This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/nacKkZ_RzNV2zE3WKspS3-HlFXU.roa File: nacKkZ_RzNV2zE3WKspS3-HlFXU.roa (raw, json) Hash identifier: ze+QdgGOYq7DqvrwPTJyra//9o0vJyW5oNH5TT0oWWU= Subject key identifier: 9D:A7:0A:91:9F:D1:CC:D5:76:CC:4D:D6:2A:CA:52:DF:E1:E5:15:75 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B7F148196FA913D063E61028756F74ED1 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/nacKkZ_RzNV2zE3WKspS3-HlFXU.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 194.56.232.0/24 maxlen: 24 2a04:88c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:81:96:fa:91:3d:06:3e:61:02:87:56:f7:4e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9da70a919fd1ccd576cc4dd62aca52dfe1e51575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:16:35:a1:2b:af:cb:78:e4:f8:2a:f1:df: 4c:6c:f8:54:36:87:c0:02:e3:c2:c6:11:02:61:a7: 43:f1:f8:c6:c0:03:84:dd:a8:9a:91:55:28:e5:4d: bf:7b:d7:14:4a:cd:2e:2e:31:cc:3f:a9:35:1a:ec: 25:fc:d0:11:e3:4d:33:f1:aa:63:d4:8b:73:57:c3: 1e:34:ab:28:69:c6:9c:aa:f2:2c:16:4e:b0:9c:14: 7e:13:41:3b:28:04:f2:28:d9:da:7d:9f:56:16:74: bd:ff:11:13:76:a7:6f:a9:11:86:ca:36:1e:c8:da: f7:7b:41:99:e9:84:39:b6:04:b3:b7:5f:25:52:88: c5:c7:0d:c8:19:5b:00:cf:8b:15:73:61:6d:fc:43: b7:51:67:22:6b:6e:40:80:fe:20:8d:f2:58:21:78: bd:d6:cd:8b:b2:65:fe:f4:2b:8e:4f:97:b1:56:08: 42:fb:9a:48:44:61:b0:28:57:2c:6d:e3:54:38:89: 25:9d:c3:24:cc:14:e5:84:41:b0:1c:ec:9a:7d:d7: e9:eb:4d:09:82:a0:1f:87:b7:f7:89:65:6f:96:c0: ff:ec:4d:4c:32:99:76:7f:7e:aa:06:a0:99:64:85: 33:fc:7b:72:e6:16:aa:f9:1c:18:10:18:02:4d:ed: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A7:0A:91:9F:D1:CC:D5:76:CC:4D:D6:2A:CA:52:DF:E1:E5:15:75 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/nacKkZ_RzNV2zE3WKspS3-HlFXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.232.0/24 IPv6: 2a04:88c4::/30 Signature Algorithm: sha256WithRSAEncryption 4f:f9:f9:38:81:aa:2a:ed:61:c6:10:03:af:38:c3:39:4f:3c: ee:7e:d6:04:b2:7c:df:47:24:ab:50:05:41:8e:c1:79:6e:a3: e3:50:ba:f8:8a:9f:e5:06:bd:97:56:2a:15:3a:9c:6f:ad:12: a8:ef:b9:b7:a6:d4:db:24:79:8d:b5:f7:b4:ca:b7:a0:c0:bf: 50:4c:b4:be:f6:77:b5:39:5d:bb:2a:3b:59:c4:a2:06:a2:28: 6a:08:12:92:f8:55:1a:36:a9:86:94:23:f7:a2:b3:82:45:09: a1:e8:d7:28:64:8b:cb:00:6f:8c:43:73:4e:3e:37:50:d4:39: 6c:61:f5:9a:30:6a:08:54:0e:c8:08:1a:50:64:be:46:59:d0: 6a:0f:7b:4c:80:d9:8a:68:60:68:df:cb:cb:99:be:d1:6f:a1: da:d5:fb:84:42:f3:f3:fe:15:2b:5c:b4:1c:16:5f:70:8f:4c: f1:59:2b:bf:f5:d1:f4:1a:83:17:25:c4:b8:bc:1d:de:fb:85: 9b:af:6b:d8:42:3f:ac:41:e6:85:84:fb:de:a4:53:d1:1c:fc: b1:4b:7c:36:44:a3:4f:3b:9b:3c:b3:06:5d:59:fd:98:98:eb: dc:ac:64:e7:25:4e:8d:ca:f2:51:a0:33:65:6c:a6:bd:e3:1a: fc:2b:fb:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FIGW+pE9Bj5hAodW907RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGE3MGE5MTlmZDFjY2Q1NzZjYzRkZDYyYWNhNTJkZmUxZTUxNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoQWNaErr8t45Pgq8d9MbPhUNofA AuPCxhECYadD8fjGwAOE3aiakVUo5U2/e9cUSs0uLjHMP6k1Guwl/NAR400z8apj 1ItzV8MeNKsoacacqvIsFk6wnBR+E0E7KATyKNnafZ9WFnS9/xETdqdvqRGGyjYe yNr3e0GZ6YQ5tgSzt18lUojFxw3IGVsAz4sVc2Ft/EO3UWcia25AgP4gjfJYIXi9 1s2LsmX+9CuOT5exVghC+5pIRGGwKFcsbeNUOIklncMkzBTlhEGwHOyafdfp600J gqAfh7f3iWVvlsD/7E1MMpl2f36qBqCZZIUz/Hty5haq+RwYEBgCTe2k8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ2nCpGf0czVdsxN1irKUt/h5RV1MB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvbmFjS2taX1J6TlYyekUzV0tzcFMzLUhsRlhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwjjoMA0E AgACMAcDBQIqBIjEMA0GCSqGSIb3DQEBCwUAA4IBAQBP+fk4gaoq7WHGEAOvOMM5 TzzuftYEsnzfRySrUAVBjsF5bqPjULr4ip/lBr2XVioVOpxvrRKo77m3ptTbJHmN tfe0yregwL9QTLS+9ne1OV27KjtZxKIGoihqCBKS+FUaNqmGlCP3orOCRQmh6Nco ZIvLAG+MQ3NOPjdQ1DlsYfWaMGoIVA7ICBpQZL5GWdBqD3tMgNmKaGBo38vLmb7R b6Ha1fuEQvPz/hUrXLQcFl9wj0zxWSu/9dH0GoMXJcS4vB3e+4Wbr2vYQj+sQeaF hPvepFPRHPyxS3w2RKNPO5s8swZdWf2YmOvcrGTnJU6NyvJRoDNlbKa94xr8K/uo -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:18 2026 by rpki-client