This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NCOWApM6XRQVHGsAiRAmRViwcqA.roa File: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (raw, json) Hash identifier: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q= Subject key identifier: 34:23:96:02:93:3A:5D:14:15:1C:6B:00:89:10:26:45:58:B0:72:A0 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA53536E602C54B1A1421914A90119F Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NCOWApM6XRQVHGsAiRAmRViwcqA.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199191 IP address blocks: 87.246.27.0/24 maxlen: 24 87.246.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:35:36:e6:02:c5:4b:1a:14:21:91:4a:90:11:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34239602933a5d14151c6b008910264558b072a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:e1:2f:60:66:10:19:1f:b2:36:0e:9c:75: 25:84:c0:1e:d5:cf:9f:44:58:4f:12:8d:15:4d:6d: 4e:a2:56:a2:33:c4:b7:7c:b7:d8:53:79:eb:03:10: 59:d6:a5:4b:e8:9b:b8:11:c5:04:f9:33:e1:7a:04: 54:9e:94:24:bd:1d:21:45:9f:27:8b:c7:69:5b:70: cc:81:38:99:91:ff:1f:52:76:43:b5:73:eb:f5:26: 5a:8c:7f:3c:99:f0:e6:cd:0b:2d:8a:78:6c:3c:19: e8:d7:6c:03:58:53:a8:4d:d7:a2:e0:cd:c6:f9:24: 14:55:d7:96:24:b6:df:40:ab:7c:10:f7:69:2f:a6: 73:d4:c3:cb:b1:86:06:1a:7e:f8:1b:b4:ca:6c:67: e3:b2:02:48:b0:19:25:7d:18:2c:09:c5:c9:aa:35: 4d:ae:53:f6:45:89:48:c0:f2:4a:c8:e6:e6:ea:7a: 55:69:82:4f:59:89:c0:5c:2c:65:9c:e4:ae:dd:26: c6:ce:c7:b5:bb:da:85:80:df:a3:f8:96:d5:c4:66: fc:62:21:b6:5c:be:71:10:85:ae:50:56:af:3c:46: 22:45:4d:e7:91:81:42:2d:ad:0f:c4:46:6e:6a:04: 12:2f:9c:50:af:e5:61:b4:3c:68:c9:42:d9:9c:81: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:96:02:93:3A:5D:14:15:1C:6B:00:89:10:26:45:58:B0:72:A0 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/NCOWApM6XRQVHGsAiRAmRViwcqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.27.0/24 87.246.32.0/24 Signature Algorithm: sha256WithRSAEncryption 98:63:36:90:5a:3b:8e:3f:6c:3d:c8:57:7b:d6:1b:a7:75:46: e4:e3:2a:04:c4:31:ff:2a:6f:33:36:98:b3:f6:ac:15:84:a9: d1:48:64:4d:2d:f8:ec:73:52:72:d2:03:03:db:5c:b7:7c:b9: 53:b7:25:e3:cd:27:e4:93:93:64:89:62:49:3d:4a:89:95:d4: 34:4e:ac:a1:3c:69:39:8e:3d:25:d2:8b:48:68:0e:f6:98:a5: 9a:39:40:f0:78:70:00:5e:c0:d9:89:03:57:47:14:fa:4a:2d: da:16:cc:4d:1e:af:f9:c4:52:d3:d9:fa:3d:cb:dd:f2:ab:16: 6e:e0:56:b0:98:a1:4f:00:e4:c3:f7:75:ba:c7:26:12:12:0b: 36:d5:36:38:4b:37:3f:64:ea:41:03:a9:e3:28:40:15:e0:af: 68:63:90:aa:62:08:ab:0b:a1:f0:c9:21:03:ac:cd:52:02:cd: 8a:61:4e:24:9c:42:1e:bc:f7:7d:b6:93:6b:c1:fb:64:70:6b: 63:3a:03:0c:35:cb:1b:df:6f:c6:74:08:6b:4d:39:25:36:54: 1d:76:0b:de:12:fc:f9:68:83:06:92:0e:d4:7b:c1:8e:4c:e5: d8:24:78:41:5a:76:95:96:69:34:94:78:23:fd:00:cb:45:71: 57:53:f7:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pTU25gLFSxoUIZFKkBGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDIzOTYwMjkzM2E1ZDE0MTUxYzZiMDA4OTEwMjY0NTU4YjA3MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VHhL2BmEBkfsjYOnHUlhMAe1c+f RFhPEo0VTW1OolaiM8S3fLfYU3nrAxBZ1qVL6Ju4EcUE+TPhegRUnpQkvR0hRZ8n i8dpW3DMgTiZkf8fUnZDtXPr9SZajH88mfDmzQstinhsPBno12wDWFOoTdei4M3G +SQUVdeWJLbfQKt8EPdpL6Zz1MPLsYYGGn74G7TKbGfjsgJIsBklfRgsCcXJqjVN rlP2RYlIwPJKyObm6npVaYJPWYnAXCxlnOSu3SbGzse1u9qFgN+j+JbVxGb8YiG2 XL5xEIWuUFavPEYiRU3nkYFCLa0PxEZuagQSL5xQr+VhtDxoyULZnIFEYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDQjlgKTOl0UFRxrAIkQJkVYsHKgMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvTkNPV0FwTTZYUlFWSEdzQWlSQW1SVml3Y3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/YbAwQA V/YgMA0GCSqGSIb3DQEBCwUAA4IBAQCYYzaQWjuOP2w9yFd71hundUbk4yoExDH/ Km8zNpiz9qwVhKnRSGRNLfjsc1Jy0gMD21y3fLlTtyXjzSfkk5NkiWJJPUqJldQ0 TqyhPGk5jj0l0otIaA72mKWaOUDweHAAXsDZiQNXRxT6Si3aFsxNHq/5xFLT2fo9 y93yqxZu4FawmKFPAOTD93W6xyYSEgs21TY4Szc/ZOpBA6njKEAV4K9oY5CqYgir C6HwySEDrM1SAs2KYU4knEIevPd9tpNrwftkcGtjOgMMNcsb32/GdAhrTTklNlQd dgveEvz5aIMGkg7Ue8GOTOXYJHhBWnaVlmk0lHgj/QDLRXFXU/eM -----END CERTIFICATE-----Generated at Tue Jan 20 03:35:40 2026 by rpki-client