This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/npNQdbBPSAtnOlq0Culg6ehSO3c.roa File: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (raw, json) Hash identifier: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc= Subject key identifier: 9E:93:50:75:B0:4F:48:0B:67:3A:5A:B4:0A:E9:60:E9:E8:52:3B:77 Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Certificate serial: 019B77595A61ACFB1C200FB18BF147101195 Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/npNQdbBPSAtnOlq0Culg6ehSO3c.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48954 IP address blocks: 37.48.240.0/21 maxlen: 24 45.147.84.0/24 maxlen: 24 85.91.40.0/22 maxlen: 24 185.40.87.0/24 maxlen: 24 185.83.120.0/22 maxlen: 24 195.88.100.0/23 maxlen: 24 2a00:7640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5a:61:ac:fb:1c:20:0f:b1:8b:f1:47:10:11:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e935075b04f480b673a5ab40ae960e9e8523b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:93:cc:13:96:bd:6c:96:43:52:1e:9b:37: 38:eb:a7:87:c3:fd:62:9d:4b:ed:6d:9f:c2:2b:db: 75:cf:18:90:a1:15:c6:20:2d:7a:c3:85:52:7d:b6: 2b:5b:89:c1:b1:20:67:58:63:6c:32:c5:9f:81:69: 9a:e2:12:ae:3e:52:26:e6:d6:87:01:b7:92:30:2b: 85:7c:70:be:b1:02:e9:40:d1:a5:5e:3f:64:a6:86: e0:dc:c9:a5:fc:a6:88:65:69:24:53:67:e0:dc:07: ce:76:63:ab:be:fc:94:64:0d:07:ee:99:f8:f0:14: 37:1e:77:3b:3b:82:4f:a6:30:0a:96:c3:5f:c0:74: ec:b6:58:a6:8f:f0:0f:6f:96:5f:f9:27:75:ef:08: 56:94:03:c6:2e:ba:c1:6a:19:1a:de:de:7b:60:fa: af:16:8c:e0:92:2c:90:7d:a0:37:cd:a6:d5:8a:3f: 1a:2a:71:e8:43:ce:fa:2d:18:5c:26:89:d8:d8:7e: 54:a5:c4:8b:4c:9e:23:7a:a2:01:d5:dd:5f:27:f1: d5:bb:39:59:15:a0:d4:4c:de:89:21:39:ca:3a:cb: 19:70:ec:69:a4:11:1f:00:c6:99:5e:3c:e6:74:3f: 75:9a:d9:b6:4e:7b:17:4b:fa:6f:60:0c:14:c0:b1: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:50:75:B0:4F:48:0B:67:3A:5A:B4:0A:E9:60:E9:E8:52:3B:77 X509v3 Authority Key Identifier: keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/npNQdbBPSAtnOlq0Culg6ehSO3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.48.240.0/21 45.147.84.0/24 85.91.40.0/22 185.40.87.0/24 185.83.120.0/22 195.88.100.0/23 IPv6: 2a00:7640::/32 Signature Algorithm: sha256WithRSAEncryption cb:d3:28:cc:0f:1b:0e:73:14:ec:15:f7:94:ea:06:dd:9b:45: b1:1c:ec:f7:e5:34:c5:7d:c9:24:22:0b:76:79:45:24:97:e2: 1e:dd:cd:11:80:20:f3:89:b7:9f:66:09:2b:8c:9b:c3:83:d1: 7e:f4:8b:a4:d7:da:56:c3:7a:51:11:3a:d3:ba:b8:79:77:57: 87:0a:b9:4b:ef:50:58:49:77:b4:65:fa:fb:16:4c:24:4e:24: 56:77:d0:25:09:af:76:61:58:64:63:ac:aa:61:ee:0d:d3:f1: f7:8f:f4:1c:fc:6c:0a:08:81:64:ad:ab:52:f5:e0:3d:f7:53: d1:52:2f:97:52:77:13:48:1a:b4:66:76:e9:3e:69:2d:3a:ed: 95:4a:fb:de:f1:57:c5:6c:e3:b4:4f:da:22:e7:4f:60:b6:4b: 0c:e9:36:0d:d8:dc:44:4f:9b:0b:20:cc:21:ff:67:f5:e2:9a: 6c:a0:b0:02:f1:ec:84:78:20:d3:ff:56:90:81:2a:20:f3:59: 93:60:7f:0b:e0:0f:27:c6:05:b9:1b:c1:38:39:3e:5c:ab:44: 9b:dd:3e:b1:81:ba:67:5a:97:a6:17:e9:93:bf:c9:5e:36:bb: ba:02:58:48:42:b4:9e:b2:a2:ec:6b:9a:0f:d7:3d:91:cf:81: 1e:87:52:98 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3WVphrPscIA+xi/FHEBGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi NzI3MjcwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTkzNTA3NWIwNGY0ODBiNjczYTVhYjQwYWU5NjBlOWU4NTIzYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/qTzBOWvWyWQ1Iemzc466eHw/1i nUvtbZ/CK9t1zxiQoRXGIC16w4VSfbYrW4nBsSBnWGNsMsWfgWma4hKuPlIm5taH AbeSMCuFfHC+sQLpQNGlXj9kpobg3Mml/KaIZWkkU2fg3AfOdmOrvvyUZA0H7pn4 8BQ3Hnc7O4JPpjAKlsNfwHTstlimj/APb5Zf+Sd17whWlAPGLrrBahka3t57YPqv FozgkiyQfaA3zabVij8aKnHoQ876LRhcJonY2H5UpcSLTJ4jeqIB1d1fJ/HVuzlZ FaDUTN6JITnKOssZcOxppBEfAMaZXjzmdD91mtm2TnsXS/pvYAwUwLEYTQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJ6TUHWwT0gLZzpatArpYOnoUjt3MB8GA1UdIwQY MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt M2I3MTU2OTFkMmU5LzEvbnBOUWRiQlBTQXRuT2xxMEN1bGc2ZWhTTzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5 LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJTDwAwQA LZNUAwQCVVsoAwQAuShXAwQCuVN4AwQBw1hkMA0EAgACMAcDBQAqAHZAMA0GCSqG SIb3DQEBCwUAA4IBAQDL0yjMDxsOcxTsFfeU6gbdm0WxHOz35TTFfckkIgt2eUUk l+Ie3c0RgCDzibefZgkrjJvDg9F+9Iuk19pWw3pRETrTurh5d1eHCrlL71BYSXe0 Zfr7FkwkTiRWd9AlCa92YVhkY6yqYe4N0/H3j/Qc/GwKCIFkratS9eA991PRUi+X UncTSBq0ZnbpPmktOu2VSvve8VfFbOO0T9oi509gtksM6TYN2NxET5sLIMwh/2f1 4ppsoLAC8eyEeCDT/1aQgSog81mTYH8L4A8nxgW5G8E4OT5cq0Sb3T6xgbpnWpem F+mTv8leNru6AlhIQrSesqLsa5oP1z2Rz4Eeh1KY -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:46 2026 by rpki-client