This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/NuZANK5Y2pq06F_aaqEFEzMCKPs.roa File: NuZANK5Y2pq06F_aaqEFEzMCKPs.roa (raw, json) Hash identifier: ebap13c4g1got53ocFULOxVlWLzAt5eAM9gnlYjXpvM= Subject key identifier: 36:E6:40:34:AE:58:DA:9A:B4:E8:5F:DA:6A:A1:05:13:33:02:28:FB Certificate issuer: /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757 Certificate serial: 019B7B369F5EF0EF57420E27341F7BCD8278 Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/NuZANK5Y2pq06F_aaqEFEzMCKPs.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 129.247.0.0/16 maxlen: 16 192.108.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9f:5e:f0:ef:57:42:0e:27:34:1f:7b:cd:82:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36e64034ae58da9ab4e85fda6aa10513330228fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:7e:80:99:87:ff:15:cb:e0:77:15:b7:1a: 4a:c1:19:be:7f:87:3e:be:ac:fe:94:d2:23:d7:ff: 61:3e:c9:9b:6d:0d:5f:d6:bf:b2:d5:46:23:b8:fa: 8d:9e:a8:c6:a5:ac:7b:fb:63:17:75:af:d2:88:95: 85:17:1d:50:c5:9e:17:98:d1:76:a8:39:72:3d:7e: 22:73:20:15:d1:6a:10:bd:c4:7d:c9:51:1c:b7:5f: 6d:61:98:e4:51:bf:20:6c:bc:bb:41:b7:5e:ed:7d: 9d:bb:1d:de:b3:24:c4:91:79:84:73:38:92:89:20: 76:5b:e6:2e:2d:b1:6e:c1:61:00:dd:4f:76:f3:ca: 75:63:2a:e0:1b:d1:93:d6:b9:65:12:e1:71:ba:9a: 6a:86:51:94:63:42:86:49:5d:71:96:16:ba:92:5c: 3c:57:59:6d:17:f8:d0:e9:6e:2b:56:85:10:56:89: da:4d:db:ac:87:b5:e3:17:c0:79:f8:1f:2a:97:07: bd:a5:8e:8c:3e:ff:1e:5e:71:88:88:43:44:00:42: 59:60:09:28:b7:ae:55:ba:f4:b0:a9:81:63:ba:1f: c4:d9:9e:36:89:90:64:51:17:7a:fe:61:7f:25:8c: c1:e7:18:22:4a:63:18:f1:11:f1:e9:f9:a3:d7:7f: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:40:34:AE:58:DA:9A:B4:E8:5F:DA:6A:A1:05:13:33:02:28:FB X509v3 Authority Key Identifier: keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/NuZANK5Y2pq06F_aaqEFEzMCKPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.247.0.0/16 192.108.54.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:29:14:f1:8e:e0:03:36:a1:06:c5:1e:72:a7:20:2c:a8:dc: f2:02:76:b5:2e:27:c9:e0:4d:f5:32:55:cd:07:0d:e1:ec:b0: 34:d3:ae:d3:6b:37:82:23:d5:c0:a1:9a:3c:c9:cd:5f:c5:3e: a7:6b:3d:13:23:df:cb:15:bf:f2:b3:06:17:ed:00:28:cb:7f: c3:f3:1a:d1:a6:ec:0f:c5:7b:95:80:d0:d2:ed:21:72:f5:c6: 1b:d4:77:a5:b2:b1:0c:25:d5:b1:17:2d:1e:70:b7:65:fa:d3: 8e:d2:ee:cc:a7:ca:90:fb:8d:3e:03:66:ed:1d:49:30:c2:58: 4f:d1:62:08:fe:e1:d4:f7:90:83:89:f6:a3:d2:21:9b:d0:7b: f4:cd:3b:de:8c:b7:cc:95:55:08:ae:81:74:51:02:5d:0a:eb: fc:f1:68:fe:fa:ba:27:6a:c1:20:e4:41:4e:34:e4:17:79:1a: df:d3:80:47:df:83:91:ef:0c:f9:bd:f5:ad:ea:fb:26:d5:98: ac:bc:e0:50:28:ba:3a:db:29:3e:b5:92:14:a9:d9:e1:8f:40: 1e:92:9b:b3:64:de:7e:61:79:b1:cf:bb:98:2c:23:60:89:80: b4:f8:62:14:d5:18:e2:57:ae:3c:ca:6a:e4:a1:19:36:25:39: c8:4b:5a:99 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7Np9e8O9XQg4nNB97zYJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZWM4YTVhZmEzZWQ4ZWJiODU2ZDRkODIxZjY5NmQxNTdm OGE3NTcwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmU2NDAzNGFlNThkYTlhYjRlODVmZGE2YWExMDUxMzMzMDIyOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8J+gJmH/xXL4HcVtxpKwRm+f4c+ vqz+lNIj1/9hPsmbbQ1f1r+y1UYjuPqNnqjGpax7+2MXda/SiJWFFx1QxZ4XmNF2 qDlyPX4icyAV0WoQvcR9yVEct19tYZjkUb8gbLy7Qbde7X2dux3esyTEkXmEcziS iSB2W+YuLbFuwWEA3U9288p1YyrgG9GT1rllEuFxuppqhlGUY0KGSV1xlha6klw8 V1ltF/jQ6W4rVoUQVonaTdush7XjF8B5+B8qlwe9pY6MPv8eXnGIiENEAEJZYAko t65VuvSwqYFjuh/E2Z42iZBkURd6/mF/JYzB5xgiSmMY8RHx6fmj139m0QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDbmQDSuWNqatOhf2mqhBRMzAij7MB8GA1UdIwQY MBaAFFnsilr6PtjruFbU2CH2ltFX+KdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2V5S1d2by0yT3U0VnRUWUlmYVcwVmY0cDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDg3NDEtODcwZC00NzcwLTgzZTUt MWFmMzk2NTcxN2Y3LzEvTnVaQU5LNVkycHEwNkZfYWFxRUZFek1DS1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NDg3NDEtODcwZC00NzcwLTgzZTUtMWFmMzk2NTcxN2Y3 LzEvV2V5S1d2by0yT3U0VnRUWUlmYVcwVmY0cDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgfcDBADA bDYwDQYJKoZIhvcNAQELBQADggEBAB8pFPGO4AM2oQbFHnKnICyo3PICdrUuJ8ng TfUyVc0HDeHssDTTrtNrN4Ij1cChmjzJzV/FPqdrPRMj38sVv/KzBhftACjLf8Pz GtGm7A/Fe5WA0NLtIXL1xhvUd6WysQwl1bEXLR5wt2X6047S7synypD7jT4DZu0d STDCWE/RYgj+4dT3kIOJ9qPSIZvQe/TNO96Mt8yVVQiugXRRAl0K6/zxaP76uidq wSDkQU405Bd5Gt/TgEffg5HvDPm99a3q+ybVmKy84FAoujrbKT61khSp2eGPQB6S m7Nk3n5hebHPu5gsI2CJgLT4YhTVGOJXrjzKauShGTYlOchLWpk= -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:35 2026 by rpki-client