This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/N7Chnxgw-54QaVo-7XCK63eAgs4.roa File: N7Chnxgw-54QaVo-7XCK63eAgs4.roa (raw, json) Hash identifier: F81B+a8612MzBa6mf2NWTlwi3qVJtZzatWiSMxmB2y0= Subject key identifier: 37:B0:A1:9F:18:30:FB:9E:10:69:5A:3E:ED:70:8A:EB:77:80:82:CE Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Certificate serial: 019B76EB7A8793BF21C6E3B071EFC1DA34D8 Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/N7Chnxgw-54QaVo-7XCK63eAgs4.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14537 IP address blocks: 5.62.80.0/20 maxlen: 24 45.85.4.0/22 maxlen: 24 66.84.64.0/20 maxlen: 24 78.24.208.0/21 maxlen: 24 81.85.104.0/21 maxlen: 24 94.125.56.0/21 maxlen: 24 109.202.112.0/21 maxlen: 24 185.28.72.0/22 maxlen: 24 193.31.208.0/20 maxlen: 24 193.33.228.0/23 maxlen: 24 2a03:9e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:87:93:bf:21:c6:e3:b0:71:ef:c1:da:34:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37b0a19f1830fb9e10695a3eed708aeb778082ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:a7:97:26:40:90:f4:e7:ae:e2:ea:1d:e5: e9:e4:72:bc:a9:81:01:26:a3:46:84:fe:5b:88:0c: 33:be:69:9e:77:c6:eb:7f:17:e7:0f:d0:25:d1:31: 21:e8:39:8d:cd:8a:eb:02:1b:86:e3:93:ab:c4:fa: 62:c8:b3:58:0f:5c:6e:25:ab:63:eb:26:de:d1:03: fe:73:d4:56:f2:0d:e1:d1:ec:ab:0f:ac:0d:42:96: 46:93:b2:1e:24:cc:7a:25:b1:b4:b0:e2:39:f3:b5: cd:5f:4a:b3:92:bb:90:81:2b:f1:1a:7a:81:ca:2a: 3a:02:28:b2:09:cc:c1:54:63:4b:93:39:ea:eb:b8: 22:ce:ab:12:c9:57:fa:27:89:1e:a2:06:82:e1:24: fa:16:62:5f:54:bb:2b:4b:f0:43:fc:4b:1b:d4:83: b0:c0:d0:cc:58:dd:3e:8b:47:88:ef:0a:6b:72:d3: c6:e7:47:8b:a4:32:99:18:d7:f6:20:2a:bb:6d:19: 53:b8:da:81:05:2a:54:45:5a:90:bf:08:d1:39:b3: 26:db:1c:0a:eb:f7:bb:ff:5e:64:d3:f4:3f:6f:57: 8f:c6:bf:2b:09:92:41:5d:eb:b8:31:04:69:46:6e: 0c:79:ca:b2:d9:8b:42:8b:37:1e:c2:85:b9:f2:82: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:A1:9F:18:30:FB:9E:10:69:5A:3E:ED:70:8A:EB:77:80:82:CE X509v3 Authority Key Identifier: keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/N7Chnxgw-54QaVo-7XCK63eAgs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.80.0/20 45.85.4.0/22 66.84.64.0/20 78.24.208.0/21 81.85.104.0/21 94.125.56.0/21 109.202.112.0/21 185.28.72.0/22 193.31.208.0/20 193.33.228.0/23 IPv6: 2a03:9e00::/32 Signature Algorithm: sha256WithRSAEncryption 00:01:fa:82:8a:5f:e7:e0:a4:80:02:b2:0a:e5:79:98:de:e2: 