This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa File: NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa (raw, json) Hash identifier: aPMqHiIhFTors8hWctYIEhCCvjVaLha58IZgbJT4DOs= Subject key identifier: 35:6C:7E:DD:54:58:89:58:F7:AC:89:E9:B7:41:82:FA:3E:81:93:5C Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD62F6C04DE32DD76F851E61FD6B1 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205486 IP address blocks: 2a09:6282::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d6:2f:6c:04:de:32:dd:76:f8:51:e6:1f:d6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356c7edd54588958f7ac89e9b74182fa3e81935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:5d:5d:c4:5b:58:3a:a8:fe:be:18:75:6f: c3:8c:e0:2d:ad:14:70:0e:b4:c0:9f:88:92:fc:ca: 61:e2:df:2a:54:61:ce:16:cd:e1:5e:d9:d6:f9:a7: 01:b2:43:48:83:6b:01:b7:4d:46:70:c1:6c:2c:73: 0b:74:2c:8a:b7:b8:d6:a3:13:df:1f:1a:7d:2c:e6: 87:56:6e:9d:c5:ed:78:0e:fe:a9:df:36:de:e3:87: fe:e9:18:07:12:c9:c4:f0:01:a8:1b:f0:74:1d:4b: ef:f3:87:83:26:a4:04:e4:61:68:9a:73:f7:27:a2: a6:9d:c0:0e:50:85:b1:72:4e:22:b2:ea:46:0c:c2: b1:4a:66:86:a7:54:f2:5e:d4:27:c5:4a:c0:78:30: 45:d2:2c:f2:96:ce:53:f4:01:54:0b:3b:10:fc:5d: 51:93:e1:dd:a7:89:ef:f3:b7:b6:dd:05:bd:3d:27: 4d:76:a8:8d:15:4a:a0:9c:e5:8b:91:cc:c3:e4:e7: e1:95:90:af:5e:b5:49:d3:1a:83:1f:2c:e5:9e:71: 10:0b:43:55:dc:c5:f3:91:2e:4f:8b:47:ee:9b:a1: ce:3b:b2:7c:fb:bb:01:33:7c:75:29:e4:3c:9b:8d: 6d:2d:ee:0f:fe:be:fd:0f:8d:51:b1:cf:45:88:9a: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6C:7E:DD:54:58:89:58:F7:AC:89:E9:B7:41:82:FA:3E:81:93:5C X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:6282::/32 Signature Algorithm: sha256WithRSAEncryption 21:48:3f:e1:95:04:43:4d:18:57:3e:c2:cb:07:44:ec:26:6d: 50:2d:16:10:40:68:84:94:0a:f5:9b:0e:02:be:ab:24:b0:0e: ad:b4:1d:51:f0:5f:69:e7:f4:2e:d2:b1:d9:6b:a0:c0:34:15: 32:34:b6:7d:f7:1b:a2:84:9b:6d:90:42:45:72:04:4c:7b:92: 69:bf:dc:18:1d:70:0c:0e:b8:36:d0:e1:5c:62:26:ed:73:42: 5b:56:35:74:11:83:9a:d4:68:fe:fb:83:0c:0b:7d:84:f9:a5: 89:ea:ee:16:6a:f7:fd:4a:64:e7:c2:ac:8c:a8:b5:30:cf:db: ef:cc:c3:29:74:9b:40:4d:9d:0e:c8:4e:14:bc:af:ac:84:85: 87:9e:82:c4:86:91:85:c7:e3:82:89:19:85:84:c1:db:ca:34: 9f:06:bf:63:bd:e2:59:85:84:3c:83:09:ec:28:41:6b:87:fb: 1d:92:5a:66:c6:a8:ad:12:52:1a:a6:4e:8e:ba:f9:08:38:86: 9a:ae:4b:8e:b6:5a:1e:ba:a7:b6:7f:da:81:c4:da:20:75:60: 82:cd:d6:80:7f:38:e2:6e:99:0e:85:f1:36:f7:3a:95:e5:ce: 04:12:78:3a:3e:29:de:0c:84:9b:39:46:eb:4c:c5:83:b9:51: 1a:49:4a:3c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XNYvbATeMt12+FHmH9axMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTZjN2VkZDU0NTg4OTU4ZjdhYzg5ZTliNzQxODJmYTNlODE5MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hJdXcRbWDqo/r4YdW/DjOAtrRRw DrTAn4iS/Mph4t8qVGHOFs3hXtnW+acBskNIg2sBt01GcMFsLHMLdCyKt7jWoxPf Hxp9LOaHVm6dxe14Dv6p3zbe44f+6RgHEsnE8AGoG/B0HUvv84eDJqQE5GFomnP3 J6KmncAOUIWxck4isupGDMKxSmaGp1TyXtQnxUrAeDBF0izyls5T9AFUCzsQ/F1R k+Hdp4nv87e23QW9PSdNdqiNFUqgnOWLkczD5OfhlZCvXrVJ0xqDHyzlnnEQC0NV 3MXzkS5Pi0fum6HOO7J8+7sBM3x1KeQ8m41tLe4P/r79D41Rsc9FiJqlBQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDVsft1UWIlY96yJ6bdBgvo+gZNcMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvTld4LTNWUllpVmozcklucHQwR0MtajZCazF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgligjAN BgkqhkiG9w0BAQsFAAOCAQEAIUg/4ZUEQ00YVz7CywdE7CZtUC0WEEBohJQK9ZsO Ar6rJLAOrbQdUfBfaef0LtKx2WugwDQVMjS2ffcbooSbbZBCRXIETHuSab/cGB1w DA64NtDhXGIm7XNCW1Y1dBGDmtRo/vuDDAt9hPmlieruFmr3/Upk58KsjKi1MM/b 78zDKXSbQE2dDshOFLyvrISFh56CxIaRhcfjgokZhYTB28o0nwa/Y73iWYWEPIMJ 7ChBa4f7HZJaZsaorRJSGqZOjrr5CDiGmq5LjrZaHrqntn/agcTaIHVggs3WgH84 4m6ZDoXxNvc6leXOBBJ4Oj4p3gyEmzlG60zFg7lRGklKPA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client