This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NjTt_CAfruhKNzb6MYMg_89umJE.roa File: NjTt_CAfruhKNzb6MYMg_89umJE.roa (raw, json) Hash identifier: JdINaVRtNX6LcdQLbH0zVZ6cb5LNbjDtOaoO2Cvm/jE= Subject key identifier: 36:34:ED:FC:20:1F:AE:E8:4A:37:36:FA:31:83:20:FF:CF:6E:98:91 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B46DAE84E903570E023A558EFAB192D6D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NjTt_CAfruhKNzb6MYMg_89umJE.roa Signing time: Mon 22 Dec 2025 16:18:29 +0000 ROA not before: Mon 22 Dec 2025 16:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 138.249.117.0/24 maxlen: 24 170.168.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:da:e8:4e:90:35:70:e0:23:a5:58:ef:ab:19:2d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 22 16:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3634edfc201faee84a3736fa318320ffcf6e9891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:44:4b:62:9d:f7:70:35:b5:2f:49:55:b5: 7c:aa:82:93:33:36:61:64:6d:68:b9:39:60:83:fe: 9d:63:39:e7:b1:84:5e:40:01:3e:62:a6:1a:1a:da: 9b:1e:3c:6e:77:7c:1e:77:7f:1a:f2:c6:a5:21:fb: 19:e9:bd:fd:e5:14:de:a8:8f:40:fa:b9:95:28:91: f3:5b:03:11:95:66:4d:bb:5e:98:d0:fc:50:91:a2: 6e:f8:dc:03:f0:e6:8d:6b:9a:f0:a8:62:24:66:d3: 04:15:af:90:4e:cd:eb:ed:53:89:9a:2f:17:33:c6: 77:d0:b3:b2:05:ce:9e:93:0f:df:14:c4:8e:2a:04: d9:e0:df:8d:2a:bc:28:87:62:af:36:f1:76:a6:85: 05:5f:2d:3a:c3:96:7b:22:0a:38:0f:8e:8e:fb:37: 7c:58:02:df:fb:89:ef:5d:b8:0d:a4:56:e1:60:2f: f2:9b:f2:cb:5a:71:22:56:83:b0:08:75:3d:c4:a7: 60:bd:bb:f2:e1:1d:00:56:e2:55:aa:0f:31:d8:3e: d7:f8:80:ec:ba:a3:af:e0:73:e8:f1:be:f2:fc:ec: be:cb:40:58:26:70:7d:75:d9:8e:08:f4:45:4a:e6: 17:8e:98:f7:d6:23:9c:06:00:10:6a:7f:c7:1a:19: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:ED:FC:20:1F:AE:E8:4A:37:36:FA:31:83:20:FF:CF:6E:98:91 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/NjTt_CAfruhKNzb6MYMg_89umJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.117.0/24 170.168.91.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:97:78:a2:e1:6d:14:ef:73:00:28:a3:67:80:3f:81:a4:1c: 8d:8a:4f:f8:ef:ed:54:13:92:cb:bb:d5:4b:dc:a6:14:6b:ae: 57:0b:59:42:8a:df:34:91:33:a8:e2:93:05:b8:89:e7:1e:21: 57:11:9c:06:25:ae:8c:94:cf:b0:dd:a4:e5:cd:87:8f:32:95: d4:c7:d2:73:77:a3:2a:55:15:cc:90:ce:9d:13:c1:e1:4c:10: 73:39:df:af:7c:15:85:fb:45:85:53:48:51:2e:61:13:24:e2: 59:24:53:e9:ca:4b:b7:cf:88:b7:94:64:0b:2b:f3:8d:f4:bc: 22:d2:8d:49:27:44:19:bc:c1:20:e5:08:4e:77:eb:4b:6e:88: 4a:c7:dc:05:cc:9a:5f:f1:d3:4c:d2:02:00:4b:4f:54:da:4b: d4:96:9c:6d:f0:08:3f:84:a7:70:bb:42:e8:d7:79:84:5f:60: 87:cc:7f:b2:ec:95:b3:3f:88:73:ef:ae:f0:28:19:c6:a4:a5: 7f:1a:54:b0:95:bd:87:de:c1:fd:19:89:1c:29:39:fe:7f:57: 85:74:4d:91:62:5b:f3:ce:b0:f8:24:17:b5:b3:ce:cc:31:e0: 17:36:63:4d:ac:a9:a3:59:b0:17:56:ac:d3:b9:dd:9f:fd:af: 43:93:f1:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtG2uhOkDVw4COlWO+rGS1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjIyMTYxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjM0ZWRmYzIwMWZhZWU4NGEzNzM2ZmEzMTgzMjBmZmNmNmU5ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9dES2Kd93A1tS9JVbV8qoKTMzZh ZG1ouTlgg/6dYznnsYReQAE+YqYaGtqbHjxud3wed38a8salIfsZ6b395RTeqI9A +rmVKJHzWwMRlWZNu16Y0PxQkaJu+NwD8OaNa5rwqGIkZtMEFa+QTs3r7VOJmi8X M8Z30LOyBc6ekw/fFMSOKgTZ4N+NKrwoh2KvNvF2poUFXy06w5Z7Igo4D46O+zd8 WALf+4nvXbgNpFbhYC/ym/LLWnEiVoOwCHU9xKdgvbvy4R0AVuJVqg8x2D7X+IDs uqOv4HPo8b7y/Oy+y0BYJnB9ddmOCPRFSuYXjpj31iOcBgAQan/HGhm1FwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDY07fwgH67oSjc2+jGDIP/PbpiRMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvTmpUdF9DQWZydWhLTnpiNk1ZTWdfODl1bUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAivl1AwQA qqhbMA0GCSqGSIb3DQEBCwUAA4IBAQBfl3ii4W0U73MAKKNngD+BpByNik/47+1U E5LLu9VL3KYUa65XC1lCit80kTOo4pMFuInnHiFXEZwGJa6MlM+w3aTlzYePMpXU x9Jzd6MqVRXMkM6dE8HhTBBzOd+vfBWF+0WFU0hRLmETJOJZJFPpyku3z4i3lGQL K/ON9Lwi0o1JJ0QZvMEg5QhOd+tLbohKx9wFzJpf8dNM0gIAS09U2kvUlpxt8Ag/ hKdwu0Lo13mEX2CHzH+y7JWzP4hz767wKBnGpKV/GlSwlb2H3sH9GYkcKTn+f1eF dE2RYlvzzrD4JBe1s87MMeAXNmNNrKmjWbAXVqzTud2f/a9Dk/GR -----END CERTIFICATE-----Generated at Wed Dec 31 08:28:51 2025 by rpki-client