This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/NWLF3cZVQRzG-V44eTdelLvm4lo.roa File: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (raw, json) Hash identifier: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc= Subject key identifier: 35:62:C5:DD:C6:55:41:1C:C6:F9:5E:38:79:37:5E:94:BB:E6:E2:5A Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Certificate serial: 019B7F852DBE13619FDD91EC9E6CA8543232 Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/NWLF3cZVQRzG-V44eTdelLvm4lo.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12353 IP address blocks: 5.43.0.0/18 maxlen: 18 5.158.0.0/18 maxlen: 18 5.249.0.0/17 maxlen: 17 37.28.192.0/18 maxlen: 18 46.189.128.0/17 maxlen: 17 77.54.0.0/16 maxlen: 16 78.137.192.0/18 maxlen: 18 83.174.0.0/18 maxlen: 18 87.103.0.0/17 maxlen: 17 89.114.0.0/15 maxlen: 15 93.108.0.0/16 maxlen: 16 94.60.0.0/14 maxlen: 14 95.136.0.0/17 maxlen: 17 148.63.0.0/16 maxlen: 16 148.69.0.0/16 maxlen: 16 148.71.0.0/16 maxlen: 16 149.90.0.0/16 maxlen: 16 161.230.0.0/16 maxlen: 16 178.166.0.0/17 maxlen: 17 185.37.208.0/22 maxlen: 22 188.37.0.0/16 maxlen: 16 192.160.245.0/24 maxlen: 24 192.160.246.0/23 maxlen: 23 192.160.248.0/23 maxlen: 23 192.160.251.0/24 maxlen: 24 212.18.160.0/19 maxlen: 19 213.30.0.0/17 maxlen: 17 2001:818::/29 maxlen: 29 2001:818::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2d:be:13:61:9f:dd:91:ec:9e:6c:a8:54:32:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3562c5ddc655411cc6f95e3879375e94bbe6e25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:02:86:ee:b4:31:83:b8:22:f5:00:09:57: e4:37:b2:19:44:b0:3d:e8:c5:46:c1:bc:64:12:f7: 30:75:cf:16:fc:b4:ba:38:0f:9c:40:59:2a:b2:f1: a0:0e:18:e7:d0:55:60:44:32:44:ab:4d:cd:93:14: ef:cb:2b:31:bc:2a:8c:12:e1:fa:49:f3:59:74:ad: 79:33:51:a0:00:e0:d8:7d:d6:0b:98:99:e5:e1:b4: 29:e3:84:cf:20:8e:ce:cd:3d:1a:93:6b:cb:af:29: 17:26:5b:ea:ca:7f:29:52:62:db:31:33:d1:a0:10: ef:cb:8a:37:82:59:61:b9:90:97:e5:cf:04:bd:59: 89:77:47:c7:50:d5:da:c2:cf:9b:39:1b:13:b5:da: 70:7b:13:99:3d:7b:e9:f0:f2:9a:66:7c:64:0a:4b: 06:8c:01:3b:83:e7:4d:11:76:f3:d3:f9:eb:c2:53: c6:af:25:0e:9e:82:b5:8c:1c:4d:62:9e:88:ce:e8: 9c:70:29:25:bb:19:8d:90:ea:3b:68:e4:9e:f4:dd: 47:66:f5:23:b6:1f:e9:65:ef:b7:79:be:86:d5:9b: b8:10:45:fd:8d:64:d3:22:4e:37:58:b9:56:6c:ff: d7:52:83:f5:d1:b2:e9:8c:d7:77:d9:de:eb:fd:aa: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:C5:DD:C6:55:41:1C:C6:F9:5E:38:79:37:5E:94:BB:E6:E2:5A X509v3 Authority Key Identifier: keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/NWLF3cZVQRzG-V44eTdelLvm4lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.43.0.0/18 5.158.0.0/18 5.249.0.0/17 37.28.192.0/18 46.189.128.0/17 77.54.0.0/16 78.137.192.0/18 