This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/NmTQqlVS4gvcDPcirwbd6QLOVW8.roa File: NmTQqlVS4gvcDPcirwbd6QLOVW8.roa (raw, json) Hash identifier: LMiHoX5P+lxgXfAq1o1ofUm+DKjY+GVzWYYvknBSyow= Subject key identifier: 36:64:D0:AA:55:52:E2:0B:DC:0C:F7:22:AF:06:DD:E9:02:CE:55:6F Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB7B72476F9C9B80F2ECB89B08D19E Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/NmTQqlVS4gvcDPcirwbd6QLOVW8.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 89.39.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:72:47:6f:9c:9b:80:f2:ec:b8:9b:08:d1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3664d0aa5552e20bdc0cf722af06dde902ce556f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:55:fa:8d:04:e5:d7:23:87:dc:80:6d:7a: 06:1d:34:62:02:ca:8d:ea:6b:96:af:47:96:08:76: b6:43:f2:8a:35:7f:05:9a:c6:2b:9b:d4:80:24:c4: 7d:fa:31:f7:2c:60:ba:29:6e:8f:83:ca:ab:f0:8d: 39:c3:0a:ad:62:11:62:a1:c3:bd:16:2b:98:31:c6: b1:24:ab:d0:38:dd:3a:d3:7a:b8:22:b8:a7:d9:aa: ff:d0:37:ee:ad:f1:13:22:1b:95:5c:da:4e:db:64: 90:5a:e3:87:06:93:70:b5:a9:62:10:0e:41:34:17: d6:27:48:e6:24:fa:ed:ef:d7:8b:f5:40:9e:3b:7b: 46:8b:b0:db:08:ce:86:1e:ea:56:05:40:28:41:34: 66:d2:c1:65:28:a7:b2:f2:17:9c:74:b8:8d:73:49: 13:bc:e1:40:8c:f0:9d:9e:2d:ae:4e:c6:82:f3:52: 5d:5c:05:5c:9f:5c:81:7c:29:5a:23:9b:1b:d4:69: 5f:fd:ac:5b:f5:87:25:6b:94:b9:be:7d:74:35:22: d1:cf:c4:6d:6e:2f:d4:7e:76:01:a2:1a:ca:7b:02: 33:a6:5d:5a:ec:c9:1a:eb:5f:fb:c5:78:19:3c:ca: e0:14:98:fa:1b:4e:72:d1:0b:c1:84:06:12:36:3f: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:D0:AA:55:52:E2:0B:DC:0C:F7:22:AF:06:DD:E9:02:CE:55:6F X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/NmTQqlVS4gvcDPcirwbd6QLOVW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.6.0/24 Signature Algorithm: sha256WithRSAEncryption cd:50:2a:62:ce:9f:4d:ed:e6:54:ed:a0:82:77:a1:dd:72:29: 83:bd:42:b9:1b:3a:7a:36:08:01:11:c4:27:03:d5:19:c7:66: 1e:85:ad:03:a3:f7:9f:12:b2:56:01:ed:1e:72:79:97:33:a9: b3:c4:15:fc:42:36:c8:09:b0:48:9d:0b:cd:ba:e5:f5:e6:9b: bf:73:e9:6a:ae:46:ff:f6:ea:04:70:76:56:48:7e:23:d9:d5: b6:1d:7a:30:6d:20:86:e7:64:fd:2a:cc:16:b2:fd:2f:a7:9b: b0:0b:bd:0f:b6:e6:6b:b8:13:10:13:5a:88:79:1c:9e:ee:dc: 4c:b6:e3:b0:8b:27:04:d1:ac:3d:21:07:be:4e:21:8f:ee:53: 38:74:e3:cd:95:5b:9e:46:24:da:80:80:e7:45:28:ee:9a:a6: ee:fb:12:b0:16:07:c2:08:9d:20:4f:e8:fd:50:99:62:3d:a0: 8a:d8:5f:4d:27:41:27:71:48:26:c4:7c:14:53:49:7a:05:19: 07:30:ae:4e:25:21:3c:c2:7a:0b:d3:b1:7e:df:bb:84:4b:b7: 5b:58:56:11:95:2a:08:f2:cb:ad:f4:f9:fb:66:cd:63:ea:a3: ab:82:d9:da:b8:28:12:93:f2:74:40:31:98:36:3d:84:39:35: 22:9a:18:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263tyR2+cm4Dy7LibCNGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjY0ZDBhYTU1NTJlMjBiZGMwY2Y3MjJhZjA2ZGRlOTAyY2U1NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovlV+o0E5dcjh9yAbXoGHTRiAsqN 6muWr0eWCHa2Q/KKNX8FmsYrm9SAJMR9+jH3LGC6KW6Pg8qr8I05wwqtYhFiocO9 FiuYMcaxJKvQON0603q4Irin2ar/0DfurfETIhuVXNpO22SQWuOHBpNwtaliEA5B NBfWJ0jmJPrt79eL9UCeO3tGi7DbCM6GHupWBUAoQTRm0sFlKKey8hecdLiNc0kT vOFAjPCdni2uTsaC81JdXAVcn1yBfClaI5sb1Glf/axb9Ycla5S5vn10NSLRz8Rt bi/UfnYBohrKewIzpl1a7Mka61/7xXgZPMrgFJj6G05y0QvBhAYSNj/REQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZk0KpVUuIL3Az3Iq8G3ekCzlVvMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvTm1UUXFsVlM0Z3ZjRFBjaXJ3YmQ2UUxPVlc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWScGMA0G CSqGSIb3DQEBCwUAA4IBAQDNUCpizp9N7eZU7aCCd6HdcimDvUK5Gzp6NggBEcQn A9UZx2Yeha0Do/efErJWAe0ecnmXM6mzxBX8QjbICbBInQvNuuX15pu/c+lqrkb/ 9uoEcHZWSH4j2dW2HXowbSCG52T9KswWsv0vp5uwC70PtuZruBMQE1qIeRye7txM tuOwiycE0aw9IQe+TiGP7lM4dOPNlVueRiTagIDnRSjumqbu+xKwFgfCCJ0gT+j9 UJliPaCK2F9NJ0EncUgmxHwUU0l6BRkHMK5OJSE8wnoL07F+37uES7dbWFYRlSoI 8sut9Pn7Zs1j6qOrgtnauCgSk/J0QDGYNj2EOTUimhh2 -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:06 2026 by rpki-client