This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGO4WDpuR420MSpBHAMxViyzlYs.roa File: NGO4WDpuR420MSpBHAMxViyzlYs.roa (raw, json) Hash identifier: r/tAR8PiMFxOtVr2uGroiZFp9CR3IeIjBb7a05t8w+8= Subject key identifier: 34:63:B8:58:3A:6E:47:8D:B4:31:2A:41:1C:03:31:56:2C:B3:95:8B Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B0EFC9F7C6B673E7677BAC06A2D5 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGO4WDpuR420MSpBHAMxViyzlYs.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41095 IP address blocks: 2a06:1180:10::/48 maxlen: 48 2a06:1184:55::/48 maxlen: 48 2a06:35c4:100::/48 maxlen: 48 2a06:dfc0::/29 maxlen: 32 2a07:bb40::/29 maxlen: 32 2a09:17c0:b19a::/48 maxlen: 48 2a09:17c1:11d::/48 maxlen: 48 2a0a:2d00:10::/48 maxlen: 48 2a0a:2d00:20::/48 maxlen: 48 2a0a:2d07:fc4c::/48 maxlen: 48 2a0c:7881:100::/48 maxlen: 48 2a0c:7882:11::/48 maxlen: 48 2a0d:e5c0::/29 maxlen: 32 2a0e:15c0:6::/48 maxlen: 48 2a0e:15c7:2d::/48 maxlen: 48 2a0e:1a83:1::/48 maxlen: 48 2a0e:f600:2::/48 maxlen: 48 2a0e:f600:14::/48 maxlen: 48 2a0e:f603:1312::/48 maxlen: 48 2a0f:1200:11::/48 maxlen: 48 2a0f:1200:100::/48 maxlen: 48 2a0f:1581:10::/48 maxlen: 48 2a0f:1f80::/29 maxlen: 32 2a0f:2d82:100::/48 maxlen: 48 2a0f:31c3:100::/48 maxlen: 48 2a0f:3d80:2::/48 maxlen: 48 2a0f:7d00:10::/48 maxlen: 48 2a0f:7d06:101::/48 maxlen: 48 2a0f:dd40::/29 maxlen: 32 2a0f:df46:100::/48 maxlen: 48 2a0f:e1c0:acab::/48 maxlen: 48 2a0f:e202:fc06::/48 maxlen: 48 2a0f:e6c2:100::/48 maxlen: 48 2a0f:e7c4:22::/48 maxlen: 48 2a0f:e7c7:95::/48 maxlen: 48 2a0f:e842:100::/48 maxlen: 48 2a0f:e844:8642::/48 maxlen: 48 2a0f:e940::/29 maxlen: 32 2a0f:ea00::/29 maxlen: 32 2a0f:ea43:10::/48 maxlen: 48 2a10:30c0::/29 maxlen: 32 2a10:6400::/29 maxlen: 32 2a10:67c2:1::/48 maxlen: 48 2a12:ac43:acab::/48 maxlen: 48 2a12:ecc4:2213::/48 maxlen: 48 2a13:18c6:99::/48 maxlen: 48 2a13:7400::/29 maxlen: 32 2a13:8c86:140::/48 maxlen: 48 2a13:9282:100::/48 maxlen: 48 2a13:9d00::/29 maxlen: 32 2a13:9f00::/29 maxlen: 32 2a13:c500::/29 maxlen: 32 2a13:c900:44::/48 maxlen: 48 2a13:c900:55::/48 maxlen: 48 2a13:e102:10::/48 maxlen: 48 2a13:fd00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b0:ef:c9:f7:c6:b6:73:e7:67:7b:ac:06:a2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3463b8583a6e478db4312a411c0331562cb3958b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:26:7a:76:63:73:ab:d9:a0:23:75:0f:e4: