiC6AvFzeD/Pg/ycE2O/zpyOe19uNHGhjO uhZl4CPfRNW5Di7xeegmMBWFTNxX702KN6ei/kffBgiOMMXZVogoVRBKA0ZyD/5p 9mRb5kSNoYqnqIIxmQt6OEz8r6C+eAoNyZKZgjaUlemzy6vDMBpaeaBiLwWznxKG wnZXTLebKeVxQlkJisBFC8NWDhtQe8DrtcW3NHecXIb5 -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:07 2026 by rpki-client