This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/NhBesxbcMyD0yBQrL2MrPFZhlpM.roa File: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (raw, json) Hash identifier: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig= Subject key identifier: 36:10:5E:B3:16:DC:33:20:F4:C8:14:2B:2F:63:2B:3C:56:61:96:93 Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Certificate serial: 019B7EA690C1B996D9E29327B3AF24A329B8 Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/NhBesxbcMyD0yBQrL2MrPFZhlpM.roa Signing time: Fri 02 Jan 2026 12:20:03 +0000 ROA not before: Fri 02 Jan 2026 12:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 178.236.181.0/24 maxlen: 24 178.236.182.0/24 maxlen: 24 178.236.186.0/24 maxlen: 24 178.236.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:90:c1:b9:96:d9:e2:93:27:b3:af:24:a3:29:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36105eb316dc3320f4c8142b2f632b3c56619693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:5e:b6:80:38:2f:59:2d:ba:f9:7d:e5:cf: 16:fc:03:79:3c:14:ed:57:36:fb:68:af:03:81:0c: cf:b6:26:b3:56:05:cf:be:74:07:19:e3:6e:7c:07: 34:a2:c6:ee:8c:30:8c:39:fd:5f:ee:ff:ce:e5:1a: 08:45:b2:0b:96:38:d8:c5:b9:12:5b:57:44:48:2f: dc:01:72:4a:1f:64:15:74:90:39:5c:ac:70:c9:0d: a4:fa:8b:49:78:67:87:96:c4:0c:81:93:7c:01:cb: 1e:52:89:54:d3:3e:e6:d7:be:70:70:4f:b0:b9:cd: 5c:3d:4b:1c:f6:59:60:d6:89:88:52:c7:d6:30:88: e9:54:c8:b4:f4:bb:87:ed:dd:02:8d:6d:76:7f:1c: c3:3d:d6:65:3c:99:e9:08:44:ae:72:9e:0e:cc:49: 3d:01:51:bd:11:e4:e4:cc:14:ed:29:92:de:56:9a: b0:82:7f:dc:79:19:8a:79:eb:6c:7d:4a:ed:eb:cb: 9e:67:60:a3:84:df:ba:4b:04:c5:55:81:f0:1b:70: bd:a6:30:d7:0b:22:00:f0:6a:79:7e:07:a7:9d:92: 26:84:e3:a1:d7:9b:39:6d:d9:a1:ad:27:26:70:3e: dd:e5:4c:4c:c1:e7:3d:f6:42:5c:35:97:2d:34:b8: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:10:5E:B3:16:DC:33:20:F4:C8:14:2B:2F:63:2B:3C:56:61:96:93 X509v3 Authority Key Identifier: keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/NhBesxbcMyD0yBQrL2MrPFZhlpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.181.0-178.236.182.255 178.236.186.0/23 Signature Algorithm: sha256WithRSAEncryption b1:f9:43:82:0d:bc:a4:fc:46:fe:ed:6e:80:72:79:14:7e:17: 03:c9:55:20:28:ad:e0:a1:79:b7:0c:54:5b:ff:79:f4:5a:c6: b9:1a:2f:76:3d:43:d2:f9:13:3d:bb:70:7f:a9:06:e4:73:96: ad:1d:82:b5:75:cf:5f:6a:f1:e1:82:0c:42:05:5d:c7:6b:b5: e7:6f:e0:66:ac:2b:91:2c:95:80:e5:5f:13:59:c3:66:76:0c: 8b:6c:de:5a:48:33:05:5e:2a:f3:65:28:3f:27:2b:f1:b0:fc: 3e:b2:cb:23:35:a6:c5:be:a9:ea:ba:01:78:fa:33:8a:23:23: 61:5b:88:b2:42:3f:43:96:09:c9:f4:cd:cb:1f:99:af:9e:7a: 4f:9f:5b:3b:81:8c:1b:b1:99:fb:22:78:b7:12:07:0c:24:3a: ea:a2:0d:36:a9:42:e8:53:52:56:21:31:94:65:fb:d2:22:f1: a6:99:a8:ae:92:a3:d0:c7:5b:88:76:ff:2c:ca:77:a4:cb:9c: 37:4b:ee:a6:33:e2:a3:06:da:d5:d2:4f:46:63:27:2d:1d:97: 99:4f:95:84:94:df:89:9e:28:53:c9:a5:fa:46:1a:38:39:6c: b7:73:2b:67:07:39:66:89:6f:30:10:9d:38:1a:53:18:23:39: ad:01:97:71 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+ppDBuZbZ4pMns68koym4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4 YzY4YzYwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjEwNWViMzE2ZGMzMzIwZjRjODE0MmIyZjYzMmIzYzU2NjE5NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpBetoA4L1ktuvl95c8W/AN5PBTt Vzb7aK8DgQzPtiazVgXPvnQHGeNufAc0osbujDCMOf1f7v/O5RoIRbILljjYxbkS W1dESC/cAXJKH2QVdJA5XKxwyQ2k+otJeGeHlsQMgZN8AcseUolU0z7m175wcE+w uc1cPUsc9llg1omIUsfWMIjpVMi09LuH7d0CjW12fxzDPdZlPJnpCESucp4OzEk9 AVG9EeTkzBTtKZLeVpqwgn/ceRmKeetsfUrt68ueZ2CjhN+6SwTFVYHwG3C9pjDX CyIA8Gp5fgennZImhOOh15s5bdmhrScmcD7d5UxMwec99kJcNZctNLhn0QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDYQXrMW3DMg9MgUKy9jKzxWYZaTMB8GA1UdIwQY MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt MDE1NzdhOTI3ZmE5LzEvTmhCZXN4YmNNeUQweUJRckwyTXJQRlpobHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5 LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACy7LUD BACy7LYDBAGy7LowDQYJKoZIhvcNAQELBQADggEBALH5Q4INvKT8Rv7tboByeRR+ FwPJVSAoreChebcMVFv/efRaxrkaL3Y9Q9L5Ez27cH+pBuRzlq0dgrV1z19q8eGC DEIFXcdrtedv4GasK5EslYDlXxNZw2Z2DIts3lpIMwVeKvNlKD8nK/Gw/D6yyyM1 psW+qeq6AXj6M4ojI2FbiLJCP0OWCcn0zcsfma+eek+fWzuBjBuxmfsieLcSBwwk OuqiDTapQuhTUlYhMZRl+9Ii8aaZqK6So9DHW4h2/yzKd6TLnDdL7qYz4qMG2tXS T0ZjJy0dl5lPlYSU34meKFPJpfpGGjg5bLdzK2cHOWaJbzAQnTgaUxgjOa0Bl3E= -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:04 2026 by rpki-client