This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/npjtoW8dwDiUTx3uKE2aUXQhgU8.roa File: npjtoW8dwDiUTx3uKE2aUXQhgU8.roa (raw, json) Hash identifier: yJBiEf3/qysjdVXL8zVW+gEIWnThC6nOvYOa+8TSI5Q= Subject key identifier: 9E:98:ED:A1:6F:1D:C0:38:94:4F:1D:EE:28:4D:9A:51:74:21:81:4F Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E4992E8B7855ED191D7EC7D400D2 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/npjtoW8dwDiUTx3uKE2aUXQhgU8.roa Signing time: Fri 02 Jan 2026 08:19:01 +0000 ROA not before: Fri 02 Jan 2026 08:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 23.90.128.0/18 maxlen: 24 94.154.120.0/24 maxlen: 24 104.166.128.0/18 maxlen: 24 185.207.112.0/22 maxlen: 24 192.169.96.0/19 maxlen: 24 192.169.104.0/22 maxlen: 24 193.118.32.0/19 maxlen: 24 193.118.96.0/19 maxlen: 19 199.182.232.0/21 maxlen: 24 2a0b:21c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e4:99:2e:8b:78:55:ed:19:1d:7e:c7:d4:00:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e98eda16f1dc038944f1dee284d9a517421814f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:07:09:3d:04:5f:d8:75:21:cb:f5:24:ea: 99:b2:39:6f:93:01:3b:56:c6:4c:d5:d0:cf:f3:18: b9:bb:2e:38:ba:2a:f6:50:f0:0b:d3:66:33:d9:0d: 2b:f9:2d:64:2f:4c:b5:5e:2a:f4:85:c6:0c:cc:cb: 49:cf:c2:f5:5f:70:3e:3a:88:27:a5:a4:96:68:34: 51:55:e4:75:66:31:a3:f5:fb:47:22:ad:e8:0d:ed: ba:90:5e:44:d8:1c:23:76:b2:7a:cd:ec:87:ae:f4: a9:c3:34:6b:c4:a2:a7:10:4a:43:45:7b:9c:0c:8d: 41:dc:26:ec:57:13:96:c4:9b:4a:24:74:c4:0e:e7: 0b:74:8f:b6:44:c4:77:6a:26:31:55:53:63:80:eb: 70:9d:f5:b5:fe:b4:98:9c:9e:f9:f9:a8:06:c8:93: ef:43:f3:04:74:c9:65:31:e2:72:44:d6:48:7c:44: 57:19:3f:cb:1f:fe:71:d8:04:74:e8:5b:5a:b7:01: cb:06:9c:08:94:fb:78:bc:d3:ff:18:28:77:36:75: f8:bd:cd:34:fe:87:37:5d:d7:03:92:5f:8e:47:fa: d8:84:33:7e:1b:91:4f:3f:1c:ac:8a:84:c4:ea:ab: 0c:38:71:84:5f:bb:15:e1:a1:15:e2:2a:00:04:33: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:98:ED:A1:6F:1D:C0:38:94:4F:1D:EE:28:4D:9A:51:74:21:81:4F X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/npjtoW8dwDiUTx3uKE2aUXQhgU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.90.128.0/18 94.154.120.0/24 104.166.128.0/18 185.207.112.0/22 192.169.96.0/19 193.118.32.0/19 193.118.96.0/19 199.182.232.0/21 IPv6: 2a0b:21c0::/29 Signature Algorithm: sha256WithRSAEncryption 65:ce:8b:d7:2c:5f:82:72:a7:8a:8c:c8:f0:54:10:b1:d4:ff: 49:78:ca:de:3b:26:bb:e9:33:ac:48:8f:3f:f6:09:3c:65:a6: 90:34:0b:df:52:c4:86:50:92:97:e6:64:e2:71:45:66:6a:00: 65:c7:1f:e6:63:a0:79:f0:c6:7c:cb:95:1d:6e:74:79:10:bb: 2e:f8:97:02:1c:68:12:c9:cf:a2:c2:a4:8e:22:22:4b:3e:f7: 48:58:e7:48:b9:9b:40:b0:32:75:1c:bd:f4:bf:9b:7d:d0:0b: d4:ab:e2:47:82:e9:e7:e8:c2:9f:54:4c:ff:2e:a6:4e:c9:65: 3f:68:ac:62:1a:3c:00:27:b2:41:a0:a8:99:0c:b4:66:64:a4: 7d:5e:d4:17:52:b5:5e:7b:a3:2e:65:34:99:d0:0a:12:ca:0e: 66:d6:fc:67:58:34:fd:d5:18:e0:08:1c:68:a1:93:92:b9:2d: a5:2f:6f:38:36:32:68:bc:0b:2b:b2:9a:9f:32:55:97:4b:4f: 85:d7:50:cb:2a:12:e7:92:b7:63:c4:19:bb:0d:64:85:ba:0b: 81:f8:d3:28:d9:fe:bf:e3:fa:88:37:6e:2a:1d:5f:92:33:c8: 92:1a:e2:0d:8b:2d:58:19:ab:91:1e:5e:16:df:f9:31:f7:3b: 72:e4:3f:ec -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt9yeSZLot4Ve0ZHX7H1ADSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTk4ZWRhMTZmMWRjMDM4OTQ0ZjFkZWUyODRkOWE1MTc0MjE4MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRYHCT0EX9h1Icv1JOqZsjlvkwE7 VsZM1dDP8xi5uy44uir2UPAL02Yz2Q0r+S1kL0y1Xir0hcYMzMtJz8L1X3A+Oogn paSWaDRRVeR1ZjGj9ftHIq3oDe26kF5E2BwjdrJ6zeyHrvSpwzRrxKKnEEpDRXuc DI1B3CbsVxOWxJtKJHTEDucLdI+2RMR3aiYxVVNjgOtwnfW1/rSYnJ75+agGyJPv Q/MEdMllMeJyRNZIfERXGT/LH/5x2AR06FtatwHLBpwIlPt4vNP/GCh3NnX4vc00 /oc3XdcDkl+OR/rYhDN+G5FPPxysioTE6qsMOHGEX7sV4aEV4ioABDN8iQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJ6Y7aFvHcA4lE8d7ihNmlF0IYFPMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvbnBqdG9XOGR3RGlVVHgzdUtFMmFVWFFoZ1U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQGF1qAAwQA Xpp4AwQGaKaAAwQCuc9wAwQFwKlgAwQFwXYgAwQFwXZgAwQDx7boMA0EAgACMAcD BQMqCyHAMA0GCSqGSIb3DQEBCwUAA4IBAQBlzovXLF+CcqeKjMjwVBCx1P9JeMre Oya76TOsSI8/9gk8ZaaQNAvfUsSGUJKX5mTicUVmagBlxx/mY6B58MZ8y5UdbnR5 ELsu+JcCHGgSyc+iwqSOIiJLPvdIWOdIuZtAsDJ1HL30v5t90AvUq+JHgunn6MKf VEz/LqZOyWU/aKxiGjwAJ7JBoKiZDLRmZKR9XtQXUrVee6MuZTSZ0AoSyg5m1vxn WDT91RjgCBxooZOSuS2lL284NjJovAsrspqfMlWXS0+F11DLKhLnkrdjxBm7DWSF uguB+NMo2f6/4/qIN24qHV+SM8iSGuINiy1YGauRHl4W3/kx9zty5D/s -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:08 2026 by rpki-client