This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/NaepKDUSFtPVzyjXT9VY683pv7k.roa File: NaepKDUSFtPVzyjXT9VY683pv7k.roa (raw, json) Hash identifier: ss+CQ2zxnFp/z8s24U9+WfPH3FxucLqO1Hzr/w2GZF4= Subject key identifier: 35:A7:A9:28:35:12:16:D3:D5:CF:28:D7:4F:D5:58:EB:CD:E9:BF:B9 Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e Certificate serial: 019B7C131014F3240CB1848802E09904C574 Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/NaepKDUSFtPVzyjXT9VY683pv7k.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214792 IP address blocks: 195.244.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:10:14:f3:24:0c:b1:84:88:02:e0:99:04:c5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35a7a928351216d3d5cf28d74fd558ebcde9bfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:d0:56:8e:52:12:e0:e4:5a:51:21:df:60: 4c:cc:70:01:6c:9c:34:e2:98:c1:a1:45:2f:aa:44: 55:a0:b7:2a:0f:8c:4e:db:45:cb:e6:75:b3:e6:ff: ed:d4:f8:54:93:97:3c:8f:22:ed:69:2e:76:95:26: 67:c2:3a:bc:1a:e2:ab:a0:38:83:0a:6e:68:3a:2e: 4f:f6:07:b4:1b:a2:a3:77:ef:cc:cf:de:90:89:59: 54:df:d6:39:78:e7:6a:c7:63:91:1c:61:24:22:16: 2a:2b:97:29:c5:d5:25:02:ec:80:4f:6e:de:95:1a: c8:55:59:cf:ac:31:61:1e:26:0f:3e:f0:02:4c:9b: 6b:3d:83:c8:a3:f8:6b:06:95:49:1d:22:1a:92:b5: 0f:80:27:80:f9:f2:9c:06:c9:18:82:ad:0b:10:28: 74:d1:3d:77:86:bd:0c:62:13:60:42:e8:39:d1:58: ff:46:6c:80:47:83:a4:ae:2c:c3:16:10:3a:07:6e: 1d:73:0f:de:83:e1:4f:a3:eb:41:9f:37:88:63:8f: 55:fa:74:76:42:c2:75:86:bf:9e:69:aa:50:2a:8b: 7a:46:9d:1c:91:fd:7c:0c:68:a4:f7:1c:af:39:36: 5e:3a:cf:5c:72:41:da:e7:2e:48:51:73:ff:f6:f2: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A7:A9:28:35:12:16:D3:D5:CF:28:D7:4F:D5:58:EB:CD:E9:BF:B9 X509v3 Authority Key Identifier: keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/NaepKDUSFtPVzyjXT9VY683pv7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ea:20:09:53:47:02:74:ea:1b:e8:f2:84:8a:04:aa:41:35: 2b:d8:f5:c9:9e:ef:84:a5:c6:00:f9:f3:6e:e2:e6:d3:6c:6e: 5e:e9:d7:b7:af:d6:aa:26:9f:43:37:79:45:4c:82:90:a2:ac: bf:57:2d:7e:08:3b:bb:da:6c:f1:dc:22:d9:5c:74:86:2c:d2: 5b:47:e7:6b:ae:cb:b5:d0:13:ad:94:e2:e9:0f:ae:a6:e8:ed: ae:fe:bb:c4:29:fc:f6:54:54:42:c7:3e:e7:37:9b:92:1f:27: 7f:6a:21:3f:0d:15:c2:af:23:cf:7e:1e:4c:d7:8e:86:9f:84: 42:6b:8f:0b:9e:33:81:ec:c3:25:91:69:30:66:bf:14:61:88: 54:08:2f:c6:30:a5:d0:ff:d8:b9:82:bb:a0:ec:aa:da:a1:89: 13:f5:e2:e6:44:ff:6b:15:47:a6:23:5e:6d:ac:63:57:93:ac: f0:32:f4:80:d2:2e:2e:26:79:2d:60:10:3b:2b:52:16:bc:ed: bb:65:10:ef:5a:e5:86:ad:78:38:dd:28:42:be:fe:26:2b:5b: bf:94:98:e5:81:95:44:0c:e2:4f:5f:6e:18:52:18:a5:b9:fc: 20:0d:57:33:11:7c:4e:2a:cd:f8:2d:c7:8a:77:d0:b9:7a:03: 06:34:4e:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExAU8yQMsYSIAuCZBMV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmFkMmY0ZmZjNTg3MmUzNWE0MjllNTNlZjE3OTkyNWZm NDIxNWUwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWE3YTkyODM1MTIxNmQzZDVjZjI4ZDc0ZmQ1NThlYmNkZTliZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4fQVo5SEuDkWlEh32BMzHABbJw0 4pjBoUUvqkRVoLcqD4xO20XL5nWz5v/t1PhUk5c8jyLtaS52lSZnwjq8GuKroDiD Cm5oOi5P9ge0G6Kjd+/Mz96QiVlU39Y5eOdqx2ORHGEkIhYqK5cpxdUlAuyAT27e lRrIVVnPrDFhHiYPPvACTJtrPYPIo/hrBpVJHSIakrUPgCeA+fKcBskYgq0LECh0 0T13hr0MYhNgQug50Vj/RmyAR4OkrizDFhA6B24dcw/eg+FPo+tBnzeIY49V+nR2 QsJ1hr+eaapQKot6Rp0ckf18DGik9xyvOTZeOs9cckHa5y5IUXP/9vLSuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWnqSg1EhbT1c8o10/VWOvN6b+5MB8GA1UdIwQY MBaAFAVq0vT/xYcuNaQp5T7xeZJf9CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDkt MWU0ZmNiMWM2MGNiLzEvTmFlcEtEVVNGdFBWenlqWFQ5Vlk2ODNwdjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80MzMwZmUtZGJmYy00ODFmLThmZDktMWU0ZmNiMWM2MGNi LzEvQldyUzlQX0ZoeTQxcENubFB2RjVrbF8wSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/TtMA0G CSqGSIb3DQEBCwUAA4IBAQAM6iAJU0cCdOob6PKEigSqQTUr2PXJnu+EpcYA+fNu 4ubTbG5e6de3r9aqJp9DN3lFTIKQoqy/Vy1+CDu72mzx3CLZXHSGLNJbR+drrsu1 0BOtlOLpD66m6O2u/rvEKfz2VFRCxz7nN5uSHyd/aiE/DRXCryPPfh5M146Gn4RC a48LnjOB7MMlkWkwZr8UYYhUCC/GMKXQ/9i5grug7KraoYkT9eLmRP9rFUemI15t rGNXk6zwMvSA0i4uJnktYBA7K1IWvO27ZRDvWuWGrXg43ShCvv4mK1u/lJjlgZVE DOJPX24YUhilufwgDVczEXxOKs34LceKd9C5egMGNE5v -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:28 2026 by rpki-client