This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/NOWoB23HEmYTdKdWzMjUjIfX-lI.roa File: NOWoB23HEmYTdKdWzMjUjIfX-lI.roa (raw, json) Hash identifier: EDavFVGDb3OfWrkmMLQ28ZnqwmFb4R8GgQs19jLuWJg= Subject key identifier: 34:E5:A8:07:6D:C7:12:66:13:74:A7:56:CC:C8:D4:8C:87:D7:FA:52 Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Certificate serial: 019B7B363C3A3FA1DAE3BB213A3494E516FB Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/NOWoB23HEmYTdKdWzMjUjIfX-lI.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 188.208.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3c:3a:3f:a1:da:e3:bb:21:3a:34:94:e5:16:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e5a8076dc712661374a756ccc8d48c87d7fa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:59:3c:62:2b:8f:65:f3:47:7a:ad:a1:c0: 95:a5:fc:32:d1:91:c1:be:4a:b2:9c:48:1e:0d:f9: 9a:00:0c:19:98:98:1d:db:ae:c7:0a:2c:09:2e:26: 1e:70:34:c1:ce:aa:21:31:18:51:ed:6b:1a:b5:82: 42:a7:3f:29:ef:56:05:fa:80:79:cd:1f:d2:dd:e6: 6c:80:6e:ab:e8:4b:bd:c7:a1:61:a1:88:ee:5f:13: ae:74:b8:45:77:8b:3b:8d:2a:5b:5c:35:21:2f:d6: 50:48:cb:18:48:81:62:69:3c:d1:01:a5:54:d2:9f: 7d:e0:34:cb:f2:5a:8a:10:77:8f:e0:1c:1f:92:d1: a6:46:e2:6d:39:4e:40:fc:25:2f:66:0c:d9:64:bb: 4b:38:e0:ae:1a:d2:25:02:7d:ae:97:3e:ea:b4:6f: 0f:23:cb:98:e5:24:f5:8a:56:14:a3:6b:83:6b:e2: 2a:55:33:d9:cb:94:95:8e:b9:f8:a0:81:a1:d9:38: 5c:06:f6:78:73:70:b2:9e:1c:06:0f:8f:f0:9b:ac: fd:9a:f5:ea:de:4b:2a:5a:83:31:5c:b6:d3:0e:12: 0e:d0:0b:4e:83:5f:9b:1e:9a:82:f2:73:78:63:26: e0:e3:72:ac:2e:86:ab:34:93:6d:2d:8e:a1:37:02: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E5:A8:07:6D:C7:12:66:13:74:A7:56:CC:C8:D4:8C:87:D7:FA:52 X509v3 Authority Key Identifier: keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/NOWoB23HEmYTdKdWzMjUjIfX-lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.208.196.0/24 Signature Algorithm: sha256WithRSAEncryption c6:d6:2c:82:68:2b:a0:7a:d3:d6:70:f4:c9:74:b3:58:b6:36: 8c:92:84:e2:f0:f1:21:ad:27:16:72:73:e2:cd:0d:d9:db:e3: 94:98:3a:fc:79:fc:b6:b6:94:44:ed:19:27:7a:9f:6e:69:ef: 5b:ae:82:ec:63:2a:54:e1:5a:9b:d6:37:df:a7:95:ac:b1:bb: 47:60:30:2c:8f:5f:29:22:90:2c:82:31:2d:a0:88:91:e7:c2: 3e:00:62:85:59:99:cf:ce:67:f5:e3:e9:98:e0:5c:39:c1:a8: ee:30:eb:04:b7:29:a6:9d:97:73:1e:85:ae:74:bb:cd:44:4b: 07:8a:87:03:e8:65:55:ff:72:64:20:16:c0:5c:f1:ca:c7:c1: 3e:e3:f6:59:3b:29:57:c1:bb:52:9b:8d:78:8e:67:f4:91:95: 30:45:4b:62:e1:67:fa:45:b0:bc:c1:37:e6:ca:3c:2c:c9:2d: a0:8e:90:2a:cf:1b:d7:3a:a8:69:1f:0f:7a:91:38:44:5a:3d: 72:07:63:62:39:84:6a:e6:04:d7:78:9e:97:de:e5:11:b7:c5: 42:db:cc:42:3c:4c:02:73:28:6f:0a:cb:4c:92:4b:87:89:a5: 88:68:3a:a9:93:a4:f0:70:ae:e6:6f:df:0e:60:2d:a4:7d:79: 80:d5:df:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7Njw6P6Ha47shOjSU5Rb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1 Y2IzNmYwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU1YTgwNzZkYzcxMjY2MTM3NGE3NTZjY2M4ZDQ4Yzg3ZDdmYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9JZPGIrj2XzR3qtocCVpfwy0ZHB vkqynEgeDfmaAAwZmJgd267HCiwJLiYecDTBzqohMRhR7WsatYJCpz8p71YF+oB5 zR/S3eZsgG6r6Eu9x6FhoYjuXxOudLhFd4s7jSpbXDUhL9ZQSMsYSIFiaTzRAaVU 0p994DTL8lqKEHeP4BwfktGmRuJtOU5A/CUvZgzZZLtLOOCuGtIlAn2ulz7qtG8P I8uY5ST1ilYUo2uDa+IqVTPZy5SVjrn4oIGh2ThcBvZ4c3CynhwGD4/wm6z9mvXq 3ksqWoMxXLbTDhIO0AtOg1+bHpqC8nN4Yybg43KsLoarNJNtLY6hNwKX8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDTlqAdtxxJmE3SnVszI1IyH1/pSMB8GA1UdIwQY MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2 LWVlMDU3Y2Y5YzE2MS8xL05PV29CMjNIRW1ZVGRLZFd6TWpVaklmWC1sSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2 MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80MQw DQYJKoZIhvcNAQELBQADggEBAMbWLIJoK6B609Zw9Ml0s1i2NoyShOLw8SGtJxZy c+LNDdnb45SYOvx5/La2lETtGSd6n25p71uuguxjKlThWpvWN9+nlayxu0dgMCyP XykikCyCMS2giJHnwj4AYoVZmc/OZ/Xj6ZjgXDnBqO4w6wS3Kaadl3Meha50u81E SweKhwPoZVX/cmQgFsBc8crHwT7j9lk7KVfBu1KbjXiOZ/SRlTBFS2LhZ/pFsLzB N+bKPCzJLaCOkCrPG9c6qGkfD3qROERaPXIHY2I5hGrmBNd4npfe5RG3xULbzEI8 TAJzKG8Ky0ySS4eJpYhoOqmTpPBwruZv3w5gLaR9eYDV39E= -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:53 2026 by rpki-client