67:89:93:06:23:d8:30:0a:5f:00:b5:3a:ec:0a:4a:5a:98:de: b2:47:b6:fe:c3:62:1a:93:d8:ae:02:e6:c4:f7:4b:80:38:7c: 76:ae:6f:80:c7:4a:76:09:3f:94:56:09:01:c0:27:c3:1f:d5: f1:97:5a:7a:93:dd:47:2a:7c:a1:c1:be:54:9f:e6:69:32:8a: ec:63:a5:b5:ef:ff:a4:c5:3f:6e:29:15:77:91:1a:d1:9e:57: ae:1e:b7:e1:59:b0:03:9f:5b:4a:0d:d4:7f:20:a1:f7:23:6a: 1d:f6:aa:9c:21:71:6e:9b:41:24:94:5f:79:57:a9:9c:19:0c: 9f:78:f0:67:ab:d0:c6:2f:7d:c4:26:23:d8:a6:92:a0:d4:c9: a7:9c:f3:42:40:50:7c:92:90:8f:07:f6:0e:e2:7f:36:02:6d: 8f:3d:cc:23:5d:60:1b:3b:b6:dc:a2:74:0b:2e:6a:23:5b:09: 3b:68:b0:b7:33:34:19:b9:4c:97:00:63:e5:3d:dd:4c:43:b0: 24:a9:8e:b2:c4:95:8f:46:7e:3e:ba:27:75:81:cc:22:d2:96: 50:c0:ee:58:1e:4a:ba:7b:3c:c8:6f:29:8f:c1:e5:4e:c1:41: 9b:4d:a5:3b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt263qHk78hxuOwce/B2jTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDZlOGE3NmQzMGM3YzA0OTViYzVjZThlZTUxMTBmZWFi Mjg2ZTYwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2IwYTE5ZjE4MzBmYjllMTA2OTVhM2VlZDcwOGFlYjc3ODA4MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7inlyZAkPTnruLqHeXp5HK8qYEB JqNGhP5biAwzvmmed8brfxfnD9Al0TEh6DmNzYrrAhuG45OrxPpiyLNYD1xuJatj 6ybe0QP+c9RW8g3h0eyrD6wNQpZGk7IeJMx6JbG0sOI587XNX0qzkruQgSvxGnqB yio6AiiyCczBVGNLkznq67gizqsSyVf6J4keogaC4ST6FmJfVLsrS/BD/Esb1IOw wNDMWN0+i0eI7wprctPG50eLpDKZGNf2ICq7bRlTuNqBBSpURVqQvwjRObMm2xwK 6/e7/15k0/Q/b1ePxr8rCZJBXeu4MQRpRm4Mecqy2YtCizcewoW58oL7TwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFDewoZ8YMPueEGlaPu1wiut3gILOMB8GA1UdIwQY MBaAFAJG6KdtMMfASVvFzo7lEQ/qsobmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEt N2I5NmE5OTk3NzE4LzEvTjdDaG54Z3ctNTRRYVZvLTdYQ0s2M2VBZ3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEtN2I5NmE5OTk3NzE4 LzEvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQEBT5QAwQC LVUEAwQEQlRAAwQDThjQAwQDUVVoAwQDXn04AwQDbcpwAwQCuRxIAwQEwR/QAwQB wSHkMA0EAgACMAcDBQAqA54AMA0GCSqGSIb3DQEBCwUAA4IBAQAAAfqCil/n4KSA ArIK5XmY3uJniZMGI9gwCl8AtTrsCkpamN6yR7b+w2Iak9iuAubE90uAOHx2rm+A x0p2CT+UVgkBwCfDH9Xxl1p6k91HKnyhwb5Un+ZpMorsY6W17/+kxT9uKRV3kRrR nleuHrfhWbADn1tKDdR/IKH3I2od9qqcIXFum0EklF95V6mcGQyfePBnq9DGL33E JiPYppKg1MmnnPNCQFB8kpCPB/YO4n82Am2PPcwjXWAbO7bconQLLmojWwk7aLC3 MzQZuUyXAGPlPd1MQ7AkqY6yxJWPRn4+uid1gcwi0pZQwO5YHkq6ezzIbymPweVO wUGbTaU7 -----END CERTIFICATE-----Generated at Thu Jan 22 19:27:50 2026 by rpki-client