This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NipgiA7nWo95KVHsFSO0BGsePIE.roa File: NipgiA7nWo95KVHsFSO0BGsePIE.roa (raw, json) Hash identifier: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc= Subject key identifier: 36:2A:60:88:0E:E7:5A:8F:79:29:51:EC:15:23:B4:04:6B:1E:3C:81 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED973E0F1A9FDAEAB8274129F87609 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NipgiA7nWo95KVHsFSO0BGsePIE.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44060 IP address blocks: 147.234.4.0/23 maxlen: 23 147.234.4.0/24 maxlen: 24 147.234.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:97:3e:0f:1a:9f:da:ea:b8:27:41:29:f8:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=362a60880ee75a8f792951ec1523b4046b1e3c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:5c:d0:70:96:fa:47:af:3b:5c:6c:ae:e7: cb:4b:5f:71:ea:45:4e:50:e1:7c:73:b8:11:6c:a8: 94:31:aa:8f:fe:06:d1:fe:4e:66:94:95:9c:3e:d8: a3:ed:2b:ca:d9:ea:09:e5:ea:a0:36:cf:96:dc:e6: 8c:d2:04:55:92:49:16:af:a7:e4:45:8c:e8:8d:18: 7b:c9:fb:9a:ea:1e:18:0f:7e:9f:b6:61:71:97:7a: 7b:19:2a:3d:60:d9:29:1a:30:99:23:50:52:41:0f: 57:a1:c7:d5:50:39:2b:00:33:f5:f6:5c:ea:53:d5: 2f:b9:00:ec:41:79:59:32:7f:46:d3:38:f8:54:2b: bc:99:e2:f3:2d:06:e3:fb:3c:cc:b4:e7:e6:c1:e0: f5:74:83:48:0a:f1:2c:79:c9:2e:2f:68:31:82:a6: 94:19:aa:39:d3:eb:27:71:eb:8a:e5:4e:47:17:11: a9:08:9c:f6:94:93:7f:43:7a:ad:8e:33:76:c7:e1: 74:b1:d7:71:51:bb:3a:a8:14:ee:55:29:6a:d0:01: 87:3b:ad:cb:e2:1b:20:45:f5:52:d4:35:64:1e:a5: 00:f5:7e:aa:d7:58:a5:19:a8:8e:d6:5a:4e:0b:3c: 9c:4a:62:54:b9:3f:fb:63:f5:c9:a9:4f:6f:30:b1: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2A:60:88:0E:E7:5A:8F:79:29:51:EC:15:23:B4:04:6B:1E:3C:81 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/NipgiA7nWo95KVHsFSO0BGsePIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.4.0/23 Signature Algorithm: sha256WithRSAEncryption 93:a6:ef:36:0f:de:6b:9a:c0:eb:0c:ea:0f:13:b1:b0:a7:aa: 2d:b6:84:89:e6:96:6a:92:44:2a:f8:56:31:0a:17:c9:16:51: 5b:16:30:ce:68:d5:f2:c1:c3:10:71:ef:6f:fd:7a:d1:26:fe: 85:b0:c5:21:aa:19:0c:20:0b:1b:46:a6:76:44:d9:3a:80:62: d8:20:b4:b1:68:70:21:ab:87:bd:ce:b6:53:26:05:5a:ec:1a: ca:81:16:f8:88:1a:b7:8a:4f:4b:a6:fa:b7:48:ee:06:08:eb: ed:4d:37:1f:3f:b6:0c:65:1e:dd:22:6e:e3:81:8f:46:9d:c7: ed:b3:f0:74:8e:89:66:53:84:cb:46:75:e7:22:ba:0d:8e:f7: 26:46:fe:fb:31:50:0c:72:eb:1f:8f:c1:49:ee:66:63:b7:4c: 0e:08:70:05:86:22:4e:26:b9:8b:ff:61:f4:11:86:4a:ae:5e: 8f:bd:2a:8c:cb:85:e0:89:f7:17:34:5c:ee:3f:12:3f:72:67: 74:d5:ed:1f:d0:20:97:93:1d:b7:ab:4e:0d:3f:58:10:a5:2c: 68:f5:09:1e:ea:65:be:1c:7a:2b:52:f7:f1:27:26:67:56:d9: 72:4e:54:2b:14:62:e0:5a:94:e9:37:b5:34:02:54:4e:a5:15: 34:8d:ef:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Zc+Dxqf2uq4J0Ep+HYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjJhNjA4ODBlZTc1YThmNzkyOTUxZWMxNTIzYjQwNDZiMWUzYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy9c0HCW+kevO1xsrufLS19x6kVO UOF8c7gRbKiUMaqP/gbR/k5mlJWcPtij7SvK2eoJ5eqgNs+W3OaM0gRVkkkWr6fk RYzojRh7yfua6h4YD36ftmFxl3p7GSo9YNkpGjCZI1BSQQ9XocfVUDkrADP19lzq U9UvuQDsQXlZMn9G0zj4VCu8meLzLQbj+zzMtOfmweD1dINICvEseckuL2gxgqaU Gao50+snceuK5U5HFxGpCJz2lJN/Q3qtjjN2x+F0sddxUbs6qBTuVSlq0AGHO63L 4hsgRfVS1DVkHqUA9X6q11ilGaiO1lpOCzycSmJUuT/7Y/XJqU9vMLFVkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYqYIgO51qPeSlR7BUjtARrHjyBMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvTmlwZ2lBN25Xbzk1S1ZIc0ZTTzBCR3NlUElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk+oEMA0G CSqGSIb3DQEBCwUAA4IBAQCTpu82D95rmsDrDOoPE7Gwp6ottoSJ5pZqkkQq+FYx ChfJFlFbFjDOaNXywcMQce9v/XrRJv6FsMUhqhkMIAsbRqZ2RNk6gGLYILSxaHAh q4e9zrZTJgVa7BrKgRb4iBq3ik9Lpvq3SO4GCOvtTTcfP7YMZR7dIm7jgY9Gncft s/B0jolmU4TLRnXnIroNjvcmRv77MVAMcusfj8FJ7mZjt0wOCHAFhiJOJrmL/2H0 EYZKrl6PvSqMy4XgifcXNFzuPxI/cmd01e0f0CCXkx23q04NP1gQpSxo9Qke6mW+ HHorUvfxJyZnVtlyTlQrFGLgWpTpN7U0AlROpRU0je8T -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:12 2026 by rpki-client