This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nFxdYGMXa6ECDOfTu-Md4d2Qsps.roa File: nFxdYGMXa6ECDOfTu-Md4d2Qsps.roa (raw, json) Hash identifier: P8KdQI/H2wB5wj4ZE98TlikggIlEehFUnANvLh7gy6M= Subject key identifier: 9C:5C:5D:60:63:17:6B:A1:02:0C:E7:D3:BB:E3:1D:E1:DD:90:B2:9B Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114504CEDD97340060D7A3CB40C4E8 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nFxdYGMXa6ECDOfTu-Md4d2Qsps.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56443 IP address blocks: 104.233.10.0/24 maxlen: 24 104.233.11.0/24 maxlen: 24 104.233.22.0/24 maxlen: 24 104.233.23.0/24 maxlen: 24 104.233.27.0/24 maxlen: 24 104.233.28.0/24 maxlen: 24 104.233.29.0/24 maxlen: 24 104.233.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:45:04:ce:dd:97:34:00:60:d7:a3:cb:40:c4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c5c5d6063176ba1020ce7d3bbe31de1dd90b29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:8b:f3:9b:67:f6:8f:ba:2f:8b:4d:fc:0a: 6a:13:7d:e9:26:0d:81:cf:e1:5d:95:11:26:a6:bc: e2:67:d3:47:ec:07:2e:17:be:8a:ee:b5:ae:55:03: 7d:26:75:95:a0:8c:2c:23:dd:1d:76:50:21:1b:98: 30:e7:ad:2f:68:16:e7:2f:3f:42:e7:0f:27:dc:3d: ab:ef:ea:a5:0b:b8:44:86:87:57:cf:6a:3f:ba:6a: 23:a3:0c:d1:0d:55:09:3d:11:fd:a4:15:a3:ef:0b: f0:44:60:8d:9e:79:cf:fe:59:0a:13:2e:56:42:36: fe:9b:ba:b1:7d:5a:2a:8b:c5:e0:20:50:1c:db:fc: d9:2f:52:b7:af:bb:12:a9:ec:19:45:a2:6b:23:5e: a2:ff:63:66:53:af:a5:42:db:3b:64:c1:3f:a0:d6: 79:06:0c:8d:0b:7a:33:65:ef:e0:bb:78:52:26:f4: 79:c4:54:c9:d4:e5:22:ee:ef:13:ac:fa:11:0e:6f: 3d:8b:9b:e6:e5:ab:8c:b7:7c:ba:30:66:96:3a:0c: 4c:4d:1a:f0:5d:8d:bb:4d:dd:31:3d:2c:be:b3:12: ef:67:a3:07:c1:0a:b4:b4:5a:99:de:ba:15:f9:51: 7c:7f:27:05:4f:65:6e:e3:7a:33:0a:44:e0:ea:f8: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5C:5D:60:63:17:6B:A1:02:0C:E7:D3:BB:E3:1D:E1:DD:90:B2:9B X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/nFxdYGMXa6ECDOfTu-Md4d2Qsps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.233.10.0/23 104.233.22.0/23 104.233.27.0-104.233.30.255 Signature Algorithm: sha256WithRSAEncryption 3d:3a:e8:78:cc:18:3d:7b:2f:3c:91:0b:ca:83:4d:e0:f3:cb: ad:28:8d:14:71:bc:28:78:6f:4b:34:e6:a4:86:ba:a5:d2:8a: b2:42:aa:df:fd:e3:1e:19:39:bc:f2:60:db:5a:dd:95:62:2c: 02:bb:6f:4e:94:b9:2b:13:b6:75:b1:77:f2:04:f5:b0:4b:4c: c9:c5:2f:d8:9b:e9:46:bd:a2:23:43:00:89:46:d2:32:25:c9: 00:73:1f:40:84:ea:ee:04:e7:c9:74:81:7d:49:9c:10:0a:ef: b8:65:7f:7a:3c:9a:a8:fd:85:6b:26:20:df:26:7b:c9:2c:2a: 28:8e:03:ca:10:68:51:d4:12:69:02:21:35:a1:c9:96:bd:2e: df:af:30:59:03:2e:b6:88:6f:02:81:3d:fd:75:83:dc:34:c8: dc:00:8b:a3:49:fa:6e:99:51:ad:9d:1e:41:a7:c1:08:a3:09: 00:47:ef:21:b8:2b:9e:c1:b9:35:9f:d3:5c:69:00:18:44:3e: 58:87:5c:fe:bb:8f:c4:2f:dd:cc:a7:54:9e:c5:a9:e0:52:0c: a6:de:e4:45:e6:f0:c7:40:be:a9:fb:47:4d:84:f4:55:07:3f: d1:f2:35:28:60:11:65:92:6b:5c:bd:ed:b8:91:a0:8d:4d:a2: e7:37:ef:e2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5EUUEzt2XNABg16PLQMToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzVjNWQ2MDYzMTc2YmExMDIwY2U3ZDNiYmUzMWRlMWRkOTBiMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qL85tn9o+6L4tN/ApqE33pJg2B z+FdlREmprziZ9NH7AcuF76K7rWuVQN9JnWVoIwsI90ddlAhG5gw560vaBbnLz9C 5w8n3D2r7+qlC7hEhodXz2o/umojowzRDVUJPRH9pBWj7wvwRGCNnnnP/lkKEy5W Qjb+m7qxfVoqi8XgIFAc2/zZL1K3r7sSqewZRaJrI16i/2NmU6+lQts7ZME/oNZ5 BgyNC3ozZe/gu3hSJvR5xFTJ1OUi7u8TrPoRDm89i5vm5auMt3y6MGaWOgxMTRrw XY27Td0xPSy+sxLvZ6MHwQq0tFqZ3roV+VF8fycFT2Vu43ozCkTg6viWWwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJxcXWBjF2uhAgzn07vjHeHdkLKbMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvbkZ4ZFlHTVhhNkVDRE9mVHUtTWQ0ZDJRc3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBaOkKAwQB aOkWMAwDBABo6RsDBABo6R4wDQYJKoZIhvcNAQELBQADggEBAD066HjMGD17LzyR C8qDTeDzy60ojRRxvCh4b0s05qSGuqXSirJCqt/94x4ZObzyYNta3ZViLAK7b06U uSsTtnWxd/IE9bBLTMnFL9ib6Ua9oiNDAIlG0jIlyQBzH0CE6u4E58l0gX1JnBAK 77hlf3o8mqj9hWsmIN8me8ksKiiOA8oQaFHUEmkCITWhyZa9Lt+vMFkDLraIbwKB Pf11g9w0yNwAi6NJ+m6ZUa2dHkGnwQijCQBH7yG4K57BuTWf01xpABhEPliHXP67 j8Qv3cynVJ7FqeBSDKbe5EXm8MdAvqn7R02E9FUHP9HyNShgEWWSa1y97biRoI1N ouc37+I= -----END CERTIFICATE-----Generated at Fri Jan 2 02:39:26 2026 by rpki-client