This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ntwoakNBLWCi_eDmdQW8Ye93wMA.roa File: ntwoakNBLWCi_eDmdQW8Ye93wMA.roa (raw, json) Hash identifier: uI+s9dLYxlNIfKiVhukcn52PpzMFIuk5gWhfSg5erME= Subject key identifier: 9E:DC:28:6A:43:41:2D:60:A2:FD:E0:E6:75:05:BC:61:EF:77:C0:C0 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27A1EF457305D61DA739D4970D410 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ntwoakNBLWCi_eDmdQW8Ye93wMA.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33667 IP address blocks: 5.182.186.0/24 maxlen: 24 5.182.193.0/24 maxlen: 24 5.182.194.0/24 maxlen: 24 5.182.195.0/24 maxlen: 24 36.255.215.0/24 maxlen: 24 45.67.141.0/24 maxlen: 24 63.246.129.0/24 maxlen: 24 63.246.148.0/24 maxlen: 24 63.246.152.0/24 maxlen: 24 63.246.159.0/24 maxlen: 24 78.31.206.0/24 maxlen: 24 103.216.197.0/24 maxlen: 24 149.126.13.0/24 maxlen: 24 162.218.89.0/24 maxlen: 24 185.201.41.0/24 maxlen: 24 185.201.43.0/24 maxlen: 24 2a0c:1900::/29 maxlen: 29 2a0c:1902:a7b3::/48 maxlen: 48 2a0c:1904:3f82::/48 maxlen: 48 2a0c:1905:c491::/48 maxlen: 48 2a0c:1907:6d2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7a:1e:f4:57:30:5d:61:da:73:9d:49:70:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9edc286a43412d60a2fde0e67505bc61ef77c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:f4:e9:4b:ed:7d:36:36:fb:d5:12:5c:b2: 82:3f:9c:05:a7:16:24:16:a7:dd:52:06:1b:b8:18: 70:e9:c2:97:7e:a8:15:68:54:f3:bc:f0:26:89:7d: 55:32:22:a5:36:36:65:74:f6:a3:eb:6a:e9:8d:e2: cc:78:72:e9:cd:dc:af:b2:90:6a:fb:f3:17:ac:ee: ac:89:fe:23:48:a6:97:4a:60:69:ce:37:2a:f6:67: 8b:0b:56:1f:51:1f:64:90:cb:6b:c6:b3:0a:90:bb: 2a:04:e9:7e:47:bc:32:52:77:50:9a:11:53:73:31: 34:86:a7:e0:c8:4f:28:8a:d7:3e:bc:2c:48:17:64: b6:69:55:5c:a6:80:0f:a4:cf:fc:8f:7b:f2:5d:50: f0:ec:ec:63:00:d2:9b:98:b0:cc:ec:54:0a:26:62: 18:51:a4:e0:69:78:92:d0:29:e2:a9:f1:1e:95:d4: 13:0b:37:1c:76:0a:17:df:e6:5a:7b:de:ad:77:64: c3:1c:a7:2f:4e:1b:f6:58:8b:4c:8d:c3:55:79:6a: e8:5b:f9:2c:cd:6e:40:a0:8b:28:9f:85:e4:fe:bf: df:03:3b:bb:cc:b7:1c:a1:08:50:04:1e:25:55:f4: 5d:6b:e6:3b:6d:f6:79:07:b7:0a:d7:fc:8e:07:d8: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DC:28:6A:43:41:2D:60:A2:FD:E0:E6:75:05:BC:61:EF:77:C0:C0 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ntwoakNBLWCi_eDmdQW8Ye93wMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.186.0/24 5.182.193.0-5.182.195.255 36.255.215.0/24 