This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa File: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (raw, json) Hash identifier: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ= Subject key identifier: 36:B8:10:FF:9C:08:DB:FE:07:BD:E8:10:C2:3C:0C:FD:97:3C:C5:D3 Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B7CEE582FD03BF829C774625048700D70 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43800 IP address blocks: 185.54.4.0/23 maxlen: 23 185.54.6.0/24 maxlen: 24 193.34.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:58:2f:d0:3b:f8:29:c7:74:62:50:48:70:0d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b810ff9c08dbfe07bde810c23c0cfd973cc5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:75:65:99:7f:74:4d:58:12:ca:e1:23:29: c1:91:d5:2b:78:eb:95:e1:27:d6:f7:98:ee:51:95: 00:ed:57:73:58:cb:5e:c8:37:6f:ad:4d:54:96:b6: 4f:e7:da:a0:82:c3:11:15:0f:64:c6:77:fd:8d:a1: b7:36:c2:70:5d:8d:23:9a:18:5d:17:44:ce:3b:2a: 80:71:8b:5f:70:d2:17:ec:99:c9:b1:b2:8b:0f:ce: f5:71:9c:1d:25:cf:58:5e:df:7d:6e:58:f5:cf:f0: e2:bd:21:9c:1f:1c:22:bc:68:5f:f0:8f:8a:0e:57: 8e:fe:23:8c:b3:20:34:cd:e6:bb:17:c7:87:ba:f6: a2:cb:cd:65:a4:9b:34:4c:18:6e:07:09:fa:5d:ed: 1d:a5:e7:9d:46:a6:24:b4:ef:ad:0f:19:7c:e6:37: 38:16:2d:69:df:62:c7:77:c3:24:21:9b:73:16:f7: fa:64:d8:a2:3a:98:36:9a:f3:66:00:c9:5f:02:21: 43:df:05:4d:92:41:8f:f4:e4:e6:3f:66:16:6c:7f: 39:60:ab:4f:61:e6:f7:2a:f8:85:26:af:23:19:dd: fe:5c:bb:d7:71:8b:48:13:c9:7c:c9:4f:bd:88:ea: 41:ef:81:2b:e6:99:a0:59:c8:43:f9:a7:3d:68:ff: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:10:FF:9C:08:DB:FE:07:BD:E8:10:C2:3C:0C:FD:97:3C:C5:D3 X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.4.0-185.54.6.255 193.34.136.0/23 Signature Algorithm: sha256WithRSAEncryption 10:8a:c5:34:b2:32:9c:8a:11:3c:a9:b1:5f:07:a4:c2:63:e2: a5:f3:be:5b:ca:16:0f:3e:ac:32:cf:44:14:b0:e2:44:c2:e9: 39:ce:ef:f2:13:d8:d2:40:eb:72:ef:a9:15:a3:b6:c2:dc:c2: a3:6a:c9:56:21:9f:af:b6:f3:fa:22:7c:6f:21:8d:84:2c:8d: 9b:bf:e4:fd:b8:c0:48:23:5f:90:19:10:8a:af:66:70:e4:5f: 6f:1c:56:51:f6:1c:82:54:b6:7e:23:9c:3f:b3:d4:62:99:91: 37:6b:a7:55:85:19:06:9d:37:48:ec:26:4e:9d:07:7c:c8:69: 61:8b:b6:d6:16:1a:ca:9c:b1:5b:4d:fe:7a:ac:59:a2:b9:c6: df:34:c5:1e:51:0b:62:8a:4d:c8:f5:d0:45:6c:8e:21:c8:e3: 59:05:17:5e:ec:34:65:25:96:e3:78:d1:34:60:e7:a5:4a:43: 4c:04:89:a3:d4:7c:44:45:85:d4:ca:3d:33:6c:ca:38:7b:7f: a8:d9:ba:19:2d:10:8a:7a:3c:a0:1d:68:1b:bd:c8:3a:d2:6b: 9b:d4:fe:47:f8:e8:49:8e:84:a2:9e:50:9f:dd:33:a8:7f:09: 83:2f:51:79:9d:42:cd:00:3a:63:a3:36:0e:ce:31:af:1c:bb: 8b:07:97:bb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87lgv0Dv4Kcd0YlBIcA1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI4MTBmZjljMDhkYmZlMDdiZGU4MTBjMjNjMGNmZDk3M2NjNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLJ1ZZl/dE1YEsrhIynBkdUreOuV 4SfW95juUZUA7VdzWMteyDdvrU1UlrZP59qggsMRFQ9kxnf9jaG3NsJwXY0jmhhd F0TOOyqAcYtfcNIX7JnJsbKLD871cZwdJc9YXt99blj1z/DivSGcHxwivGhf8I+K DleO/iOMsyA0zea7F8eHuvaiy81lpJs0TBhuBwn6Xe0dpeedRqYktO+tDxl85jc4 Fi1p32LHd8MkIZtzFvf6ZNiiOpg2mvNmAMlfAiFD3wVNkkGP9OTmP2YWbH85YKtP Yeb3KviFJq8jGd3+XLvXcYtIE8l8yU+9iOpB74Er5pmgWchD+ac9aP8PEQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDa4EP+cCNv+B73oEMI8DP2XPMXTMB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvTnJnUV81d0kyXzRIdmVnUXdqd01fWmM4eGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5NgQD BAC5NgYDBAHBIogwDQYJKoZIhvcNAQELBQADggEBABCKxTSyMpyKETypsV8HpMJj 4qXzvlvKFg8+rDLPRBSw4kTC6TnO7/IT2NJA63LvqRWjtsLcwqNqyVYhn6+28/oi fG8hjYQsjZu/5P24wEgjX5AZEIqvZnDkX28cVlH2HIJUtn4jnD+z1GKZkTdrp1WF GQadN0jsJk6dB3zIaWGLttYWGsqcsVtN/nqsWaK5xt80xR5RC2KKTcj10EVsjiHI 41kFF17sNGUlluN40TRg56VKQ0wEiaPUfERFhdTKPTNsyjh7f6jZuhktEIp6PKAd aBu9yDrSa5vU/kf46EmOhKKeUJ/dM6h/CYMvUXmdQs0AOmOjNg7OMa8cu4sHl7s= -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:13 2026 by rpki-client