This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/NJax3QvlUxuz0S34cv9iYVlYSQU.roa File: NJax3QvlUxuz0S34cv9iYVlYSQU.roa (raw, json) Hash identifier: u51xEsV9ElXZprx9W5HKiMp5RG9k+7g4oH4KGNb9sDQ= Subject key identifier: 34:96:B1:DD:0B:E5:53:1B:B3:D1:2D:F8:72:FF:62:61:59:58:49:05 Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Certificate serial: 019B77595F3E4A7E5C828C6E642436B42EFF Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/NJax3QvlUxuz0S34cv9iYVlYSQU.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209390 IP address blocks: 185.108.64.0/22 maxlen: 22 185.108.64.0/24 maxlen: 24 185.108.65.0/24 maxlen: 24 185.108.66.0/24 maxlen: 24 2a06:6280::/29 maxlen: 29 2a06:6280:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5f:3e:4a:7e:5c:82:8c:6e:64:24:36:b4:2e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3496b1dd0be5531bb3d12df872ff626159584905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:92:ee:91:ec:07:0c:8d:39:92:f8:e7:f5: d0:3a:f7:da:07:3c:9c:d1:8b:e3:fc:f9:b1:93:9f: 2a:4e:49:35:7b:a4:a2:8f:4e:f1:a6:12:a8:6a:d4: bf:2e:07:ed:31:44:d4:90:d2:b0:71:b1:cf:f2:fe: 33:a2:b1:3a:2d:90:4f:a6:09:38:6e:2c:35:0f:4b: 67:f7:55:0c:86:9f:1f:86:93:c7:35:28:9c:2e:b4: 79:9c:d8:cd:b5:81:e1:f8:8f:c1:c2:73:9d:4b:07: 67:f2:a2:75:19:c1:e3:aa:d1:ea:ab:58:80:4d:eb: 38:57:63:d4:58:83:df:1b:6a:f2:46:ec:6e:1d:57: 42:b2:64:5d:5b:41:30:95:e0:9e:f3:d8:dc:ef:e1: cf:0f:1d:69:d0:7e:d9:4b:1c:e4:8d:af:bd:2a:84: 50:84:31:4e:e9:f7:d7:cf:b7:ec:65:51:fd:89:f8: a3:6d:00:36:75:7f:11:7d:b9:a0:6c:9a:88:ea:89: 8e:40:58:e7:f7:8c:b9:8f:6a:a4:3b:d6:3e:84:7e: 5a:94:a7:91:aa:55:fc:c8:82:c5:32:f8:b3:41:ec: 40:ee:56:1b:7e:62:82:02:6e:69:f4:fa:60:00:cf: f7:34:7c:b6:40:85:fb:eb:37:56:c4:f2:19:f9:3a: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:96:B1:DD:0B:E5:53:1B:B3:D1:2D:F8:72:FF:62:61:59:58:49:05 X509v3 Authority Key Identifier: keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/NJax3QvlUxuz0S34cv9iYVlYSQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.64.0/22 IPv6: 2a06:6280::/29 Signature Algorithm: sha256WithRSAEncryption 04:31:00:3b:ea:b9:c5:9c:1a:d3:14:03:91:fd:74:8b:5e:2c: 1b:3b:69:b7:b0:07:1c:2a:7f:ff:1f:e1:8f:36:8f:43:1e:d5: 16:a2:6a:f4:0f:74:1d:b3:1f:91:ee:58:4e:7f:1b:66:58:09: 0d:71:8b:fd:c1:75:e7:de:68:bc:f7:b1:da:d2:5b:08:5d:01: c0:6d:e0:42:f7:8d:e1:da:ac:1a:51:e3:97:52:6b:88:c3:98: 7f:2f:ec:8d:5e:5a:12:92:af:46:a4:1d:1d:04:46:62:7f:e0: ea:b6:7d:5a:a7:2e:c9:45:97:2b:02:50:f3:6a:37:26:99:40: 5a:87:e6:68:eb:c7:60:bc:fc:b1:ae:6f:6a:3b:d7:96:74:7e: 80:b9:43:06:ef:d9:1b:e2:9a:66:4b:33:b0:43:09:56:2e:a7: 03:29:e2:ef:37:5f:2c:b3:42:a6:01:c0:c5:2c:d6:1b:78:69: df:4b:60:c6:de:23:9a:f5:59:94:44:4e:fe:18:bb:46:8d:38: 02:76:3c:53:fc:77:be:98:41:0a:54:36:17:a8:32:6c:36:30: a5:d2:96:8a:c9:83:bf:76:60:5a:d3:6b:14:68:08:d7:76:d3: 51:a1:e3:51:55:5d:7f:c9:2c:80:1b:1c:1e:b1:7f:90:e4:15: a0:76:6b:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WV8+Sn5cgoxuZCQ2tC7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWUyNWY0YTg4YjhiYjQzYzU0ZDU4ZjZiNGU3NTA4OWY5 MDZmZDIwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDk2YjFkZDBiZTU1MzFiYjNkMTJkZjg3MmZmNjI2MTU5NTg0OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkuS7pHsBwyNOZL45/XQOvfaBzyc 0Yvj/Pmxk58qTkk1e6Sij07xphKoatS/LgftMUTUkNKwcbHP8v4zorE6LZBPpgk4 biw1D0tn91UMhp8fhpPHNSicLrR5nNjNtYHh+I/BwnOdSwdn8qJ1GcHjqtHqq1iA Tes4V2PUWIPfG2ryRuxuHVdCsmRdW0EwleCe89jc7+HPDx1p0H7ZSxzkja+9KoRQ hDFO6ffXz7fsZVH9ifijbQA2dX8RfbmgbJqI6omOQFjn94y5j2qkO9Y+hH5alKeR qlX8yILFMvizQexA7lYbfmKCAm5p9PpgAM/3NHy2QIX76zdWxPIZ+TrBPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDSWsd0L5VMbs9Et+HL/YmFZWEkFMB8GA1UdIwQY MBaAFB+eJfSoi4u0PFTVj2tOdQifkG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEt ZTU1NGEzNWU5ZTc3LzEvTkpheDNRdmxVeHV6MFMzNGN2OWlZVmxZU1FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEtZTU1NGEzNWU5ZTc3 LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWxAMA0E AgACMAcDBQMqBmKAMA0GCSqGSIb3DQEBCwUAA4IBAQAEMQA76rnFnBrTFAOR/XSL XiwbO2m3sAccKn//H+GPNo9DHtUWomr0D3Qdsx+R7lhOfxtmWAkNcYv9wXXn3mi8 97Ha0lsIXQHAbeBC943h2qwaUeOXUmuIw5h/L+yNXloSkq9GpB0dBEZif+Dqtn1a py7JRZcrAlDzajcmmUBah+Zo68dgvPyxrm9qO9eWdH6AuUMG79kb4ppmSzOwQwlW LqcDKeLvN18ss0KmAcDFLNYbeGnfS2DG3iOa9VmURE7+GLtGjTgCdjxT/He+mEEK VDYXqDJsNjCl0paKyYO/dmBa02sUaAjXdtNRoeNRVV1/ySyAGxwesX+Q5BWgdmti -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:37 2026 by rpki-client