This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/NjHgFN-bgeuMrrhH0PuX7QntI6w.roa File: NjHgFN-bgeuMrrhH0PuX7QntI6w.roa (raw, json) Hash identifier: 8CuzTrfsWZs7k9//TsAfabS5/PhcTs42plQ9YsHXHIY= Subject key identifier: 36:31:E0:14:DF:9B:81:EB:8C:AE:B8:47:D0:FB:97:ED:09:ED:23:AC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B03D32C9C3623E9806D094577AE57BDCE Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/NjHgFN-bgeuMrrhH0PuX7QntI6w.roa Signing time: Tue 09 Dec 2025 15:55:29 +0000 ROA not before: Tue 09 Dec 2025 15:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214196 IP address blocks: 88.210.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d3:2c:9c:36:23:e9:80:6d:09:45:77:ae:57:bd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Dec 9 15:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3631e014df9b81eb8caeb847d0fb97ed09ed23ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:eb:aa:68:c6:06:50:fc:d1:71:72:fe:05: 56:68:72:f9:b0:0c:1b:1c:2d:13:0a:8b:9c:38:11: 08:e7:75:53:8c:9e:24:60:c4:01:df:ac:ba:4c:30: bd:df:bc:cf:8d:6c:1f:62:ad:aa:7f:57:b4:f1:17: ac:d2:a1:94:ee:5d:19:d3:15:33:fe:62:5f:f0:9a: 15:f4:fa:59:80:bd:14:c6:17:71:84:7a:c7:f5:7d: ac:ce:0c:84:9b:04:93:86:69:5e:7f:99:bc:d9:ae: 33:21:dd:07:fe:01:ff:71:66:77:e1:b6:af:7f:59: 6b:29:bd:46:71:c6:6a:c0:a5:ae:26:fe:93:6c:84: aa:88:a0:0f:b9:55:3c:fe:0d:8c:47:3f:94:9d:3a: ed:88:ac:30:a0:2e:40:f0:6b:b9:03:a7:7c:cd:54: 99:de:84:94:89:bf:dd:6d:ed:01:b4:e8:39:3d:75: 92:f8:a0:95:34:c1:4e:55:bc:19:e0:56:ca:ef:46: 87:46:20:15:41:bd:09:48:d3:9a:2b:31:ac:05:16: 01:c5:34:dc:4d:fd:23:a2:03:29:bd:79:3b:37:c1: 16:84:a7:1a:d3:41:2b:e4:41:12:e7:86:99:da:b6: 5f:cb:09:fe:62:9b:e8:bd:a2:68:78:56:12:4c:33: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:31:E0:14:DF:9B:81:EB:8C:AE:B8:47:D0:FB:97:ED:09:ED:23:AC X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/NjHgFN-bgeuMrrhH0PuX7QntI6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.62.0/24 Signature Algorithm: sha256WithRSAEncryption 06:86:d6:e6:58:1c:d1:c7:57:c6:99:9f:2f:09:3c:f3:43:6b: e2:43:21:9c:5a:10:99:48:f1:6e:e5:23:08:c6:34:a2:ec:af: f1:b5:81:c7:87:ca:34:6d:7b:d2:2f:23:15:17:5a:a1:d2:7d: 07:78:c4:ea:72:6d:bf:40:a9:ed:5b:16:76:71:62:8b:bd:c7: bf:c5:2c:07:98:bd:77:fa:69:81:7c:2a:59:94:3d:37:2f:46: bd:ce:74:b4:5e:7c:a3:3c:40:68:c9:56:3c:b8:90:d0:50:c8: f9:fa:d3:88:96:5e:e9:11:58:04:26:06:08:06:be:84:82:41: 76:81:13:ec:fb:fe:10:53:36:86:b9:20:08:c3:b9:ba:cf:44: 38:04:38:23:96:8d:85:25:fb:4b:5b:c6:94:f7:e9:8e:4d:15: 74:ef:67:ef:46:65:48:6e:6e:7d:e3:f0:5f:c2:11:8b:50:c0: 8a:87:3e:4a:94:e8:db:c2:0d:81:40:42:c7:63:98:46:5b:1e: 93:4b:32:e2:8d:fb:68:12:c5:6b:01:15:8d:cf:0e:91:67:61: 85:80:12:b6:59:22:e6:16:a8:86:01:d2:f9:b3:b7:33:ff:3a: 14:f0:66:3e:84:ef:ac:24:4f:4d:b8:22:70:67:f0:fe:68:45: 76:c6:c8:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsD0yycNiPpgG0JRXeuV73OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjUxMjA5MTU1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjMxZTAxNGRmOWI4MWViOGNhZWI4NDdkMGZiOTdlZDA5ZWQyM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+7rqmjGBlD80XFy/gVWaHL5sAwb HC0TCoucOBEI53VTjJ4kYMQB36y6TDC937zPjWwfYq2qf1e08Res0qGU7l0Z0xUz /mJf8JoV9PpZgL0UxhdxhHrH9X2szgyEmwSThmlef5m82a4zId0H/gH/cWZ34bav f1lrKb1GccZqwKWuJv6TbISqiKAPuVU8/g2MRz+UnTrtiKwwoC5A8Gu5A6d8zVSZ 3oSUib/dbe0BtOg5PXWS+KCVNMFOVbwZ4FbK70aHRiAVQb0JSNOaKzGsBRYBxTTc Tf0jogMpvXk7N8EWhKca00Er5EES54aZ2rZfywn+YpvovaJoeFYSTDOhcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYx4BTfm4HrjK64R9D7l+0J7SOsMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvTmpIZ0ZOLWJnZXVNcnJoSDBQdVg3UW50STZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNI+MA0G CSqGSIb3DQEBCwUAA4IBAQAGhtbmWBzRx1fGmZ8vCTzzQ2viQyGcWhCZSPFu5SMI xjSi7K/xtYHHh8o0bXvSLyMVF1qh0n0HeMTqcm2/QKntWxZ2cWKLvce/xSwHmL13 +mmBfCpZlD03L0a9znS0XnyjPEBoyVY8uJDQUMj5+tOIll7pEVgEJgYIBr6EgkF2 gRPs+/4QUzaGuSAIw7m6z0Q4BDgjlo2FJftLW8aU9+mOTRV072fvRmVIbm594/Bf whGLUMCKhz5KlOjbwg2BQELHY5hGWx6TSzLijftoEsVrARWNzw6RZ2GFgBK2WSLm FqiGAdL5s7cz/zoU8GY+hO+sJE9NuCJwZ/D+aEV2xshP -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:06 2025 by rpki-client