This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/NtxXA-SjdgbHpTLASmWhJ6aJbFY.roa File: NtxXA-SjdgbHpTLASmWhJ6aJbFY.roa (raw, json) Hash identifier: 7oyXL0UoixqVgrFDH/GftqOI7ebeAAZ+o7MusuQL8Oo= Subject key identifier: 36:DC:57:03:E4:A3:76:06:C7:A5:32:C0:4A:65:A1:27:A6:89:6C:56 Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Certificate serial: 019B7EA5AC79C06BC4D004A63E746077B064 Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/NtxXA-SjdgbHpTLASmWhJ6aJbFY.roa Signing time: Fri 02 Jan 2026 12:19:05 +0000 ROA not before: Fri 02 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52110 IP address blocks: 46.174.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:ac:79:c0:6b:c4:d0:04:a6:3e:74:60:77:b0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Validity Not Before: Jan 2 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36dc5703e4a37606c7a532c04a65a127a6896c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:44:5b:ff:ab:eb:e9:bd:2f:f2:4e:66:73: de:c8:e2:b5:d2:04:68:21:50:0c:10:74:73:6f:58: fb:51:43:20:e3:aa:8e:20:9d:f8:7d:bb:90:92:5c: 12:47:ed:64:09:1e:e0:f0:22:f6:1c:e8:08:91:72: 34:8a:23:2a:c3:3c:9e:d4:5a:de:82:57:8e:0c:1c: 20:af:5c:56:e8:b5:11:27:34:ea:33:4f:2f:b0:0b: e1:b1:b8:b7:40:ec:7d:ca:76:9c:a5:0e:37:d8:3f: 01:6c:41:8a:c6:fd:5d:1e:48:1f:0d:38:13:22:54: 7b:52:a5:6a:d6:84:3a:8a:a9:f5:35:c2:57:08:0d: c4:58:e0:35:e2:1e:70:cd:ae:47:7f:49:cb:f5:95: 10:fa:92:65:59:c1:88:aa:7c:a5:d4:c2:2b:35:f6: 74:08:ee:69:69:fd:e8:54:c4:d6:3f:4f:d1:c3:41: 3e:8a:4f:39:cc:f9:e1:51:9d:51:c3:51:da:0b:38: 57:f2:bc:7a:7f:40:2b:85:27:27:32:9a:82:f4:8e: 7d:56:43:cc:da:df:fa:f8:6f:b6:2d:65:bf:57:73: 73:0d:a6:ad:06:a2:04:bb:24:86:3b:b2:e9:4b:c2: 7b:dd:b1:d1:5e:d0:c1:a0:40:88:31:39:bf:92:7f: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:57:03:E4:A3:76:06:C7:A5:32:C0:4A:65:A1:27:A6:89:6C:56 X509v3 Authority Key Identifier: keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/NtxXA-SjdgbHpTLASmWhJ6aJbFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.24.0/21 Signature Algorithm: sha256WithRSAEncryption 89:e6:c7:cd:22:c7:6d:6e:56:28:a0:30:5e:7e:cc:df:87:b5: c5:f3:6e:cc:f5:14:c8:05:cc:db:80:8d:50:19:16:2e:3e:95: fa:10:1a:2a:4b:96:03:65:6e:19:7a:12:51:26:4c:10:13:b7: c9:d7:c3:1d:c2:8a:ec:7a:bd:e6:a9:ca:2c:85:62:98:03:12: 13:e4:cb:24:c6:e4:7e:8d:5d:00:4f:e7:62:b0:9e:02:ed:42: 0b:59:2b:55:b4:84:e8:df:43:39:d8:02:bc:e1:be:b1:11:57: 6b:02:fb:3a:9b:c6:f2:41:fc:8b:ec:0e:28:7e:aa:89:12:5c: e7:6d:4f:42:43:c9:17:c4:32:5f:e1:f8:ce:26:d5:b4:f3:1a: cb:53:2c:1b:d0:29:d9:b4:45:d0:1c:ac:6c:0e:ec:c6:40:ae: 97:8b:07:37:7b:df:18:43:00:2f:c5:e2:e5:dc:d0:bf:7c:06: ed:d3:4b:c3:2d:5c:53:f6:58:09:b8:27:21:41:3a:2a:59:32: ae:a5:73:9b:13:fa:af:ad:e3:0c:a8:3b:df:b3:b5:c5:06:2b: 43:a5:68:cb:5b:d2:37:24:79:de:32:1b:f6:8d:7d:45:b8:94: 1b:7b:81:68:fc:c3:8b:df:61:e7:cb:4e:fb:ee:25:68:c0:62: a9:d8:46:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pax5wGvE0ASmPnRgd7BkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWU4MzYxNmY1MWYwMGIxZTU1YzBjNjE3YjNhNWYwNGFi NzQxYTMwHhcNMjYwMTAyMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmRjNTcwM2U0YTM3NjA2YzdhNTMyYzA0YTY1YTEyN2E2ODk2YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47lEW/+r6+m9L/JOZnPeyOK10gRo IVAMEHRzb1j7UUMg46qOIJ34fbuQklwSR+1kCR7g8CL2HOgIkXI0iiMqwzye1Fre gleODBwgr1xW6LURJzTqM08vsAvhsbi3QOx9ynacpQ432D8BbEGKxv1dHkgfDTgT IlR7UqVq1oQ6iqn1NcJXCA3EWOA14h5wza5Hf0nL9ZUQ+pJlWcGIqnyl1MIrNfZ0 CO5paf3oVMTWP0/Rw0E+ik85zPnhUZ1Rw1HaCzhX8rx6f0ArhScnMpqC9I59VkPM 2t/6+G+2LWW/V3NzDaatBqIEuySGO7LpS8J73bHRXtDBoECIMTm/kn994QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbcVwPko3YGx6UywEploSemiWxWMB8GA1UdIwQY MBaAFBOeg2FvUfALHlXAxhezpfBKt0GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTIt Njc4MmUyZGFlZjc0LzEvTnR4WEEtU2pkZ2JIcFRMQVNtV2hKNmFKYkZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTItNjc4MmUyZGFlZjc0 LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq4YMA0G CSqGSIb3DQEBCwUAA4IBAQCJ5sfNIsdtblYooDBefszfh7XF827M9RTIBczbgI1Q GRYuPpX6EBoqS5YDZW4ZehJRJkwQE7fJ18Mdworser3mqcoshWKYAxIT5MskxuR+ jV0AT+disJ4C7UILWStVtITo30M52AK84b6xEVdrAvs6m8byQfyL7A4ofqqJElzn bU9CQ8kXxDJf4fjOJtW08xrLUywb0CnZtEXQHKxsDuzGQK6Xiwc3e98YQwAvxeLl 3NC/fAbt00vDLVxT9lgJuCchQToqWTKupXObE/qvreMMqDvfs7XFBitDpWjLW9I3 JHneMhv2jX1FuJQbe4Fo/MOL32Hny0777iVowGKp2EbE -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:59 2026 by rpki-client