This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/NC1kNBCi5IA0F53iafyWv28tEdg.roa File: NC1kNBCi5IA0F53iafyWv28tEdg.roa (raw, json) Hash identifier: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo= Subject key identifier: 34:2D:64:34:10:A2:E4:80:34:17:9D:E2:69:FC:96:BF:6F:2D:11:D8 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B7B35CC12AC38AEF16A0D02102BA1AC88 Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/NC1kNBCi5IA0F53iafyWv28tEdg.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 62.113.36.0/23 maxlen: 24 62.113.41.0/24 maxlen: 24 62.113.42.0/23 maxlen: 24 62.113.44.0/24 maxlen: 24 185.171.80.0/24 maxlen: 24 185.171.81.0/24 maxlen: 24 185.171.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cc:12:ac:38:ae:f1:6a:0d:02:10:2b:a1:ac:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342d643410a2e48034179de269fc96bf6f2d11d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:3f:6e:20:bc:c7:e1:22:b5:23:63:96:ba: 0c:e3:3f:00:cb:98:1f:1c:2e:9e:ae:b8:1a:0a:2f: bc:42:74:c3:5f:51:a4:70:cb:b4:f5:80:91:34:1c: 2c:e5:2e:ce:37:cf:ba:f1:10:62:0c:c6:81:b2:cd: 8a:35:78:7c:e8:a2:31:de:85:7e:93:cf:c3:42:cf: 06:94:51:04:87:e6:88:80:2e:95:57:44:fe:69:a7: 1a:7d:07:da:49:aa:69:b8:af:b6:50:77:5c:a0:a0: b7:8f:59:85:4a:26:5c:a8:df:77:fa:09:74:3d:1c: a9:e9:c2:a2:6c:11:11:d0:a5:48:24:f0:d7:52:51: 1a:90:b4:2f:20:f7:ae:d7:72:5d:51:51:2d:5d:52: 34:05:e8:1c:dc:a2:a5:0f:33:29:97:6b:41:9e:70: de:13:02:8e:95:08:5e:03:03:19:b8:e3:0c:e6:5e: df:e1:53:fc:18:9d:1f:eb:ed:44:32:6c:19:aa:44: df:37:8f:22:2a:d8:36:ba:49:77:1b:be:66:be:0e: 74:e7:72:69:e9:37:a1:26:f0:1d:63:db:13:1d:5a: be:b0:87:a6:fe:1e:0a:a8:d5:78:3e:02:f5:6d:41: df:a4:31:a6:09:35:0d:46:65:88:ef:9e:1e:97:56: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:64:34:10:A2:E4:80:34:17:9D:E2:69:FC:96:BF:6F:2D:11:D8 X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/NC1kNBCi5IA0F53iafyWv28tEdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.36.0/23 62.113.41.0-62.113.44.255 185.171.80.0-185.171.82.255 Signature Algorithm: sha256WithRSAEncryption 37:3e:41:aa:d1:e5:31:be:be:23:aa:95:c1:83:65:78:b8:b9: 4e:54:bb:32:c8:c8:4b:0c:06:3f:29:3e:0b:5a:e8:62:06:2a: 89:64:73:8b:8f:90:ca:ee:38:92:50:07:f3:31:11:29:09:70: 7a:36:74:ab:41:b8:ae:d9:5d:85:00:73:5b:b6:57:48:79:1a: 41:07:a5:bf:89:6d:87:8c:7b:27:d7:00:87:1d:c8:54:a3:c6: 94:f0:9b:d0:fe:e7:d9:1b:e8:28:7b:bb:96:e0:9f:5b:7e:f4: bb:3d:a6:62:af:07:e9:ec:74:b8:c0:c0:97:54:8e:d4:ea:5e: c9:59:9b:3a:a8:62:1c:7d:18:49:eb:71:c4:3e:92:30:b8:2c: 2b:df:58:f9:0d:69:a1:d0:8d:9e:50:bf:9a:9a:fa:c3:45:af: e1:21:27:a2:c4:9c:2b:00:d7:c2:47:6b:ac:11:3e:0e:18:42: 95:f8:a3:84:17:fb:30:0e:7c:37:4d:5c:56:65:6b:60:f8:7c: a4:c1:c8:6d:4a:0d:44:b3:85:bc:53:b8:0f:74:bc:64:e2:ba: b4:56:c9:58:95:95:cc:6b:ff:93:3f:fb:5e:32:64:6b:a4:bf: 97:be:c1:db:6b:03:33:58:46:40:77:e0:e1:d0:81:e3:40:c2: 94:c1:87:cb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7NcwSrDiu8WoNAhAroayIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJkNjQzNDEwYTJlNDgwMzQxNzlkZTI2OWZjOTZiZjZmMmQxMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPU/biC8x+EitSNjlroM4z8Ay5gf HC6errgaCi+8QnTDX1GkcMu09YCRNBws5S7ON8+68RBiDMaBss2KNXh86KIx3oV+ k8/DQs8GlFEEh+aIgC6VV0T+aacafQfaSappuK+2UHdcoKC3j1mFSiZcqN93+gl0 PRyp6cKibBER0KVIJPDXUlEakLQvIPeu13JdUVEtXVI0Begc3KKlDzMpl2tBnnDe EwKOlQheAwMZuOMM5l7f4VP8GJ0f6+1EMmwZqkTfN48iKtg2ukl3G75mvg5053Jp 6TehJvAdY9sTHVq+sIem/h4KqNV4PgL1bUHfpDGmCTUNRmWI754el1ayEwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDQtZDQQouSANBed4mn8lr9vLRHYMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvTkMxa05CQ2k1SUEwRjUzaWFmeVd2Mjh0RWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBPnEkMAwD BAA+cSkDBAA+cSwwDAMEBLmrUAMEALmrUjANBgkqhkiG9w0BAQsFAAOCAQEANz5B qtHlMb6+I6qVwYNleLi5TlS7MsjISwwGPyk+C1roYgYqiWRzi4+Qyu44klAH8zER KQlwejZ0q0G4rtldhQBzW7ZXSHkaQQelv4lth4x7J9cAhx3IVKPGlPCb0P7n2Rvo KHu7luCfW370uz2mYq8H6ex0uMDAl1SO1OpeyVmbOqhiHH0YSetxxD6SMLgsK99Y +Q1podCNnlC/mpr6w0Wv4SEnosScKwDXwkdrrBE+DhhClfijhBf7MA58N01cVmVr YPh8pMHIbUoNRLOFvFO4D3S8ZOK6tFbJWJWVzGv/kz/7XjJka6S/l77B22sDM1hG QHfg4dCB40DClMGHyw== -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:49 2026 by rpki-client