This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NvmViq2WehAHX__NUgKexifRQ74.roa File: NvmViq2WehAHX__NUgKexifRQ74.roa (raw, json) Hash identifier: mU5Aa3qY1AKDOBVG3Rpjpn3Va96fKj9RPkqCf2nssRc= Subject key identifier: 36:F9:95:8A:AD:96:7A:10:07:5F:FF:CD:52:02:9E:C6:27:D1:43:BE Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B7911505CE79DA3D37E4F2CAF100E8B4D Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NvmViq2WehAHX__NUgKexifRQ74.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 104.239.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:50:5c:e7:9d:a3:d3:7e:4f:2c:af:10:0e:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f9958aad967a10075fffcd52029ec627d143be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:86:78:a4:bb:1e:0e:13:14:9c:e0:28:39: 01:88:99:ea:6a:62:23:82:5d:99:a4:fb:67:93:fc: c7:8e:fa:55:66:06:ab:9e:54:a8:7f:79:e2:68:10: 61:f7:5f:fe:5b:6e:d7:e9:ab:02:46:c4:de:87:46: 0f:5a:ea:82:32:f5:21:1f:6d:0d:06:23:5b:10:f0: bc:83:9d:d0:42:0f:03:ea:c6:ac:96:63:00:fd:e5: c7:37:3f:0c:4c:33:5a:28:e8:e2:88:1f:34:a6:1f: e1:8a:94:25:fb:96:13:9e:c7:ee:eb:9a:4f:48:09: a6:ec:f5:78:2b:9f:c8:f7:bb:9e:f4:c4:33:5f:32: 5a:9f:07:60:01:be:2c:a8:d3:d4:25:84:fd:aa:4c: 7f:9a:9f:92:d4:5f:49:40:3b:d2:94:e9:cc:74:14: e1:9f:37:30:fc:9a:39:52:f2:c8:0d:65:fa:1f:6c: d1:ff:47:03:ad:d2:9d:2e:9b:66:f1:77:50:44:4f: 94:8b:4a:59:9a:ca:4a:68:28:44:cf:3e:c5:50:01: 43:7a:8b:89:40:fa:d8:da:21:b6:14:e0:fe:0d:c1: 26:2b:2f:7f:f1:f9:fd:7e:19:06:62:61:b3:22:49: df:17:92:8e:00:40:b5:0f:b6:21:ba:f2:5c:53:1c: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F9:95:8A:AD:96:7A:10:07:5F:FF:CD:52:02:9E:C6:27:D1:43:BE X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NvmViq2WehAHX__NUgKexifRQ74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.239.72.0/24 Signature Algorithm: sha256WithRSAEncryption 20:9a:59:cb:85:9a:80:00:d0:c8:5c:6c:32:79:9b:95:15:33: 3f:94:0b:ad:35:a3:c9:fb:7d:80:5f:a5:72:a2:35:25:3c:ff: 43:8a:da:a6:5d:e1:2a:f7:cf:8c:e9:b2:76:27:dc:c3:a2:5b: cd:ed:81:3a:6c:1b:fa:c3:13:7b:b0:70:da:26:ef:11:ca:9c: 00:ca:96:73:be:d1:c1:29:b3:84:ba:ec:c5:83:67:e0:66:2c: 36:92:ca:a9:0c:fa:a9:da:dd:a8:a6:0b:9c:9a:04:95:ef:64: 3b:57:ce:70:e3:73:14:cd:84:00:40:b1:26:8d:97:86:86:ee: 36:9f:51:98:ab:02:3f:4a:86:b8:ba:63:5b:3a:c0:e0:48:d5: 9d:fc:4a:e2:88:e4:cc:94:f2:45:28:a7:0b:32:70:bd:f9:c3: 10:60:4e:e2:3c:5b:0f:51:37:74:26:a6:25:52:d7:33:e7:5d: ca:46:15:6b:1e:3c:a5:e7:8d:82:b1:55:6d:f4:b7:53:9f:96: d6:e1:33:d5:62:34:36:41:f6:37:9b:25:9d:65:29:b7:dc:99: 9c:17:06:e7:5b:c4:8b:6f:ce:52:ea:d1:02:92:35:a3:4a:e3: a2:65:a2:d6:ac:90:b9:ee:8f:55:b6:14:c3:1f:f5:d3:45:42: ac:1f:c9:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EVBc552j035PLK8QDotNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmY5OTU4YWFkOTY3YTEwMDc1ZmZmY2Q1MjAyOWVjNjI3ZDE0M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw52GeKS7Hg4TFJzgKDkBiJnqamIj gl2ZpPtnk/zHjvpVZgarnlSof3niaBBh91/+W27X6asCRsTeh0YPWuqCMvUhH20N BiNbEPC8g53QQg8D6saslmMA/eXHNz8MTDNaKOjiiB80ph/hipQl+5YTnsfu65pP SAmm7PV4K5/I97ue9MQzXzJanwdgAb4sqNPUJYT9qkx/mp+S1F9JQDvSlOnMdBTh nzcw/Jo5UvLIDWX6H2zR/0cDrdKdLptm8XdQRE+Ui0pZmspKaChEzz7FUAFDeouJ QPrY2iG2FOD+DcEmKy9/8fn9fhkGYmGzIknfF5KOAEC1D7YhuvJcUxzgYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDb5lYqtlnoQB1//zVICnsYn0UO+MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvTnZtVmlxMldlaEFIWF9fTlVnS2V4aWZSUTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO9IMA0G CSqGSIb3DQEBCwUAA4IBAQAgmlnLhZqAANDIXGwyeZuVFTM/lAutNaPJ+32AX6Vy ojUlPP9DitqmXeEq98+M6bJ2J9zDolvN7YE6bBv6wxN7sHDaJu8RypwAypZzvtHB KbOEuuzFg2fgZiw2ksqpDPqp2t2opgucmgSV72Q7V85w43MUzYQAQLEmjZeGhu42 n1GYqwI/Soa4umNbOsDgSNWd/EriiOTMlPJFKKcLMnC9+cMQYE7iPFsPUTd0JqYl Utcz513KRhVrHjyl542CsVVt9LdTn5bW4TPVYjQ2QfY3myWdZSm33JmcFwbnW8SL b85S6tECkjWjSuOiZaLWrJC57o9VthTDH/XTRUKsH8kQ -----END CERTIFICATE-----Generated at Fri Jan 2 02:40:52 2026 by rpki-client