This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NPcZRaKFgFzfMMx-vthea-ZFIlE.roa File: NPcZRaKFgFzfMMx-vthea-ZFIlE.roa (raw, json) Hash identifier: IakV+n4fQkmcLVABEe4EOrxLSpzqFxmjxsekK+6CZGc= Subject key identifier: 34:F7:19:45:A2:85:80:5C:DF:30:CC:7E:BE:D8:5E:6B:E6:45:22:51 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6BB5B69C570CE597643E9CB02BEAC Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NPcZRaKFgFzfMMx-vthea-ZFIlE.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213912 IP address blocks: 46.8.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:5b:69:c5:70:ce:59:76:43:e9:cb:02:be:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f71945a285805cdf30cc7ebed85e6be6452251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:57:16:30:e1:a0:5f:61:5e:3c:37:d4:cc: 8b:be:dd:18:73:e4:20:f6:a8:77:4d:3a:53:10:9d: c7:e1:ec:ec:71:ff:35:8e:9e:42:12:a7:7c:a4:4a: 28:8c:00:57:4e:9e:c4:e0:ee:5f:52:6b:80:5d:93: 09:93:2b:a3:9c:e0:3d:6e:09:a0:0d:6f:d5:16:98: 32:7c:5a:5e:0d:96:0c:90:df:33:bf:ac:09:aa:36: 88:79:29:83:2b:4b:dc:e4:a6:0a:84:c5:3f:d4:dc: d0:db:db:b3:24:f1:99:59:76:13:17:67:13:4b:4e: e7:ca:15:30:44:25:18:68:10:6e:0b:2b:8e:41:30: a3:a8:6c:67:53:03:69:b5:a5:95:8f:a7:58:d7:13: 0c:b8:09:84:6a:17:1b:7b:ef:4b:35:73:9f:01:dd: fd:74:23:c3:05:f0:b1:29:7f:96:d8:fe:cc:45:11: 9b:29:0f:b0:ac:9e:13:18:e8:7d:f3:7f:c8:da:2b: 5f:89:b1:dd:c1:09:bd:48:42:9a:c6:62:9c:52:5c: 27:43:e5:49:ef:1c:5b:7a:0a:ed:f0:74:9f:aa:6c: aa:be:a8:f9:36:43:55:03:d3:ca:fd:b9:f1:49:a0: 90:f7:fc:68:bb:af:ef:7e:73:c4:5f:20:aa:dc:8b: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:19:45:A2:85:80:5C:DF:30:CC:7E:BE:D8:5E:6B:E6:45:22:51 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NPcZRaKFgFzfMMx-vthea-ZFIlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.66.0/24 Signature Algorithm: sha256WithRSAEncryption 55:58:2f:23:a3:48:f1:8a:8f:a8:1d:ad:16:e0:f0:5a:81:97: 4e:05:5f:85:71:bd:fa:3d:3f:4a:24:80:fd:0d:b8:e5:72:33: cb:de:8a:63:c5:ae:fb:5c:83:b3:83:c6:e8:ea:c9:b7:c4:90: b8:89:87:8d:37:2e:de:5f:0a:c7:a8:ea:c5:54:08:72:5a:9d: 62:4d:c7:13:d2:69:c5:07:08:d5:02:18:f1:af:80:37:81:7a: 01:05:d3:bb:d2:46:db:69:dc:1b:3d:71:fc:9d:43:50:d7:d2: 98:91:c9:ed:16:74:6a:24:08:d5:c9:0c:2c:36:63:3e:82:8b: fe:eb:2e:3f:ff:df:04:c7:f8:8d:8b:88:d7:07:4f:9c:80:8a: f3:02:fe:bc:5f:67:85:c0:69:89:8e:23:45:f4:90:f9:a6:3f: 65:6b:70:a3:ce:ae:8c:4a:96:d4:92:45:d7:45:c0:47:5e:e7: cc:60:42:93:be:28:8c:20:39:1a:72:a4:0c:9a:d8:b2:e8:00: 84:a7:e1:c4:7b:78:8d:a4:86:60:c7:dc:04:3e:22:60:23:ec: de:df:9d:f7:e8:05:de:c3:8b:32:0f:37:41:29:43:d1:fe:3e: 40:8f:dc:0c:d1:7e:db:5e:1e:d5:2e:5b:d0:a4:18:5c:09:24: e3:4c:c2:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrtbacVwzll2Q+nLAr6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGY3MTk0NWEyODU4MDVjZGYzMGNjN2ViZWQ4NWU2YmU2NDUyMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xFXFjDhoF9hXjw31MyLvt0Yc+Qg 9qh3TTpTEJ3H4ezscf81jp5CEqd8pEoojABXTp7E4O5fUmuAXZMJkyujnOA9bgmg DW/VFpgyfFpeDZYMkN8zv6wJqjaIeSmDK0vc5KYKhMU/1NzQ29uzJPGZWXYTF2cT S07nyhUwRCUYaBBuCyuOQTCjqGxnUwNptaWVj6dY1xMMuAmEahcbe+9LNXOfAd39 dCPDBfCxKX+W2P7MRRGbKQ+wrJ4TGOh983/I2itfibHdwQm9SEKaxmKcUlwnQ+VJ 7xxbegrt8HSfqmyqvqj5NkNVA9PK/bnxSaCQ9/xou6/vfnPEXyCq3Iv4XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDT3GUWihYBc3zDMfr7YXmvmRSJRMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvTlBjWlJhS0ZnRnpmTU14LXZ0aGVhLVpGSWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghCMA0G CSqGSIb3DQEBCwUAA4IBAQBVWC8jo0jxio+oHa0W4PBagZdOBV+Fcb36PT9KJID9 DbjlcjPL3opjxa77XIOzg8bo6sm3xJC4iYeNNy7eXwrHqOrFVAhyWp1iTccT0mnF BwjVAhjxr4A3gXoBBdO70kbbadwbPXH8nUNQ19KYkcntFnRqJAjVyQwsNmM+gov+ 6y4//98Ex/iNi4jXB0+cgIrzAv68X2eFwGmJjiNF9JD5pj9la3Cjzq6MSpbUkkXX RcBHXufMYEKTviiMIDkacqQMmtiy6ACEp+HEe3iNpIZgx9wEPiJgI+ze35336AXe w4syDzdBKUPR/j5Aj9wM0X7bXh7VLlvQpBhcCSTjTMLn -----END CERTIFICATE-----Generated at Sun Jan 25 22:46:58 2026 by rpki-client