This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/ntc1WC3vm1k3JcSErDirE-bzwtM.roa File: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (raw, json) Hash identifier: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg= Subject key identifier: 9E:D7:35:58:2D:EF:9B:59:37:25:C4:84:AC:38:AB:13:E6:F3:C2:D3 Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62 Certificate serial: 019B7AC921B090FA7C2F5991D3F82363B667 Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/ntc1WC3vm1k3JcSErDirE-bzwtM.roa Signing time: Thu 01 Jan 2026 18:19:20 +0000 ROA not before: Thu 01 Jan 2026 18:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38915 IP address blocks: 178.21.216.0/22 maxlen: 22 178.21.220.0/23 maxlen: 23 178.21.222.0/23 maxlen: 23 2a00:1de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:21:b0:90:fa:7c:2f:59:91:d3:f8:23:63:b6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ed735582def9b593725c484ac38ab13e6f3c2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:55:29:f0:bd:c2:50:76:2b:4d:b6:9f:11: 33:fe:78:36:91:4f:b4:5d:6e:0f:23:79:40:f8:99: 66:22:b5:ff:12:d4:8b:61:f1:b5:13:fc:42:0a:e1: 43:00:34:48:f9:19:dd:3a:5b:4b:1a:09:b9:aa:cc: 05:b5:28:3b:e0:e1:4b:f0:ef:b3:6e:00:b8:d1:77: c5:f5:52:f0:d4:91:fa:24:89:45:34:42:b9:4d:c7: f3:21:b7:67:35:c2:85:9b:56:dc:ec:96:ef:48:42: 99:d1:5d:6a:7b:4f:2a:ce:e0:2e:f8:c9:75:c2:9c: 61:34:a1:95:08:bb:c2:5d:32:51:2c:75:0f:19:0e: 0c:73:c8:4d:12:a8:4d:b1:50:22:21:50:49:e3:d2: 97:e3:91:5c:4c:34:1f:87:bc:45:91:f1:07:55:84: e2:6e:9d:9e:d9:7c:69:42:61:a7:a4:8f:99:8a:71: 02:ba:bc:8a:16:44:f1:aa:66:60:f8:d8:f8:77:8a: 6a:e9:fe:b2:fb:68:70:15:c7:ad:36:0b:31:eb:a6: 46:b0:91:f6:a7:a9:7f:36:b3:d6:7a:70:fb:bf:a2: 5d:93:f5:d9:5f:ad:e0:39:cf:7f:fc:38:73:9f:57: 9c:e7:1b:d4:d2:fd:fa:8c:f9:22:7a:c9:fa:0a:38: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D7:35:58:2D:EF:9B:59:37:25:C4:84:AC:38:AB:13:E6:F3:C2:D3 X509v3 Authority Key Identifier: keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/ntc1WC3vm1k3JcSErDirE-bzwtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.216.0/21 IPv6: 2a00:1de0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:26:8d:88:b2:b2:1b:7b:cc:70:47:95:0f:02:fb:35:0a:0d: ff:a1:6c:05:8a:dc:a1:8b:81:88:d6:4b:e0:6d:09:63:4e:0d: 9a:25:46:ad:b4:f0:2e:d6:72:9d:bb:5b:5e:1e:db:db:de:d3: 85:2a:e3:85:a6:5a:73:6f:2b:2f:b9:1d:c8:6e:b2:0a:e2:17: 0d:26:4c:a9:06:c9:ad:57:18:05:14:1e:4f:e7:52:91:b6:15: 52:89:e7:96:b6:c6:1c:b7:29:3a:a1:90:fa:1a:ec:a8:c0:1a: 9f:2a:05:20:d2:e0:4c:12:95:f9:6e:6d:98:e7:ec:3a:50:c8: db:5e:c1:15:f5:57:1b:8d:8d:0b:c9:7f:64:68:30:50:80:4c: 6d:ff:fc:c9:07:5a:55:ff:f2:0f:53:5e:5e:cd:1e:01:19:b6: 5b:11:bf:d5:57:5a:18:07:dc:d8:b2:e9:8d:47:2e:7f:17:69: b4:fc:49:08:6b:3a:bf:39:61:11:0c:55:bc:aa:b8:95:5b:af: e4:b4:20:1f:0d:01:f2:29:d7:96:bc:21:60:b8:c9:85:22:5d: e5:38:14:fa:dd:f1:67:35:c7:4a:76:ae:60:3f:2b:1c:59:a5: 4b:62:c9:79:29:c2:e4:0a:30:f4:64:27:2a:8f:38:e0:1f:ed: d2:68:56:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6ySGwkPp8L1mR0/gjY7ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz ZDFmNjIwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWQ3MzU1ODJkZWY5YjU5MzcyNWM0ODRhYzM4YWIxM2U2ZjNjMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vdVKfC9wlB2K022nxEz/ng2kU+0 XW4PI3lA+JlmIrX/EtSLYfG1E/xCCuFDADRI+RndOltLGgm5qswFtSg74OFL8O+z bgC40XfF9VLw1JH6JIlFNEK5TcfzIbdnNcKFm1bc7JbvSEKZ0V1qe08qzuAu+Ml1 wpxhNKGVCLvCXTJRLHUPGQ4Mc8hNEqhNsVAiIVBJ49KX45FcTDQfh7xFkfEHVYTi bp2e2XxpQmGnpI+ZinECuryKFkTxqmZg+Nj4d4pq6f6y+2hwFcetNgsx66ZGsJH2 p6l/NrPWenD7v6Jdk/XZX63gOc9//Dhzn1ec5xvU0v36jPkiesn6CjjkXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ7XNVgt75tZNyXEhKw4qxPm88LTMB8GA1UdIwQY MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt Njc5NWU2Yzg3MjQ3LzEvbnRjMVdDM3ZtMWszSmNTRXJEaXJFLWJ6d3RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3 LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDshXYMA0E AgACMAcDBQAqAB3gMA0GCSqGSIb3DQEBCwUAA4IBAQBaJo2IsrIbe8xwR5UPAvs1 Cg3/oWwFityhi4GI1kvgbQljTg2aJUattPAu1nKdu1teHtvb3tOFKuOFplpzbysv uR3IbrIK4hcNJkypBsmtVxgFFB5P51KRthVSieeWtsYctyk6oZD6GuyowBqfKgUg 0uBMEpX5bm2Y5+w6UMjbXsEV9VcbjY0LyX9kaDBQgExt//zJB1pV//IPU15ezR4B GbZbEb/VV1oYB9zYsumNRy5/F2m0/EkIazq/OWERDFW8qriVW6/ktCAfDQHyKdeW vCFguMmFIl3lOBT63fFnNcdKdq5gPyscWaVLYsl5KcLkCjD0ZCcqjzjgH+3SaFaC -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:27 2026 by rpki-client