This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/nOWuyvy4DH6k1__anLzqIvUWrnI.roa File: nOWuyvy4DH6k1__anLzqIvUWrnI.roa (raw, json) Hash identifier: FWTcgomuo2Jmq9gwKEXbH5ieQJwMr6YdtSlD/W2xnbY= Subject key identifier: 9C:E5:AE:CA:FC:B8:0C:7E:A4:D7:FF:DA:9C:BC:EA:22:F5:16:AE:72 Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479 Certificate serial: 019B77C69295C628C6578192577C2EB14A8E Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/nOWuyvy4DH6k1__anLzqIvUWrnI.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199711 IP address blocks: 185.48.20.0/22 maxlen: 24 2a01:95a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:92:95:c6:28:c6:57:81:92:57:7c:2e:b1:4a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259796c5f60c55501e458008611623b5049d479 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ce5aecafcb80c7ea4d7ffda9cbcea22f516ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:74:05:17:1c:fb:81:99:67:eb:28:17:85: cd:8e:c0:57:7c:e0:cb:02:18:2d:3b:2e:43:e5:6c: a8:1e:24:5f:c0:ac:f2:16:90:47:67:36:18:61:95: 09:61:36:4b:38:d1:c2:3b:58:fd:4a:02:67:1a:d8: a4:7e:1b:9e:f0:c8:67:2f:2c:27:b1:5a:35:77:a5: c7:2f:4b:e5:e6:07:38:8c:f9:72:5c:10:f1:bd:0d: 40:fb:ba:ce:6f:b5:5f:1b:1a:3e:0b:75:69:cd:18: 50:ab:69:16:3e:df:19:d9:be:0c:1a:19:4a:3b:0d: 2e:a5:55:af:10:b4:db:a7:21:a3:df:51:be:82:26: d6:0f:36:1e:e8:94:61:1f:fb:45:96:c8:54:38:95: 2f:1b:0c:33:3b:aa:e9:0f:13:28:31:18:02:79:71: 1d:25:1b:96:85:86:71:a2:ce:0e:e7:f7:93:60:e9: d3:8c:7c:e4:2e:39:a1:6f:db:1e:f5:a4:f6:f2:0b: 0d:27:a0:ea:b4:66:44:99:89:ca:2f:74:0e:ff:1e: ff:77:7b:89:62:1d:5f:4c:78:0f:55:6f:86:a0:38: fa:49:2c:d4:64:5c:76:80:6c:19:37:67:b8:f7:68: c8:78:e8:cc:24:f8:94:56:0a:64:0e:70:b5:9f:b3: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E5:AE:CA:FC:B8:0C:7E:A4:D7:FF:DA:9C:BC:EA:22:F5:16:AE:72 X509v3 Authority Key Identifier: keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/nOWuyvy4DH6k1__anLzqIvUWrnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.20.0/22 IPv6: 2a01:95a0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:2c:43:3c:a2:32:29:be:b5:31:a8:d5:6d:ba:15:61:6c:65: 4f:62:99:aa:af:ab:0a:4f:f0:89:7d:3c:e9:e4:f9:39:3e:9e: 97:2b:d8:77:32:86:7e:e4:b8:66:3a:a3:d8:5f:80:f1:6e:3d: e9:af:17:36:c5:42:e8:ce:c2:8f:e3:8d:0c:84:16:dc:de:97: 62:ea:7f:6d:a6:44:87:e1:30:83:75:b0:03:c1:5c:59:84:2c: da:55:e1:d8:ee:c3:51:3e:56:2a:13:a9:15:68:61:b8:bc:1a: 9c:36:c3:52:83:e5:2f:64:9d:64:50:b9:6f:51:2c:d2:88:9d: e5:d9:93:50:37:00:2d:13:c4:bd:1f:8b:ff:bb:69:9e:32:d4: f8:be:06:53:6a:65:b7:04:05:e8:f0:22:b9:f7:a5:8b:b0:eb: 0f:df:50:df:3e:56:cc:70:74:92:4c:02:15:10:c2:c1:61:ef: 5b:93:e2:c0:db:26:49:f9:6f:fc:3c:87:79:4c:c7:d1:34:18: d9:52:f4:7c:19:2a:0c:5e:d1:87:f8:7e:fc:e5:c6:f1:67:46: ba:a5:6f:2f:53:07:0c:02:da:e2:6c:e0:a8:9f:f8:fe:35:06: ee:0e:93:6e:a8:bd:ca:b2:cd:88:7b:c3:d3:b3:a9:d3:0c:1c: d4:24:1a:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xpKVxijGV4GSV3wusUqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTk3OTZjNWY2MGM1NTUwMWU0NTgwMDg2MTE2MjNiNTA0 OWQ0NzkwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U1YWVjYWZjYjgwYzdlYTRkN2ZmZGE5Y2JjZWEyMmY1MTZhZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqV0BRcc+4GZZ+soF4XNjsBXfODL AhgtOy5D5WyoHiRfwKzyFpBHZzYYYZUJYTZLONHCO1j9SgJnGtikfhue8MhnLywn sVo1d6XHL0vl5gc4jPlyXBDxvQ1A+7rOb7VfGxo+C3VpzRhQq2kWPt8Z2b4MGhlK Ow0upVWvELTbpyGj31G+gibWDzYe6JRhH/tFlshUOJUvGwwzO6rpDxMoMRgCeXEd JRuWhYZxos4O5/eTYOnTjHzkLjmhb9se9aT28gsNJ6DqtGZEmYnKL3QO/x7/d3uJ Yh1fTHgPVW+GoDj6SSzUZFx2gGwZN2e492jIeOjMJPiUVgpkDnC1n7OruQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJzlrsr8uAx+pNf/2py86iL1Fq5yMB8GA1UdIwQY MBaAFFJZeWxfYMVVAeRYAIYRYjtQSdR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYt ZThiYmI1NTE5MjM2LzEvbk9XdXl2eTRESDZrMV9fYW5MenFJdlVXcm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYtZThiYmI1NTE5MjM2 LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTAUMA0E AgACMAcDBQAqAZWgMA0GCSqGSIb3DQEBCwUAA4IBAQBtLEM8ojIpvrUxqNVtuhVh bGVPYpmqr6sKT/CJfTzp5Pk5Pp6XK9h3MoZ+5LhmOqPYX4Dxbj3prxc2xULozsKP 440MhBbc3pdi6n9tpkSH4TCDdbADwVxZhCzaVeHY7sNRPlYqE6kVaGG4vBqcNsNS g+UvZJ1kULlvUSzSiJ3l2ZNQNwAtE8S9H4v/u2meMtT4vgZTamW3BAXo8CK596WL sOsP31DfPlbMcHSSTAIVEMLBYe9bk+LA2yZJ+W/8PId5TMfRNBjZUvR8GSoMXtGH +H785cbxZ0a6pW8vUwcMAtribOCon/j+NQbuDpNuqL3Kss2Ie8PTs6nTDBzUJBre -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client