This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/NcMLI158ko3Znd8PPUAUUKdFdUM.roa File: NcMLI158ko3Znd8PPUAUUKdFdUM.roa (raw, json) Hash identifier: /DzKKtB1ZwYgSCcEkfDwitI/J8yiK757RGbe1OKKjfs= Subject key identifier: 35:C3:0B:23:5E:7C:92:8D:D9:9D:DF:0F:3D:40:14:50:A7:45:75:43 Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Certificate serial: 019B7EA7352BB97618B5CD3C5D2D84DFEB4E Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/NcMLI158ko3Znd8PPUAUUKdFdUM.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55154 IP address blocks: 194.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:35:2b:b9:76:18:b5:cd:3c:5d:2d:84:df:eb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c30b235e7c928dd99ddf0f3d401450a7457543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:bf:a9:91:06:52:3f:b2:ef:4b:ac:8b:9b: a2:18:51:35:5f:3d:6e:64:30:92:fc:36:6a:92:a5: c9:d0:75:ed:38:6e:96:b2:9a:22:50:13:5c:5c:d4: ec:24:8c:ac:08:59:1d:42:c9:4f:a0:ee:52:f1:87: 16:b8:6a:09:1a:6b:60:44:ca:ca:53:e5:33:49:e6: 4d:b1:c2:75:6d:1f:e8:9a:32:22:99:e1:db:7f:86: 1f:0c:41:ce:4a:6b:56:6f:ce:aa:d8:da:a8:1a:43: bd:87:7a:24:77:87:4f:ba:6f:6c:3b:20:10:6d:2f: 22:73:b6:3b:38:91:75:32:11:8d:bb:d4:6e:a9:a7: 9a:fd:33:ad:98:10:54:b1:fc:4d:57:ec:5b:1a:85: 9f:07:95:86:04:91:dd:b7:20:93:ff:65:73:45:40: 42:8e:cc:46:18:18:8e:e3:6b:d4:0a:2e:56:1a:08: 70:4e:d4:f5:f9:eb:3e:1f:98:7b:7b:87:4f:6d:69: 2d:e4:1f:2b:c7:09:94:b4:56:bb:db:7a:79:b9:a4: de:db:67:32:64:0e:36:00:58:56:70:49:05:b1:59: 6d:31:d6:b7:ad:b0:c3:c2:ba:47:23:2b:ad:b4:ce: d4:aa:d0:23:43:36:b0:f5:b7:3e:d8:79:f3:ea:5f: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:0B:23:5E:7C:92:8D:D9:9D:DF:0F:3D:40:14:50:A7:45:75:43 X509v3 Authority Key Identifier: keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/NcMLI158ko3Znd8PPUAUUKdFdUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.28.0/24 Signature Algorithm: sha256WithRSAEncryption b5:fb:d6:25:90:39:f1:19:cf:fa:3c:22:5c:02:20:e2:a9:a9: c6:50:c1:de:ac:7d:38:2f:76:b6:67:4f:88:55:bc:a7:e1:05: 5d:39:8c:10:27:ea:e7:a2:a5:5a:e2:30:b5:09:32:d3:62:4e: 65:5d:8d:ab:63:05:f4:fe:a0:59:d8:ef:0d:75:38:cb:56:15: 82:6a:bc:dc:f4:1d:4d:5d:93:e5:88:2f:b6:7a:a0:7b:f7:f2: fe:a4:02:8d:4c:a8:63:77:23:0f:56:36:06:01:dc:6c:16:28: 9e:94:ae:38:2a:3f:b0:77:97:ba:90:e4:85:75:41:3f:39:d0: c4:9b:e8:6b:83:e5:f4:c6:f2:20:58:0f:2d:dd:87:3e:2b:43: 9b:7d:b3:f5:f3:5d:48:85:69:10:17:56:e8:0f:12:b1:04:af: 74:8b:13:98:58:fc:0b:d4:2d:82:f0:1c:b5:5f:2c:ed:44:6a: e5:0c:61:d3:62:3e:40:07:39:c9:fe:87:17:a2:8e:2f:f4:76: 79:d4:b6:fe:43:be:9b:c9:11:b1:82:c2:1d:4e:67:d4:3a:3d: 72:41:49:01:1d:21:0a:e4:86:d6:ef:98:62:2f:b0:f2:47:3b: 10:d0:35:6e:37:6f:03:11:c4:9b:0b:10:70:2d:e2:00:67:ce: 65:b0:df:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzUruXYYtc08XS2E3+tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh ZjQ1ZDQwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWMzMGIyMzVlN2M5MjhkZDk5ZGRmMGYzZDQwMTQ1MGE3NDU3NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3m/qZEGUj+y70usi5uiGFE1Xz1u ZDCS/DZqkqXJ0HXtOG6WspoiUBNcXNTsJIysCFkdQslPoO5S8YcWuGoJGmtgRMrK U+UzSeZNscJ1bR/omjIimeHbf4YfDEHOSmtWb86q2NqoGkO9h3okd4dPum9sOyAQ bS8ic7Y7OJF1MhGNu9Ruqaea/TOtmBBUsfxNV+xbGoWfB5WGBJHdtyCT/2VzRUBC jsxGGBiO42vUCi5WGghwTtT1+es+H5h7e4dPbWkt5B8rxwmUtFa723p5uaTe22cy ZA42AFhWcEkFsVltMda3rbDDwrpHIyuttM7UqtAjQzaw9bc+2Hnz6l8d3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXDCyNefJKN2Z3fDz1AFFCnRXVDMB8GA1UdIwQY MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt ZDFmYmU1YTkxZDcwLzEvTmNNTEkxNThrbzNabmQ4UFBVQVVVS2RGZFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiEcMA0G CSqGSIb3DQEBCwUAA4IBAQC1+9YlkDnxGc/6PCJcAiDiqanGUMHerH04L3a2Z0+I Vbyn4QVdOYwQJ+rnoqVa4jC1CTLTYk5lXY2rYwX0/qBZ2O8NdTjLVhWCarzc9B1N XZPliC+2eqB79/L+pAKNTKhjdyMPVjYGAdxsFiielK44Kj+wd5e6kOSFdUE/OdDE m+hrg+X0xvIgWA8t3Yc+K0ObfbP1811IhWkQF1boDxKxBK90ixOYWPwL1C2C8By1 XyztRGrlDGHTYj5ABznJ/ocXoo4v9HZ51Lb+Q76byRGxgsIdTmfUOj1yQUkBHSEK 5IbW75hiL7DyRzsQ0DVuN28DEcSbCxBwLeIAZ85lsN+U -----END CERTIFICATE-----Generated at Wed Jan 21 07:47:18 2026 by rpki-client