This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NTofATCctZnVYS3I6yu29zUlYEw.roa File: NTofATCctZnVYS3I6yu29zUlYEw.roa (raw, json) Hash identifier: o8oiFx1FbxwU1ygX5kVBUHG+YdbMjRP2s0PWGbJ1Yx4= Subject key identifier: 35:3A:1F:01:30:9C:B5:99:D5:61:2D:C8:EB:2B:B6:F7:35:25:60:4C Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114D4D7F0D50517ED6A36A553D65EE Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NTofATCctZnVYS3I6yu29zUlYEw.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202828 IP address blocks: 104.238.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4d:4d:7f:0d:50:51:7e:d6:a3:6a:55:3d:65:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353a1f01309cb599d5612dc8eb2bb6f73525604c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:96:43:be:8d:34:18:8c:c2:9c:25:4d:8a: e6:71:c7:5d:85:ea:74:9f:81:fd:96:0d:81:0b:9a: b1:87:c5:e0:6f:a9:79:26:12:49:f1:bb:b6:02:28: b7:ee:c6:6d:4e:db:bd:8e:b0:f7:fd:98:1f:06:89: 97:a8:4d:c5:23:ca:06:b6:b9:93:50:0c:0d:d1:0d: 3b:df:a8:66:62:58:48:94:1c:6b:1d:49:68:ea:71: 8f:fc:fc:9b:4f:e9:c5:78:d0:76:ad:c5:c4:2c:77: e5:71:ee:9f:0c:a5:55:e7:24:dd:01:ad:ca:8c:c4: 38:ad:a3:fb:24:b6:28:d2:13:5f:96:c4:be:8b:19: 33:86:84:83:e5:be:9b:45:d8:1c:86:58:58:01:f3: 20:ba:20:13:8c:22:84:9a:66:9f:9d:65:57:42:a0: 89:78:35:1b:20:a2:a5:f4:cb:4e:b7:4a:56:20:08: d9:77:cc:cf:5a:71:2d:9f:23:6a:42:df:a6:7a:eb: 8d:e4:c5:4b:02:a2:06:c0:39:ab:e2:71:95:bf:eb: e9:58:fe:57:36:43:ee:78:bd:21:d0:0a:10:a3:f1: ee:a4:28:65:49:68:46:ce:16:50:fa:32:a2:31:b4: 16:f4:e0:9a:8d:b6:7e:68:68:5c:ab:3b:b2:b5:4e: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3A:1F:01:30:9C:B5:99:D5:61:2D:C8:EB:2B:B6:F7:35:25:60:4C X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NTofATCctZnVYS3I6yu29zUlYEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.238.11.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a0:ed:80:dc:f3:54:3c:3f:63:47:49:9a:b8:3f:3e:00:09: 1a:b2:e2:9d:65:37:56:86:05:86:72:f5:aa:3e:01:9b:3f:ac: 62:e4:81:2f:62:e2:b7:e9:66:f6:e1:9a:34:2a:b1:21:f1:c9: c4:bd:d5:86:d3:86:2e:81:8f:a8:36:07:63:fa:17:7a:fe:18: c1:ae:3d:44:9b:7c:3d:46:50:4c:04:73:e7:0c:78:f4:56:70: 87:b5:4c:b7:aa:6e:20:7f:8e:c9:74:e1:2c:77:54:ea:f0:3a: dc:31:6a:27:8a:de:14:c5:cb:bf:9f:4e:6e:22:e9:3d:9d:34: 4f:4b:85:64:7e:68:29:32:d6:9b:ed:2b:32:2d:44:ca:b1:6e: 7e:ef:0e:69:23:37:7a:d9:b3:9c:c8:9c:f2:22:c9:d7:a6:40: 9e:13:69:37:b0:0d:08:72:7f:18:5a:66:0a:ae:76:5e:69:6c: 05:f4:43:13:b5:55:a3:08:8e:4f:62:77:ba:3c:8e:6b:d7:cf: 6b:ae:c0:10:cd:b9:f5:8a:f0:c6:08:2a:58:95:c2:86:99:f5: f4:68:60:6a:17:92:41:68:4b:9c:b8:e2:ca:9f:33:ca:70:8e: 09:08:02:24:25:78:2c:bc:29:ba:17:52:1e:74:ca:b2:36:bd: eb:ae:fa:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EU1Nfw1QUX7Wo2pVPWXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTNhMWYwMTMwOWNiNTk5ZDU2MTJkYzhlYjJiYjZmNzM1MjU2MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmWQ76NNBiMwpwlTYrmccddhep0 n4H9lg2BC5qxh8Xgb6l5JhJJ8bu2Aii37sZtTtu9jrD3/ZgfBomXqE3FI8oGtrmT UAwN0Q0736hmYlhIlBxrHUlo6nGP/PybT+nFeNB2rcXELHflce6fDKVV5yTdAa3K jMQ4raP7JLYo0hNflsS+ixkzhoSD5b6bRdgchlhYAfMguiATjCKEmmafnWVXQqCJ eDUbIKKl9MtOt0pWIAjZd8zPWnEtnyNqQt+meuuN5MVLAqIGwDmr4nGVv+vpWP5X NkPueL0h0AoQo/HupChlSWhGzhZQ+jKiMbQW9OCajbZ+aGhcqzuytU5rVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDU6HwEwnLWZ1WEtyOsrtvc1JWBMMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvTlRvZkFUQ2N0Wm5WWVMzSTZ5dTI5elVsWUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO4LMA0G CSqGSIb3DQEBCwUAA4IBAQABoO2A3PNUPD9jR0mauD8+AAkasuKdZTdWhgWGcvWq PgGbP6xi5IEvYuK36Wb24Zo0KrEh8cnEvdWG04YugY+oNgdj+hd6/hjBrj1Em3w9 RlBMBHPnDHj0VnCHtUy3qm4gf47JdOEsd1Tq8DrcMWonit4Uxcu/n05uIuk9nTRP S4VkfmgpMtab7SsyLUTKsW5+7w5pIzd62bOcyJzyIsnXpkCeE2k3sA0Icn8YWmYK rnZeaWwF9EMTtVWjCI5PYne6PI5r189rrsAQzbn1ivDGCCpYlcKGmfX0aGBqF5JB aEucuOLKnzPKcI4JCAIkJXgsvCm6F1IedMqyNr3rrvqb -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:15 2026 by rpki-client