b5:c8:65:3f:a5:f5:fa:cb:bf:8b:47:45:98:f7:cd: 82:1e:f7:33:1b:4c:84:62:cb:6c:23:4b:04:8b:68: 44:52:cc:48:ab:b6:e1:ce:14:af:b7:5f:06:bc:64: b7:32:ed:b3:ea:48:a4:fe:36:8a:a8:1d:9f:e2:4e: 76:86:8f:0f:91:3b:54:a3:3f:72:45:4f:12:35:8b: 32:57:40:7d:66:db:76:89:1e:17:e2:39:20:b7:79: 42:3e:c7:3a:44:c1:ef:c7:16:86:78:c0:f2:3d:87: 46:cf:ac:53:86:dc:d1:a0:de:1a:24:24:e2:e8:2a: ad:4d:0d:c4:8b:33:0d:b7:21:66:f0:bd:d2:9e:51: ce:90:64:85:a2:b8:64:12:90:94:43:ff:78:6c:80: f2:4d:04:f7:fd:64:05:b3:c8:01:13:a1:78:82:c5: 20:92:2e:a8:36:54:a8:c5:29:d0:a6:1f:9d:85:0f: 8b:37:fc:a2:b9:f0:1a:05:26:16:49:a0:31:29:99: 70:3c:9a:36:35:b4:a7:64:2b:3a:d3:28:24:ed:50: 5a:ab:b6:45:07:f4:88:53:dd:1e:c3:bc:00:b6:ee: a2:51:6d:1c:2f:69:fa:38:66:85:a2:a8:05:a8:66: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:63:B8:58:3A:6E:47:8D:B4:31:2A:41:1C:03:31:56:2C:B3:95:8B X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGO4WDpuR420MSpBHAMxViyzlYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1180:10::/48 2a06:1184:55::/48 2a06:35c4:100::/48 2a06:dfc0::/29 2a07:bb40::/29 2a09:17c0:b19a::/48 2a09:17c1:11d::/48 2a0a:2d00:10::/48 2a0a:2d00:20::/48 2a0a:2d07:fc4c::/48 2a0c:7881:100::/48 2a0c:7882:11::/48 2a0d:e5c0::/29 2a0e:15c0:6::/48 2a0e:15c7:2d::/48 2a0e:1a83:1::/48 2a0e:f600:2::/48 2a0e:f600:14::/48 2a0e:f603:1312::/48 2a0f:1200:11::/48 2a0f:1200:100::/48 2a0f:1581:10::/48 2a0f:1f80::/29 2a0f:2d82:100::/48 2a0f:31c3:100::/48 2a0f:3d80:2::/48 2a0f:7d00:10::/48 2a0f:7d06:101::/48 2a0f:dd40::/29 2a0f:df46:100::/48 2a0f:e1c0:acab::/48 2a0f:e202:fc06::/48 2a0f:e6c2:100::/48 2a0f:e7c4:22::/48 2a0f:e7c7:95::/48 2a0f:e842:100::/48 2a0f:e844:8642::/48 2a0f:e940::/29 2a0f:ea00::/29 2a0f:ea43:10::/48 2a10:30c0::/29 2a10:6400::/29 2a10:67c2:1::/48 2a12:ac43:acab::/48 2a12:ecc4:2213::/48 2a13:18c6:99::/48 2a13:7400::/29 2a13:8c86:140::/48 2a13:9282:100::/48 2a13:9d00::/29 2a13:9f00::/29 2a13:c500::/29 2a13:c900:44::/48 2a13:c900:55::/48 2a13:e102:10::/48 2a13:fd00::/29 Signature Algorithm: sha256WithRSAEncryption b5:7b:1f:ed:f9:03:aa:75:7c:10:c9:65:fc:03:92:b2:d4:5c: 97:f3:0f:42:9e:70:9a:f1:23:32:04:da:8a:26:90:df:dd:a8: 8b:0d:ef:00:b2:7f:4b:cc:01:ee:6f:a2:a5:4e:af:fa:26:21: c4:b5:89:3f:ea:cb:9d:4f:21:cb:be:d4:d0:cd:79:0e:63:0a: 8f:87:27:92:48:e0:73:6a:ab:24:0b:c9:0a:61:16:7b:73:0b: 96:69:4b:06:3e:6b:c2:73:51:fa:ec:51:96:6e:b9:a7:ef:07: