This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/NG61yH3HN97TjS1iRIUPVdYaQ7A.roa File: NG61yH3HN97TjS1iRIUPVdYaQ7A.roa (raw, json) Hash identifier: x678lkfNMzciNejX1Mk4JHb1ftZLDB8lKMVQe+Qriio= Subject key identifier: 34:6E:B5:C8:7D:C7:37:DE:D3:8D:2D:62:44:85:0F:55:D6:1A:43:B0 Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019C4215877DB7581BD179513FEA9E93A7FE Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/NG61yH3HN97TjS1iRIUPVdYaQ7A.roa Signing time: Mon 09 Feb 2026 11:07:13 +0000 ROA not before: Mon 09 Feb 2026 11:07:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8968 IP address blocks: 151.88.111.0/24 maxlen: 24 151.88.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:15:87:7d:b7:58:1b:d1:79:51:3f:ea:9e:93:a7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Feb 9 11:07:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=346eb5c87dc737ded38d2d6244850f55d61a43b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:60:d5:ed:01:cb:14:bf:99:fa:e9:70:7f: b5:d2:40:cc:11:8d:10:b9:e6:3f:ee:c0:06:e9:61: 56:53:b3:23:26:fb:e2:4b:7a:10:d4:58:31:f5:d6: 9e:a6:89:24:c0:30:71:f8:5c:32:64:a3:21:48:68: 7e:61:9f:51:87:cf:f0:08:91:42:2b:03:16:e6:e7: 02:61:a6:aa:43:55:03:e0:30:37:6a:da:a7:b1:d9: 20:fd:1a:7e:0b:c3:80:49:ce:1f:8b:17:98:01:6e: fd:9c:79:cd:c5:88:76:08:e9:5a:e8:ce:32:68:30: 52:fc:f3:93:5c:d2:e3:fb:fe:5e:7e:4e:d4:45:e6: 5c:a8:c2:a0:15:88:25:03:ab:5a:53:d6:51:2a:02: f0:ed:d0:29:35:3e:8c:38:0c:90:28:2b:7d:58:01: 76:d8:6a:5d:80:e3:d1:df:4a:d7:db:64:e1:98:6b: fa:80:14:74:20:90:dd:2a:ba:d3:0b:de:33:c3:b0: 4a:59:71:d1:68:7a:0d:ab:93:67:e7:59:d4:31:9f: d6:50:a8:1f:7f:f5:44:e2:0c:86:f9:4c:86:0d:07: c0:65:0c:cd:18:30:42:65:8f:5d:69:bf:9d:80:3c: c1:00:46:c5:02:d9:9a:85:c6:d9:5e:9c:7f:ba:02: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:B5:C8:7D:C7:37:DE:D3:8D:2D:62:44:85:0F:55:D6:1A:43:B0 X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/NG61yH3HN97TjS1iRIUPVdYaQ7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.88.111.0-151.88.112.255 Signature Algorithm: sha256WithRSAEncryption 3a:b5:1d:db:43:0f:58:a7:7d:b7:cf:4e:6c:1f:4f:0d:0e:b4: 1f:60:be:0b:02:42:62:28:bd:24:3f:c1:46:38:c1:1f:48:5a: 4b:73:28:cc:4a:90:fd:63:0d:9f:b0:e0:22:2e:2b:e1:82:93: 2b:96:41:0a:77:86:d3:33:d9:90:31:ea:6d:c3:3f:c3:3d:39: 30:ce:d0:ce:b0:24:54:9a:c0:35:f3:9e:e9:d8:62:f7:fb:07: ee:db:23:70:1b:44:35:87:25:18:d5:f8:5f:4c:88:1e:90:f2: dd:d7:a0:ad:7a:42:09:52:f5:bb:a9:7d:64:e6:64:8e:95:20: 1f:ca:70:d0:24:94:ae:da:5d:9c:d2:18:52:62:a3:06:43:4d: 68:13:b7:bb:49:a1:14:50:b8:04:ae:bd:3a:d2:3e:c3:e0:64: a9:6a:ef:c0:95:54:82:ee:c5:51:fe:b5:19:33:ae:d3:0d:b5: 61:d0:44:3c:3a:47:6a:17:c5:bf:f9:3e:f8:76:ff:57:80:c0: 02:c9:62:4b:8b:28:db:37:82:c0:c0:33:59:70:e7:32:c6:33: be:7d:15:14:eb:02:a1:ac:2f:10:f9:df:d9:61:12:09:a0:4a: 03:39:9a:ea:31:61:7c:7a:aa:5a:fb:98:bb:7f:b6:d7:5e:de: ee:15:ad:38 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZxCFYd9t1gb0XlRP+qek6f+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMjA5MTEwNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDZlYjVjODdkYzczN2RlZDM4ZDJkNjI0NDg1MGY1NWQ2MWE0M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreVg1e0ByxS/mfrpcH+10kDMEY0Q ueY/7sAG6WFWU7MjJvviS3oQ1Fgx9daepokkwDBx+FwyZKMhSGh+YZ9Rh8/wCJFC KwMW5ucCYaaqQ1UD4DA3atqnsdkg/Rp+C8OASc4fixeYAW79nHnNxYh2COla6M4y aDBS/POTXNLj+/5efk7UReZcqMKgFYglA6taU9ZRKgLw7dApNT6MOAyQKCt9WAF2 2GpdgOPR30rX22ThmGv6gBR0IJDdKrrTC94zw7BKWXHRaHoNq5Nn51nUMZ/WUKgf f/VE4gyG+UyGDQfAZQzNGDBCZY9dab+dgDzBAEbFAtmahcbZXpx/ugLoFQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDRutch9xzfe040tYkSFD1XWGkOwMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvTkc2MXlIM0hOOTdUalMxaVJJVVBWZFlhUTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACXWG8D BACXWHAwDQYJKoZIhvcNAQELBQADggEBADq1HdtDD1infbfPTmwfTw0OtB9gvgsC QmIovSQ/wUY4wR9IWktzKMxKkP1jDZ+w4CIuK+GCkyuWQQp3htMz2ZAx6m3DP8M9 OTDO0M6wJFSawDXznunYYvf7B+7bI3AbRDWHJRjV+F9MiB6Q8t3XoK16QglS9bup fWTmZI6VIB/KcNAklK7aXZzSGFJiowZDTWgTt7tJoRRQuASuvTrSPsPgZKlq78CV VILuxVH+tRkzrtMNtWHQRDw6R2oXxb/5Pvh2/1eAwALJYkuLKNs3gsDAM1lw5zLG M759FRTrAqGsLxD539lhEgmgSgM5muoxYXx6qlr7mLt/ttde3u4VrTg= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:47 2026 by rpki-client