This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa File: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (raw, json) Hash identifier: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A= Subject key identifier: 35:1C:29:C8:E2:02:7F:DC:29:99:48:58:3B:91:6B:FD:7A:F3:16:00 Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Certificate serial: 019B7B368E2498F5D4FB4AFF9B96CBA92F59 Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 129.206.0.0/16 maxlen: 16 147.142.0.0/16 maxlen: 16 192.100.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8e:24:98:f5:d4:fb:4a:ff:9b:96:cb:a9:2f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=351c29c8e2027fdc299948583b916bfd7af31600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:cd:24:bd:f5:84:41:cd:4c:d1:bb:6d:b0: e7:b6:0c:fc:08:86:73:d0:19:b5:8e:be:28:ad:d2: 5f:e0:04:f9:a5:c4:f3:c2:e6:dd:ea:ef:9d:8a:1b: 1c:8a:60:06:da:17:1b:91:25:2a:89:02:19:6d:53: 1c:78:f8:77:1b:3c:b2:34:51:25:ff:89:f9:b9:e3: bd:bb:58:b1:bb:84:d5:ff:89:ee:0f:78:d2:5d:b7: 06:dc:7e:2a:39:ae:14:f1:16:13:8b:c6:97:45:42: 24:7f:f4:e7:fc:e0:7c:b0:63:d2:4d:55:d1:8a:cf: cb:fa:68:c1:be:75:7a:c4:39:df:4d:2a:df:e8:95: 3c:78:3b:89:27:36:fc:31:ec:a4:14:11:0f:78:d5: 1b:f9:5c:fe:8f:d2:40:e3:6c:bb:4c:3e:a0:44:ed: 9f:a3:92:70:82:56:5c:90:37:78:27:1d:be:6a:9b: 5a:2d:d7:f0:5b:b2:cc:b8:63:d8:05:3f:b8:20:dc: 46:1a:aa:6f:3b:dc:95:70:1f:39:6f:bb:0d:71:18: 6b:ae:03:e7:10:82:7e:db:96:6d:aa:47:23:9c:47: 29:52:82:58:fa:1c:f9:d3:34:aa:ae:79:ef:f1:97: fd:3e:67:ec:b3:8b:4c:82:6f:e2:d4:6c:8d:0e:bb: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:29:C8:E2:02:7F:DC:29:99:48:58:3B:91:6B:FD:7A:F3:16:00 X509v3 Authority Key Identifier: keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.206.0.0/16 147.142.0.0/16 192.100.98.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:d7:82:8c:ca:b8:86:1b:06:42:db:f4:71:df:88:7c:56:db: 30:87:93:69:b8:a8:10:7d:93:3e:f1:3e:8f:a0:3b:ca:c2:2a: d5:61:85:64:bf:cd:0d:6f:8a:aa:0a:47:91:c7:89:d4:c3:87: d7:97:19:b4:6d:d8:36:40:f6:66:b6:9f:02:15:dc:d0:f3:75: 06:5b:f1:33:3e:ef:7c:1a:cf:f8:40:cc:9c:3d:ba:ab:93:26: 2f:b9:44:c0:97:2d:0c:96:9f:52:49:a0:4e:d6:b4:ad:c4:92: 23:9a:8b:92:ee:72:b0:7b:1c:ed:38:25:ac:af:4d:cc:e2:ac: 7e:f9:1b:39:d8:77:26:29:76:2d:0a:0e:91:cb:ca:d2:da:74: af:94:62:11:8c:9e:0a:de:4c:7d:fd:96:9a:d2:30:f5:fa:fd: de:23:61:c6:b4:3a:44:87:9f:40:f4:70:aa:ff:de:72:93:62: 2d:79:9e:cf:e9:05:e0:cf:18:a7:4b:f3:c9:ae:1c:ad:48:1b: 6b:f5:b7:4d:a7:d4:31:85:b1:f6:eb:a4:4e:84:08:3a:d9:b5: 96:84:62:2d:fb:cf:d7:f2:6b:58:ea:bf:6b:b9:14:05:ff:d1: ff:94:98:23:7d:af:30:fc:15:49:c9:3b:d9:b5:ca:3b:e1:ad: a6:0f:12:30 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7No4kmPXU+0r/m5bLqS9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw NTMyYjAwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTFjMjljOGUyMDI3ZmRjMjk5OTQ4NTgzYjkxNmJmZDdhZjMxNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqXNJL31hEHNTNG7bbDntgz8CIZz 0Bm1jr4ordJf4AT5pcTzwubd6u+dihscimAG2hcbkSUqiQIZbVMcePh3GzyyNFEl /4n5ueO9u1ixu4TV/4nuD3jSXbcG3H4qOa4U8RYTi8aXRUIkf/Tn/OB8sGPSTVXR is/L+mjBvnV6xDnfTSrf6JU8eDuJJzb8MeykFBEPeNUb+Vz+j9JA42y7TD6gRO2f o5JwglZckDd4Jx2+aptaLdfwW7LMuGPYBT+4INxGGqpvO9yVcB85b7sNcRhrrgPn EIJ+25ZtqkcjnEcpUoJY+hz50zSqrnnv8Zf9Pmfss4tMgm/i1GyNDrtTBQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFDUcKcjiAn/cKZlIWDuRa/168xYAMB8GA1UdIwQY MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt ZGJhN2NjYWM5NGUyLzEvTlJ3cHlPSUNmOXdwbVVoWU81RnJfWHJ6RmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwMAgc4DAwCT jgMEAMBkYjANBgkqhkiG9w0BAQsFAAOCAQEAOteCjMq4hhsGQtv0cd+IfFbbMIeT abioEH2TPvE+j6A7ysIq1WGFZL/NDW+KqgpHkceJ1MOH15cZtG3YNkD2ZrafAhXc 0PN1BlvxMz7vfBrP+EDMnD26q5MmL7lEwJctDJafUkmgTta0rcSSI5qLku5ysHsc 7TglrK9NzOKsfvkbOdh3Jil2LQoOkcvK0tp0r5RiEYyeCt5Mff2WmtIw9fr93iNh xrQ6RIefQPRwqv/ecpNiLXmez+kF4M8Yp0vzya4crUgba/W3TafUMYWx9uukToQI Otm1loRiLfvP1/JrWOq/a7kUBf/R/5SYI32vMPwVSck72bXKO+Gtpg8SMA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:43 2026 by rpki-client