This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/NUHMSZ91VQ9aijP6NP65PNKnp5g.roa File: NUHMSZ91VQ9aijP6NP65PNKnp5g.roa (raw, json) Hash identifier: yD96gdBLazMXGrH4L/cZUia8UrghJkd3RyMhoxg7K64= Subject key identifier: 35:41:CC:49:9F:75:55:0F:5A:8A:33:FA:34:FE:B9:3C:D2:A7:A7:98 Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B79ECCD39B62D65918B4D0464C1C763F3 Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/NUHMSZ91VQ9aijP6NP65PNKnp5g.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20880 IP address blocks: 62.117.0.0/19 maxlen: 20 62.117.0.0/20 maxlen: 24 62.117.0.128/26 maxlen: 26 62.117.0.192/28 maxlen: 28 62.117.16.0/20 maxlen: 20 82.119.0.0/19 maxlen: 19 82.119.0.0/20 maxlen: 20 82.119.16.0/20 maxlen: 20 86.56.0.0/17 maxlen: 17 86.56.0.0/18 maxlen: 18 86.56.64.0/18 maxlen: 18 89.16.128.0/19 maxlen: 19 89.16.128.0/20 maxlen: 20 89.16.144.0/20 maxlen: 20 158.181.64.0/19 maxlen: 19 158.181.64.0/20 maxlen: 20 158.181.68.0/22 maxlen: 22 158.181.72.0/22 maxlen: 22 158.181.76.0/22 maxlen: 22 158.181.80.0/20 maxlen: 20 158.181.80.0/22 maxlen: 22 185.9.224.0/22 maxlen: 22 2a02:2450::/29 maxlen: 29 2a02:2450::/32 maxlen: 32 2a02:2454::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cd:39:b6:2d:65:91:8b:4d:04:64:c1:c7:63:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3541cc499f75550f5a8a33fa34feb93cd2a7a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:13:09:c4:10:77:48:58:98:86:9b:96:b3: 9a:cf:12:71:26:f1:58:06:17:4f:4a:ad:07:65:fa: 87:d4:81:8d:2b:72:f6:43:2c:63:72:cf:a5:97:cf: c5:f3:84:5a:c5:8f:40:35:46:76:38:17:6a:40:21: 74:60:35:a6:15:36:6f:7a:59:6b:31:fc:91:85:8f: 4d:ca:7a:3f:87:9f:0b:aa:b2:14:c1:ab:01:81:c9: f2:30:6f:21:15:b5:86:48:2b:82:70:01:28:e3:71: 3b:b1:b4:76:fe:4c:45:fb:a8:19:8c:86:43:fb:89: d7:58:0f:54:88:e3:9c:4a:94:6d:76:0f:c4:6a:c7: a9:c7:37:28:70:1e:e8:83:4f:cc:2b:f8:e1:51:eb: e5:27:5a:c2:b5:ce:e9:69:d0:40:5e:74:96:ad:5b: ca:dd:4a:10:4c:1d:ca:94:4f:c9:65:68:f1:e1:ca: f9:06:24:fc:64:77:f3:ee:80:d2:95:2c:c2:35:a1: f7:f4:62:0d:95:9f:65:d6:f9:c6:04:c5:67:6c:b7: f1:44:62:87:40:8c:63:f4:73:80:9d:80:e3:11:79: c9:73:80:cf:52:af:33:03:c4:65:1d:ce:06:8e:bb: fb:fa:04:f0:95:34:af:65:ab:67:86:8b:5b:4c:03: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:CC:49:9F:75:55:0F:5A:8A:33:FA:34:FE:B9:3C:D2:A7:A7:98 