f2:b6:ec:ec:f5:e9:37:3c:48:07:1c:d9:2e:2d:a2:b8:b9:e9: c9:e1:93:49:e8:88:8b:94:02:b9:be:6e:48:1f:6a:94:2c:95: 44:ec:09:07:21:65:71:38:c5:b6:bc:e4:7d:76:a2:27:40:9a: 07:e9:9b:85:cf:3e:f4:0c:63:4a:ab:5e:52:bf:54:cb:00:ed: 74:1e:de:10:84:52:eb:93:22:08:27:c4:74:6a:59:31:7d:dd: 51:12:72:cf:69:33:5f:26:be:23:fb:49:82:01:0f:ed:1f:97: f3:10:96:09:ed:83:fb:da:59:87:c5:c4:33:32:e1:ea:63:7d: 22:19:7e:21:91:05:d7:27:67:21:97:bb:c3:6b:83:bc:82:bc: 66:53:dc:9d -----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgISAZt/8bDvyffGtnPnZ3usBqLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDYzYjg1ODNhNmU0NzhkYjQzMTJhNDExYzAzMzE1NjJjYjM5NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWomenZjc6vZoCN1D+S1yGU/pfX6 y7+LR0WY982CHvczG0yEYstsI0sEi2hEUsxIq7bhzhSvt18GvGS3Mu2z6kik/jaK qB2f4k52ho8PkTtUoz9yRU8SNYsyV0B9Ztt2iR4X4jkgt3lCPsc6RMHvxxaGeMDy PYdGz6xThtzRoN4aJCTi6CqtTQ3EizMNtyFm8L3SnlHOkGSForhkEpCUQ/94bIDy TQT3/WQFs8gBE6F4gsUgki6oNlSoxSnQph+dhQ+LN/yiufAaBSYWSaAxKZlwPJo2 NbSnZCs60ygk7VBaq7ZFB/SIU90ew7wAtu6iUW0cL2n6OGaFoqgFqGYH5wIDAQAB o4ID6TCCA+UwHQYDVR0OBBYEFDRjuFg6bkeNtDEqQRwDMVYss5WLMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvTkdPNFdEcHVSNDIwTVNwQkhBTXhWaXl6bFlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB/QYIKwYBBQUHAQcBAf8EggHsMIIB6DCCAeQEAgACMIIB 3AMHACoGEYAAEAMHACoGEYQAVQMHACoGNcQBAAMFAyoG38ADBQMqB7tAAwcAKgkX wLGaAwcAKgkXwQEdAwcAKgotAAAQAwcAKgotAAAgAwcAKgotB/xMAwcAKgx4gQEA AwcAKgx4ggARAwUDKg3lwAMHACoOFcAABgMHACoOFccALQMHACoOGoMAAQMHACoO 9gAAAgMHACoO9gAAFAMHACoO9gMTEgMHACoPEgAAEQMHACoPEgABAAMHACoPFYEA EAMFAyoPH4ADBwAqDy2CAQADBwAqDzHDAQADBwAqDz2AAAIDBwAqD30AABADBwAq D30GAQEDBQMqD91AAwcAKg/fRgEAAwcAKg/hwKyrAwcAKg/iAvwGAwcAKg/mwgEA AwcAKg/nxAAiAwcAKg/nxwCVAwcAKg/oQgEAAwcAKg/oRIZCAwUDKg/pQAMFAyoP 6gADBwAqD+pDABADBQMqEDDAAwUDKhBkAAMHACoQZ8IAAQMHACoSrEOsqwMHACoS 7MQiEwMHACoTGMYAmQMFAyoTdAADBwAqE4yGAUADBwAqE5KCAQADBQMqE50AAwUD KhOfAAMFAyoTxQADBwAqE8kAAEQDBwAqE8kAAFUDBwAqE+ECABADBQMqE/0AMA0G CSqGSIb3DQEBCwUAA4IBAQC1ex/t+QOqdXwQyWX8A5Ky1FyX8w9CnnCa8SMyBNqK JpDf3aiLDe8Asn9LzAHub6KlTq/6JiHEtYk/6sudTyHLvtTQzXkOYwqPhyeSSOBz aqskC8kKYRZ7cwuWaUsGPmvCc1H67FGWbrmn7wfytuzs9ek3PEgHHNkuLaK4uenJ 4ZNJ6IiLlAK5vm5IH2qULJVE7AkHIWVxOMW2vOR9dqInQJoH6ZuFzz70DGNKq15S v1TLAO10Ht4QhFLrkyIIJ8R0alkxfd1REnLPaTNfJr4j+0mCAQ/tH5fzEJYJ7YP7 2lmHxcQzMuHqY30iGX4hkQXXJ2chl7vDa4O8grxmU9yd -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:22 2026 by rpki-client