This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/NN0D0_aIw84B94C96rasFNPLuDM.roa File: NN0D0_aIw84B94C96rasFNPLuDM.roa (raw, json) Hash identifier: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes= Subject key identifier: 34:DD:03:D3:F6:88:C3:CE:01:F7:80:BD:EA:B6:AC:14:D3:CB:B8:33 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDB3176657B798AF03DD1A91B40CF Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/NN0D0_aIw84B94C96rasFNPLuDM.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39879 IP address blocks: 212.183.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:db:31:76:65:7b:79:8a:f0:3d:d1:a9:1b:40:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34dd03d3f688c3ce01f780bdeab6ac14d3cbb833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:3b:21:d5:bf:28:df:63:f0:e9:91:ae:a5: 68:66:fe:a2:2d:7d:e1:7f:b6:07:91:f3:60:d2:af: f6:5a:9d:05:06:bd:1d:49:1e:3d:6f:78:78:f6:df: aa:de:a3:63:7f:37:0c:97:9b:54:fb:94:84:d2:f9: f1:87:f6:c8:a6:32:e9:22:74:58:27:d6:cd:bd:8c: 69:92:dd:74:de:1a:68:74:85:12:75:d2:cd:d2:c4: 3e:50:a9:91:e7:cc:7c:70:ed:d6:32:0c:3a:a5:08: dd:33:55:df:bd:1f:19:d6:f7:56:77:bf:df:1e:d0: 60:59:2e:2f:fa:17:ee:9a:69:c4:8e:40:e9:23:83: db:f6:d8:21:27:60:81:4a:d2:8c:11:cf:34:af:5f: 9b:37:c7:ba:0c:f8:85:08:12:22:a3:06:2d:89:d1: 11:87:74:0c:be:9c:13:83:e8:c8:7f:64:1d:db:be: b3:f2:55:0d:0a:6f:1a:b2:78:a3:ec:c0:a2:a5:8f: 60:34:91:e5:47:8f:b5:33:43:5d:ca:4c:20:c4:4d: 0b:04:25:b4:5d:be:51:9c:ec:09:ad:fb:1c:c9:58: 12:5d:86:40:77:62:78:1c:f1:dc:57:48:be:8c:8f: 25:f6:7e:25:86:b8:ef:a4:ca:18:39:c7:65:28:59: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:03:D3:F6:88:C3:CE:01:F7:80:BD:EA:B6:AC:14:D3:CB:B8:33 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/NN0D0_aIw84B94C96rasFNPLuDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.183.22.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ae:26:af:48:6e:ee:e8:7f:99:e4:5e:b6:f5:89:dd:0d:83: 41:ef:7e:92:c7:38:d6:9b:50:3c:df:93:ef:b3:3c:d0:f2:23: 99:be:93:28:26:14:2c:90:6b:9b:7c:8a:a5:05:3f:77:af:34: 3e:5d:db:bf:57:75:47:dd:ee:2e:67:78:0c:05:8b:ba:2b:fa: 97:95:a8:ad:16:dc:0c:e6:fa:61:3d:86:93:a9:be:ba:6b:eb: ca:69:a4:97:96:82:16:63:d9:c1:0d:6c:54:ea:74:44:ca:e8: 57:ea:14:50:07:96:f9:b2:56:cd:6e:99:ea:ad:61:eb:94:e0: d9:64:f6:b8:54:fd:e7:1e:e6:a2:c9:eb:78:03:28:34:8e:5a: da:61:b5:36:3e:07:bf:6e:71:3c:04:57:37:2e:0c:a7:d0:ab: 90:8e:d9:1c:4e:b1:99:4f:56:0b:c2:7e:39:8a:72:71:28:1b: 4e:b9:66:71:14:cd:0a:09:f2:d9:60:2b:a6:be:6b:11:78:56: 03:5c:c7:de:3e:2f:fb:8c:65:62:1a:c7:56:6f:75:e5:d2:cc: de:38:65:f0:36:bd:6f:da:d2:18:21:a2:fa:8a:9a:59:e9:e7: 08:1d:0f:7c:42:50:1f:28:d1:00:76:f3:b5:cd:9f:69:26:b3: e2:92:ce:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569sxdmV7eYrwPdGpG0DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGRkMDNkM2Y2ODhjM2NlMDFmNzgwYmRlYWI2YWMxNGQzY2JiODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p07IdW/KN9j8OmRrqVoZv6iLX3h f7YHkfNg0q/2Wp0FBr0dSR49b3h49t+q3qNjfzcMl5tU+5SE0vnxh/bIpjLpInRY J9bNvYxpkt103hpodIUSddLN0sQ+UKmR58x8cO3WMgw6pQjdM1XfvR8Z1vdWd7/f HtBgWS4v+hfummnEjkDpI4Pb9tghJ2CBStKMEc80r1+bN8e6DPiFCBIiowYtidER h3QMvpwTg+jIf2Qd276z8lUNCm8asnij7MCipY9gNJHlR4+1M0NdykwgxE0LBCW0 Xb5RnOwJrfscyVgSXYZAd2J4HPHcV0i+jI8l9n4lhrjvpMoYOcdlKFl4PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTdA9P2iMPOAfeAveq2rBTTy7gzMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvTk4wRDBfYUl3ODRCOTRDOTZyYXNGTlBMdURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LcWMA0G CSqGSIb3DQEBCwUAA4IBAQAHriavSG7u6H+Z5F629YndDYNB736SxzjWm1A835Pv szzQ8iOZvpMoJhQskGubfIqlBT93rzQ+Xdu/V3VH3e4uZ3gMBYu6K/qXlaitFtwM 5vphPYaTqb66a+vKaaSXloIWY9nBDWxU6nREyuhX6hRQB5b5slbNbpnqrWHrlODZ ZPa4VP3nHuaiyet4Ayg0jlraYbU2Pge/bnE8BFc3Lgyn0KuQjtkcTrGZT1YLwn45 inJxKBtOuWZxFM0KCfLZYCumvmsReFYDXMfePi/7jGViGsdWb3Xl0szeOGXwNr1v 2tIYIaL6ippZ6ecIHQ98QlAfKNEAdvO1zZ9pJrPiks5R -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:40 2026 by rpki-client