45.67.141.0/24 63.246.129.0/24 63.246.148.0/24 63.246.152.0/24 63.246.159.0/24 78.31.206.0/24 103.216.197.0/24 149.126.13.0/24 162.218.89.0/24 185.201.41.0/24 185.201.43.0/24 IPv6: 2a0c:1900::/29 Signature Algorithm: sha256WithRSAEncryption 54:72:ad:67:ab:a5:e3:b8:e3:38:09:2b:a5:32:30:4b:34:ea: 88:70:11:14:cf:f2:d3:31:68:0b:8d:2d:8c:52:6e:a9:2f:79: 44:3b:f9:8a:9f:fa:18:dc:b2:7b:e4:d8:1a:ee:70:e9:bf:87: 9d:92:87:24:2b:04:f0:ec:0f:b7:28:d4:f1:e0:f9:67:30:c8: cb:ee:fb:07:87:bd:f1:32:05:22:dd:0d:05:10:95:8e:90:3d: 3f:9d:42:87:21:23:4b:f9:93:5a:11:db:a2:be:51:40:43:e9: 70:c4:98:36:bf:5f:84:f2:75:84:21:a0:9a:a4:89:03:b0:b2: e8:e6:52:a7:3b:ea:9a:0b:b7:09:89:46:85:e3:ae:97:cf:1b: e0:12:b7:58:63:d6:9b:a7:32:7e:ca:13:58:01:92:d6:c6:f7: d6:85:65:b1:ec:d6:12:11:b1:41:25:83:df:f3:b2:9a:07:da: 35:2d:aa:09:89:8f:c5:17:86:a6:68:1f:3e:40:fb:0b:09:3f: 1b:a8:c5:ef:f4:ea:df:f1:4f:cb:ed:1b:0a:c8:6f:a2:d0:aa: 9e:2f:21:aa:b1:c8:88:8e:d8:46:a5:89:4d:3b:67:c0:ce:3e: 2c:17:08:ec:7f:2e:f0:97:0e:c4:00:27:de:cb:9f:0a:b3:4b: 73:49:6a:d8 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt4onoe9FcwXWHac51JcNQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWRjMjg2YTQzNDEyZDYwYTJmZGUwZTY3NTA1YmM2MWVmNzdjMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yz06UvtfTY2+9USXLKCP5wFpxYk FqfdUgYbuBhw6cKXfqgVaFTzvPAmiX1VMiKlNjZldPaj62rpjeLMeHLpzdyvspBq +/MXrO6sif4jSKaXSmBpzjcq9meLC1YfUR9kkMtrxrMKkLsqBOl+R7wyUndQmhFT czE0hqfgyE8oitc+vCxIF2S2aVVcpoAPpM/8j3vyXVDw7OxjANKbmLDM7FQKJmIY UaTgaXiS0CniqfEeldQTCzccdgoX3+Zae96td2TDHKcvThv2WItMjcNVeWroW/ks zW5AoIson4Xk/r/fAzu7zLccoQhQBB4lVfRda+Y7bfZ5B7cK1/yOB9g0HQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFJ7cKGpDQS1gov3g5nUFvGHvd8DAMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvbnR3b2FrTkJMV0NpX2VEbWRRVzhZZTkzd01BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAAW2ujAM AwQABbbBAwQCBbbAAwQAJP/XAwQALUONAwQAP/aBAwQAP/aUAwQAP/aYAwQAP/af AwQATh/OAwQAZ9jFAwQAlX4NAwQAotpZAwQAuckpAwQAuckrMA0EAgACMAcDBQMq DBkAMA0GCSqGSIb3DQEBCwUAA4IBAQBUcq1nq6XjuOM4CSulMjBLNOqIcBEUz/LT MWgLjS2MUm6pL3lEO/mKn/oY3LJ75Nga7nDpv4edkockKwTw7A+3KNTx4PlnMMjL 7vsHh73xMgUi3Q0FEJWOkD0/nUKHISNL+ZNaEduivlFAQ+lwxJg2v1+E8nWEIaCa pIkDsLLo5lKnO+qaC7cJiUaF466XzxvgErdYY9abpzJ+yhNYAZLWxvfWhWWx7NYS EbFBJYPf87KaB9o1LaoJiY/FF4amaB8+QPsLCT8bqMXv9Orf8U/L7RsKyG+i0Kqe LyGqsciIjthGpYlNO2fAzj4sFwjsfy7wlw7EACfey58Ks0tzSWrY -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client