83.174.0.0/18 87.103.0.0/17 89.114.0.0/15 93.108.0.0/16 94.60.0.0/14 95.136.0.0/17 148.63.0.0/16 148.69.0.0/16 148.71.0.0/16 149.90.0.0/16 161.230.0.0/16 178.166.0.0/17 185.37.208.0/22 188.37.0.0/16 192.160.245.0-192.160.249.255 192.160.251.0/24 212.18.160.0/19 213.30.0.0/17 IPv6: 2001:818::/29 Signature Algorithm: sha256WithRSAEncryption 5f:3e:27:05:15:92:ad:51:b6:93:c7:f9:6e:d9:4a:7f:12:1b: be:9d:52:79:5a:e3:50:6d:9e:f9:6d:b0:cc:59:05:99:1c:de: 9b:d9:be:31:0e:4d:07:29:ca:a2:31:47:d5:b1:9f:d3:cb:4c: c2:99:3f:7c:6d:a7:01:47:5e:8b:91:95:de:b2:5f:10:a9:8d: f4:ed:6b:3f:25:21:2f:7a:2b:d1:ee:82:ab:b1:f5:2f:fd:5b: 00:45:2b:d3:a9:3c:29:89:bd:8e:a2:d6:80:29:bf:d0:35:2a: ad:96:fa:d0:d9:6e:88:f1:0c:53:59:a2:0e:59:79:03:59:12: 27:e9:c7:f2:d5:f0:4d:77:54:e3:20:b3:cb:42:ac:09:6f:cc: 80:58:fb:28:ac:26:ca:8c:15:bf:96:05:41:3a:34:e1:b6:f2: 8f:13:37:f2:6e:02:b5:65:f1:74:d8:2f:2c:ea:3a:2a:b6:1f: 98:b5:ad:ce:ef:bd:cd:bc:cb:f2:3d:5d:97:8f:ba:ec:40:97: 25:21:a3:89:45:be:1f:66:df:a6:5a:85:31:56:15:d6:88:48: 2a:a0:5f:e1:91:be:2e:f2:01:11:ae:73:dc:db:20:a6:2b:c5: 11:05:4c:ea:ee:56:1c:57:d3:b1:29:72:c4:10:f8:41:50:1b: 93:19:28:19 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt/hS2+E2Gf3ZHsnmyoVDIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2 N2NhM2YwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTYyYzVkZGM2NTU0MTFjYzZmOTVlMzg3OTM3NWU5NGJiZTZlMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln4Chu60MYO4IvUACVfkN7IZRLA9 6MVGwbxkEvcwdc8W/LS6OA+cQFkqsvGgDhjn0FVgRDJEq03NkxTvyysxvCqMEuH6 SfNZdK15M1GgAODYfdYLmJnl4bQp44TPII7OzT0ak2vLrykXJlvqyn8pUmLbMTPR oBDvy4o3gllhuZCX5c8EvVmJd0fHUNXaws+bORsTtdpwexOZPXvp8PKaZnxkCksG jAE7g+dNEXbz0/nrwlPGryUOnoK1jBxNYp6IzuiccCkluxmNkOo7aOSe9N1HZvUj th/pZe+3eb6G1Zu4EEX9jWTTIk43WLlWbP/XUoP10bLpjNd32d7r/apbCQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFDVixd3GVUEcxvleOHk3XpS75uJaMB8GA1UdIwQY MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt YjFkN2FjOWVhMzIxLzEvTldMRjNjWlZRUnpHLVY0NGVUZGVsTHZtNGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAYF KwADBAYFngADBAcF+QADBAYlHMADBAcuvYADAwBNNgMEBk6JwAMEBlOuAAMEB1dn AAMDAVlyAwMAXWwDAwJePAMEB1+IAAMDAJQ/AwMAlEUDAwCURwMDAJVaAwMAoeYD BAeypgADBAK5JdADAwC8JTAMAwQAwKD1AwQBwKD4AwQAwKD7AwQF1BKgAwQH1R4A MA0EAgACMAcDBQMgAQgYMA0GCSqGSIb3DQEBCwUAA4IBAQBfPicFFZKtUbaTx/lu 2Up/Ehu+nVJ5WuNQbZ75bbDMWQWZHN6b2b4xDk0HKcqiMUfVsZ/Ty0zCmT98bacB R16LkZXesl8QqY307Ws/JSEveivR7oKrsfUv/VsARSvTqTwpib2OotaAKb/QNSqt lvrQ2W6I8QxTWaIOWXkDWRIn6cfy1fBNd1TjILPLQqwJb8yAWPsorCbKjBW/lgVB OjThtvKPEzfybgK1ZfF02C8s6joqth+Yta3O773NvMvyPV2Xj7rsQJclIaOJRb4f Zt+mWoUxVhXWiEgqoF/hkb4u8gERrnPc2yCmK8URBUzq7lYcV9OxKXLEEPhBUBuT GSgZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:27 2026 by rpki-client