This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/Ndt8uuGi72U1tnG6JBWJCurH_90.roa File: Ndt8uuGi72U1tnG6JBWJCurH_90.roa (raw, json) Hash identifier: H3XUa8CUY2aqsCDQqjvD15KbZs7crcvz7R5nCz3xrWg= Subject key identifier: 35:DB:7C:BA:E1:A2:EF:65:35:B6:71:BA:24:15:89:0A:EA:C7:FF:DD Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb Certificate serial: 019B7E373256C66B5603EEBC8513549158E5 Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/Ndt8uuGi72U1tnG6JBWJCurH_90.roa Signing time: Fri 02 Jan 2026 10:18:25 +0000 ROA not before: Fri 02 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25413 IP address blocks: 146.106.0.0/16 maxlen: 24 194.105.120.0/21 maxlen: 24 194.156.12.0/22 maxlen: 24 2a0d:c40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:32:56:c6:6b:56:03:ee:bc:85:13:54:91:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb Validity Not Before: Jan 2 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35db7cbae1a2ef6535b671ba2415890aeac7ffdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:ed:bc:9a:31:aa:e3:fa:7e:39:ba:6d:a5: 3e:72:29:c1:9f:11:df:3b:9c:4c:dd:3e:8d:83:08: 67:0a:cf:1e:2f:35:61:ff:3d:78:93:df:ea:6a:0d: 65:90:49:ca:0d:00:a8:33:eb:cf:4d:e6:80:eb:55: 06:80:eb:87:7a:ee:91:eb:fc:d7:5c:b4:43:cb:72: 97:23:d8:a0:aa:02:d6:10:03:09:16:81:15:ce:08: a0:4c:d9:1c:58:7a:18:f2:b9:ec:6c:38:cc:ef:a0: 19:52:79:43:c8:61:94:8b:92:3b:26:53:b1:56:da: 4e:b6:3f:62:1c:ea:d8:c7:e6:77:d2:71:30:09:ea: ad:7f:de:05:dd:47:62:be:50:5c:bd:1c:99:b3:cc: 64:31:6d:c5:af:78:af:f4:b9:55:43:ae:c3:6f:84: a9:10:dd:12:a5:b0:23:03:54:28:e4:25:32:e0:5c: a3:82:0d:08:a8:fe:9e:1f:33:92:0d:3f:f0:b5:9f: 84:0d:e8:00:5a:1b:b4:09:64:30:f0:21:a3:27:78: 70:e3:52:c4:9f:d9:c6:fa:71:37:3d:12:44:d1:f3: ce:b4:6d:6b:21:dc:a0:c7:64:f8:dc:7b:b5:d8:0a: 8b:87:08:c9:7d:94:26:2b:f0:f6:bb:e7:4e:ef:f6: 69:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DB:7C:BA:E1:A2:EF:65:35:B6:71:BA:24:15:89:0A:EA:C7:FF:DD X509v3 Authority Key Identifier: keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/Ndt8uuGi72U1tnG6JBWJCurH_90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.106.0.0/16 194.105.120.0/21 194.156.12.0/22 IPv6: 2a0d:c40::/29 Signature Algorithm: sha256WithRSAEncryption 81:16:6a:d4:99:88:d8:42:cf:77:94:52:ad:d9:9b:1c:e2:c1: 43:2c:10:1e:12:05:3d:7f:d8:29:0c:5a:0d:2b:a4:2d:fd:5c: f4:6f:38:60:47:62:b8:d5:fa:f5:53:a8:49:5f:19:3a:c1:57: 73:35:61:8b:a2:cf:5b:1b:bd:d2:a9:9c:86:12:6d:9a:f0:04: b8:b6:88:2d:a1:66:58:7e:9c:15:67:35:30:bf:2f:4e:5e:d6: da:5f:4b:d9:68:30:f0:ed:b4:bd:b2:04:96:a6:d9:44:55:f6: 55:2a:75:1e:20:65:b6:29:cf:16:8e:5b:7b:67:91:77:7e:aa: 0e:42:d7:3a:ba:7a:db:9f:d5:e8:92:25:f8:50:c5:6f:5b:b8: e9:9e:11:45:5a:72:e0:ab:cf:b5:1f:9d:29:5e:74:92:ef:b5: 5e:24:61:ff:cd:c4:80:f9:31:a9:f5:f3:2f:45:86:73:18:bf: 30:a1:35:f3:10:16:7c:4a:93:50:e0:96:f3:0f:c0:54:c7:dc: 43:7d:be:94:89:27:1f:4c:6c:de:bc:e4:ac:04:39:99:c6:1b: 00:e7:84:ba:1b:c7:89:29:cb:52:de:80:b2:50:fc:55:94:f4: 50:33:9b:98:67:36:7d:0e:5c:7a:42:d8:4b:20:12:94:f1:85: f4:9a:15:e8 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+NzJWxmtWA+68hRNUkVjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWZlN2U4YjlkZTY3NTkxMzEyMWU3ZWJiNDIyNmI2MmQw M2IxY2IwHhcNMjYwMTAyMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWRiN2NiYWUxYTJlZjY1MzViNjcxYmEyNDE1ODkwYWVhYzdmZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp3tvJoxquP6fjm6baU+cinBnxHf O5xM3T6NgwhnCs8eLzVh/z14k9/qag1lkEnKDQCoM+vPTeaA61UGgOuHeu6R6/zX XLRDy3KXI9igqgLWEAMJFoEVzgigTNkcWHoY8rnsbDjM76AZUnlDyGGUi5I7JlOx VtpOtj9iHOrYx+Z30nEwCeqtf94F3UdivlBcvRyZs8xkMW3Fr3iv9LlVQ67Db4Sp EN0SpbAjA1Qo5CUy4Fyjgg0IqP6eHzOSDT/wtZ+EDegAWhu0CWQw8CGjJ3hw41LE n9nG+nE3PRJE0fPOtG1rIdygx2T43Hu12AqLhwjJfZQmK/D2u+dO7/ZpYQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDXbfLrhou9lNbZxuiQViQrqx//dMB8GA1UdIwQY MBaAFFCf5+i53mdZExIefrtCJrYtA7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMt MGI0NzdjYTczYWM2LzEvTmR0OHV1R2k3MlUxdG5HNkpCV0pDdXJIXzkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMtMGI0NzdjYTczYWM2 LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAkmoDBAPC aXgDBALCnAwwDQQCAAIwBwMFAyoNDEAwDQYJKoZIhvcNAQELBQADggEBAIEWatSZ iNhCz3eUUq3ZmxziwUMsEB4SBT1/2CkMWg0rpC39XPRvOGBHYrjV+vVTqElfGTrB V3M1YYuiz1sbvdKpnIYSbZrwBLi2iC2hZlh+nBVnNTC/L05e1tpfS9loMPDttL2y BJam2URV9lUqdR4gZbYpzxaOW3tnkXd+qg5C1zq6etuf1eiSJfhQxW9buOmeEUVa cuCrz7UfnSledJLvtV4kYf/NxID5Man18y9FhnMYvzChNfMQFnxKk1DglvMPwFTH 3EN9vpSJJx9MbN685KwEOZnGGwDnhLobx4kpy1LegLJQ/FWU9FAzm5hnNn0OXHpC 2EsgEpTxhfSaFeg= -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:44 2026 by rpki-client