This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa File: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (raw, json) Hash identifier: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM= Subject key identifier: 35:64:59:D7:B5:4D:49:79:34:36:17:31:2E:C7:66:32:C5:83:30:8C Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA713FA4C53E80A0E7A1286B1B7D27C Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36352 IP address blocks: 5.252.234.0/24 maxlen: 24 141.98.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:fa:4c:53:e8:0a:0e:7a:12:86:b1:b7:d2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356459d7b54d4979343617312ec76632c583308c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:59:48:b3:fa:92:60:40:d3:b2:a9:8e:04: 9f:80:76:01:b2:49:c1:5e:0e:4e:12:ec:1f:69:4f: b5:75:0b:b8:50:d6:5e:b3:91:b4:57:78:b7:33:bf: 22:4f:f3:08:44:74:05:0c:21:35:98:88:cc:33:94: df:c9:19:50:4b:8f:0f:c3:59:67:0b:d6:8e:54:e0: 03:0b:bc:56:ce:fc:1f:c7:8f:4d:c0:3e:79:15:d1: bd:2c:2a:6b:89:46:d3:06:cb:aa:66:cd:e6:14:6d: e0:44:c6:de:43:69:1a:7e:d0:77:e8:df:f1:f5:3c: b5:1f:09:c3:7b:50:70:9d:2a:c3:3d:1c:00:09:3d: 56:7e:b7:98:f0:35:3f:12:8b:5b:5a:54:41:24:9a: dc:0d:8b:a0:d8:68:e2:13:a1:3a:9a:9e:23:db:6f: 86:b3:87:b6:40:74:be:1a:f1:44:a7:84:a6:ae:08: 38:c6:e3:ef:e0:fc:50:4b:76:63:80:c8:9a:eb:c9: d4:86:73:ee:f0:31:72:06:13:f6:70:ce:fa:1a:d6: e6:64:64:7d:eb:db:af:56:6e:df:cc:3f:0f:16:5d: a6:68:d0:8f:fb:82:32:97:2c:56:c5:b9:5c:8b:8c: 7e:a7:50:09:b1:09:c4:da:71:e1:22:1e:94:31:8d: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:64:59:D7:B5:4D:49:79:34:36:17:31:2E:C7:66:32:C5:83:30:8C X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.234.0/24 141.98.46.0/24 Signature Algorithm: sha256WithRSAEncryption 21:58:9f:46:21:30:72:3a:97:6f:1b:c1:cd:d3:3f:f7:ba:12: fe:87:73:b2:15:3d:85:a5:74:0b:7e:8d:d8:1f:17:a1:5b:37: 0f:31:ee:8d:68:3b:8d:cc:0a:d2:6a:b0:be:cf:fa:71:8c:80: 23:be:a7:0b:7c:ed:6d:f2:4d:6e:c2:70:c7:04:9d:11:71:d3: 22:64:ed:96:ea:2b:50:31:e7:ee:09:b5:71:66:a2:7e:bd:ea: f9:0a:01:01:a7:cf:cd:8e:18:95:9c:3c:98:a9:bc:b3:89:c7: 99:06:90:78:e7:3c:7c:b3:9b:82:76:c3:58:10:bc:3f:86:46: ec:6a:bb:8b:2e:d0:b1:66:49:bb:2b:a5:f5:a9:42:8f:1f:ba: 46:69:23:62:72:51:0c:3b:bf:2e:ae:87:93:95:8c:98:94:de: f0:21:37:29:84:51:cf:1b:41:eb:3a:f3:dd:2e:25:64:37:07: 0e:c6:fa:d1:e0:a8:56:5b:8f:47:f0:18:4f:48:02:30:7a:a3: 5e:47:d9:67:d5:8b:fc:af:48:53:5c:06:4f:bd:57:b7:84:af: e7:43:3e:3c:1e:e4:6e:2c:d5:bb:3b:4f:b6:af:a3:3f:49:49: b3:b6:f8:83:d2:34:23:c7:83:9a:a7:8f:ef:1b:72:c4:15:e4: 73:e1:9a:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pxP6TFPoCg56Eoaxt9J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY0NTlkN2I1NGQ0OTc5MzQzNjE3MzEyZWM3NjYzMmM1ODMzMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zNZSLP6kmBA07KpjgSfgHYBsknB Xg5OEuwfaU+1dQu4UNZes5G0V3i3M78iT/MIRHQFDCE1mIjMM5TfyRlQS48Pw1ln C9aOVOADC7xWzvwfx49NwD55FdG9LCpriUbTBsuqZs3mFG3gRMbeQ2kaftB36N/x 9Ty1HwnDe1BwnSrDPRwACT1WfreY8DU/EotbWlRBJJrcDYug2GjiE6E6mp4j22+G s4e2QHS+GvFEp4Smrgg4xuPv4PxQS3ZjgMia68nUhnPu8DFyBhP2cM76GtbmZGR9 69uvVm7fzD8PFl2maNCP+4IylyxWxblci4x+p1AJsQnE2nHhIh6UMY0xVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDVkWde1TUl5NDYXMS7HZjLFgzCMMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvTldSWjE3Vk5TWGswTmhjeExzZG1Nc1dETUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfzqAwQA jWIuMA0GCSqGSIb3DQEBCwUAA4IBAQAhWJ9GITByOpdvG8HN0z/3uhL+h3OyFT2F pXQLfo3YHxehWzcPMe6NaDuNzArSarC+z/pxjIAjvqcLfO1t8k1uwnDHBJ0RcdMi ZO2W6itQMefuCbVxZqJ+ver5CgEBp8/NjhiVnDyYqbyziceZBpB45zx8s5uCdsNY ELw/hkbsaruLLtCxZkm7K6X1qUKPH7pGaSNiclEMO78uroeTlYyYlN7wITcphFHP G0HrOvPdLiVkNwcOxvrR4KhWW49H8BhPSAIweqNeR9ln1Yv8r0hTXAZPvVe3hK/n Qz48HuRuLNW7O0+2r6M/SUmztviD0jQjx4Oap4/vG3LEFeRz4Zoy -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:00 2026 by rpki-client