This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa File: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (raw, json) Hash identifier: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA= Subject key identifier: 34:9E:45:B7:D9:C4:E0:AB:81:37:B1:CB:42:72:B3:81:0D:26:A5:7A Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B775896D098DEF5B0BF73F568A9E159F4 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 194.4.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:96:d0:98:de:f5:b0:bf:73:f5:68:a9:e1:59:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=349e45b7d9c4e0ab8137b1cb4272b3810d26a57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:45:c4:c2:fc:25:5d:25:0a:8f:30:34:b8: e1:29:02:43:2f:7d:4d:26:f8:eb:05:0c:b8:12:b8: bb:61:1e:7a:5a:fb:96:86:24:4f:8e:7f:ca:85:f3: 38:ce:d1:3f:1f:7d:7e:c9:21:09:f7:97:86:78:d2: b7:11:51:8d:fa:64:fb:d9:ce:92:04:87:5b:c3:ea: 82:e1:b2:52:86:bd:0e:db:dc:07:32:90:7b:67:d8: a6:52:7c:73:8c:67:5a:7d:9b:fb:1d:d9:20:cc:5d: 6f:46:48:a2:c0:d6:65:dc:ad:1c:17:f9:73:c7:c1: 5a:df:d4:16:61:76:7d:5a:4a:aa:85:d6:18:c5:bf: d1:3d:29:55:d3:a6:03:f4:ef:86:9c:e8:6c:d6:7b: 7f:b0:78:bb:8c:25:e9:d3:c7:7c:04:cf:53:d6:ce: 57:a2:13:2a:f3:65:d3:e8:40:e9:06:29:cc:d4:79: ec:f0:18:4d:e5:8b:91:5f:2f:14:dc:c0:98:31:2f: c9:68:fc:1e:89:c1:b5:7b:7e:be:58:95:f3:dd:52: 97:8a:bf:3f:f7:fd:4b:60:a8:38:dd:74:a4:95:d7: bd:f7:d7:fc:91:71:2e:5f:90:91:da:6b:2c:b7:92: b2:33:5d:b1:12:b9:83:8d:3a:dd:3b:bf:cc:65:82: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:45:B7:D9:C4:E0:AB:81:37:B1:CB:42:72:B3:81:0D:26:A5:7A X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.54.0/24 Signature Algorithm: sha256WithRSAEncryption 89:2f:10:ad:a3:ff:32:b5:3c:b1:9f:bb:f6:d2:6a:1b:41:69: 19:7d:a8:bc:e0:08:8f:32:68:4c:93:ae:68:1c:74:b1:90:aa: a4:17:2d:fc:1f:98:20:fe:d8:18:a2:14:47:20:e3:12:1c:e8: 4a:78:40:7e:d7:cf:bb:ba:0d:70:1e:40:8f:06:ef:98:b6:b4: 1a:61:33:36:58:5d:56:10:ce:44:11:6b:c3:8e:8a:39:37:ca: 25:03:8d:7b:eb:64:96:44:6d:63:f0:fd:be:32:e6:ff:d0:67: b0:e2:64:b4:5a:05:89:b4:36:57:91:40:4c:86:8c:38:34:23: b4:10:54:7f:b4:a5:72:6c:a9:01:b2:48:03:01:6b:c6:b2:c0: 9c:ef:e2:5c:23:57:95:d0:fb:d4:75:71:02:a9:ba:98:98:73: 0a:8b:09:93:e2:01:e0:20:30:c2:ff:00:6b:8e:57:c9:9f:f8: 4d:be:c0:8d:1e:ea:41:f7:d7:ae:0d:32:0f:4f:e4:c4:ea:6a: 0e:ca:80:97:74:c3:3e:5c:d6:ec:74:8d:7f:7a:fa:97:60:17: fe:09:ac:dd:2d:4e:3c:c3:e0:de:ef:59:1f:88:21:7f:ae:24: 61:3e:d4:05:14:99:d3:28:0f:d6:48:b5:8e:eb:6e:9d:58:63: 1d:e1:7a:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJbQmN71sL9z9Wip4Vn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDllNDViN2Q5YzRlMGFiODEzN2IxY2I0MjcyYjM4MTBkMjZhNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKZFxML8JV0lCo8wNLjhKQJDL31N JvjrBQy4Eri7YR56WvuWhiRPjn/KhfM4ztE/H31+ySEJ95eGeNK3EVGN+mT72c6S BIdbw+qC4bJShr0O29wHMpB7Z9imUnxzjGdafZv7HdkgzF1vRkiiwNZl3K0cF/lz x8Fa39QWYXZ9WkqqhdYYxb/RPSlV06YD9O+GnOhs1nt/sHi7jCXp08d8BM9T1s5X ohMq82XT6EDpBinM1Hns8BhN5YuRXy8U3MCYMS/JaPweicG1e36+WJXz3VKXir8/ 9/1LYKg43XSklde999f8kXEuX5CR2msst5KyM12xErmDjTrdO7/MZYKJRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSeRbfZxOCrgTexy0Jys4ENJqV6MB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvTko1RnQ5bkU0S3VCTjdITFFuS3pnUTBtcFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ2MA0G CSqGSIb3DQEBCwUAA4IBAQCJLxCto/8ytTyxn7v20mobQWkZfai84AiPMmhMk65o HHSxkKqkFy38H5gg/tgYohRHIOMSHOhKeEB+18+7ug1wHkCPBu+YtrQaYTM2WF1W EM5EEWvDjoo5N8olA41762SWRG1j8P2+Mub/0Gew4mS0WgWJtDZXkUBMhow4NCO0 EFR/tKVybKkBskgDAWvGssCc7+JcI1eV0PvUdXECqbqYmHMKiwmT4gHgIDDC/wBr jlfJn/hNvsCNHupB99euDTIPT+TE6moOyoCXdMM+XNbsdI1/evqXYBf+CazdLU48 w+De71kfiCF/riRhPtQFFJnTKA/WSLWO626dWGMd4Xqn -----END CERTIFICATE-----Generated at Fri Jan 2 14:43:17 2026 by rpki-client