This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa File: ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa (raw, json) Hash identifier: W2j7t9wKtLT6mYkhMfEldPwCF8H6KOgtTtUoXF6gg84= Subject key identifier: 9D:C4:15:6D:32:13:B3:95:AD:97:50:6C:43:69:80:4B:BF:A7:4D:54 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019AB53D28842D812227FD71DA7382AB4F0B Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa Signing time: Mon 24 Nov 2025 09:41:15 +0000 ROA not before: Mon 24 Nov 2025 09:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7195 IP address blocks: 103.57.250.0/24 maxlen: 24 188.190.13.0/24 maxlen: 24 2a03:f80:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:3d:28:84:2d:81:22:27:fd:71:da:73:82:ab:4f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Nov 24 09:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9dc4156d3213b395ad97506c4369804bbfa74d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:bc:50:4f:a3:9d:f5:1b:0d:a0:3f:a1:bd: 7c:5e:d5:be:f4:5f:89:9e:d5:48:7c:ad:4d:9e:11: 19:fc:35:f6:16:82:5c:7b:b8:fd:aa:fa:79:22:7b: de:3b:ec:9d:e6:fb:aa:0e:e1:b2:23:87:27:c8:05: a2:30:cf:b2:57:6a:ff:3f:4a:fb:1c:f0:cc:a6:12: 12:a8:61:31:e7:60:d2:d1:bc:5d:a6:30:7f:f7:0e: 1b:24:66:5b:38:16:1a:76:3a:c5:d9:6f:c7:cd:c4: c0:ff:3b:72:33:2b:ac:cf:a1:78:50:ed:f0:e9:ce: d2:39:14:bf:08:5f:6b:21:19:93:e9:b8:ca:ba:9f: 5c:ad:53:27:46:33:9e:89:ae:23:a6:ef:99:fd:3b: 53:c3:00:b2:28:49:0a:1c:58:69:73:d3:ee:e6:18: 53:25:5e:0e:6b:14:2f:00:df:0d:06:b3:b7:42:3d: ed:d1:00:f2:27:66:8d:69:e7:66:c4:a0:76:50:cf: 9e:13:c5:b2:ba:34:9d:6e:2d:15:e7:34:3a:bc:03: 6c:fe:c5:d5:5c:b3:b0:c2:8b:04:0f:4c:f6:b2:78: 25:1e:3e:ea:10:27:56:18:3a:04:07:03:65:1a:48: 99:93:9f:92:d7:30:04:d7:a9:16:e1:0b:01:ac:a9: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C4:15:6D:32:13:B3:95:AD:97:50:6C:43:69:80:4B:BF:A7:4D:54 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.250.0/24 188.190.13.0/24 IPv6: 2a03:f80:57::/48 Signature Algorithm: sha256WithRSAEncryption c0:0b:09:7b:3e:f9:2c:86:f9:2f:a7:37:82:fa:b1:3f:d5:c4: 5f:36:0b:16:74:e5:55:11:cc:62:aa:a2:bd:8e:ac:f1:65:f8: 56:9b:07:8f:b4:e8:96:69:29:c0:cf:ee:6b:30:0f:b8:78:78: 63:e3:06:ee:e7:cc:23:e1:48:84:94:84:f7:ec:e9:c6:35:3b: 6b:94:7d:e8:5c:92:cd:37:66:75:0e:ee:42:01:fa:80:fc:7c: 93:05:1f:cc:21:da:25:9c:a0:2d:a2:8d:00:b9:0a:fe:81:c9: c1:d8:0c:b9:a1:45:bc:00:d1:0f:28:82:26:a4:18:54:c2:86: b6:5b:cd:16:58:75:4f:35:26:c5:12:a3:22:3e:cf:a8:1d:3e: 89:1d:25:25:3b:be:53:fd:e8:28:c3:d9:37:d1:5d:29:45:38: a3:99:7e:0e:f5:27:d0:63:3a:f3:94:bf:49:5b:3c:b1:e1:7e: 04:93:78:6e:8e:d0:73:99:a2:a6:1f:ed:28:27:fd:b7:06:88: 0d:52:ce:7a:02:05:47:85:b3:9f:88:cb:9f:3b:08:c3:a0:40: 18:dc:b2:71:fb:64:3e:6b:3c:5c:a2:98:f0:01:16:bf:77:0b: 7a:04:d0:4f:95:96:f1:10:bf:eb:d4:0a:68:6e:a1:78:a3:70: b8:2c:39:87 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZq1PSiELYEiJ/1x2nOCq08LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMTI0MDk0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGM0MTU2ZDMyMTNiMzk1YWQ5NzUwNmM0MzY5ODA0YmJmYTc0ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoa8UE+jnfUbDaA/ob18XtW+9F+J ntVIfK1NnhEZ/DX2FoJce7j9qvp5InveO+yd5vuqDuGyI4cnyAWiMM+yV2r/P0r7 HPDMphISqGEx52DS0bxdpjB/9w4bJGZbOBYadjrF2W/HzcTA/ztyMyusz6F4UO3w 6c7SORS/CF9rIRmT6bjKup9crVMnRjOeia4jpu+Z/TtTwwCyKEkKHFhpc9Pu5hhT JV4OaxQvAN8NBrO3Qj3t0QDyJ2aNaedmxKB2UM+eE8WyujSdbi0V5zQ6vANs/sXV XLOwwosED0z2snglHj7qECdWGDoEBwNlGkiZk5+S1zAE16kW4QsBrKkhqQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ3EFW0yE7OVrZdQbENpgEu/p01UMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvbmNRVmJUSVRzNVd0bDFCc1EybUFTNy1uVFZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZzn6AwQA vL4NMA8EAgACMAkDBwAqAw+AAFcwDQYJKoZIhvcNAQELBQADggEBAMALCXs++SyG +S+nN4L6sT/VxF82CxZ05VURzGKqor2OrPFl+FabB4+06JZpKcDP7mswD7h4eGPj Bu7nzCPhSISUhPfs6cY1O2uUfehcks03ZnUO7kIB+oD8fJMFH8wh2iWcoC2ijQC5 Cv6BycHYDLmhRbwA0Q8ogiakGFTChrZbzRZYdU81JsUSoyI+z6gdPokdJSU7vlP9 6CjD2TfRXSlFOKOZfg71J9BjOvOUv0lbPLHhfgSTeG6O0HOZoqYf7Sgn/bcGiA1S znoCBUeFs5+Iy587CMOgQBjcsnH7ZD5rPFyimPABFr93C3oE0E+VlvEQv+vUCmhu oXijcLgsOYc= -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:35 2025 by rpki-client