This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nfzLn4jdAK-bMvptyZI8HeQ50Nw.roa File: nfzLn4jdAK-bMvptyZI8HeQ50Nw.roa (raw, json) Hash identifier: P144WGyaUkM8evz+1cwyRajfeC4G28EaYkpAPMitoig= Subject key identifier: 9D:FC:CB:9F:88:DD:00:AF:9B:32:FA:6D:C9:92:3C:1D:E4:39:D0:DC Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DB7D71E55D3BB2252DCD64508B9C Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nfzLn4jdAK-bMvptyZI8HeQ50Nw.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 2a0f:5707:aae0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:db:7d:71:e5:5d:3b:b2:25:2d:cd:64:50:8b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dfccb9f88dd00af9b32fa6dc9923c1de439d0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:b9:db:31:55:b2:6f:75:19:99:f5:2e:47: d7:db:16:fb:f7:bf:20:b1:ab:37:7e:8a:7a:08:29: d0:43:fb:d5:76:5f:8c:15:ec:b9:84:47:6c:d9:ab: 47:49:0a:21:05:3a:4a:f9:d8:ad:2b:5f:1a:88:44: e3:df:7f:37:88:75:64:c6:93:d1:b3:e6:88:f5:a3: 1b:28:d6:40:17:89:5a:b7:cc:eb:25:3c:9f:3e:5e: c9:77:29:4a:2d:57:86:6e:76:e4:b9:09:53:55:b3: fa:fa:72:45:d8:18:3f:03:95:28:d4:75:1e:e4:dc: 90:e9:34:67:46:29:7a:9a:5b:10:14:ba:86:d5:ac: 6a:48:b3:7e:0c:ea:fe:54:f2:56:d3:a2:58:58:ce: a1:04:a0:e9:54:35:b9:c1:34:cf:cd:05:fc:8a:79: 00:28:81:c2:29:63:6a:72:2b:5f:42:3c:7d:36:61: c5:ca:d8:8c:50:6b:ed:de:2a:52:f2:92:51:ce:9b: 7d:49:21:34:bd:db:c8:e4:11:d9:54:66:69:26:e7: 98:a5:37:52:11:f4:0b:46:ca:70:50:4d:81:56:cf: 8b:6d:e8:7c:ac:73:55:55:fd:0d:95:d8:0b:4d:69: 8b:0d:80:12:6b:d7:b9:86:96:71:eb:4f:b2:fc:cd: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FC:CB:9F:88:DD:00:AF:9B:32:FA:6D:C9:92:3C:1D:E4:39:D0:DC X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nfzLn4jdAK-bMvptyZI8HeQ50Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aae0::/44 Signature Algorithm: sha256WithRSAEncryption 6d:cd:53:52:16:2a:23:26:75:15:08:b4:d7:7d:a3:9d:5c:49: 97:13:c7:0c:c3:18:b2:c3:66:bd:e5:ba:d5:a2:94:f0:39:e6: 25:0d:4b:8e:be:f8:ef:5b:59:0b:f6:92:ec:1a:94:7b:c4:25: 18:92:8f:bb:36:7f:82:ea:72:1d:0c:5f:e6:92:f0:5c:7b:11: ff:dd:38:17:69:1e:b5:81:7c:ea:af:23:50:e7:77:36:6e:6a: a3:d7:13:17:d9:95:93:a2:39:a0:8a:8b:cd:7b:f5:b9:c1:37: a9:5d:00:3a:42:c4:42:2d:3a:43:2e:59:82:6c:ed:33:3f:e3: 47:ca:27:ed:6a:0c:1e:d7:4e:a5:11:1f:be:93:bc:4b:09:d2: e0:b4:5e:03:bb:e6:71:c7:51:b7:ef:0b:5e:b8:79:f2:40:a0: 83:77:07:1e:35:6b:bf:3f:10:09:36:38:ea:c8:28:23:47:cd: e5:08:82:8d:f7:a4:a0:36:1e:a8:ea:4c:67:4c:7f:64:b6:ba: 62:24:c5:6c:a2:63:ae:00:de:c7:c7:76:a7:58:8d:52:f2:fe: 84:c4:87:6d:0b:08:88:8a:92:a2:89:a3:5b:1b:9d:86:14:03: dc:da:91:8f:13:63:93:42:eb:eb:12:e5:8d:6e:38:8f:a6:16: b9:90:f3:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNt9ceVdO7IlLc1kUIucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZjY2I5Zjg4ZGQwMGFmOWIzMmZhNmRjOTkyM2MxZGU0MzlkMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmW52zFVsm91GZn1LkfX2xb7978g sas3fop6CCnQQ/vVdl+MFey5hEds2atHSQohBTpK+ditK18aiETj3383iHVkxpPR s+aI9aMbKNZAF4lat8zrJTyfPl7JdylKLVeGbnbkuQlTVbP6+nJF2Bg/A5Uo1HUe 5NyQ6TRnRil6mlsQFLqG1axqSLN+DOr+VPJW06JYWM6hBKDpVDW5wTTPzQX8inkA KIHCKWNqcitfQjx9NmHFytiMUGvt3ipS8pJRzpt9SSE0vdvI5BHZVGZpJueYpTdS EfQLRspwUE2BVs+Lbeh8rHNVVf0NldgLTWmLDYASa9e5hpZx60+y/M0GYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ38y5+I3QCvmzL6bcmSPB3kOdDcMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvbmZ6TG40amRBSy1iTXZwdHlaSThIZVE1ME53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6rg MA0GCSqGSIb3DQEBCwUAA4IBAQBtzVNSFiojJnUVCLTXfaOdXEmXE8cMwxiyw2a9 5brVopTwOeYlDUuOvvjvW1kL9pLsGpR7xCUYko+7Nn+C6nIdDF/mkvBcexH/3TgX aR61gXzqryNQ53c2bmqj1xMX2ZWTojmgiovNe/W5wTepXQA6QsRCLTpDLlmCbO0z P+NHyiftagwe106lER++k7xLCdLgtF4Du+Zxx1G37wteuHnyQKCDdwceNWu/PxAJ NjjqyCgjR83lCIKN96SgNh6o6kxnTH9ktrpiJMVsomOuAN7Hx3anWI1S8v6ExIdt CwiIipKiiaNbG52GFAPc2pGPE2OTQuvrEuWNbjiPpha5kPOF -----END CERTIFICATE-----Generated at Sun Jan 18 08:34:56 2026 by rpki-client