This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa File: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (raw, json) Hash identifier: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4= Subject key identifier: 9D:C0:A2:1D:5E:51:F2:31:D9:D2:CA:0A:B0:DE:C8:A7:80:2A:AA:70 Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Certificate serial: 019B7F14D086EA99401A6322ACCAF8158DA5 Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12334 IP address blocks: 77.26.0.0/15 maxlen: 18 83.165.0.0/16 maxlen: 18 91.116.64.0/18 maxlen: 18 91.116.128.0/18 maxlen: 18 91.116.192.0/18 maxlen: 18 91.117.0.0/16 maxlen: 18 92.53.192.0/19 maxlen: 19 178.60.0.0/18 maxlen: 18 178.60.128.0/18 maxlen: 18 178.60.192.0/18 maxlen: 18 212.51.32.0/19 maxlen: 19 213.60.0.0/16 maxlen: 18 2a00:bec0::/40 maxlen: 40 2a00:bec0:c800::/40 maxlen: 40 2a00:bec0:d000::/40 maxlen: 40 2a00:bec0:d800::/40 maxlen: 40 2a00:bec0:e000::/40 maxlen: 40 2a00:bec0:e800::/40 maxlen: 40 2a00:bec0:f000::/40 maxlen: 40 2a00:bec0:f800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d0:86:ea:99:40:1a:63:22:ac:ca:f8:15:8d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc0a21d5e51f231d9d2ca0ab0dec8a7802aaa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:2e:03:8c:2a:5f:4b:05:64:d5:f4:ab:65: f1:65:fa:fa:76:32:6f:c6:ca:00:d7:46:2c:4c:0c: 26:33:b8:f8:a5:c5:86:50:fe:dc:aa:30:47:ad:d8: 79:34:4e:d1:1d:73:51:98:29:af:67:a3:4f:2f:97: c3:75:43:7d:15:e3:21:ee:64:a1:b0:4f:ec:d2:4f: 60:9c:88:3f:f2:fb:74:95:46:eb:28:a6:a2:57:a4: 14:6a:94:74:8a:10:a7:a8:27:36:a7:0d:f8:ce:b0: 10:15:03:9b:58:bc:d5:7f:9d:a1:a3:a9:31:bf:ea: 34:bd:55:85:d6:8e:8c:c0:5e:c4:b3:f3:c0:a7:6e: 2a:dc:ec:d1:29:1f:0b:6d:a9:66:8b:6b:f1:f7:70: f4:1e:45:b4:a8:94:e8:5a:98:d4:c0:5e:8a:e5:cd: a1:53:c0:83:89:f0:de:24:93:0c:dd:f5:da:5f:f5: d8:72:bc:b8:ad:20:5b:ab:d6:cb:7e:e9:36:e3:f4: 60:dd:71:c2:f8:c8:64:c4:07:68:ee:75:aa:e9:09: 47:e6:42:30:c6:91:69:ae:6c:de:e4:37:6e:08:68: e3:f4:48:d1:30:6b:72:47:52:c7:52:d3:b5:16:00: fc:93:24:62:9f:01:73:3b:07:49:59:2b:21:01:4e: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:A2:1D:5E:51:F2:31:D9:D2:CA:0A:B0:DE:C8:A7:80:2A:AA:70 X509v3 Authority Key Identifier: keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.26.0.0/15 83.165.0.0/16 91.116.64.0-91.117.255.255 92.53.192.0/19 178.60.0.0/18 178.60.128.0/17 212.51.32.0/19 213.60.0.0/16 IPv6: 2a00:bec0::/40 2a00:bec0:c800::/40 2a00:bec0:d000::/40 2a00:bec0:d800::/40 