This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/np_2_SKmGfgCwircPk4_KpAxetI.roa File: np_2_SKmGfgCwircPk4_KpAxetI.roa (raw, json) Hash identifier: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI= Subject key identifier: 9E:9F:F6:FD:22:A6:19:F8:02:C2:2A:DC:3E:4E:3F:2A:90:31:7A:D2 Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019B7C11CD97A5C2DD81049B2A686ED574BD Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/np_2_SKmGfgCwircPk4_KpAxetI.roa Signing time: Fri 02 Jan 2026 00:18:20 +0000 ROA not before: Fri 02 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215836 IP address blocks: 185.71.156.0/24 maxlen: 24 2a02:250:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:cd:97:a5:c2:dd:81:04:9b:2a:68:6e:d5:74:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Jan 2 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e9ff6fd22a619f802c22adc3e4e3f2a90317ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:19:86:93:91:11:5c:07:10:25:6a:00:a6: 27:d9:60:c4:80:23:49:7d:21:d4:ce:87:d0:3f:86: 38:c0:f9:8c:17:22:85:7f:97:41:8c:14:a9:e6:5c: 51:99:c3:21:36:b4:da:f3:b4:95:a2:e0:3f:31:d6: 05:0c:fd:4d:6e:c7:21:1e:e8:e5:ca:05:23:45:d5: e3:ca:f2:73:97:1c:31:f4:ff:2d:92:21:32:f1:82: 05:c0:0c:dd:fc:54:45:24:cf:7d:70:02:07:a5:80: 0e:38:82:df:5d:74:11:05:ba:e8:6a:eb:f8:03:b5: 27:14:34:85:02:92:c4:c8:47:a2:ed:b1:d4:20:e9: d7:31:39:45:4f:62:81:7f:08:50:0e:53:26:66:a3: a1:e7:0d:f9:52:78:5f:6e:7b:4a:c3:82:60:2c:23: fc:32:62:66:4c:18:e9:93:b6:fb:a2:fc:08:a0:2e: f8:42:2c:f9:b3:fa:f8:2f:19:08:37:f0:fb:c0:e7: a3:17:e6:a3:0d:7c:8c:86:11:eb:74:bc:5a:d5:a3: 87:9f:2a:e7:dc:a5:12:ee:40:03:bb:64:40:00:12: 39:10:2c:ce:6f:8c:62:79:2a:27:80:c1:40:f4:c8: 3c:80:0e:e9:3e:4e:4f:e5:6c:55:59:f8:81:08:34: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:F6:FD:22:A6:19:F8:02:C2:2A:DC:3E:4E:3F:2A:90:31:7A:D2 X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/np_2_SKmGfgCwircPk4_KpAxetI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.156.0/24 IPv6: 2a02:250:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 3b:52:f1:5e:3e:ef:42:a5:74:dc:6e:6a:79:97:fa:66:9e:e0: 42:4b:f8:aa:fb:07:07:24:2b:1b:df:e4:32:42:16:70:f3:75: 78:06:96:80:05:34:41:f4:0c:d5:cb:8a:53:6d:da:d9:96:be: 31:22:50:07:5c:d8:f5:57:52:c3:57:81:0e:ee:7f:dd:53:55: 73:7e:0a:46:74:2e:2c:c6:fa:12:5c:04:50:e0:dc:1f:54:d3: 96:54:5c:a7:ae:92:cf:9c:a8:26:96:49:97:f2:34:82:7e:52: da:0e:f3:1b:c0:1e:10:7d:3a:e1:42:fa:b2:38:9b:71:9c:8a: a9:a4:69:1c:82:90:b6:88:a9:5b:b5:1e:8c:fb:f8:49:0b:d6: 39:c8:aa:d5:b6:fc:63:0e:de:0f:2b:48:bd:40:e8:e1:a9:3b: b3:af:ea:a0:f9:05:58:1b:55:43:80:88:5f:9a:5d:45:85:0f: c5:62:94:ef:5c:60:83:e2:dc:a8:61:82:37:3e:db:9f:35:ae: 0c:98:7a:c6:1f:05:ec:49:01:8b:d7:96:ea:22:e5:47:71:e6: 9d:cc:4d:2c:99:b5:f3:2b:5b:93:e8:ea:a4:0c:ae:c2:1d:66: 12:22:27:e7:d4:1b:25:f6:b0:30:3b:b7:b9:0e:69:5d:d7:fd: 75:ac:eb:b3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ec2XpcLdgQSbKmhu1XS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjYwMTAyMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTlmZjZmZDIyYTYxOWY4MDJjMjJhZGMzZTRlM2YyYTkwMzE3YWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MgZhpOREVwHECVqAKYn2WDEgCNJ fSHUzofQP4Y4wPmMFyKFf5dBjBSp5lxRmcMhNrTa87SVouA/MdYFDP1NbschHujl ygUjRdXjyvJzlxwx9P8tkiEy8YIFwAzd/FRFJM99cAIHpYAOOILfXXQRBbroauv4 A7UnFDSFApLEyEei7bHUIOnXMTlFT2KBfwhQDlMmZqOh5w35UnhfbntKw4JgLCP8 MmJmTBjpk7b7ovwIoC74Qiz5s/r4LxkIN/D7wOejF+ajDXyMhhHrdLxa1aOHnyrn 3KUS7kADu2RAABI5ECzOb4xieSongMFA9Mg8gA7pPk5P5WxVWfiBCDSQCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ6f9v0iphn4AsIq3D5OPyqQMXrSMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEvbnBfMl9TS21HZmdDd2lyY1BrNF9LcEF4ZXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuUecMA8E AgACMAkDBwAqAgJQ//4wDQYJKoZIhvcNAQELBQADggEBADtS8V4+70KldNxuanmX +mae4EJL+Kr7BwckKxvf5DJCFnDzdXgGloAFNEH0DNXLilNt2tmWvjEiUAdc2PVX UsNXgQ7uf91TVXN+CkZ0LizG+hJcBFDg3B9U05ZUXKeuks+cqCaWSZfyNIJ+UtoO 8xvAHhB9OuFC+rI4m3GciqmkaRyCkLaIqVu1Hoz7+EkL1jnIqtW2/GMO3g8rSL1A 6OGpO7Ov6qD5BVgbVUOAiF+aXUWFD8VilO9cYIPi3Khhgjc+2581rgyYesYfBexJ AYvXluoi5Udx5p3MTSyZtfMrW5Po6qQMrsIdZhIiJ+fUGyX2sDA7t7kOaV3X/XWs 67M= -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:51 2026 by rpki-client