This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NOIJK5LDBbpJ9dUf7pHbJZDh4U8.roa File: NOIJK5LDBbpJ9dUf7pHbJZDh4U8.roa (raw, json) Hash identifier: +F08VhNwkUtpQzH9XNOG7DDcatzmQF09o9FxU5tsp34= Subject key identifier: 34:E2:09:2B:92:C3:05:BA:49:F5:D5:1F:EE:91:DB:25:90:E1:E1:4F Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114F21195B25BE118672B57FED5E3D Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NOIJK5LDBbpJ9dUf7pHbJZDh4U8.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206406 IP address blocks: 216.173.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4f:21:19:5b:25:be:11:86:72:b5:7f:ed:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e2092b92c305ba49f5d51fee91db2590e1e14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:e0:85:d7:3f:5e:d2:1f:fb:65:c4:4e:a3: c4:d4:82:72:9d:68:bd:df:ca:76:16:ad:45:54:79: 14:62:37:24:40:48:94:69:8b:b8:13:5f:5c:b2:b4: 8e:02:86:0c:46:69:69:74:da:1b:41:53:ba:56:2e: 98:87:23:3e:ab:55:d9:b8:83:1f:74:14:76:9f:db: 28:4b:77:5b:98:d1:51:d8:42:c8:b2:77:84:b0:e5: d5:72:e1:47:16:d9:8d:14:8a:cb:d8:94:ef:d7:96: e3:76:d6:de:77:0a:8e:01:7c:d0:ed:69:72:4a:83: 31:fb:8e:ac:1a:31:50:4d:20:e0:fe:d1:bf:8f:d1: 1a:0d:ef:97:b9:c9:58:b9:c4:6f:8e:d5:d9:04:28: 36:7d:24:78:ae:84:92:6b:15:c7:2b:2a:e0:7a:9f: 41:23:ad:a3:2d:a9:b5:7b:a3:51:6f:43:c5:bd:76: 2e:55:04:e2:8d:fb:71:fb:fe:b8:34:6a:11:69:a7: fa:43:ce:32:e1:aa:21:e2:8d:35:20:ba:f1:b6:af: 4f:a0:de:ed:31:83:d6:c3:c0:dd:29:e2:d2:e5:4d: 49:9e:4f:32:35:93:55:7d:ce:c9:24:03:7d:1c:b0: 6f:13:20:a0:78:44:03:a9:23:a0:e0:18:85:ff:bc: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:09:2B:92:C3:05:BA:49:F5:D5:1F:EE:91:DB:25:90:E1:E1:4F X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NOIJK5LDBbpJ9dUf7pHbJZDh4U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.90.0/24 Signature Algorithm: sha256WithRSAEncryption 19:80:06:8c:d8:9f:96:4f:c5:2f:8a:bd:0b:14:b4:58:38:72: 9c:ea:47:8c:62:f0:86:a3:b7:3d:1e:09:a5:d6:de:52:c3:f6: ad:c6:27:0c:b4:e4:dd:87:50:5e:b7:f8:88:f4:15:df:77:61: b7:42:5c:17:66:52:25:24:dc:c1:bb:82:3b:10:e7:09:bd:4e: a9:6e:97:16:30:06:d9:a7:9e:70:c7:63:67:cf:f6:69:16:69: ad:26:fa:56:ce:31:2c:b4:6e:e8:37:94:31:a5:1b:8e:62:d5: 55:4f:f8:14:39:b7:35:9f:1c:1f:d3:5b:03:f1:2f:09:87:3b: f0:69:76:32:04:c3:bd:4e:57:3b:ed:79:c3:f7:80:f9:c5:de: d5:38:66:b9:47:d7:e2:08:ad:b9:10:a3:00:a0:e8:c1:6b:54: a6:d2:27:07:96:f5:e3:02:6f:f8:5d:82:73:64:2d:ae:e3:f8: ec:fc:ab:b6:15:08:fc:ad:d3:89:51:2c:8e:2e:48:bc:6d:0e: e4:18:de:51:c7:42:80:97:25:5d:9c:cb:6c:f1:c9:ff:61:e0: 58:85:2c:fd:2b:26:aa:4d:75:cb:75:ca:d2:20:1c:df:d7:09: a7:99:b6:cb:70:3c:9f:ea:e3:16:d1:63:37:fb:55:42:ec:8d: 36:e6:08:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EU8hGVslvhGGcrV/7V49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGUyMDkyYjkyYzMwNWJhNDlmNWQ1MWZlZTkxZGIyNTkwZTFlMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9/ghdc/XtIf+2XETqPE1IJynWi9 38p2Fq1FVHkUYjckQEiUaYu4E19csrSOAoYMRmlpdNobQVO6Vi6YhyM+q1XZuIMf dBR2n9soS3dbmNFR2ELIsneEsOXVcuFHFtmNFIrL2JTv15bjdtbedwqOAXzQ7Wly SoMx+46sGjFQTSDg/tG/j9EaDe+XuclYucRvjtXZBCg2fSR4roSSaxXHKyrgep9B I62jLam1e6NRb0PFvXYuVQTijftx+/64NGoRaaf6Q84y4aoh4o01ILrxtq9PoN7t MYPWw8DdKeLS5U1Jnk8yNZNVfc7JJAN9HLBvEyCgeEQDqSOg4BiF/7yJNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTiCSuSwwW6SfXVH+6R2yWQ4eFPMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvTk9JSks1TERCYnBKOWRVZjdwSGJKWkRoNFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2K1aMA0G CSqGSIb3DQEBCwUAA4IBAQAZgAaM2J+WT8Uvir0LFLRYOHKc6keMYvCGo7c9Hgml 1t5Sw/atxicMtOTdh1Bet/iI9BXfd2G3QlwXZlIlJNzBu4I7EOcJvU6pbpcWMAbZ p55wx2Nnz/ZpFmmtJvpWzjEstG7oN5QxpRuOYtVVT/gUObc1nxwf01sD8S8Jhzvw aXYyBMO9Tlc77XnD94D5xd7VOGa5R9fiCK25EKMAoOjBa1Sm0icHlvXjAm/4XYJz ZC2u4/js/Ku2FQj8rdOJUSyOLki8bQ7kGN5Rx0KAlyVdnMts8cn/YeBYhSz9Kyaq TXXLdcrSIBzf1wmnmbbLcDyf6uMW0WM3+1VC7I025gh4 -----END CERTIFICATE-----Generated at Fri Jan 2 02:38:58 2026 by rpki-client