This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/nCefriJl2VPKegNYyVwj2ynX1o4.roa File: nCefriJl2VPKegNYyVwj2ynX1o4.roa (raw, json) Hash identifier: DrdI9RW4C32/rl7W/jweDQ18afw7p4Ra4A85oKVHBRw= Subject key identifier: 9C:27:9F:AE:22:65:D9:53:CA:7A:03:58:C9:5C:23:DB:29:D7:D6:8E Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca Certificate serial: 019B7C1209B737835213FD77D46BF11BAF74 Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/nCefriJl2VPKegNYyVwj2ynX1o4.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34235 IP address blocks: 5.179.192.0/21 maxlen: 21 91.223.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:09:b7:37:83:52:13:fd:77:d4:6b:f1:1b:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c279fae2265d953ca7a0358c95c23db29d7d68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:e9:e8:d2:6d:48:64:4e:56:8d:e8:07:ea: ac:d0:e9:1a:fa:70:59:44:e7:2e:ce:c1:82:f4:30: ce:37:24:6f:8e:30:e3:0d:eb:cc:d5:08:19:7e:20: 2b:4a:be:c3:1e:ca:66:b7:3f:9b:a7:25:0d:b9:37: ee:e4:f9:5f:9a:94:79:2b:d8:3c:c8:ea:a1:78:23: ad:70:40:a7:de:20:bb:a6:f1:45:96:7a:38:48:8e: b1:5d:c1:e5:b5:40:bd:20:00:80:ac:00:fa:cc:f7: d9:b5:c3:c0:78:c7:1a:b6:77:02:c9:cc:77:d8:40: e8:ee:8e:68:d4:5c:77:e3:f2:5d:61:79:33:4f:52: 26:90:07:e1:04:67:cf:e4:94:03:06:db:b0:6a:45: 4d:87:cf:e0:a9:3c:27:f6:36:f2:af:09:e4:f9:3f: 5a:23:1a:48:84:3d:24:d1:1c:1a:68:2c:63:f0:7e: 14:c6:0f:e3:fb:56:3a:49:56:0e:6f:4b:00:ec:e1: 4f:3c:73:97:11:3a:42:87:db:35:b0:a6:53:70:45: a2:e4:0f:0f:96:da:55:1b:18:92:58:0e:a9:e4:7e: 52:4d:80:d6:c1:57:16:aa:96:b0:ab:6b:0e:a7:7f: 1c:b0:dd:3d:32:3c:86:b9:4e:ac:84:58:4e:ef:76: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:9F:AE:22:65:D9:53:CA:7A:03:58:C9:5C:23:DB:29:D7:D6:8E X509v3 Authority Key Identifier: keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/nCefriJl2VPKegNYyVwj2ynX1o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.192.0/21 91.223.253.0/24 Signature Algorithm: sha256WithRSAEncryption a5:85:1a:84:b9:ce:86:57:08:3c:13:55:a8:f2:dd:cf:39:75: d2:c8:a7:75:6b:42:26:bb:5c:49:79:a7:40:be:94:21:f8:86: 3d:7b:84:fe:fc:1a:c2:6a:9e:f1:0d:15:47:e8:6d:31:f4:95: 94:11:0f:f8:d5:e9:e3:0d:7d:48:ea:b2:4d:5a:26:bc:f9:ee: f4:46:c2:f4:58:3b:9e:4b:6e:11:91:21:92:50:76:61:4d:28: 69:cf:19:82:75:a1:33:f0:f6:cd:d4:3d:93:5c:05:a0:79:50: d3:82:07:4d:b9:c0:47:88:45:ec:57:0f:35:1c:97:ba:4f:b5: eb:c8:4d:d1:2d:8e:9a:9c:49:fe:07:7b:7f:79:8b:4e:71:7a: a3:b5:65:44:d6:35:24:47:09:61:f7:83:f9:51:32:4d:15:2a: 12:65:de:b3:5e:a7:73:99:e3:c1:4a:5b:b5:06:17:b2:43:f4: 9f:8d:71:20:c4:e4:3d:1c:9b:db:51:12:ee:10:6b:3b:be:97: ab:10:63:c4:c6:b5:10:00:78:b6:e4:d6:7e:1f:8c:45:93:bb: 85:00:16:50:1f:50:86:4b:ae:b4:64:8d:8b:da:78:fb:56:49: a2:36:72:cf:2e:51:a0:48:37:20:41:04:fa:7d:07:92:85:7a: c7:da:13:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Egm3N4NSE/131GvxG690MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4 NWNmY2EwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzI3OWZhZTIyNjVkOTUzY2E3YTAzNThjOTVjMjNkYjI5ZDdkNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIPp6NJtSGROVo3oB+qs0Oka+nBZ ROcuzsGC9DDONyRvjjDjDevM1QgZfiArSr7DHspmtz+bpyUNuTfu5PlfmpR5K9g8 yOqheCOtcECn3iC7pvFFlno4SI6xXcHltUC9IACArAD6zPfZtcPAeMcatncCycx3 2EDo7o5o1Fx34/JdYXkzT1ImkAfhBGfP5JQDBtuwakVNh8/gqTwn9jbyrwnk+T9a IxpIhD0k0RwaaCxj8H4Uxg/j+1Y6SVYOb0sA7OFPPHOXETpCh9s1sKZTcEWi5A8P ltpVGxiSWA6p5H5STYDWwVcWqpawq2sOp38csN09MjyGuU6shFhO73ZdAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJwnn64iZdlTynoDWMlcI9sp19aOMB8GA1UdIwQY MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt ZDNiOTBhOWI5YjQxLzEvbkNlZnJpSmwyVlBLZWdOWXlWd2oyeW5YMW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBbPAAwQA W9/9MA0GCSqGSIb3DQEBCwUAA4IBAQClhRqEuc6GVwg8E1Wo8t3POXXSyKd1a0Im u1xJeadAvpQh+IY9e4T+/BrCap7xDRVH6G0x9JWUEQ/41enjDX1I6rJNWia8+e70 RsL0WDueS24RkSGSUHZhTShpzxmCdaEz8PbN1D2TXAWgeVDTggdNucBHiEXsVw81 HJe6T7XryE3RLY6anEn+B3t/eYtOcXqjtWVE1jUkRwlh94P5UTJNFSoSZd6zXqdz mePBSlu1BheyQ/SfjXEgxOQ9HJvbURLuEGs7vperEGPExrUQAHi25NZ+H4xFk7uF ABZQH1CGS660ZI2L2nj7VkmiNnLPLlGgSDcgQQT6fQeShXrH2hMe -----END CERTIFICATE-----Generated at Wed Jan 21 16:08:22 2026 by rpki-client