This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/NGBYVNMlRzkNddaz0SJ5GUPHy4c.roa File: NGBYVNMlRzkNddaz0SJ5GUPHy4c.roa (raw, json) Hash identifier: HQab6e2lCxRpGeUa7RhxSOTl0QwADQrxIBu98J8LSqI= Subject key identifier: 34:60:58:54:D3:25:47:39:0D:75:D6:B3:D1:22:79:19:43:C7:CB:87 Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Certificate serial: 019C33255E88F33D06DA2224BF34BD4EB963 Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/NGBYVNMlRzkNddaz0SJ5GUPHy4c.roa Signing time: Fri 06 Feb 2026 13:30:12 +0000 ROA not before: Fri 06 Feb 2026 13:30:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208989 IP address blocks: 45.12.8.0/22 maxlen: 22 2a10:7140::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:25:5e:88:f3:3d:06:da:22:24:bf:34:bd:4e:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Validity Not Before: Feb 6 13:30:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34605854d32547390d75d6b3d122791943c7cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:12:43:b6:99:cf:fd:a0:3a:3a:2e:4d:82: fa:97:59:a8:d2:80:f6:cd:3c:0f:88:b8:69:9c:2f: 51:1a:bb:5f:46:27:1e:4a:ef:80:04:a0:7c:41:f7: e9:23:c2:6f:a1:5e:84:5c:b8:38:09:ca:f7:4e:e0: 9f:bc:c7:36:fa:7a:67:a1:19:ec:79:81:48:93:ea: 05:ab:74:e0:0f:19:f7:59:c1:71:b9:ce:8a:f6:fc: 65:3e:67:dd:23:1b:29:39:89:b9:67:e9:8e:ff:ed: 2d:8e:40:1c:68:5c:fa:cb:7d:4e:88:54:dd:62:47: 29:9b:9c:89:72:04:d1:aa:1e:9a:92:a9:c0:51:50: 74:84:55:f6:5f:20:c9:63:29:b8:24:08:2d:ff:ce: 82:6f:dd:bf:7c:14:ae:84:5d:d2:21:28:16:c9:26: 9e:24:e3:aa:41:94:0c:63:7a:72:e6:64:a4:6c:c7: a7:3c:e3:37:79:32:bf:50:53:20:3b:08:fa:87:11: e1:71:0f:b4:a6:5d:7e:c3:0a:ce:1d:ce:b4:a3:8b: f9:87:8a:0a:0d:eb:a2:7f:08:3e:a4:c7:9f:00:77: 9f:39:2a:33:a4:02:ba:9c:00:13:3e:6a:c2:f5:31: 8e:03:cb:3a:03:fa:4d:70:f2:78:d5:f9:d8:0d:06: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:58:54:D3:25:47:39:0D:75:D6:B3:D1:22:79:19:43:C7:CB:87 X509v3 Authority Key Identifier: keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/NGBYVNMlRzkNddaz0SJ5GUPHy4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.8.0/22 IPv6: 2a10:7140::/64 Signature Algorithm: sha256WithRSAEncryption 2a:a0:2c:bc:7d:5e:0d:2c:b9:50:39:b4:f7:53:5a:b1:7c:ce: 87:63:ab:4a:8d:c0:63:c1:b3:f2:ba:8e:35:9e:3f:f2:62:7b: 7d:cd:63:74:d1:60:85:3a:29:14:b1:d9:ce:a9:aa:b0:14:8e: 5c:1c:5f:61:9f:fd:d4:5a:16:01:07:bd:85:ed:bf:6d:c3:e6: 9c:d3:f4:24:b3:f0:5c:c8:39:45:92:c3:76:ba:dc:f9:38:9a: ee:e2:52:24:31:70:69:f0:c8:7a:47:2e:60:89:0e:fc:c9:23: ae:78:d5:f5:96:4c:7d:62:31:db:57:a1:1f:50:fa:ca:f7:ff: ee:ef:37:bc:12:5b:4e:e8:e0:1a:23:2f:fa:eb:1b:6a:10:97: 8f:09:0d:e6:92:9e:96:5b:3f:78:45:eb:e8:97:cc:12:83:0a: b4:2e:57:70:1a:77:ba:c1:25:4a:44:33:dc:9e:c7:38:90:8d: 8f:ae:af:b7:61:23:37:90:92:5c:d6:fb:63:ca:81:0e:b6:21: de:e1:a2:bc:84:67:5c:bf:9d:32:97:9a:4c:76:9c:11:9b:4c: 3b:40:ad:fc:03:29:30:62:13:8b:85:be:44:9c:17:0d:75:86: 91:4f:4c:83:78:d2:39:56:70:b7:fc:04:1b:08:94:d0:b3:9a: 42:a0:fd:a7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZwzJV6I8z0G2iIkvzS9TrljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzJkNDRkOWUwOGM4NzNkYjM1YzAyMTUxY2E0NGFlNTRi NGI4YWYwHhcNMjYwMjA2MTMzMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDYwNTg1NGQzMjU0NzM5MGQ3NWQ2YjNkMTIyNzkxOTQzYzdjYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz4SQ7aZz/2gOjouTYL6l1mo0oD2 zTwPiLhpnC9RGrtfRiceSu+ABKB8QffpI8JvoV6EXLg4Ccr3TuCfvMc2+npnoRns eYFIk+oFq3TgDxn3WcFxuc6K9vxlPmfdIxspOYm5Z+mO/+0tjkAcaFz6y31OiFTd Ykcpm5yJcgTRqh6akqnAUVB0hFX2XyDJYym4JAgt/86Cb92/fBSuhF3SISgWySae JOOqQZQMY3py5mSkbMenPOM3eTK/UFMgOwj6hxHhcQ+0pl1+wwrOHc60o4v5h4oK Deuifwg+pMefAHefOSozpAK6nAATPmrC9TGOA8s6A/pNcPJ41fnYDQalBQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFDRgWFTTJUc5DXXWs9EieRlDx8uHMB8GA1UdIwQY MBaAFFIy1E2eCMhz2zXAIVHKRK5UtLivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYt YTY1NDFjZWIxZTQzLzEvTkdCWVZOTWxSemtOZGRhejBTSjVHVVBIeTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYtYTY1NDFjZWIxZTQz LzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQCLQwIMBEE AgACMAsDCQAqEHFAAAAAADANBgkqhkiG9w0BAQsFAAOCAQEAKqAsvH1eDSy5UDm0 91NasXzOh2OrSo3AY8Gz8rqONZ4/8mJ7fc1jdNFghTopFLHZzqmqsBSOXBxfYZ/9 1FoWAQe9he2/bcPmnNP0JLPwXMg5RZLDdrrc+Tia7uJSJDFwafDIekcuYIkO/Mkj rnjV9ZZMfWIx21ehH1D6yvf/7u83vBJbTujgGiMv+usbahCXjwkN5pKells/eEXr 6JfMEoMKtC5XcBp3usElSkQz3J7HOJCNj66vt2EjN5CSXNb7Y8qBDrYh3uGivIRn XL+dMpeaTHacEZtMO0Ct/AMpMGITi4W+RJwXDXWGkU9Mg3jSOVZwt/wEGwiU0LOa QqD9pw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:20 2026 by rpki-client