This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NFRbhh4kFslCQpoYSOdg3EVhCzU.roa File: NFRbhh4kFslCQpoYSOdg3EVhCzU.roa (raw, json) Hash identifier: iRyZjZ5odA92Dv1GXP0an3sNI1XlkkFsNkYVzn7b5a8= Subject key identifier: 34:54:5B:86:1E:24:16:C9:42:42:9A:18:48:E7:60:DC:45:61:0B:35 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019ACBA1C7247B771453D475BADDD9E86449 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NFRbhh4kFslCQpoYSOdg3EVhCzU.roa Signing time: Fri 28 Nov 2025 18:02:48 +0000 ROA not before: Fri 28 Nov 2025 18:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212477 IP address blocks: 194.31.143.0/24 maxlen: 24 2a0b:7080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:a1:c7:24:7b:77:14:53:d4:75:ba:dd:d9:e8:64:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Nov 28 18:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34545b861e2416c942429a1848e760dc45610b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:89:92:c6:2c:54:d1:09:9b:8d:f4:ec:ad: 28:21:1d:65:ab:4b:94:c7:d8:4d:be:43:b5:fc:d1: bd:c2:75:57:c6:a4:b4:11:7d:b0:54:00:ec:dc:81: f5:92:ef:a9:06:cc:3c:43:81:86:06:ba:21:32:3c: 4a:ca:ba:19:57:df:db:1f:46:cb:31:33:09:fa:78: 47:b3:36:db:3a:0c:cc:20:3d:3c:66:34:c5:18:92: f8:34:bf:a8:af:99:08:28:68:c9:6a:7a:d7:8b:bb: 19:db:23:c6:b9:fb:61:50:3e:e1:b9:49:6d:a7:28: f3:2f:16:e3:5c:4a:6e:cd:c5:b7:12:c9:4b:d8:c3: a4:51:e6:cf:5f:37:a2:28:92:12:c0:e1:e5:6c:30: 78:f6:71:6a:a0:4a:37:30:84:73:4e:5c:49:85:92: e2:af:73:b6:22:97:fc:14:65:14:65:b6:18:7b:cd: 36:60:10:58:50:ee:96:39:ad:80:59:6f:de:f8:ee: d0:dc:89:86:6b:6d:39:a4:75:22:19:b6:91:c1:71: 33:1f:f4:6d:c1:2c:d1:92:8b:2c:cb:07:47:2b:21: 6e:b5:d8:bf:ff:2d:ee:53:8b:ec:d5:b6:34:cd:1d: d4:e6:f8:03:0f:12:bd:67:b6:62:c1:de:d5:6c:24: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:54:5B:86:1E:24:16:C9:42:42:9A:18:48:E7:60:DC:45:61:0B:35 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NFRbhh4kFslCQpoYSOdg3EVhCzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.143.0/24 IPv6: 2a0b:7080::/29 Signature Algorithm: sha256WithRSAEncryption 08:f5:60:07:9a:da:b2:e1:8c:fc:e9:1d:9f:13:b5:f0:33:a1: 56:b6:97:7f:8e:4b:ac:9c:ef:5b:58:3b:8b:f4:f1:88:5e:16: f9:07:d7:2b:3a:20:2f:1d:63:44:11:7c:cb:2b:e2:d8:45:c9: 6a:7c:4e:3b:ab:fe:fa:4a:7f:d7:99:90:23:6f:a3:33:f4:ab: 8c:4e:fe:88:36:71:29:21:70:da:e0:35:4d:f6:20:49:13:27: 43:56:6e:51:08:ff:d7:4f:99:ef:fe:1e:48:d6:9b:bd:61:ef: bf:c4:89:f7:89:55:9f:35:48:49:e7:70:2b:1c:06:26:46:07: 11:d1:0f:84:cc:0a:b0:db:42:52:16:36:b2:5a:2e:00:c8:51: 20:75:e2:6c:6e:65:c2:77:e5:00:d1:f5:24:55:56:80:06:d4: cb:b3:74:b0:5a:56:48:44:c1:4f:81:09:c1:9f:4f:26:81:bc: 46:df:ce:59:a1:fb:95:65:8b:4b:81:57:92:b2:ce:88:ab:68: 54:c4:27:f0:25:e8:53:93:75:79:8a:c4:80:d3:3a:41:23:02: 4c:4f:b1:d4:fc:e0:f5:d4:8b:9b:38:7f:f5:7f:9b:a5:46:d4: 32:8a:28:75:ea:af:e1:84:dc:3f:13:36:64:28:0d:5d:d5:0b: a0:57:20:e4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrLoccke3cUU9R1ut3Z6GRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjUxMTI4MTgwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDU0NWI4NjFlMjQxNmM5NDI0MjlhMTg0OGU3NjBkYzQ1NjEwYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gCJksYsVNEJm4307K0oIR1lq0uU x9hNvkO1/NG9wnVXxqS0EX2wVADs3IH1ku+pBsw8Q4GGBrohMjxKyroZV9/bH0bL MTMJ+nhHszbbOgzMID08ZjTFGJL4NL+or5kIKGjJanrXi7sZ2yPGufthUD7huUlt pyjzLxbjXEpuzcW3EslL2MOkUebPXzeiKJISwOHlbDB49nFqoEo3MIRzTlxJhZLi r3O2Ipf8FGUUZbYYe802YBBYUO6WOa2AWW/e+O7Q3ImGa205pHUiGbaRwXEzH/Rt wSzRkossywdHKyFutdi//y3uU4vs1bY0zR3U5vgDDxK9Z7Ziwd7VbCQdgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDRUW4YeJBbJQkKaGEjnYNxFYQs1MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvTkZSYmhoNGtGc2xDUXBvWVNPZGczRVZoQ3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwh+PMA0E AgACMAcDBQMqC3CAMA0GCSqGSIb3DQEBCwUAA4IBAQAI9WAHmtqy4Yz86R2fE7Xw M6FWtpd/jkusnO9bWDuL9PGIXhb5B9crOiAvHWNEEXzLK+LYRclqfE47q/76Sn/X mZAjb6Mz9KuMTv6INnEpIXDa4DVN9iBJEydDVm5RCP/XT5nv/h5I1pu9Ye+/xIn3 iVWfNUhJ53ArHAYmRgcR0Q+EzAqw20JSFjayWi4AyFEgdeJsbmXCd+UA0fUkVVaA BtTLs3SwWlZIRMFPgQnBn08mgbxG385ZofuVZYtLgVeSss6Iq2hUxCfwJehTk3V5 isSA0zpBIwJMT7HU/OD11IubOH/1f5ulRtQyiih16q/hhNw/EzZkKA1d1QugVyDk -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:32 2025 by rpki-client