This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/nt5KsVI8vqdpSeFz_087e62oU14.roa File: nt5KsVI8vqdpSeFz_087e62oU14.roa (raw, json) Hash identifier: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E= Subject key identifier: 9E:DE:4A:B1:52:3C:BE:A7:69:49:E1:73:FF:4F:3B:7B:AD:A8:53:5E Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019B7CECE8368B124EF004E89DE995CB1ACB Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/nt5KsVI8vqdpSeFz_087e62oU14.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35503 IP address blocks: 193.192.56.0/23 maxlen: 24 193.192.56.0/24 maxlen: 24 193.192.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e8:36:8b:12:4e:f0:04:e8:9d:e9:95:cb:1a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ede4ab1523cbea76949e173ff4f3b7bada8535e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:e8:c3:c9:4b:31:75:4b:8a:44:7e:71:e4: ca:7b:bd:b6:83:ad:23:c5:fa:d6:a2:2d:15:48:92: cd:3c:78:8e:16:8f:d1:22:c6:f6:df:90:29:ec:44: 01:e7:87:36:e2:11:ca:5f:d0:30:16:07:38:b7:ac: c0:33:ff:ec:ef:64:f8:8f:0f:43:9f:4f:18:0a:00: 8a:93:23:07:45:bd:04:a9:a5:bd:7e:60:bb:57:c9: 1c:17:4c:79:e1:18:72:e8:16:b9:fd:c1:a7:10:43: b9:d3:5d:a3:bc:31:d7:f0:5b:2c:e0:35:1f:ba:4d: 91:6d:9f:92:41:33:11:3e:68:7f:43:eb:be:7f:96: 97:e5:71:45:5e:61:14:c0:d7:73:40:a8:d5:3e:9b: dd:9f:1b:5b:de:57:97:25:ab:d7:b8:86:ff:9b:22: 0e:81:1f:a8:27:14:24:43:c0:8e:81:79:75:83:63: 5f:7a:b0:37:a2:c7:f4:76:c2:8c:d0:d0:f5:5c:d2: 3f:d5:62:18:e1:73:0f:b5:48:fe:78:5f:60:2d:8e: e1:03:63:2b:e9:b1:a6:f9:d4:86:d7:6c:d5:1d:5b: d1:53:15:c8:ee:21:50:45:ee:1b:62:4d:29:d5:57: af:ba:80:c3:37:7d:6e:86:f3:d4:c3:99:20:9f:c8: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:4A:B1:52:3C:BE:A7:69:49:E1:73:FF:4F:3B:7B:AD:A8:53:5E X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/nt5KsVI8vqdpSeFz_087e62oU14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.56.0/23 Signature Algorithm: sha256WithRSAEncryption 53:b9:47:62:d5:54:49:8a:f4:1d:c9:29:c6:11:df:cf:ac:b7: 89:18:20:95:31:fe:d1:d4:4b:89:26:21:dc:ad:45:fc:1c:67: 83:94:9f:48:9a:01:c4:99:68:22:a8:cc:26:e9:86:c1:97:b2: 8a:78:f5:4f:38:4c:02:09:19:f4:53:f2:dd:a8:65:20:42:ad: 62:83:66:83:eb:a6:ca:97:04:1b:3c:72:2b:9c:60:c7:56:88: 29:d5:57:99:40:39:92:ad:8f:f5:61:63:47:00:f1:7d:f2:02: cb:b5:19:f6:56:f6:94:00:49:aa:fd:a2:38:18:03:38:f0:6d: 3a:cc:4b:fc:e9:29:da:f8:80:03:63:1c:17:50:46:b9:e9:3c: 4c:43:2e:40:af:a0:eb:b1:4c:b5:99:16:6b:5a:e5:37:cf:b6: 82:12:ce:f2:97:86:25:5a:ed:4c:4b:18:cd:48:3a:c9:ff:2e: ec:07:24:49:54:e0:c0:16:8a:74:84:fd:a2:06:1b:ec:bc:3e: 83:6d:29:b1:f2:6a:95:ae:53:a6:82:00:68:3f:5a:c5:b3:04: 3d:88:9f:82:2c:69:d6:7f:72:50:21:f4:c1:34:29:f2:87:ff: b7:1b:39:db:bc:50:7f:6f:d7:7d:95:c8:2d:f2:44:13:d0:06: 9d:bd:46:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Og2ixJO8ATonemVyxrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWRlNGFiMTUyM2NiZWE3Njk0OWUxNzNmZjRmM2I3YmFkYTg1MzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DXow8lLMXVLikR+ceTKe722g60j xfrWoi0VSJLNPHiOFo/RIsb235Ap7EQB54c24hHKX9AwFgc4t6zAM//s72T4jw9D n08YCgCKkyMHRb0EqaW9fmC7V8kcF0x54Rhy6Ba5/cGnEEO5012jvDHX8Fss4DUf uk2RbZ+SQTMRPmh/Q+u+f5aX5XFFXmEUwNdzQKjVPpvdnxtb3leXJavXuIb/myIO gR+oJxQkQ8COgXl1g2NferA3osf0dsKM0ND1XNI/1WIY4XMPtUj+eF9gLY7hA2Mr 6bGm+dSG12zVHVvRUxXI7iFQRe4bYk0p1VevuoDDN31uhvPUw5kgn8ickwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7eSrFSPL6naUnhc/9PO3utqFNeMB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvbnQ1S3NWSTh2cWRwU2VGel8wODdlNjJvVTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcA4MA0G CSqGSIb3DQEBCwUAA4IBAQBTuUdi1VRJivQdySnGEd/PrLeJGCCVMf7R1EuJJiHc rUX8HGeDlJ9ImgHEmWgiqMwm6YbBl7KKePVPOEwCCRn0U/LdqGUgQq1ig2aD66bK lwQbPHIrnGDHVogp1VeZQDmSrY/1YWNHAPF98gLLtRn2VvaUAEmq/aI4GAM48G06 zEv86Sna+IADYxwXUEa56TxMQy5Ar6DrsUy1mRZrWuU3z7aCEs7yl4YlWu1MSxjN SDrJ/y7sByRJVODAFop0hP2iBhvsvD6DbSmx8mqVrlOmggBoP1rFswQ9iJ+CLGnW f3JQIfTBNCnyh/+3GznbvFB/b9d9lcgt8kQT0AadvUaj -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:22 2026 by rpki-client