This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/N--cUZYdrjxvVxG6Axu1sudxu_k.roa File: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (raw, json) Hash identifier: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o= Subject key identifier: 37:EF:9C:51:96:1D:AE:3C:6F:57:11:BA:03:1B:B5:B2:E7:71:BB:F9 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94FFE7AEC685C0EF159FA4CDE7874 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/N--cUZYdrjxvVxG6Axu1sudxu_k.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211513 IP address blocks: 202.164.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4f:fe:7a:ec:68:5c:0e:f1:59:fa:4c:de:78:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37ef9c51961dae3c6f5711ba031bb5b2e771bbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:61:6c:e1:12:ab:eb:90:9c:c7:de:07:75: 4c:18:10:88:51:2b:5e:64:39:12:d1:4f:13:e3:6b: 0d:a1:dc:eb:c9:56:80:20:cc:db:13:93:57:4c:43: 6d:cf:67:4f:d5:e0:78:ab:4a:b0:ce:34:23:63:75: 03:f5:79:d8:88:8e:45:d1:5d:61:8a:3b:33:8e:6a: a4:bc:ed:f1:67:07:bc:01:b7:9c:9b:fb:15:e7:34: 42:99:56:f5:4f:b8:f4:ab:e4:66:64:4f:63:0e:df: f0:da:03:19:70:96:0c:79:7d:4f:af:0b:5e:ce:32: b4:78:2c:e0:5e:8f:aa:8f:b5:99:ae:cf:a7:ff:b5: 33:b8:f6:40:d5:cf:fb:7a:57:0e:d1:dc:06:e2:c5: 7e:81:28:f4:87:6e:aa:1d:a1:f8:3a:23:0d:ed:ba: b5:ae:3f:8a:0b:1d:fa:3a:25:ca:5d:96:b4:3b:c4: 2d:10:b8:e1:16:2c:db:b6:a0:25:ec:4b:f0:21:13: 81:7d:8d:db:83:df:a2:4a:43:e7:42:50:a8:22:6e: 67:fa:3e:a1:b6:d3:14:fc:df:0b:fb:18:76:d7:4a: 6a:5f:4e:4d:98:05:78:97:74:4a:ef:e1:51:c6:f7: 37:33:dc:09:c7:9e:aa:e7:18:61:50:d5:a8:f4:bb: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:9C:51:96:1D:AE:3C:6F:57:11:BA:03:1B:B5:B2:E7:71:BB:F9 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/N--cUZYdrjxvVxG6Axu1sudxu_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.164.206.0/24 Signature Algorithm: sha256WithRSAEncryption a4:fc:8a:e7:fd:f7:3b:f2:ac:8d:d2:d9:b4:78:15:f1:b3:ba: e3:26:26:c0:94:2d:1a:9c:97:1e:22:fd:7c:80:1b:5a:f4:b0: 29:0d:f6:d2:34:63:a3:6d:71:e6:41:58:f6:a3:b7:68:e6:d0: 9b:6d:34:00:c7:69:bf:8e:3c:1b:b4:d5:3b:99:5f:d1:9a:79: d1:dd:54:29:1c:5a:42:61:0b:ca:55:25:cb:8a:3b:c9:d4:54: c3:f0:77:f6:af:88:da:9b:a6:d0:99:8f:2e:e3:00:ee:a4:8d: 24:a8:5b:8a:cb:58:fe:7c:b5:75:30:81:02:26:49:8b:19:c7: 69:2e:12:e6:25:44:8f:e3:a2:68:53:96:7d:91:54:40:17:6e: 1b:e4:49:e6:da:c2:dc:f4:5b:f1:29:de:f4:cc:4a:7f:67:25: 0b:21:70:b0:ab:61:c4:a1:76:53:9d:d3:a5:23:00:5b:4f:d1: 9c:35:ef:89:97:a7:75:e4:cd:5e:b0:f4:c7:1e:92:e1:f0:39: 0f:c4:41:c9:6c:a5:e9:66:0a:a8:da:24:8d:74:53:07:18:22: f9:b8:bd:10:be:27:ff:21:85:d8:6a:5e:fa:9f:66:77:19:73: 56:75:f4:e6:21:d4:99:4d:53:28:c5:bb:10:78:01:d9:1d:24: 2a:11:da:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yU/+euxoXA7xWfpM3nh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2VmOWM1MTk2MWRhZTNjNmY1NzExYmEwMzFiYjViMmU3NzFiYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4VhbOESq+uQnMfeB3VMGBCIUSte ZDkS0U8T42sNodzryVaAIMzbE5NXTENtz2dP1eB4q0qwzjQjY3UD9XnYiI5F0V1h ijszjmqkvO3xZwe8Abecm/sV5zRCmVb1T7j0q+RmZE9jDt/w2gMZcJYMeX1Prwte zjK0eCzgXo+qj7WZrs+n/7UzuPZA1c/7elcO0dwG4sV+gSj0h26qHaH4OiMN7bq1 rj+KCx36OiXKXZa0O8QtELjhFizbtqAl7EvwIROBfY3bg9+iSkPnQlCoIm5n+j6h ttMU/N8L+xh210pqX05NmAV4l3RK7+FRxvc3M9wJx56q5xhhUNWo9LvOvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfvnFGWHa48b1cRugMbtbLncbv5MB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvTi0tY1VaWWRyanh2VnhHNkF4dTFzdWR4dV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqTOMA0G CSqGSIb3DQEBCwUAA4IBAQCk/Irn/fc78qyN0tm0eBXxs7rjJibAlC0anJceIv18 gBta9LApDfbSNGOjbXHmQVj2o7do5tCbbTQAx2m/jjwbtNU7mV/RmnnR3VQpHFpC YQvKVSXLijvJ1FTD8Hf2r4jam6bQmY8u4wDupI0kqFuKy1j+fLV1MIECJkmLGcdp LhLmJUSP46JoU5Z9kVRAF24b5Enm2sLc9FvxKd70zEp/ZyULIXCwq2HEoXZTndOl IwBbT9GcNe+Jl6d15M1esPTHHpLh8DkPxEHJbKXpZgqo2iSNdFMHGCL5uL0Qvif/ IYXYal76n2Z3GXNWdfTmIdSZTVMoxbsQeAHZHSQqEdol -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client