This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa File: NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa (raw, json) Hash identifier: jPB6GFI8ltAMvGMwxWBRh6dK/JyrVkFk3erVX9RWesc= Subject key identifier: 34:3A:EB:B3:F2:14:77:61:B4:3B:74:AE:7A:43:25:99:4A:83:19:0D Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Certificate serial: 019B7A5B823AD75382E5745BA2FAE5751F2C Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59655 IP address blocks: 176.97.156.0/23 maxlen: 23 176.97.156.0/24 maxlen: 24 176.97.157.0/24 maxlen: 24 178.255.200.0/22 maxlen: 22 178.255.201.0/24 maxlen: 24 178.255.202.0/23 maxlen: 23 178.255.202.0/24 maxlen: 24 178.255.203.0/24 maxlen: 24 178.255.204.0/23 maxlen: 23 178.255.204.0/24 maxlen: 24 178.255.205.0/24 maxlen: 24 178.255.206.0/23 maxlen: 23 178.255.206.0/24 maxlen: 24 185.199.12.0/24 maxlen: 24 185.199.13.0/24 maxlen: 24 185.199.14.0/24 maxlen: 24 185.199.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:3a:d7:53:82:e5:74:5b:a2:fa:e5:75:1f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=343aebb3f2147761b43b74ae7a4325994a83190d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:0e:de:c9:cd:dc:85:62:80:57:4e:6d:99: 96:c8:69:f9:21:00:9e:ed:63:62:0b:fe:f3:61:f2: c9:2d:f7:1f:ab:f6:50:90:2f:b9:72:f4:22:a2:00: 1c:bc:11:4a:76:79:83:ab:89:a3:52:0a:79:a4:84: 3e:f0:5e:17:bf:0f:6d:12:45:55:ac:8e:61:d6:1a: ea:de:79:db:0a:39:d4:06:16:8a:de:07:d2:95:22: 5f:44:03:04:0e:4d:69:f4:6f:5d:96:38:b2:79:e7: 94:1d:7d:89:43:f5:e0:9b:6c:d3:89:e5:91:36:33: 3a:b8:bf:52:7f:c0:6a:b6:51:7f:d5:4a:17:9f:af: c8:4b:66:ca:22:76:8b:e7:d4:2c:fd:37:2b:46:a5: 02:1b:e4:ba:b3:5c:1a:8c:67:f6:fc:9c:6f:26:4f: 9e:12:f1:05:8f:23:47:7b:55:47:e9:6e:e5:ff:02: 4d:99:c2:6d:ee:65:bc:74:6d:d9:6c:8d:c0:af:4e: a7:08:c3:6b:fe:9b:8d:9c:51:ca:37:b7:b9:49:20: d3:5c:7c:ba:92:37:e2:59:02:c8:63:09:0b:e7:86: 17:7f:4c:82:ce:e5:43:ce:a7:db:80:94:72:87:75: 79:6a:f0:8d:d8:15:0a:1a:bd:e9:9e:b1:4f:d3:8a: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:EB:B3:F2:14:77:61:B4:3B:74:AE:7A:43:25:99:4A:83:19:0D X509v3 Authority Key Identifier: keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.156.0/23 178.255.200.0/21 185.199.12.0/22 Signature Algorithm: sha256WithRSAEncryption 78:52:b7:12:c1:ea:c3:b2:d9:d7:72:7c:4d:78:99:56:73:65: a1:88:56:a5:93:47:47:2c:d4:e7:cd:37:7a:f8:9f:30:55:c7: d6:0c:cc:9d:34:2f:e6:60:0a:bc:e0:e3:77:28:99:69:f7:0e: 9a:82:76:91:f9:7c:01:04:6c:7b:aa:66:34:61:94:fa:6f:8a: cf:47:62:5a:a9:30:8b:57:59:4c:8d:fc:48:0e:40:29:fa:02: 5e:5c:1b:a1:4c:dc:b2:e9:12:7d:1d:19:e7:45:c8:75:c3:15: 05:38:7f:b1:bd:48:4e:2c:51:be:9f:f9:e5:12:d8:c3:65:c2: b7:80:55:90:ac:e8:76:8c:d2:d2:19:98:66:3a:2f:1b:4f:d1: b6:0d:09:43:7a:22:d5:d5:24:36:91:7e:3c:10:09:d6:75:b5: 2d:b1:78:91:61:7d:c3:9b:15:1b:79:2b:58:0a:88:07:b0:bb: 7d:dc:76:e1:ed:35:62:21:73:c5:7d:12:24:c0:72:9e:1f:bb: 01:40:e9:3e:b7:5a:c2:fe:a4:7c:12:2b:01:19:32:04:3c:57: 7d:dd:7c:f0:6c:78:f4:95:fc:f9:97:20:33:ce:ea:f9:92:8b: 05:e9:c7:77:1e:7e:0f:d3:df:ec:d8:0c:ef:1f:e6:3b:1c:49: de:81:64:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W4I611OC5XRbovrldR8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi N2JhZmYwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDNhZWJiM2YyMTQ3NzYxYjQzYjc0YWU3YTQzMjU5OTRhODMxOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9AO3snN3IVigFdObZmWyGn5IQCe 7WNiC/7zYfLJLfcfq/ZQkC+5cvQiogAcvBFKdnmDq4mjUgp5pIQ+8F4Xvw9tEkVV rI5h1hrq3nnbCjnUBhaK3gfSlSJfRAMEDk1p9G9dljiyeeeUHX2JQ/Xgm2zTieWR NjM6uL9Sf8BqtlF/1UoXn6/IS2bKInaL59Qs/TcrRqUCG+S6s1wajGf2/JxvJk+e EvEFjyNHe1VH6W7l/wJNmcJt7mW8dG3ZbI3Ar06nCMNr/puNnFHKN7e5SSDTXHy6 kjfiWQLIYwkL54YXf0yCzuVDzqfbgJRyh3V5avCN2BUKGr3pnrFP04p0VQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDQ667PyFHdhtDt0rnpDJZlKgxkNMB8GA1UdIwQY MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt MTViOTQ0NTc3Yzg2LzEvTkRycnNfSVVkMkcwTzNTdWVrTWxtVXFER1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2 LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsGGcAwQD sv/IAwQCuccMMA0GCSqGSIb3DQEBCwUAA4IBAQB4UrcSwerDstnXcnxNeJlWc2Wh iFalk0dHLNTnzTd6+J8wVcfWDMydNC/mYAq84ON3KJlp9w6agnaR+XwBBGx7qmY0 YZT6b4rPR2JaqTCLV1lMjfxIDkAp+gJeXBuhTNyy6RJ9HRnnRch1wxUFOH+xvUhO LFG+n/nlEtjDZcK3gFWQrOh2jNLSGZhmOi8bT9G2DQlDeiLV1SQ2kX48EAnWdbUt sXiRYX3DmxUbeStYCogHsLt93Hbh7TViIXPFfRIkwHKeH7sBQOk+t1rC/qR8EisB GTIEPFd93XzwbHj0lfz5lyAzzur5kosF6cd3Hn4P09/s2AzvH+Y7HEnegWSb -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:14 2026 by rpki-client