This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/ncPNkpuerXDPVvhOagmz6DGK4F4.roa File: ncPNkpuerXDPVvhOagmz6DGK4F4.roa (raw, json) Hash identifier: EzW2eYsud+NOEa0rR95TqZjMJsbs++g10GjrVu+pH+4= Subject key identifier: 9D:C3:CD:92:9B:9E:AD:70:CF:56:F8:4E:6A:09:B3:E8:31:8A:E0:5E Certificate issuer: /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf Certificate serial: 019B79ECED7EF7D6CE4CF76DCB6A3F41C10B Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/ncPNkpuerXDPVvhOagmz6DGK4F4.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6867 IP address blocks: 147.52.0.0/16 maxlen: 16 192.103.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ed:7e:f7:d6:ce:4c:f7:6d:cb:6a:3f:41:c1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc3cd929b9ead70cf56f84e6a09b3e8318ae05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:91:04:ee:b1:d3:69:53:8d:ce:25:d1:9b: 6a:94:c2:4e:ec:ea:c6:27:c2:d6:33:8b:c1:dc:92: 6c:c5:b2:ad:9d:c4:84:4a:9b:1f:52:aa:d0:b7:57: 9a:dd:19:b8:2c:6f:d2:d5:85:0a:1c:6e:1e:82:7b: 05:2d:56:05:04:74:85:64:ab:65:20:8e:94:9a:a4: c2:60:2e:35:11:ed:03:36:b7:49:9e:e8:b7:1f:18: ce:4f:1c:97:93:e3:36:04:54:f0:3f:8c:da:0c:23: e3:99:2a:5d:fc:7e:b8:7c:e7:76:62:72:8b:9a:dd: 56:69:46:2b:de:be:7a:07:4c:6b:24:ff:51:36:1f: 28:d3:e7:4d:fb:e4:7b:a4:3e:0d:8c:4b:68:84:bf: 04:b1:1c:5c:af:53:be:4a:28:56:cf:4d:0c:ee:a9: be:5d:d3:8a:e0:d0:51:1e:7e:be:17:50:1b:5f:64: 50:a7:d0:79:5e:99:dc:d0:cc:b2:2e:04:57:21:cc: fa:5c:79:28:60:1f:32:7a:49:3d:35:9d:fc:78:24: c8:e0:10:cc:ff:f9:e1:40:7b:fa:6e:69:b5:ae:71: e5:2f:82:62:5a:4f:3c:3f:70:b4:a9:d7:80:56:b6: 6c:9e:75:37:b4:1f:7f:d2:23:7d:7a:48:31:4e:df: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:CD:92:9B:9E:AD:70:CF:56:F8:4E:6A:09:B3:E8:31:8A:E0:5E X509v3 Authority Key Identifier: keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/ncPNkpuerXDPVvhOagmz6DGK4F4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.52.0.0/16 192.103.20.0/24 Signature Algorithm: sha256WithRSAEncryption 20:1d:09:16:ac:fc:fe:cd:ae:30:9d:f0:33:93:c3:3f:c4:aa: 82:1c:9f:b4:d8:63:56:b3:0c:78:bd:f9:0c:ff:45:99:2e:1c: e2:14:aa:5d:d8:a6:f9:a9:c3:61:5d:56:20:fa:b9:51:35:c9: fa:1d:95:7f:10:51:ef:e0:9a:6e:70:d3:79:91:96:c8:74:21: 45:fb:a4:38:7c:9e:02:74:3b:a3:c9:67:42:4d:c2:3c:8f:1c: 61:4a:49:f1:fc:84:0d:f3:6d:6e:6e:c4:12:73:66:47:e4:f4: 20:28:7e:46:93:4b:c6:6d:30:9b:ef:71:02:7f:de:31:8d:80: d8:83:44:dc:99:9c:4d:8b:bf:bc:2a:55:69:5a:79:5a:7e:4e: 6c:f0:d8:40:c5:fb:c4:df:25:64:b2:c8:1b:ae:fb:0a:bf:a8: ab:20:c9:56:f1:cc:47:8d:a4:87:77:fa:b2:eb:91:99:ca:66: 44:88:5b:04:4d:49:d8:01:41:f3:9f:7a:ae:be:f7:52:51:06: bc:c1:22:4e:32:5b:14:9b:ca:be:96:bb:c7:b1:d3:b0:08:c6: 9b:c7:f3:45:b5:33:07:08:38:ac:8f:98:8d:ae:b3:ba:3f:9f: d2:53:5d:2f:7b:f0:ff:5a:68:a0:ee:2b:f1:1d:43:d5:f6:43: 4d:f2:f9:9c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt57O1+99bOTPdty2o/QcELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz ZjljY2YwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGMzY2Q5MjliOWVhZDcwY2Y1NmY4NGU2YTA5YjNlODMxOGFlMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDKRBO6x02lTjc4l0ZtqlMJO7OrG J8LWM4vB3JJsxbKtncSESpsfUqrQt1ea3Rm4LG/S1YUKHG4egnsFLVYFBHSFZKtl II6UmqTCYC41Ee0DNrdJnui3HxjOTxyXk+M2BFTwP4zaDCPjmSpd/H64fOd2YnKL mt1WaUYr3r56B0xrJP9RNh8o0+dN++R7pD4NjEtohL8EsRxcr1O+SihWz00M7qm+ XdOK4NBRHn6+F1AbX2RQp9B5Xpnc0MyyLgRXIcz6XHkoYB8yekk9NZ38eCTI4BDM //nhQHv6bmm1rnHlL4JiWk88P3C0qdeAVrZsnnU3tB9/0iN9ekgxTt81/wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJ3DzZKbnq1wz1b4TmoJs+gxiuBeMB8GA1UdIwQY MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt YjcwOGM0MGE2NjdmLzEvbmNQTmtwdWVyWERQVnZoT2FnbXo2REdLNEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAkzQDBADA ZxQwDQYJKoZIhvcNAQELBQADggEBACAdCRas/P7NrjCd8DOTwz/EqoIcn7TYY1az DHi9+Qz/RZkuHOIUql3Ypvmpw2FdViD6uVE1yfodlX8QUe/gmm5w03mRlsh0IUX7 pDh8ngJ0O6PJZ0JNwjyPHGFKSfH8hA3zbW5uxBJzZkfk9CAofkaTS8ZtMJvvcQJ/ 3jGNgNiDRNyZnE2Lv7wqVWlaeVp+Tmzw2EDF+8TfJWSyyBuu+wq/qKsgyVbxzEeN pId3+rLrkZnKZkSIWwRNSdgBQfOfeq6+91JRBrzBIk4yWxSbyr6Wu8ex07AIxpvH 80W1MwcIOKyPmI2us7o/n9JTXS978P9aaKDuK/EdQ9X2Q03y+Zw= -----END CERTIFICATE-----Generated at Mon Feb 2 14:02:43 2026 by rpki-client