This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/NmPY1QFqH428rVlZzjWf2L-MGBc.roa File: NmPY1QFqH428rVlZzjWf2L-MGBc.roa (raw, json) Hash identifier: fCirte39vGmiEGt9lsejLnyydGWVFBOWZI9zkpw+G2g= Subject key identifier: 36:63:D8:D5:01:6A:1F:8D:BC:AD:59:59:CE:35:9F:D8:BF:8C:18:17 Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1 Certificate serial: 019A5E94701A8BB7DCD97120285844A18E0B Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/NmPY1QFqH428rVlZzjWf2L-MGBc.roa Signing time: Fri 07 Nov 2025 13:49:37 +0000 ROA not before: Fri 07 Nov 2025 13:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5539 IP address blocks: 82.118.32.0/19 maxlen: 19 185.54.120.0/22 maxlen: 22 185.54.188.0/22 maxlen: 22 185.54.190.0/24 maxlen: 24 185.54.191.0/24 maxlen: 24 193.149.32.0/19 maxlen: 19 194.97.64.0/19 maxlen: 19 194.97.128.0/19 maxlen: 19 194.97.137.0/24 maxlen: 24 195.24.96.0/19 maxlen: 19 195.30.0.0/16 maxlen: 16 195.30.21.0/24 maxlen: 24 195.30.64.0/24 maxlen: 24 195.30.121.0/24 maxlen: 24 195.30.131.0/24 maxlen: 24 2001:608::/32 maxlen: 32 2001:608:804::/48 maxlen: 48 2001:608:e03::/48 maxlen: 48 2001:67c:158c::/48 maxlen: 48 2001:4150::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:94:70:1a:8b:b7:dc:d9:71:20:28:58:44:a1:8e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1 Validity Not Before: Nov 7 13:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3663d8d5016a1f8dbcad5959ce359fd8bf8c1817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:8e:36:6c:07:6c:a5:43:c9:30:f8:71:4e: ea:6d:29:0e:cb:7f:de:e6:29:1a:35:59:09:fd:5f: ad:bf:19:65:e0:f6:50:96:5f:2d:cd:44:3a:0f:5f: bc:74:ad:41:60:a5:33:2d:f5:56:67:04:25:ba:14: 35:be:8f:7a:4b:03:2f:de:e1:2f:7f:4b:48:a3:14: f3:f9:51:a9:01:64:75:b0:b5:07:ee:92:67:6b:0b: 44:36:26:f3:10:17:3e:55:1c:f5:32:33:4e:f0:52: 6d:b1:7c:7f:59:b0:2d:0d:49:8d:50:30:f9:b3:95: 96:49:a4:37:e6:3b:96:94:9c:ab:89:14:e0:08:25: 76:b0:88:3d:6a:3d:58:b5:11:93:b0:2e:58:ba:96: 47:27:49:91:f1:34:cc:30:6d:30:e5:a2:be:62:da: 48:bb:42:8d:1d:b2:69:e9:f5:ae:48:33:35:af:d1: 37:d2:ca:57:97:e5:ed:ac:dd:d3:c8:89:de:35:b1: d6:96:06:21:43:55:01:7f:d8:a4:57:9f:48:3e:29: f0:ed:34:73:7e:12:2b:51:83:a7:1e:aa:34:ef:ef: 58:d3:ca:03:23:da:56:53:95:fb:4c:92:97:40:cc: 9c:4f:8f:18:d3:dd:6c:7a:ff:a5:91:9c:4a:a8:e6: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:D8:D5:01:6A:1F:8D:BC:AD:59:59:CE:35:9F:D8:BF:8C:18:17 X509v3 Authority Key Identifier: keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/NmPY1QFqH428rVlZzjWf2L-MGBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.118.32.0/19 185.54.120.0/22 185.54.188.0/22 