2a00:bec0:e000::/40 2a00:bec0:e800::/40 2a00:bec0:f000::/40 2a00:bec0:f800::/40 Signature Algorithm: sha256WithRSAEncryption 04:0a:13:94:8e:f5:92:17:9b:84:cf:21:14:df:e1:b7:4b:5f: 83:22:34:2a:aa:ec:9f:d1:33:a8:36:c9:4e:9b:59:c9:69:39: 87:cc:e2:52:dc:92:9d:6c:89:44:2a:3f:21:b2:bc:89:db:fb: 59:67:2d:c2:d2:54:88:26:71:7c:78:ab:41:40:df:73:0c:69: 38:71:65:b6:97:87:0a:42:2e:5e:a3:a8:8b:e1:8c:65:e9:41: 3f:35:84:9a:33:43:ea:4d:2d:f5:f1:16:aa:9b:f3:9b:1d:fa: 42:3f:60:3d:1f:e6:20:e0:68:84:66:ed:4d:d1:81:dd:f7:29: b4:37:99:da:54:d1:65:3f:6b:d0:63:99:6a:08:38:95:ba:2e: 4d:7b:e2:b6:16:7e:55:02:eb:c7:43:cc:1b:60:cf:9a:69:6e: 11:57:46:ed:33:2d:45:a4:6a:1a:0a:4c:ef:8e:d3:95:06:a1: a5:f2:72:12:c0:34:1c:2c:62:35:1e:cc:9f:45:9c:35:d4:1b: c7:64:ed:b8:09:8a:1f:29:2c:bc:cb:b9:34:13:d8:30:6f:bb: cd:5c:32:26:57:42:75:ad:83:2d:64:ce:20:bb:ae:b1:9c:e1: a7:03:68:51:a5:ec:60:f6:c2:94:c6:ed:05:d4:74:59:1b:b2: 55:f3:5d:59 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISAZt/FNCG6plAGmMirMr4FY2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm ZWM1ZWIwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGMwYTIxZDVlNTFmMjMxZDlkMmNhMGFiMGRlYzhhNzgwMmFhYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyusuA4wqX0sFZNX0q2XxZfr6djJv xsoA10YsTAwmM7j4pcWGUP7cqjBHrdh5NE7RHXNRmCmvZ6NPL5fDdUN9FeMh7mSh sE/s0k9gnIg/8vt0lUbrKKaiV6QUapR0ihCnqCc2pw34zrAQFQObWLzVf52ho6kx v+o0vVWF1o6MwF7Es/PAp24q3OzRKR8Lbalmi2vx93D0HkW0qJToWpjUwF6K5c2h U8CDifDeJJMM3fXaX/XYcry4rSBbq9bLfuk24/Rg3XHC+MhkxAdo7nWq6QlH5kIw xpFprmze5DduCGjj9EjRMGtyR1LHUtO1FgD8kyRinwFzOwdJWSshAU4NuQIDAQAB o4ICgjCCAn4wHQYDVR0OBBYEFJ3Aoh1eUfIx2dLKCrDeyKeAKqpwMB8GA1UdIwQY MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt NTEwMGEyNmQyNzRiLzEvbmNDaUhWNVI4akhaMHNvS3NON0lwNEFxcW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDA6BAIAATA0AwMBTRoD AwBTpTALAwQGW3RAAwMBW3QDBAVcNcADBAayPAADBAeyPIADBAXUMyADAwDVPDBG BAIAAjBAAwYAKgC+wAADBgAqAL7AyAMGACoAvsDQAwYAKgC+wNgDBgAqAL7A4AMG ACoAvsDoAwYAKgC+wPADBgAqAL7A+DANBgkqhkiG9w0BAQsFAAOCAQEABAoTlI71 khebhM8hFN/ht0tfgyI0Kqrsn9EzqDbJTptZyWk5h8ziUtySnWyJRCo/IbK8idv7 WWctwtJUiCZxfHirQUDfcwxpOHFltpeHCkIuXqOoi+GMZelBPzWEmjND6k0t9fEW qpvzmx36Qj9gPR/mIOBohGbtTdGB3fcptDeZ2lTRZT9r0GOZagg4lbouTXvithZ+ VQLrx0PMG2DPmmluEVdG7TMtRaRqGgpM747TlQahpfJyEsA0HCxiNR7Mn0WcNdQb x2TtuAmKHyksvMu5NBPYMG+7zVwyJldCda2DLWTOILuusZzhpwNoUaXsYPbClMbt BdR0WRuyVfNdWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:14 2026 by rpki-client