This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/NOQAIGhcVOk-dG-3LT-WabylerQ.roa File: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (raw, json) Hash identifier: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8= Subject key identifier: 34:E4:00:20:68:5C:54:E9:3E:74:6F:B7:2D:3F:96:69:BC:A5:7A:B4 Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Certificate serial: 019B7B36C46136BCC00AF83B5E2FB46987C1 Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/NOQAIGhcVOk-dG-3LT-WabylerQ.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 89.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:61:36:bc:c0:0a:f8:3b:5e:2f:b4:69:87:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e40020685c54e93e746fb72d3f9669bca57ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:b2:6f:16:b5:22:55:de:64:e3:34:91:02: a7:35:88:d1:9e:e2:7a:b0:95:49:7f:c9:99:c8:79: d9:b5:1b:2a:fb:22:35:87:86:28:a7:f5:3d:74:75: 48:8b:31:66:95:c3:8d:f1:a1:13:2f:11:4d:1f:df: 35:dc:e0:e9:5d:10:a5:e4:6f:84:05:f5:82:53:c8: bd:01:89:e1:41:d1:de:d7:76:c4:c9:fb:55:9e:53: 25:6f:06:10:a6:ae:68:74:2a:1e:15:a2:d2:20:a0: 66:e6:ab:33:a3:7a:8e:bd:ce:bb:82:5e:f2:8d:84: a9:ef:35:df:b3:5b:97:d0:a3:69:53:ad:35:c9:3b: ae:3c:9c:8f:67:4c:f7:24:8d:73:cc:40:18:00:94: a3:4f:39:70:f3:d6:cd:83:e8:85:0e:e0:2c:40:06: 0b:a3:16:9a:e7:57:63:45:a9:32:94:f8:b4:31:b7: 72:c9:cf:bf:5a:bd:99:c4:bc:63:24:f3:93:21:44: c8:f8:e9:aa:07:dd:38:2b:60:1e:d2:89:09:01:3f: 03:c6:47:6e:ed:20:55:2e:86:59:2e:19:aa:1e:1a: 9c:5c:bd:d5:67:83:04:0b:0c:d8:54:1d:99:a1:1b: 55:7e:f3:b8:5f:69:65:9f:f6:1d:08:ac:71:16:53: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:00:20:68:5C:54:E9:3E:74:6F:B7:2D:3F:96:69:BC:A5:7A:B4 X509v3 Authority Key Identifier: keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/NOQAIGhcVOk-dG-3LT-WabylerQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.13.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5a:59:f4:f8:5e:1b:18:c5:e3:16:e9:10:23:7d:72:9f:a1: 43:08:d0:d9:5f:b5:d4:34:63:3d:b1:40:e5:66:72:62:c8:7e: fa:d1:86:01:9c:50:61:56:6f:ff:52:66:1e:4b:f9:55:c2:b2: ca:cc:9e:8f:c9:1b:8c:d7:51:da:81:54:2f:ed:22:e8:94:2a: a2:04:79:d2:19:ed:85:18:d7:bd:b3:f2:04:54:7b:0c:ff:12: 3a:8a:30:81:2a:71:e7:65:d6:8a:81:28:96:d1:48:71:8d:cc: b2:2b:14:9f:d5:a5:1a:43:e7:c0:5d:72:77:a9:7b:5e:db:d9: 3a:ac:3d:16:ce:ae:1a:5f:a4:80:8d:87:23:9d:c0:a4:21:1a: 35:52:10:dc:b4:5f:25:74:5f:5f:ec:77:2e:ea:e7:cc:c6:91: ea:a8:48:a2:2c:21:8b:92:c9:9e:21:6a:9d:1a:54:10:2e:73: 0f:aa:09:10:6c:3d:98:a4:84:70:c0:51:53:8f:7c:75:87:4d: c6:74:8a:a3:c4:93:56:b2:54:3e:27:2d:b8:43:a1:47:34:8b: ca:74:d0:4e:cd:af:b2:10:06:6b:84:8c:7e:57:2c:58:f4:93: 1f:69:1f:86:1f:ae:b9:38:63:aa:86:f5:21:4d:aa:60:69:13: d2:3f:82:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsRhNrzACvg7Xi+0aYfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz MTRlMzYwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU0MDAyMDY4NWM1NGU5M2U3NDZmYjcyZDNmOTY2OWJjYTU3YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwceybxa1IlXeZOM0kQKnNYjRnuJ6 sJVJf8mZyHnZtRsq+yI1h4Yop/U9dHVIizFmlcON8aETLxFNH9813ODpXRCl5G+E BfWCU8i9AYnhQdHe13bEyftVnlMlbwYQpq5odCoeFaLSIKBm5qszo3qOvc67gl7y jYSp7zXfs1uX0KNpU601yTuuPJyPZ0z3JI1zzEAYAJSjTzlw89bNg+iFDuAsQAYL oxaa51djRakylPi0Mbdyyc+/Wr2ZxLxjJPOTIUTI+OmqB904K2Ae0okJAT8Dxkdu 7SBVLoZZLhmqHhqcXL3VZ4MECwzYVB2ZoRtVfvO4X2lln/YdCKxxFlOYEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTkACBoXFTpPnRvty0/lmm8pXq0MB8GA1UdIwQY MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt ZTRhYzcwNmRhMTQ4LzEvTk9RQUlHaGNWT2stZEctM0xULVdhYnlsZXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4 LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWsNMA0G CSqGSIb3DQEBCwUAA4IBAQAcWln0+F4bGMXjFukQI31yn6FDCNDZX7XUNGM9sUDl ZnJiyH760YYBnFBhVm//UmYeS/lVwrLKzJ6PyRuM11HagVQv7SLolCqiBHnSGe2F GNe9s/IEVHsM/xI6ijCBKnHnZdaKgSiW0UhxjcyyKxSf1aUaQ+fAXXJ3qXte29k6 rD0Wzq4aX6SAjYcjncCkIRo1UhDctF8ldF9f7Hcu6ufMxpHqqEiiLCGLksmeIWqd GlQQLnMPqgkQbD2YpIRwwFFTj3x1h03GdIqjxJNWslQ+Jy24Q6FHNIvKdNBOza+y EAZrhIx+VyxY9JMfaR+GH665OGOqhvUhTapgaRPSP4Kv -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:10 2026 by rpki-client