193.149.32.0/19 194.97.64.0/19 194.97.128.0/19 195.24.96.0/19 195.30.0.0/16 IPv6: 2001:608::/32 2001:67c:158c::/48 2001:4150::/32 Signature Algorithm: sha256WithRSAEncryption 53:78:0d:0f:00:f8:a6:b0:c7:c4:f6:ef:ab:10:10:5e:5d:7e: 1a:c0:df:0f:77:bb:5b:61:da:89:54:5a:a1:8e:5c:a0:39:82: 8d:9c:67:b1:07:98:ad:83:50:92:67:3d:9f:8d:fd:11:65:e4: 8e:d9:e2:28:4f:43:66:36:e0:81:f4:95:b7:85:6d:ad:95:5c: 93:70:f0:b8:14:7c:11:d2:f5:33:85:71:55:d6:0c:c3:6f:fb: 5a:56:9c:b8:b8:4a:c5:8f:87:98:e0:0d:1b:25:3b:bb:11:03: a3:06:38:58:6d:47:d3:c3:9a:ed:be:de:0f:6c:9d:8c:f0:bd: 3a:82:2d:39:0e:90:3f:9e:06:76:a2:41:4e:13:c3:c1:e6:ba: 7d:2d:20:ac:5a:c4:aa:0c:0e:b3:55:01:c3:76:4e:13:d1:f6: 29:99:3e:e8:bc:22:a4:3d:d0:b2:43:5a:18:68:c1:89:1e:4c: 28:a3:40:cb:3e:5b:b8:1a:84:2b:0a:35:b8:97:3b:7b:ca:33: 47:51:9c:94:06:8e:9c:95:7c:90:55:1d:dd:ea:51:5c:14:2a: 8c:29:83:6f:d6:96:aa:b2:5c:65:f7:87:c1:4f:d7:e7:ea:d3: de:85:ce:27:86:06:c3:a2:9e:a2:7e:95:8e:33:b3:28:22:86: 6e:3d:1d:25 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZpelHAai7fc2XEgKFhEoY4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OGIzZjBjNmE4N2MwNDViZGNmZmFiZDkwMGRiODg5MmJl NzAyZTEwHhcNMjUxMTA3MTM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjYzZDhkNTAxNmExZjhkYmNhZDU5NTljZTM1OWZkOGJmOGMxODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcSONmwHbKVDyTD4cU7qbSkOy3/e 5ikaNVkJ/V+tvxll4PZQll8tzUQ6D1+8dK1BYKUzLfVWZwQluhQ1vo96SwMv3uEv f0tIoxTz+VGpAWR1sLUH7pJnawtENibzEBc+VRz1MjNO8FJtsXx/WbAtDUmNUDD5 s5WWSaQ35juWlJyriRTgCCV2sIg9aj1YtRGTsC5YupZHJ0mR8TTMMG0w5aK+YtpI u0KNHbJp6fWuSDM1r9E30spXl+XtrN3TyIneNbHWlgYhQ1UBf9ikV59IPinw7TRz fhIrUYOnHqo07+9Y08oDI9pWU5X7TJKXQMycT48Y091sev+lkZxKqOb9LQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFDZj2NUBah+NvK1ZWc41n9i/jBgXMB8GA1UdIwQY MBaAFPSLPwxqh8BFvc/6vZANuIkr5wLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYt ZDM1ZWRiOWZkZDIxLzEvTm1QWTFRRnFINDI4clZsWnpqV2YyTC1NR0JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYtZDM1ZWRiOWZkZDIx LzEvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA1BAIAATAvAwQFUnYgAwQC uTZ4AwQCuTa8AwQFwZUgAwQFwmFAAwQFwmGAAwQFwxhgAwMAwx4wHQQCAAIwFwMF ACABBggDBwAgAQZ8FYwDBQAgAUFQMA0GCSqGSIb3DQEBCwUAA4IBAQBTeA0PAPim sMfE9u+rEBBeXX4awN8Pd7tbYdqJVFqhjlygOYKNnGexB5itg1CSZz2fjf0RZeSO 2eIoT0NmNuCB9JW3hW2tlVyTcPC4FHwR0vUzhXFV1gzDb/taVpy4uErFj4eY4A0b JTu7EQOjBjhYbUfTw5rtvt4PbJ2M8L06gi05DpA/ngZ2okFOE8PB5rp9LSCsWsSq DA6zVQHDdk4T0fYpmT7ovCKkPdCyQ1oYaMGJHkwoo0DLPlu4GoQrCjW4lzt7yjNH UZyUBo6clXyQVR3d6lFcFCqMKYNv1paqslxl94fBT9fn6tPehc4nhgbDop6ifpWO M7MoIoZuPR0l -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:34 2025 by rpki-client