This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NzgBAY0PEiO9SvcisnAN-Dgp70I.roa File: NzgBAY0PEiO9SvcisnAN-Dgp70I.roa (raw, json) Hash identifier: PgxCY7nnUeDP8ggwh9IasWcw4qdwhfpM5pkkn3oVCMM= Subject key identifier: 37:38:01:01:8D:0F:12:23:BD:4A:F7:22:B2:70:0D:F8:38:29:EF:42 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2509A7F35873893F35032594A0D8D Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NzgBAY0PEiO9SvcisnAN-Dgp70I.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 212.134.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:50:9a:7f:35:87:38:93:f3:50:32:59:4a:0d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373801018d0f1223bd4af722b2700df83829ef42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:4e:45:f6:4b:8a:50:3d:e1:f4:d9:ea:1b: 27:12:93:b6:c3:f5:9a:bb:ef:46:e7:ea:e4:05:95: 03:fb:d9:c4:7d:6a:44:fe:26:35:13:9e:cb:de:e1: 08:bb:f6:54:e1:7b:d4:e4:18:f9:d2:b4:d2:87:50: 2c:98:77:46:cd:15:58:0a:40:60:0f:52:66:23:30: e7:81:e2:d5:6a:0e:17:64:05:ba:b7:73:f2:16:c9: 29:6f:02:ee:e3:3c:51:89:74:c2:8b:d2:7b:f7:0c: dd:24:3f:52:49:7a:cf:da:f7:a4:9e:d7:6c:d3:6d: 7b:c8:25:9a:9d:eb:85:e7:8e:1d:eb:fb:15:81:c5: 7a:7d:cc:ab:99:f4:d7:22:13:70:58:9f:58:f7:0a: 86:73:f0:0a:a8:9e:8d:44:c7:7d:2b:c3:0b:ce:bd: 21:bb:6e:b2:ef:28:c0:f1:7a:57:1f:1b:37:1d:72: b1:55:23:72:d5:d9:dc:ff:02:33:44:83:2a:30:50: 1a:0c:f7:50:91:dd:13:d4:4c:49:03:25:21:32:4c: 2b:79:65:fa:c8:14:b6:af:12:24:d6:56:f4:72:fb: 6c:94:64:0b:ce:08:52:18:e0:fe:d5:ae:48:26:ec: f5:aa:12:64:4c:88:cd:7b:f3:28:37:88:86:02:9a: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:38:01:01:8D:0F:12:23:BD:4A:F7:22:B2:70:0D:F8:38:29:EF:42 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NzgBAY0PEiO9SvcisnAN-Dgp70I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.178.0/24 Signature Algorithm: sha256WithRSAEncryption 78:dd:f3:cc:92:8d:c1:73:3d:40:d2:fa:5a:6f:91:7e:63:bf: 3a:34:93:64:fd:e9:5f:59:01:05:2e:a3:ae:66:1b:f8:0e:d7: 74:5f:06:09:0a:fc:2f:33:f4:d1:f9:3c:7d:d0:b0:c6:7d:9b: cc:de:b9:bc:e9:8e:29:64:72:94:cd:26:b6:9d:e8:75:76:17: 02:e6:b0:e4:02:06:75:84:37:28:e2:77:32:84:6b:a0:34:ff: 4a:cf:d5:45:d5:b6:1d:d0:b2:b1:c3:c2:be:a8:57:9a:d3:4e: 42:d8:14:df:a5:40:91:67:d4:2e:03:4d:20:c2:4d:0f:d2:15: 17:03:ad:cc:8d:f2:32:9c:47:c0:3e:de:ce:e3:7f:35:73:30: 90:ac:1b:12:d5:eb:01:85:d8:f4:84:42:f9:97:1b:e0:97:78: 28:5d:e9:a6:e2:d6:7e:fa:4b:4f:1a:85:ef:dd:b5:95:21:d7: c0:14:c8:08:c5:eb:10:98:d7:ed:68:5e:43:e0:eb:2b:4f:34: c5:f4:a9:ac:ca:09:55:36:33:bd:81:9c:29:70:d7:02:95:b1: bb:31:04:8e:79:b6:c5:9c:b7:5d:2c:97:ff:34:6c:15:a6:1d: 24:4b:3e:a1:11:b8:0f:11:75:2a:d1:75:5e:ae:03:e2:35:71: 12:13:11:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olCafzWHOJPzUDJZSg2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzM4MDEwMThkMGYxMjIzYmQ0YWY3MjJiMjcwMGRmODM4MjllZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtelORfZLilA94fTZ6hsnEpO2w/Wa u+9G5+rkBZUD+9nEfWpE/iY1E57L3uEIu/ZU4XvU5Bj50rTSh1AsmHdGzRVYCkBg D1JmIzDngeLVag4XZAW6t3PyFskpbwLu4zxRiXTCi9J79wzdJD9SSXrP2vekntds 0217yCWaneuF544d6/sVgcV6fcyrmfTXIhNwWJ9Y9wqGc/AKqJ6NRMd9K8MLzr0h u26y7yjA8XpXHxs3HXKxVSNy1dnc/wIzRIMqMFAaDPdQkd0T1ExJAyUhMkwreWX6 yBS2rxIk1lb0cvtslGQLzghSGOD+1a5IJuz1qhJkTIjNe/MoN4iGApoE8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDc4AQGNDxIjvUr3IrJwDfg4Ke9CMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvTnpnQkFZMFBFaU85U3ZjaXNuQU4tRGdwNzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IayMA0G CSqGSIb3DQEBCwUAA4IBAQB43fPMko3Bcz1A0vpab5F+Y786NJNk/elfWQEFLqOu Zhv4Dtd0XwYJCvwvM/TR+Tx90LDGfZvM3rm86Y4pZHKUzSa2neh1dhcC5rDkAgZ1 hDco4ncyhGugNP9Kz9VF1bYd0LKxw8K+qFea005C2BTfpUCRZ9QuA00gwk0P0hUX A63MjfIynEfAPt7O4381czCQrBsS1esBhdj0hEL5lxvgl3goXemm4tZ++ktPGoXv 3bWVIdfAFMgIxesQmNftaF5D4OsrTzTF9KmsyglVNjO9gZwpcNcClbG7MQSOebbF nLddLJf/NGwVph0kSz6hEbgPEXUq0XVergPiNXESExE4 -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:38 2026 by rpki-client