This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/NjHKuubvlyQaDe6G06rOD1BcaRY.roa File: NjHKuubvlyQaDe6G06rOD1BcaRY.roa (raw, json) Hash identifier: PZZctgeIeCE44qT9n7ZGgk3AP9NOWa0WxX8jRLoy034= Subject key identifier: 36:31:CA:BA:E6:EF:97:24:1A:0D:EE:86:D3:AA:CE:0F:50:5C:69:16 Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B79106E8ABA368CC5123FEBFA8F77ADF0 Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/NjHKuubvlyQaDe6G06rOD1BcaRY.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197726 IP address blocks: 195.123.188.0/24 maxlen: 24 195.123.189.0/24 maxlen: 24 195.123.190.0/24 maxlen: 24 195.123.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:8a:ba:36:8c:c5:12:3f:eb:fa:8f:77:ad:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3631cabae6ef97241a0dee86d3aace0f505c6916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:d4:2f:16:ef:18:5a:3a:28:9f:5e:9a:7b: f6:e2:07:e7:00:66:db:35:b2:3a:36:42:61:8b:95: e2:f8:43:1b:4e:2e:d2:18:2a:11:95:28:1b:b1:cf: 46:e6:40:ee:e6:21:75:bf:5b:69:3c:f0:c5:33:99: 62:46:11:2c:e4:53:70:76:13:a2:85:cf:d6:36:cf: 2f:df:38:5d:73:aa:87:b9:b7:ca:51:b7:db:4d:de: 6f:ab:2e:9c:c6:a7:88:e4:bd:89:36:d9:a8:28:d8: 95:f4:70:80:78:fb:06:d6:7c:40:7f:32:cc:40:f4: 23:63:0e:95:14:72:69:3a:b4:66:20:f9:0b:e0:fe: 16:73:b1:f1:e3:4e:ad:94:46:a9:2b:88:17:c7:20: ae:62:19:42:80:b1:00:4a:2b:0b:fb:e9:39:94:62: c1:a8:90:93:d4:26:73:0a:83:4c:37:db:50:0b:d1: 96:e4:c5:cb:b7:4e:e7:ad:96:a6:d9:14:70:a7:bf: e0:5a:7c:99:9c:16:00:fb:cb:0f:1b:e3:55:c1:6d: a8:af:53:e8:c0:5c:87:f7:f3:4f:28:93:39:70:19: 50:8d:74:20:47:35:5d:35:e5:d4:a3:03:9f:3c:e4: 5a:74:32:bf:58:c5:ba:b4:15:16:92:e5:75:d6:09: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:31:CA:BA:E6:EF:97:24:1A:0D:EE:86:D3:AA:CE:0F:50:5C:69:16 X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/NjHKuubvlyQaDe6G06rOD1BcaRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.188.0/22 Signature Algorithm: sha256WithRSAEncryption 38:0a:e2:58:36:dc:47:d8:7e:a6:e2:02:06:ee:e0:22:b3:e3: b5:60:78:6a:c7:94:aa:b1:1a:8d:7f:22:8a:cd:bb:70:d3:0e: 6b:ae:66:4d:4c:16:a7:30:25:ca:a8:26:7c:6b:cd:db:44:ad: f8:2a:3d:2e:9c:a6:72:c0:d6:d3:c4:51:49:7a:7b:ae:a1:26: 9c:18:e8:e7:e7:b7:22:98:14:32:33:76:2d:39:cf:82:7b:2f: 08:c0:58:5c:fc:00:e2:48:ff:92:43:12:64:5b:a5:af:bf:b0: 90:92:9d:e9:ca:af:f0:da:2d:7a:cb:84:31:b2:17:09:9a:54: 66:6e:0c:2c:77:4e:33:bc:62:32:e8:c8:bd:51:01:4b:f8:53: 33:83:74:ff:d0:ef:8d:91:6e:2a:f1:83:39:80:21:4f:18:e7: e7:7a:45:f6:67:4c:97:78:b5:1f:ed:50:c7:96:49:4c:e6:ff: 73:de:d2:e2:7c:46:20:2c:7c:a9:97:24:e4:f5:f0:54:3f:2c: ba:68:7e:e3:c0:c2:17:1a:df:aa:01:e8:b1:68:43:cc:92:8f: 50:6c:a0:9d:de:da:6b:17:ac:38:79:e3:43:ba:8c:f9:ae:50: bf:0d:2e:0b:0d:e8:25:7c:bc:5d:61:0a:8e:f0:73:96:fd:2c: 88:ac:00:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG6KujaMxRI/6/qPd63wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjMxY2FiYWU2ZWY5NzI0MWEwZGVlODZkM2FhY2UwZjUwNWM2OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GbULxbvGFo6KJ9emnv24gfnAGbb NbI6NkJhi5Xi+EMbTi7SGCoRlSgbsc9G5kDu5iF1v1tpPPDFM5liRhEs5FNwdhOi hc/WNs8v3zhdc6qHubfKUbfbTd5vqy6cxqeI5L2JNtmoKNiV9HCAePsG1nxAfzLM QPQjYw6VFHJpOrRmIPkL4P4Wc7Hx406tlEapK4gXxyCuYhlCgLEASisL++k5lGLB qJCT1CZzCoNMN9tQC9GW5MXLt07nrZam2RRwp7/gWnyZnBYA+8sPG+NVwW2or1Po wFyH9/NPKJM5cBlQjXQgRzVdNeXUowOfPORadDK/WMW6tBUWkuV11gmlewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYxyrrm75ckGg3uhtOqzg9QXGkWMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvTmpIS3V1YnZseVFhRGU2RzA2ck9EMUJjYVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw3u8MA0G CSqGSIb3DQEBCwUAA4IBAQA4CuJYNtxH2H6m4gIG7uAis+O1YHhqx5SqsRqNfyKK zbtw0w5rrmZNTBanMCXKqCZ8a83bRK34Kj0unKZywNbTxFFJenuuoSacGOjn57ci mBQyM3YtOc+Cey8IwFhc/ADiSP+SQxJkW6Wvv7CQkp3pyq/w2i16y4QxshcJmlRm bgwsd04zvGIy6Mi9UQFL+FMzg3T/0O+NkW4q8YM5gCFPGOfnekX2Z0yXeLUf7VDH lklM5v9z3tLifEYgLHyplyTk9fBUPyy6aH7jwMIXGt+qAeixaEPMko9QbKCd3tpr F6w4eeNDuoz5rlC/DS4LDeglfLxdYQqO8HOW/SyIrADO -----END CERTIFICATE-----Generated at Mon Jan 26 22:29:55 2026 by rpki-client