This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/nscX6HThd1wN8UnSg1ZdjqXq-gI.roa File: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (raw, json) Hash identifier: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw= Subject key identifier: 9E:C7:17:E8:74:E1:77:5C:0D:F1:49:D2:83:56:5D:8E:A5:EA:FA:02 Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019B7F15FFCA43BDC3DC758876B61F4D28A9 Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/nscX6HThd1wN8UnSg1ZdjqXq-gI.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.206.123.0/24 maxlen: 24 2a10:ca00:1::/48 maxlen: 48 2a10:ca00:2::/48 maxlen: 48 2a10:ca00:3::/48 maxlen: 48 2a10:ca00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ff:ca:43:bd:c3:dc:75:88:76:b6:1f:4d:28:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ec717e874e1775c0df149d283565d8ea5eafa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:23:7b:6e:a0:b4:e4:a1:c2:33:b1:ff:f1: 8d:a4:03:ef:8d:71:a3:74:62:2a:e9:a1:15:94:c1: b4:38:bf:7e:4a:6e:19:73:04:d5:57:a0:e4:8a:a4: 7f:66:3f:bb:86:bb:74:0a:ed:17:c0:07:f3:4f:96: b8:76:08:c4:f9:41:0e:2d:74:9b:f6:1c:21:bd:cb: 6a:2f:81:3c:b4:31:b0:6e:e4:26:1b:0a:21:b4:e2: 9c:5f:bd:5f:05:81:14:b8:78:ab:d2:c5:07:78:b8: 83:2f:0f:70:d4:69:59:c9:d2:2f:a7:bc:8b:c3:b5: 6c:a5:9d:df:20:7b:ca:77:fc:f5:c0:e7:c2:e4:f9: 52:41:57:38:9d:3b:d8:51:d7:32:ef:76:46:77:16: 2c:f6:42:b5:d2:d5:f8:30:61:4c:5f:8d:4e:1a:27: f9:b3:2b:42:4f:f6:53:54:24:b2:28:e9:34:86:f8: 81:46:5d:f1:db:9a:c2:19:26:3f:17:fa:58:7f:e6: ca:c5:b8:23:e1:c4:f4:1b:f5:5d:04:aa:06:5e:37: 7a:6f:dc:de:91:ba:1d:37:ef:2e:38:06:33:aa:c8: 56:ec:30:28:ee:49:14:f6:33:36:cd:82:28:81:52: 8b:60:75:a5:d5:15:fa:8e:b4:af:32:a0:b8:ef:71: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C7:17:E8:74:E1:77:5C:0D:F1:49:D2:83:56:5D:8E:A5:EA:FA:02 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/nscX6HThd1wN8UnSg1ZdjqXq-gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.123.0/24 IPv6: 2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption aa:14:8f:b5:48:60:be:b3:77:80:35:8b:19:b0:19:44:3f:6d: 93:f1:1d:f4:32:66:98:ba:92:c5:e6:11:28:54:f0:e7:c5:29: 2f:2a:e9:94:ab:fc:2f:82:ad:e5:2a:55:3f:15:ff:ff:df:f8: a7:a7:ac:e8:28:3f:08:1c:7f:80:3c:cf:a4:eb:56:9d:59:80: 6b:83:1d:22:33:72:0a:6f:33:4d:01:e2:ee:fb:3f:d9:6d:af: f6:80:cf:b3:fd:c9:f3:46:4a:39:f2:2d:7d:c9:30:87:30:d4: 45:d0:24:72:f4:6d:38:be:2b:77:5a:93:68:69:86:cb:a2:fb: 06:38:94:9e:13:81:e0:c8:a5:9d:d4:b5:fd:bb:c9:a0:8a:14: 11:4b:d1:b5:e7:ee:5e:60:ab:f8:fa:31:8c:e6:c6:58:5d:e8: ae:76:20:41:ac:4d:f1:ac:b0:64:70:17:f2:c4:9c:d5:6d:f7: c2:d5:08:fa:e5:5a:d6:ef:53:40:a5:ae:03:19:77:e7:1d:44: 38:f7:8d:ba:11:6a:8c:ae:96:34:93:7e:42:bd:a1:4d:af:79: 41:35:57:ec:30:d7:7d:82:e6:52:4e:f2:03:9c:84:16:64:52: 0b:ad:78:31:f3:f9:65:26:6b:78:e5:55:f5:5e:e6:ce:b9:21: 48:d4:3f:a7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/Ff/KQ73D3HWIdrYfTSipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWM3MTdlODc0ZTE3NzVjMGRmMTQ5ZDI4MzU2NWQ4ZWE1ZWFmYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUYje26gtOShwjOx//GNpAPvjXGj dGIq6aEVlMG0OL9+Sm4ZcwTVV6DkiqR/Zj+7hrt0Cu0XwAfzT5a4dgjE+UEOLXSb 9hwhvctqL4E8tDGwbuQmGwohtOKcX71fBYEUuHir0sUHeLiDLw9w1GlZydIvp7yL w7VspZ3fIHvKd/z1wOfC5PlSQVc4nTvYUdcy73ZGdxYs9kK10tX4MGFMX41OGif5 sytCT/ZTVCSyKOk0hviBRl3x25rCGSY/F/pYf+bKxbgj4cT0G/VdBKoGXjd6b9ze kbodN+8uOAYzqshW7DAo7kkU9jM2zYIogVKLYHWl1RX6jrSvMqC473FMVwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJ7HF+h04XdcDfFJ0oNWXY6l6voCMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvbnNjWDZIVGhkMXdOOFVuU2cxWmRqcVhxLWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAuc57MBoE AgACMBQwEgMHACoQygAAAQMHACoQygAABDANBgkqhkiG9w0BAQsFAAOCAQEAqhSP tUhgvrN3gDWLGbAZRD9tk/Ed9DJmmLqSxeYRKFTw58UpLyrplKv8L4Kt5SpVPxX/ /9/4p6es6Cg/CBx/gDzPpOtWnVmAa4MdIjNyCm8zTQHi7vs/2W2v9oDPs/3J80ZK OfItfckwhzDURdAkcvRtOL4rd1qTaGmGy6L7BjiUnhOB4MilndS1/bvJoIoUEUvR tefuXmCr+PoxjObGWF3ornYgQaxN8aywZHAX8sSc1W33wtUI+uVa1u9TQKWuAxl3 5x1EOPeNuhFqjK6WNJN+Qr2hTa95QTVX7DDXfYLmUk7yA5yEFmRSC614MfP5ZSZr eOVV9V7mzrkhSNQ/pw== -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:34 2026 by rpki-client