This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nzPG4vwX1IeVP2cSHRY5OFKnn24.roa File: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (raw, json) Hash identifier: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM= Subject key identifier: 9F:33:C6:E2:FC:17:D4:87:95:3F:67:12:1D:16:39:38:52:A7:9F:6E Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019B7F8300E845C2A1F7B7E60E6307F4BCFE Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nzPG4vwX1IeVP2cSHRY5OFKnn24.roa Signing time: Fri 02 Jan 2026 16:20:50 +0000 ROA not before: Fri 02 Jan 2026 16:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60996 IP address blocks: 128.0.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:00:e8:45:c2:a1:f7:b7:e6:0e:63:07:f4:bc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Jan 2 16:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f33c6e2fc17d487953f67121d16393852a79f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:9c:7e:1e:d1:12:b4:37:bb:e1:32:ab:fd: 07:0f:89:85:87:8e:7c:6b:9b:a5:ae:ee:e1:1c:83: d6:8c:06:0f:57:9a:96:41:a0:ea:6a:72:53:a7:69: a8:15:e8:2a:b2:5e:35:a6:15:63:66:77:6e:31:98: 0f:76:9b:4e:16:55:f6:5f:c6:dc:31:6f:5a:28:5d: 7a:54:04:07:33:dd:93:ad:b4:a3:a2:f8:c4:2a:2e: 28:5b:fb:1d:52:8c:50:eb:12:1d:3f:78:f1:aa:f4: 71:00:cb:54:dd:46:87:6d:1f:c5:9c:3e:75:be:6f: e2:9c:73:21:af:23:eb:b6:f3:4e:fe:63:f7:c9:39: 29:28:81:f2:27:36:65:fa:a0:cf:b9:b6:b2:1b:18: 7b:19:cd:da:d1:dc:e4:77:18:e5:5a:07:3c:97:f5: b3:f9:43:c5:66:3d:c3:41:9a:d2:50:d7:59:d7:87: a7:76:e3:36:57:61:80:67:3d:ef:6b:fe:2e:bc:10: 70:09:9a:d4:64:30:f8:c0:e2:45:da:23:d1:4a:a3: f7:af:4d:54:50:d1:4d:37:f0:89:9a:fb:53:92:d2: 9e:07:43:79:28:bc:c7:cd:f9:5b:6d:22:91:29:74: 28:f0:02:77:5f:43:82:75:dd:66:0c:4c:f6:0d:4f: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:33:C6:E2:FC:17:D4:87:95:3F:67:12:1D:16:39:38:52:A7:9F:6E X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nzPG4vwX1IeVP2cSHRY5OFKnn24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.56.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f0:a8:cf:e4:4c:c0:c5:c7:b3:c6:66:6a:95:80:cc:a7:35: dd:67:a9:3a:cc:da:12:f6:ef:ba:32:90:2c:ab:ad:8a:0d:4c: f6:ce:ce:ed:6d:0e:4d:48:55:1a:cf:e4:55:a4:cc:74:a2:9f: df:aa:52:6d:6a:45:3a:b1:8b:02:c0:02:a6:62:45:5f:54:3a: db:94:4f:6a:19:64:d5:13:eb:91:35:10:73:e9:42:23:e7:0b: 87:f0:8f:f0:c4:43:d8:18:c5:0c:23:4a:3d:b1:7e:59:5e:fd: b3:f8:ef:5d:3c:03:64:6b:77:77:18:1c:64:5a:d5:90:56:d8: d9:c0:d5:42:70:0f:39:7d:b3:05:dd:9e:82:7a:52:b9:68:7c: ae:51:01:13:41:e9:f1:18:3a:6a:44:06:4c:bc:32:fd:50:fe: bb:ba:5f:b5:59:f2:7a:c1:b7:f4:af:63:97:05:7e:c1:76:06: 21:61:56:58:c7:23:ee:74:b0:34:d0:fe:ba:a5:6d:86:a7:22: 3d:f4:fd:2d:08:6c:a7:82:b7:31:b9:fa:e6:09:51:30:26:a7: 23:0c:af:23:4a:24:1f:02:90:04:5a:49:51:d7:a0:0e:b2:14: f9:02:0a:17:b6:53:c0:15:81:50:10:b0:e3:76:33:d4:1e:ff: 5e:dc:d9:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwDoRcKh97fmDmMH9Lz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwMTAyMTYyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjMzYzZlMmZjMTdkNDg3OTUzZjY3MTIxZDE2MzkzODUyYTc5ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnricfh7RErQ3u+Eyq/0HD4mFh458 a5ulru7hHIPWjAYPV5qWQaDqanJTp2moFegqsl41phVjZnduMZgPdptOFlX2X8bc MW9aKF16VAQHM92TrbSjovjEKi4oW/sdUoxQ6xIdP3jxqvRxAMtU3UaHbR/FnD51 vm/inHMhryPrtvNO/mP3yTkpKIHyJzZl+qDPubayGxh7Gc3a0dzkdxjlWgc8l/Wz +UPFZj3DQZrSUNdZ14enduM2V2GAZz3va/4uvBBwCZrUZDD4wOJF2iPRSqP3r01U UNFNN/CJmvtTktKeB0N5KLzHzflbbSKRKXQo8AJ3X0OCdd1mDEz2DU+K0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8zxuL8F9SHlT9nEh0WOThSp59uMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvbnpQRzR2d1gxSWVWUDJjU0hSWTVPRktubjI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAA4MA0G CSqGSIb3DQEBCwUAA4IBAQBr8KjP5EzAxcezxmZqlYDMpzXdZ6k6zNoS9u+6MpAs q62KDUz2zs7tbQ5NSFUaz+RVpMx0op/fqlJtakU6sYsCwAKmYkVfVDrblE9qGWTV E+uRNRBz6UIj5wuH8I/wxEPYGMUMI0o9sX5ZXv2z+O9dPANka3d3GBxkWtWQVtjZ wNVCcA85fbMF3Z6CelK5aHyuUQETQenxGDpqRAZMvDL9UP67ul+1WfJ6wbf0r2OX BX7BdgYhYVZYxyPudLA00P66pW2GpyI99P0tCGyngrcxufrmCVEwJqcjDK8jSiQf ApAEWklR16AOshT5AgoXtlPAFYFQELDjdjPUHv9e3NmS -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:07 2026 by rpki-client