This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/niIAPfyiBh5is4uOjKHzZA0pYr0.roa File: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (raw, json) Hash identifier: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE= Subject key identifier: 9E:22:00:3D:FC:A2:06:1E:62:B3:8B:8E:8C:A1:F3:64:0D:29:62:BD Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B659BAF70838C9A4F585255F55E46 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/niIAPfyiBh5is4uOjKHzZA0pYr0.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 139.156.0.0/16 maxlen: 16 145.54.0.0/16 maxlen: 16 151.184.0.0/16 maxlen: 16 195.190.224.0/19 maxlen: 19 213.162.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:65:9b:af:70:83:8c:9a:4f:58:52:55:f5:5e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e22003dfca2061e62b38b8e8ca1f3640d2962bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:0e:d8:25:91:6b:46:46:46:8d:37:27:92: 11:90:4c:32:6e:ce:7e:72:cd:7a:96:06:f1:28:40: 52:9b:4b:c5:66:69:e5:b1:38:85:98:fc:d5:2e:3b: ca:7c:42:af:9c:8a:c7:9f:4f:b3:a4:41:3e:e1:b3: f7:a8:cb:d2:38:aa:cb:94:9e:9b:ab:c0:ce:0b:92: 06:a2:6c:9e:ca:fc:c2:21:e3:66:82:05:9f:9a:c1: 8f:e8:03:d0:cb:9a:01:c8:9a:fe:e5:74:da:05:db: 55:08:d9:7e:a3:22:a8:5f:58:b4:6a:f7:7f:2f:6c: c2:7d:73:21:f2:7e:4e:c0:62:ae:30:65:a4:74:58: 70:b1:f9:da:1e:3a:53:85:75:b7:01:dc:61:54:e7: ff:e4:f5:a1:fc:63:6c:f1:89:55:a3:f7:76:3e:9d: c1:ae:8c:f5:a2:72:e2:7b:b0:39:73:dd:77:aa:90: 54:36:a4:2a:1f:b0:91:86:f7:d5:26:8e:26:38:ad: 3f:4f:2c:e6:88:c0:b7:26:f5:b4:3d:17:76:45:23: 77:d0:d3:b5:40:39:f8:53:e4:c4:07:52:7f:77:d8: a8:b2:bc:f3:ca:e9:6e:cf:dc:50:8e:85:d2:27:8f: a1:2c:1a:0e:c8:36:90:7b:e7:9d:23:3f:d0:96:51: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:00:3D:FC:A2:06:1E:62:B3:8B:8E:8C:A1:F3:64:0D:29:62:BD X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/niIAPfyiBh5is4uOjKHzZA0pYr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.156.0.0/16 145.54.0.0/16 151.184.0.0/16 195.190.224.0/19 213.162.160.0/19 Signature Algorithm: sha256WithRSAEncryption 52:6b:cb:4c:80:bc:f4:b7:36:31:80:e6:c7:5d:97:92:ac:a4: 4e:86:9d:74:5b:c3:7e:36:93:b2:4e:59:ff:ba:6a:be:d4:28: f1:7c:a9:21:8c:08:ee:f1:98:56:8f:a7:3b:02:41:13:98:19: 04:d3:fe:58:04:c0:ab:46:0b:f1:fd:b9:19:78:51:82:f7:0d: 73:ef:19:46:b1:d3:44:38:ac:27:dd:5d:dd:db:b8:0b:b3:3d: 5d:d2:06:0f:18:32:55:30:6d:4d:b3:18:9d:c5:98:53:74:53: bc:f9:12:0a:7c:ad:f1:1b:44:c6:7e:14:9b:dd:a8:49:12:89: 5d:48:9d:86:ee:99:fa:c0:b8:13:eb:5e:a3:e7:51:5f:cf:a6: f5:ea:0f:14:d4:db:d6:4e:5c:5a:60:c3:ce:de:81:39:0a:c4: 1a:5e:97:0a:f1:6c:7e:04:2d:73:da:bc:21:45:d6:7f:27:2f: 07:f0:b4:58:a4:a6:ea:6b:e1:37:fc:b2:ef:af:22:93:04:5c: 38:f7:7f:89:e0:4e:27:7b:23:51:2b:b4:71:55:3b:1b:bc:b1: 3e:50:d9:37:be:89:98:93:68:2a:b7:b1:f7:0e:b9:6f:61:e0: 18:00:7b:0f:47:78:94:09:44:dc:d5:6c:f6:8f:99:77:59:97: 31:0c:e3:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W2Wbr3CDjJpPWFJV9V5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTIyMDAzZGZjYTIwNjFlNjJiMzhiOGU4Y2ExZjM2NDBkMjk2MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA078O2CWRa0ZGRo03J5IRkEwybs5+ cs16lgbxKEBSm0vFZmnlsTiFmPzVLjvKfEKvnIrHn0+zpEE+4bP3qMvSOKrLlJ6b q8DOC5IGomyeyvzCIeNmggWfmsGP6APQy5oByJr+5XTaBdtVCNl+oyKoX1i0avd/ L2zCfXMh8n5OwGKuMGWkdFhwsfnaHjpThXW3AdxhVOf/5PWh/GNs8YlVo/d2Pp3B roz1onLie7A5c913qpBUNqQqH7CRhvfVJo4mOK0/TyzmiMC3JvW0PRd2RSN30NO1 QDn4U+TEB1J/d9iosrzzyuluz9xQjoXSJ4+hLBoOyDaQe+edIz/QllE0OQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ4iAD38ogYeYrOLjoyh82QNKWK9MB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvbmlJQVBmeWlCaDVpczR1T2pLSHpaQTBwWXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbAwMAi5wDAwCR NgMDAJe4AwQFw77gAwQF1aKgMA0GCSqGSIb3DQEBCwUAA4IBAQBSa8tMgLz0tzYx gObHXZeSrKROhp10W8N+NpOyTln/umq+1CjxfKkhjAju8ZhWj6c7AkETmBkE0/5Y BMCrRgvx/bkZeFGC9w1z7xlGsdNEOKwn3V3d27gLsz1d0gYPGDJVMG1NsxidxZhT dFO8+RIKfK3xG0TGfhSb3ahJEoldSJ2G7pn6wLgT616j51Ffz6b16g8U1NvWTlxa YMPO3oE5CsQaXpcK8Wx+BC1z2rwhRdZ/Jy8H8LRYpKbqa+E3/LLvryKTBFw493+J 4E4neyNRK7RxVTsbvLE+UNk3vomYk2gqt7H3DrlvYeAYAHsPR3iUCUTc1Wz2j5l3 WZcxDOMB -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:08 2026 by rpki-client