This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa File: NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa (raw, json) Hash identifier: JLUP7PxQRVwd14LjjaQL3EnNrNdoYyGJTVHvFQwAfgI= Subject key identifier: 35:33:87:22:A6:0D:3D:29:1E:C1:AA:4D:C1:6D:86:43:F7:90:A7:D4 Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Certificate serial: 019B7D5BFC21F26620695D386A3A88812D62 Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215399 IP address blocks: 194.62.45.0/24 maxlen: 24 2001:67c:e18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fc:21:f2:66:20:69:5d:38:6a:3a:88:81:2d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35338722a60d3d291ec1aa4dc16d8643f790a7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:78:b4:3e:21:11:98:e9:4c:11:24:3b:1a: 13:2b:d7:be:02:fe:1d:d4:d4:d9:cb:f2:86:37:77: d3:a7:51:df:57:5a:25:25:39:25:bf:f8:0d:49:5a: d8:0d:73:a8:f1:f5:02:75:5a:e6:5b:73:3d:fe:16: 77:82:93:6b:ce:70:a5:d9:49:9a:ac:e4:cf:a3:8f: 9e:88:b7:d2:42:a2:22:a4:d4:66:74:13:3b:ab:2c: c0:02:13:ae:a7:73:36:ba:84:f1:38:25:5e:84:02: 7a:fb:69:33:f9:85:53:36:06:8f:28:56:be:87:fe: a6:d2:f9:4d:7f:da:48:3d:f5:9d:ee:da:4e:67:ca: 1f:09:dc:91:31:2e:89:27:81:d4:82:74:99:be:b7: 20:ec:06:dd:f3:2e:9b:07:e6:f4:34:e6:58:32:02: e9:a7:94:03:3d:f4:5b:67:43:81:f9:8f:cc:c6:26: 38:4d:a8:33:45:29:be:32:3c:9c:22:a0:40:a7:52: bf:4b:bd:5d:31:df:bf:75:90:28:c9:eb:6f:46:fe: cd:d4:f1:10:aa:13:5a:a4:d4:f0:58:20:be:a2:d7: 1b:72:f5:1d:c8:22:f9:24:a8:a6:34:ed:52:4e:e5: 53:0d:e5:e4:1b:39:fd:12:7c:77:92:d5:f6:17:f8: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:87:22:A6:0D:3D:29:1E:C1:AA:4D:C1:6D:86:43:F7:90:A7:D4 X509v3 Authority Key Identifier: keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.45.0/24 IPv6: 2001:67c:e18::/48 Signature Algorithm: sha256WithRSAEncryption 32:59:fb:c1:c5:15:29:37:b6:07:c8:ea:4d:c1:70:35:7e:0c: a0:b7:12:06:13:0c:ea:77:e6:b1:07:3f:86:9d:d6:e8:88:18: e2:6f:5d:69:fd:c0:d8:de:7d:1d:a0:1a:8c:f5:8f:c5:74:af: 98:90:6a:ed:1c:29:30:c3:28:f7:7d:b1:2f:d9:30:7e:e2:41: ec:c3:e8:eb:60:72:ca:7d:c1:0e:01:dc:7d:ab:23:72:e1:51: b2:a6:d8:b0:23:e0:0c:8d:13:45:d8:00:e6:87:a1:47:94:00: 35:b4:c4:fc:b8:cb:9a:80:4e:c9:43:3e:a0:6c:bb:cc:dc:60: 4e:26:f8:cc:d1:23:b8:1a:ef:b8:a0:ed:64:47:04:65:2c:fc: 46:3e:0b:af:b4:ee:81:37:7e:4a:a1:22:91:5c:01:27:5a:16: 1c:f0:5b:11:f5:d1:9c:79:d6:e2:ff:c8:5c:d2:28:c7:74:02: 25:85:4b:e3:0d:3e:92:c0:88:a9:84:f0:36:30:2d:2f:27:0e: 1c:06:15:0f:1f:28:f1:c7:ad:50:f1:78:fd:ac:f1:98:d9:c5: 58:99:d6:5a:31:a0:65:50:71:f7:98:83:2b:f1:40:5c:8d:30: f9:77:e2:45:83:09:41:09:75:06:36:ad:f5:ff:74:17:22:c4: d0:f3:a5:e5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W/wh8mYgaV04ajqIgS1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx NTYzZTQwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTMzODcyMmE2MGQzZDI5MWVjMWFhNGRjMTZkODY0M2Y3OTBhN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j14tD4hEZjpTBEkOxoTK9e+Av4d 1NTZy/KGN3fTp1HfV1olJTklv/gNSVrYDXOo8fUCdVrmW3M9/hZ3gpNrznCl2Uma rOTPo4+eiLfSQqIipNRmdBM7qyzAAhOup3M2uoTxOCVehAJ6+2kz+YVTNgaPKFa+ h/6m0vlNf9pIPfWd7tpOZ8ofCdyRMS6JJ4HUgnSZvrcg7Abd8y6bB+b0NOZYMgLp p5QDPfRbZ0OB+Y/MxiY4TagzRSm+MjycIqBAp1K/S71dMd+/dZAoyetvRv7N1PEQ qhNapNTwWCC+otcbcvUdyCL5JKimNO1STuVTDeXkGzn9Enx3ktX2F/j1iwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDUzhyKmDT0pHsGqTcFthkP3kKfUMB8GA1UdIwQY MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt MzY2OGYwMDA4NjQ4LzEvTlRPSElxWU5QU2tld2FwTndXMkdRX2VRcDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4 LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj4tMA8E AgACMAkDBwAgAQZ8DhgwDQYJKoZIhvcNAQELBQADggEBADJZ+8HFFSk3tgfI6k3B cDV+DKC3EgYTDOp35rEHP4ad1uiIGOJvXWn9wNjefR2gGoz1j8V0r5iQau0cKTDD KPd9sS/ZMH7iQezD6Otgcsp9wQ4B3H2rI3LhUbKm2LAj4AyNE0XYAOaHoUeUADW0 xPy4y5qATslDPqBsu8zcYE4m+MzRI7ga77ig7WRHBGUs/EY+C6+07oE3fkqhIpFc ASdaFhzwWxH10Zx51uL/yFzSKMd0AiWFS+MNPpLAiKmE8DYwLS8nDhwGFQ8fKPHH rVDxeP2s8ZjZxViZ1loxoGVQcfeYgyvxQFyNMPl34kWDCUEJdQY2rfX/dBcixNDz peU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client