This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa File: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (raw, json) Hash identifier: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0= Subject key identifier: 9E:0B:DB:09:C4:D8:D5:2C:BF:47:A9:7D:7C:91:7B:C9:DB:2B:B5:E2 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797EC8664CD4653345A73F1419EBB74A Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 91.200.252.0/24 maxlen: 24 110.172.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:66:4c:d4:65:33:45:a7:3f:14:19:eb:b7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e0bdb09c4d8d52cbf47a97d7c917bc9db2bb5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:05:59:31:74:ea:6f:fa:61:32:98:84:18: dd:27:65:60:99:6e:f2:b4:8a:26:d6:93:38:68:5b: f5:e8:66:8a:00:77:53:a5:a5:21:da:ab:3c:04:ba: 98:c7:a0:92:dc:13:7a:56:02:2f:a0:f8:a6:db:bc: 90:1a:14:11:95:cc:53:d4:6d:98:32:89:29:54:c0: 6b:c7:c8:6c:a6:c0:75:a6:36:52:74:b2:0b:00:d6: c3:f7:ac:0b:02:d5:5e:e3:8e:4d:b8:1d:c5:25:86: 22:05:32:59:66:7a:36:c8:06:83:49:7b:ca:8c:24: da:b8:87:d3:60:48:ee:f7:d2:e1:70:19:22:37:98: 73:c8:a4:d0:a3:f7:d1:8e:ae:ce:4b:30:23:43:c6: f5:f5:31:a2:ce:19:92:86:b5:ea:5f:b3:1f:5a:6d: 7c:f5:59:6f:d6:20:b6:0c:63:94:f9:1a:f9:63:e2: 65:d0:d1:b3:61:9e:b9:28:92:3c:ad:b8:71:d0:8c: b6:ff:16:79:b5:58:44:77:1f:fc:c4:cc:d2:40:ac: 2e:68:b0:40:a7:09:74:cc:6f:a4:87:2e:6f:fb:c5: d3:32:22:96:4b:ee:ef:04:5b:4c:6c:c5:ef:17:dd: dd:54:55:00:b9:84:2a:62:ba:4e:d7:51:9c:d7:bd: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0B:DB:09:C4:D8:D5:2C:BF:47:A9:7D:7C:91:7B:C9:DB:2B:B5:E2 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.252.0/24 110.172.190.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ef:e6:e0:21:8e:43:1e:4d:1b:06:f5:dc:e5:81:7c:78:e0: 83:e6:21:5c:24:c9:81:69:47:3a:16:0a:dc:ec:87:9c:08:a0: c3:20:0d:66:34:e1:f8:13:8c:4c:1a:ba:dc:16:4b:52:4c:b3: c9:dc:4e:45:3a:8b:fb:27:e0:cd:a2:19:07:41:42:4f:fe:89: 59:16:8e:40:f5:a6:88:a2:f4:e6:22:07:8f:45:b6:d9:54:c1: a3:d8:a9:50:00:cc:e5:dc:3d:de:80:a7:a0:1c:d3:83:29:9e: 0c:60:1d:81:cf:6b:ff:c8:51:64:25:92:59:27:f3:97:da:db: dc:3f:b6:5c:d1:8d:c5:80:26:ab:86:b3:d4:a5:d6:61:55:bc: 17:bf:9d:fa:d2:2d:e7:c9:18:57:d9:65:4f:5b:3b:1f:b6:9b: 24:87:fb:a3:95:fa:bc:a6:cd:be:a4:e1:45:df:6e:8e:1e:e8: cf:3e:e1:7d:6d:9b:a4:13:ec:2c:bf:e2:db:c9:f0:27:3d:22: 42:6a:46:12:84:86:e3:10:61:80:85:ad:c8:bc:81:17:ae:cf: 56:b6:14:8e:a3:64:bd:c8:01:f2:57:25:f1:5f:2d:46:08:89: 68:00:bb:ae:cf:78:72:85:f8:75:05:06:58:ad:42:64:da:14: bf:23:55:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fshmTNRlM0WnPxQZ67dKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTBiZGIwOWM0ZDhkNTJjYmY0N2E5N2Q3YzkxN2JjOWRiMmJiNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8wFWTF06m/6YTKYhBjdJ2VgmW7y tIom1pM4aFv16GaKAHdTpaUh2qs8BLqYx6CS3BN6VgIvoPim27yQGhQRlcxT1G2Y MokpVMBrx8hspsB1pjZSdLILANbD96wLAtVe445NuB3FJYYiBTJZZno2yAaDSXvK jCTauIfTYEju99LhcBkiN5hzyKTQo/fRjq7OSzAjQ8b19TGizhmShrXqX7MfWm18 9Vlv1iC2DGOU+Rr5Y+Jl0NGzYZ65KJI8rbhx0Iy2/xZ5tVhEdx/8xMzSQKwuaLBA pwl0zG+khy5v+8XTMiKWS+7vBFtMbMXvF93dVFUAuYQqYrpO11Gc173X9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ4L2wnE2NUsv0epfXyRe8nbK7XiMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvbmd2YkNjVFkxU3lfUjZsOWZKRjd5ZHNydGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8j8AwQA bqy+MA0GCSqGSIb3DQEBCwUAA4IBAQA87+bgIY5DHk0bBvXc5YF8eOCD5iFcJMmB aUc6Fgrc7IecCKDDIA1mNOH4E4xMGrrcFktSTLPJ3E5FOov7J+DNohkHQUJP/olZ Fo5A9aaIovTmIgePRbbZVMGj2KlQAMzl3D3egKegHNODKZ4MYB2Bz2v/yFFkJZJZ J/OX2tvcP7Zc0Y3FgCarhrPUpdZhVbwXv5360i3nyRhX2WVPWzsftpskh/ujlfq8 ps2+pOFF326OHujPPuF9bZukE+wsv+LbyfAnPSJCakYShIbjEGGAha3IvIEXrs9W thSOo2S9yAHyVyXxXy1GCIloALuuz3hyhfh1BQZYrUJk2hS/I1XU -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:34 2026 by rpki-client