This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NwrZ5zu5JSEkOStUooONf23j5-I.roa File: NwrZ5zu5JSEkOStUooONf23j5-I.roa (raw, json) Hash identifier: eoNll3zCy5IIESCANu3kxMcuHXknKPfxQnArS+fEwmU= Subject key identifier: 37:0A:D9:E7:3B:B9:25:21:24:39:2B:54:A2:83:8D:7F:6D:E3:E7:E2 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB85973DBF934208B9CF71E35D6BCC Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NwrZ5zu5JSEkOStUooONf23j5-I.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214727 IP address blocks: 80.242.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:85:97:3d:bf:93:42:08:b9:cf:71:e3:5d:6b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=370ad9e73bb9252124392b54a2838d7f6de3e7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:10:f5:6f:99:ee:24:cd:44:07:be:a3:da: da:8b:cf:cc:bc:15:f9:7e:65:11:52:dc:78:7b:d8: ee:90:c0:f9:c9:8e:96:2f:c9:bc:02:2c:80:50:99: 07:20:9c:fc:d5:ed:07:88:2c:6d:d7:f6:63:5f:ca: 53:c2:a9:df:bc:1f:dc:87:4b:d5:91:d5:7c:27:02: 04:d8:4a:fa:1e:70:40:d8:1a:d4:5f:84:95:df:5b: 5f:5d:76:a8:fb:76:4a:1c:74:01:33:2f:ef:0f:1c: bc:38:70:25:f7:37:92:d2:58:23:30:d5:d0:24:ff: bd:3f:93:5f:c4:8f:28:5a:0e:db:51:fc:c1:f7:85: 9c:79:17:5d:87:1c:88:93:98:58:be:ea:6f:6c:8a: 31:3d:85:43:68:f5:86:dd:8e:94:8d:78:be:31:d6: 85:14:cc:fa:65:6d:d2:bf:20:95:54:35:26:ef:53: 6e:d8:0f:92:7e:3f:b2:7f:42:15:82:01:e3:08:1a: 99:0b:24:74:f1:fe:a2:29:a2:5f:09:93:b7:f2:0d: c3:5c:2c:c6:ff:9f:12:57:e2:f5:a9:35:ca:e4:60: 2c:0a:82:9d:9a:1b:02:b9:2c:0d:f2:59:f0:aa:8f: 72:47:4a:bf:e3:09:25:1f:88:be:74:0e:a0:06:c1: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:D9:E7:3B:B9:25:21:24:39:2B:54:A2:83:8D:7F:6D:E3:E7:E2 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NwrZ5zu5JSEkOStUooONf23j5-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.242.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:11:89:9d:e9:d4:15:82:d3:07:4f:a9:d2:67:e4:3b:cc:b4: 18:c1:5e:cb:df:bb:b5:78:bb:20:c1:30:e7:13:eb:13:ff:b2: f1:03:89:28:c1:ca:4e:62:4f:1d:c8:63:2b:05:ae:95:c2:29: 37:7f:48:81:fe:f9:b4:8b:89:5e:3b:6d:8e:ef:62:86:18:17: 09:7e:67:50:ee:9c:c5:6d:64:87:01:a0:6b:0e:22:f8:04:4a: d7:3c:85:ef:c0:6f:aa:a2:6a:79:fc:dc:39:08:3c:bc:8d:de: 97:fd:4c:04:d8:a9:40:58:39:95:5b:ca:37:3e:40:45:22:57: 3e:e0:50:da:e0:cf:28:ef:55:0e:9d:ac:77:be:8d:44:7b:70: c5:03:86:fe:3f:c9:c7:91:cd:db:d1:dd:17:f7:51:bd:87:2b: e1:7f:5d:fc:cf:c9:99:7b:3d:8a:87:cc:38:ef:bb:67:28:62: e4:95:b7:5b:4c:d7:f9:91:3e:b3:da:46:fa:20:60:ed:d3:41: f0:50:7f:e2:77:10:c5:fa:0e:01:eb:f7:3c:73:80:57:af:38: 00:8c:c0:22:8d:92:45:f5:d0:3e:d8:28:4b:af:d3:b8:d5:c8: bb:dc:05:16:2f:7d:de:b2:fe:0e:1d:ab:4c:d8:a2:24:a9:4d: 17:d7:cd:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4WXPb+TQgi5z3HjXWvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzBhZDllNzNiYjkyNTIxMjQzOTJiNTRhMjgzOGQ3ZjZkZTNlN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEQ9W+Z7iTNRAe+o9rai8/MvBX5 fmURUtx4e9jukMD5yY6WL8m8AiyAUJkHIJz81e0HiCxt1/ZjX8pTwqnfvB/ch0vV kdV8JwIE2Er6HnBA2BrUX4SV31tfXXao+3ZKHHQBMy/vDxy8OHAl9zeS0lgjMNXQ JP+9P5NfxI8oWg7bUfzB94WceRddhxyIk5hYvupvbIoxPYVDaPWG3Y6UjXi+MdaF FMz6ZW3SvyCVVDUm71Nu2A+Sfj+yf0IVggHjCBqZCyR08f6iKaJfCZO38g3DXCzG /58SV+L1qTXK5GAsCoKdmhsCuSwN8lnwqo9yR0q/4wklH4i+dA6gBsH/KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcK2ec7uSUhJDkrVKKDjX9t4+fiMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTndyWjV6dTVKU0VrT1N0VW9vT05mMjNqNS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPI0MA0G CSqGSIb3DQEBCwUAA4IBAQA/EYmd6dQVgtMHT6nSZ+Q7zLQYwV7L37u1eLsgwTDn E+sT/7LxA4kowcpOYk8dyGMrBa6Vwik3f0iB/vm0i4leO22O72KGGBcJfmdQ7pzF bWSHAaBrDiL4BErXPIXvwG+qomp5/Nw5CDy8jd6X/UwE2KlAWDmVW8o3PkBFIlc+ 4FDa4M8o71UOnax3vo1Ee3DFA4b+P8nHkc3b0d0X91G9hyvhf138z8mZez2Kh8w4 77tnKGLklbdbTNf5kT6z2kb6IGDt00HwUH/idxDF+g4B6/c8c4BXrzgAjMAijZJF 9dA+2ChLr9O41ci73AUWL33esv4OHatM2KIkqU0X180c -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:35 2026 by rpki-client