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/NUHMSZ91VQ9aijP6NP65PNKnp5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.117.0.0/19 82.119.0.0/19 86.56.0.0/17 89.16.128.0/19 158.181.64.0/19 185.9.224.0/22 IPv6: 2a02:2450::/29 Signature Algorithm: sha256WithRSAEncryption 88:2b:4d:96:a8:67:3d:1f:2c:14:f6:7b:09:25:03:9a:c3:cf: 86:56:55:1f:59:79:84:1b:07:7b:e9:a8:35:1f:6c:da:a8:ae: 3d:7e:9b:13:48:3d:b9:73:30:89:ae:93:d0:7d:27:96:e9:e5: 81:7c:d8:4d:17:7f:2c:1b:6c:d1:d9:a7:ff:16:5d:07:33:51: 35:ab:8a:c8:96:2b:17:77:d7:1b:89:c0:59:70:f9:43:38:22: 71:77:7b:7d:bd:aa:be:12:6f:54:0c:c1:47:50:4c:6d:e0:6b: 7d:6d:30:4f:cb:1b:d8:ea:69:95:dc:ce:47:aa:97:63:48:28: 43:36:89:9c:3f:fe:4b:02:6f:db:01:e9:d9:e8:dd:c1:55:5e: 9b:d1:fa:2a:da:b5:f0:e0:96:e3:97:88:6f:92:0a:7c:f1:98: 4e:72:3a:94:11:14:49:07:ee:fd:fa:ba:c7:31:01:8e:ac:b4: 93:ec:84:e7:90:37:45:d9:c8:b3:27:88:8c:2b:27:e3:da:28: 3b:69:13:7f:49:e9:ea:0e:3d:7f:71:14:99:5b:62:1f:81:db: 7b:56:89:2f:95:16:7a:89:11:25:80:73:3f:e9:ec:52:16:39: 18:35:86:fc:53:7b:8b:a8:54:99:52:b1:c8:f0:6f:11:d8:5a: 4c:cc:e2:68 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt57M05ti1lkYtNBGTBx2PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTQxY2M0OTlmNzU1NTBmNWE4YTMzZmEzNGZlYjkzY2QyYTdhNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztoTCcQQd0hYmIablrOazxJxJvFY BhdPSq0HZfqH1IGNK3L2Qyxjcs+ll8/F84RaxY9ANUZ2OBdqQCF0YDWmFTZvellr MfyRhY9Nyno/h58LqrIUwasBgcnyMG8hFbWGSCuCcAEo43E7sbR2/kxF+6gZjIZD +4nXWA9UiOOcSpRtdg/EasepxzcocB7og0/MK/jhUevlJ1rCtc7padBAXnSWrVvK 3UoQTB3KlE/JZWjx4cr5BiT8ZHfz7oDSlSzCNaH39GINlZ9l1vnGBMVnbLfxRGKH QIxj9HOAnYDjEXnJc4DPUq8zA8RlHc4Gjrv7+gTwlTSvZatnhotbTAPXtQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFDVBzEmfdVUPWooz+jT+uTzSp6eYMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvTlVITVNaOTFWUTlhaWpQNk5QNjVQTktucDVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFPnUAAwQF UncAAwQHVjgAAwQFWRCAAwQFnrVAAwQCuQngMA0EAgACMAcDBQMqAiRQMA0GCSqG SIb3DQEBCwUAA4IBAQCIK02WqGc9HywU9nsJJQOaw8+GVlUfWXmEGwd76ag1H2za qK49fpsTSD25czCJrpPQfSeW6eWBfNhNF38sG2zR2af/Fl0HM1E1q4rIlisXd9cb icBZcPlDOCJxd3t9vaq+Em9UDMFHUExt4Gt9bTBPyxvY6mmV3M5HqpdjSChDNomc P/5LAm/bAenZ6N3BVV6b0foq2rXw4Jbjl4hvkgp88ZhOcjqUERRJB+79+rrHMQGO rLST7ITnkDdF2cizJ4iMKyfj2ig7aRN/SenqDj1/cRSZW2Ifgdt7VokvlRZ6iREl gHM/6exSFjkYNYb8U3uLqFSZUrHI8G8R2FpMzOJo -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:12 2026 by rpki-client