This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nCz2fRPdkLCeUFKbINMOdbVib94.roa File: nCz2fRPdkLCeUFKbINMOdbVib94.roa (raw, json) Hash identifier: VaUSCrqfqJrpFG0/DnmNylq9G76Lm3t4eoz8Lpc792k= Subject key identifier: 9C:2C:F6:7D:13:DD:90:B0:9E:50:52:9B:20:D3:0E:75:B5:62:6F:DE Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B8AC0EC6E0C6EAFF7BBD3EF964DB Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nCz2fRPdkLCeUFKbINMOdbVib94.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213662 IP address blocks: 46.8.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:ac:0e:c6:e0:c6:ea:ff:7b:bd:3e:f9:64:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2cf67d13dd90b09e50529b20d30e75b5626fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:a0:ed:b9:56:de:83:74:50:6c:fd:e0:4c: 3e:8a:17:50:b7:89:9a:25:a8:0b:2d:10:87:68:60: 13:b8:31:5d:b2:3f:6e:e2:7d:d9:f5:40:4e:04:22: 87:8a:2b:0e:50:49:7b:59:ed:d0:fd:75:80:35:e7: 44:ef:71:60:47:df:ca:aa:1a:16:43:6e:9e:fd:bd: 54:b7:0d:4c:c8:50:fd:67:b6:1d:17:cf:9a:81:57: 58:87:27:75:ed:55:65:47:65:ba:9d:9f:6c:27:33: 8d:be:8b:f0:e3:a4:08:4d:7e:ee:d3:c0:be:82:c8: e8:17:20:57:be:15:ae:a0:7d:77:df:2b:8d:22:30: 0c:ab:3b:91:1b:ce:a4:5f:d2:4e:31:35:3c:de:b5: a9:e7:40:33:63:2c:d1:01:5b:54:be:3b:0f:75:9b: 41:46:bd:f9:9a:4f:57:dc:9d:e4:c2:48:5e:15:31: a5:74:c1:4a:0b:3c:05:d0:be:eb:61:04:86:c9:7f: b2:ff:bf:b3:c2:c5:81:b8:07:6d:ea:d5:84:bb:3b: 7b:88:f1:43:66:2e:7e:b3:0f:99:1a:5c:2f:09:62: fd:d8:be:cb:34:10:29:22:db:67:3c:18:95:f3:dc: 85:03:1c:38:8b:7b:63:b5:3d:0f:6b:9b:67:59:41: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:F6:7D:13:DD:90:B0:9E:50:52:9B:20:D3:0E:75:B5:62:6F:DE X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/nCz2fRPdkLCeUFKbINMOdbVib94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.76.0/24 Signature Algorithm: sha256WithRSAEncryption 87:5f:cf:86:a3:2b:f2:3a:2b:23:f6:b3:e5:d8:c9:73:41:8d: 2b:f9:b3:07:ef:2c:2b:a4:d0:20:f1:71:1b:67:1f:13:62:4c: 98:f5:1b:a8:f5:e3:87:04:01:60:69:90:67:c0:8f:f9:0d:b6: f2:4b:3f:93:a3:7a:7a:2c:31:05:42:4e:44:17:ba:6c:d5:62: b0:2d:85:d6:57:50:3a:56:e9:39:1b:02:d8:96:e0:fc:42:77: 62:e2:dd:30:fc:f9:d9:df:6a:81:b5:25:37:11:36:9b:ab:95: 91:c2:23:04:c9:59:cb:4e:3e:99:9c:e9:fc:b8:0c:3a:a9:dd: 79:36:05:e9:8d:9d:cb:3b:d2:12:4b:e7:bf:51:52:04:d1:41: e4:df:fa:67:ac:8f:6d:22:64:84:38:10:a4:56:77:9e:80:c5: e5:59:71:2b:1d:88:93:30:1e:10:35:4b:4d:82:70:01:cb:e4: a3:da:e4:18:5c:93:36:10:4c:bb:f8:48:a5:8a:a3:96:c8:e1: 7b:dc:a3:93:b8:a8:8a:73:14:6e:81:a7:92:f5:79:17:da:16: 8d:7a:9a:92:41:5b:86:7b:48:13:4f:e1:4c:d2:5a:37:b4:3e: d4:94:70:53:f9:6f:55:a1:59:49:42:32:0f:e4:04:92:76:fd: 5f:85:e7:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrisDsbgxur/e70++WTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzJjZjY3ZDEzZGQ5MGIwOWU1MDUyOWIyMGQzMGU3NWI1NjI2ZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+g7blW3oN0UGz94Ew+ihdQt4ma JagLLRCHaGATuDFdsj9u4n3Z9UBOBCKHiisOUEl7We3Q/XWANedE73FgR9/KqhoW Q26e/b1Utw1MyFD9Z7YdF8+agVdYhyd17VVlR2W6nZ9sJzONvovw46QITX7u08C+ gsjoFyBXvhWuoH133yuNIjAMqzuRG86kX9JOMTU83rWp50AzYyzRAVtUvjsPdZtB Rr35mk9X3J3kwkheFTGldMFKCzwF0L7rYQSGyX+y/7+zwsWBuAdt6tWEuzt7iPFD Zi5+sw+ZGlwvCWL92L7LNBApIttnPBiV89yFAxw4i3tjtT0Pa5tnWUGtYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJws9n0T3ZCwnlBSmyDTDnW1Ym/eMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvbkN6MmZSUGRrTENlVUZLYklOTU9kYlZpYjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghMMA0G CSqGSIb3DQEBCwUAA4IBAQCHX8+GoyvyOisj9rPl2MlzQY0r+bMH7ywrpNAg8XEb Zx8TYkyY9Ruo9eOHBAFgaZBnwI/5DbbySz+To3p6LDEFQk5EF7ps1WKwLYXWV1A6 Vuk5GwLYluD8Qndi4t0w/PnZ32qBtSU3ETabq5WRwiMEyVnLTj6ZnOn8uAw6qd15 NgXpjZ3LO9ISS+e/UVIE0UHk3/pnrI9tImSEOBCkVneegMXlWXErHYiTMB4QNUtN gnABy+Sj2uQYXJM2EEy7+EiliqOWyOF73KOTuKiKcxRugaeS9XkX2haNepqSQVuG e0gTT+FM0lo3tD7UlHBT+W9VoVlJQjIP5ASSdv1fheds -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:01 2026 by rpki-client