This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nm-7NIUncPQsZuzQ-tkteKZg2og.roa File: nm-7NIUncPQsZuzQ-tkteKZg2og.roa (raw, json) Hash identifier: 2AfDl9qS5Cq2EicE7jfebx0vYkr4lj+S0Ep/YrXdjEA= Subject key identifier: 9E:6F:BB:34:85:27:70:F4:2C:66:EC:D0:FA:D9:2D:78:A6:60:DA:88 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B163F2685E97E8467B9B410313633ED Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nm-7NIUncPQsZuzQ-tkteKZg2og.roa Signing time: Wed 19 Nov 2025 07:48:37 +0000 ROA not before: Wed 19 Nov 2025 07:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 5.180.138.0/24 maxlen: 24 84.252.72.0/24 maxlen: 24 2a0f:7b81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:16:3f:26:85:e9:7e:84:67:b9:b4:10:31:36:33:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e6fbb34852770f42c66ecd0fad92d78a660da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:ed:c4:92:17:6a:6e:20:45:86:36:12:e5: 13:35:01:73:5b:7e:9e:1c:27:80:7d:96:74:0b:8f: aa:41:9f:ee:a7:ea:63:9d:31:10:d7:93:34:fe:da: 62:43:d8:f4:3e:98:1b:9d:c6:bc:f5:3d:02:9c:ac: 9e:a2:29:33:2d:ec:c7:53:4f:4a:65:41:ca:f4:3d: a8:7c:fc:e6:f0:ff:7b:54:a0:fd:0e:98:f9:23:82: 2c:49:86:9a:ed:42:43:16:4a:66:1e:97:94:08:c7: 19:a5:25:04:4d:fa:84:66:d4:04:b8:e2:77:4f:ba: 82:f7:1e:d0:c4:fc:c9:f0:df:ab:1c:1b:ca:e0:af: d5:42:1c:b8:c9:92:9c:e1:96:7d:cc:fd:83:92:e9: a0:4f:a9:dd:a2:8c:70:a9:58:ee:17:9e:f3:e3:1d: ca:ab:4d:c7:bf:9b:63:51:ed:1f:63:c1:e8:53:f5: 3f:14:db:12:f5:c1:01:ca:73:23:d1:29:30:8f:87: 60:e8:e5:0f:62:42:67:92:0a:7c:19:30:04:42:54: b3:c3:0f:35:04:ae:c6:f9:2b:15:7f:35:ac:07:6b: ad:fb:82:fa:32:65:8b:4a:f3:dc:c9:8d:ef:45:e6: 0e:77:c1:21:7d:d6:b4:51:d3:c6:93:bd:bb:b9:d0: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:BB:34:85:27:70:F4:2C:66:EC:D0:FA:D9:2D:78:A6:60:DA:88 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nm-7NIUncPQsZuzQ-tkteKZg2og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.138.0/24 84.252.72.0/24 IPv6: 2a0f:7b81::/48 Signature Algorithm: sha256WithRSAEncryption 49:99:cb:73:65:7f:ef:dd:8e:e0:b0:88:45:64:64:ba:c8:15: ca:f4:ee:2b:9e:61:91:22:09:72:a1:ee:71:9a:06:27:e4:54: c4:fd:3d:b1:8a:7f:ac:2d:f7:88:1a:ee:2a:10:c8:14:06:7f: 68:f7:a5:c2:1d:5a:90:6e:c5:54:3f:18:6a:ee:86:3f:cc:2a: e6:af:76:43:15:6c:cf:73:d9:a4:94:5f:a6:8c:1d:7d:9d:c8: 6a:03:83:c7:d9:d4:67:65:a1:5a:61:83:59:db:08:41:4c:69: d3:5c:ef:71:96:c3:2e:76:ae:fa:f7:9d:fb:6e:de:a6:b2:52: 98:10:a7:78:d1:4f:85:fc:4c:e5:88:0e:66:1a:ef:92:f3:32: 24:32:47:7c:4d:bc:d6:d2:5e:b1:30:64:7d:c9:32:73:d9:03: 80:c8:13:3b:cd:b1:1d:3e:ff:70:1d:f8:e7:da:ac:ec:49:0e: 56:68:52:64:c5:2b:33:8a:49:28:7f:5f:9f:e8:d0:80:f9:e0: 4a:9c:f8:7d:5c:b2:f7:0d:19:f8:48:14:5a:d6:f6:31:c4:53: 6c:9a:72:3c:60:10:ea:8e:c4:2b:93:07:86:68:5e:74:63:ac: ba:78:6c:b0:2e:b1:60:a9:1d:10:5d:6e:e1:b1:f5:fd:99:47: 56:bc:12:a5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZqbFj8mhel+hGe5tBAxNjPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZmYmIzNDg1Mjc3MGY0MmM2NmVjZDBmYWQ5MmQ3OGE2NjBkYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gXtxJIXam4gRYY2EuUTNQFzW36e HCeAfZZ0C4+qQZ/up+pjnTEQ15M0/tpiQ9j0Ppgbnca89T0CnKyeoikzLezHU09K ZUHK9D2ofPzm8P97VKD9Dpj5I4IsSYaa7UJDFkpmHpeUCMcZpSUETfqEZtQEuOJ3 T7qC9x7QxPzJ8N+rHBvK4K/VQhy4yZKc4ZZ9zP2DkumgT6ndooxwqVjuF57z4x3K q03Hv5tjUe0fY8HoU/U/FNsS9cEBynMj0Skwj4dg6OUPYkJnkgp8GTAEQlSzww81 BK7G+SsVfzWsB2ut+4L6MmWLSvPcyY3vReYOd8Ehfda0UdPGk727udCNxQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ5vuzSFJ3D0LGbs0PrZLXimYNqIMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvbm0tN05JVW5jUFFzWnV6US10a3RlS1pnMm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABbSKAwQA VPxIMA8EAgACMAkDBwAqD3uBAAAwDQYJKoZIhvcNAQELBQADggEBAEmZy3Nlf+/d juCwiEVkZLrIFcr07iueYZEiCXKh7nGaBifkVMT9PbGKf6wt94ga7ioQyBQGf2j3 pcIdWpBuxVQ/GGruhj/MKuavdkMVbM9z2aSUX6aMHX2dyGoDg8fZ1GdloVphg1nb CEFMadNc73GWwy52rvr3nftu3qayUpgQp3jRT4X8TOWIDmYa75LzMiQyR3xNvNbS XrEwZH3JMnPZA4DIEzvNsR0+/3Ad+OfarOxJDlZoUmTFKzOKSSh/X5/o0ID54Eqc +H1csvcNGfhIFFrW9jHEU2yacjxgEOqOxCuTB4ZoXnRjrLp4bLAusWCpHRBdbuGx 9f2ZR1a8EqU= -----END CERTIFICATE-----Generated at Wed Dec 3 11:46:07 2025 by rpki-client