This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/nBrSGr2-FoI2a-yweJfRkdzUduA.roa File: nBrSGr2-FoI2a-yweJfRkdzUduA.roa (raw, json) Hash identifier: KFZmWMvcLzeRKdgM+H0v2yfy68uGB6YoYjKW+8/osrA= Subject key identifier: 9C:1A:D2:1A:BD:BE:16:82:36:6B:EC:B0:78:97:D1:91:DC:D4:76:E0 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79107A308AC91F28B9C619B4D0ACF7B0 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/nBrSGr2-FoI2a-yweJfRkdzUduA.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216155 IP address blocks: 5.178.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7a:30:8a:c9:1f:28:b9:c6:19:b4:d0:ac:f7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c1ad21abdbe1682366becb07897d191dcd476e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:82:e7:21:6d:17:b4:64:dc:28:e5:12:1a: e6:bb:ab:37:a7:cf:3b:56:07:37:a8:77:ae:89:ea: 8b:11:34:3f:46:6d:22:90:6b:8c:10:42:8f:46:3b: df:91:7b:a8:c1:b4:99:13:a1:b6:30:5f:99:9a:f8: c7:e4:18:0a:e3:ec:7c:e3:46:99:06:8f:35:ab:c1: 98:e0:32:50:b3:46:74:fd:2c:6a:45:23:f6:8b:2f: b3:2a:6e:48:8c:07:9f:bc:76:bc:8f:48:dd:ba:76: fa:6c:29:4e:e3:f8:a2:e3:39:d4:c1:bc:99:7e:ae: c1:66:24:e4:f7:80:f9:8b:39:38:3e:0f:ef:e2:99: 38:51:ea:99:16:bd:82:f5:50:0f:3c:ab:0c:46:5d: f2:80:d1:33:ef:17:ef:94:ab:39:a9:c4:cd:d4:fa: 27:24:85:59:f9:32:28:99:73:66:dd:12:f1:eb:7e: 56:68:d2:84:ce:a0:df:66:0b:8f:d3:a8:3f:9d:eb: ea:1b:eb:79:48:ed:42:b7:28:85:95:ca:b9:8e:63: fd:a0:6c:7c:cb:f3:05:61:60:0b:7b:00:ed:cc:3f: de:64:af:a5:fb:5f:98:da:f0:d0:e1:f2:3a:28:42: a3:9d:b1:e5:24:29:92:5e:ca:a4:ae:b8:88:b6:bc: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:D2:1A:BD:BE:16:82:36:6B:EC:B0:78:97:D1:91:DC:D4:76:E0 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/nBrSGr2-FoI2a-yweJfRkdzUduA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.107.0/24 Signature Algorithm: sha256WithRSAEncryption 90:97:b8:60:67:48:91:d6:74:e0:d4:51:22:6e:a5:26:4c:71: 91:54:63:61:b9:0c:da:60:3a:57:06:19:cb:24:85:a7:6e:0f: de:fb:bf:e8:32:f4:ce:04:8f:ae:cf:e2:5f:b2:0f:20:09:98: 93:39:92:d4:8f:2a:8e:df:80:fb:cf:36:21:6e:00:48:49:de: 16:4b:80:53:ca:a3:1e:31:fe:97:bd:be:52:07:ef:42:6a:d2: 6d:a0:e1:0a:aa:2a:b4:29:8e:8c:16:cb:65:df:82:8b:34:c5: ed:de:be:aa:f6:fe:c7:67:bf:20:9f:8f:58:53:71:ca:cc:bf: 69:69:81:d9:c3:7e:5b:05:e4:71:a9:e2:bb:2f:ba:2d:6f:06: 09:fe:69:56:a2:b7:e8:22:52:41:57:bd:bd:db:4a:77:18:81: 3e:d6:c5:1e:4d:e9:9f:7d:ed:7b:d5:7d:de:bd:81:31:b3:be: b3:6e:c7:1d:36:43:be:4e:b5:ff:5d:db:12:aa:8f:fa:03:f7: ba:e0:40:03:23:63:e2:5f:ca:60:fc:2c:0c:c5:b8:ef:fb:b9: 2a:5b:ad:4d:9b:2e:93:87:5b:6c:91:3f:ac:d6:f2:3f:dd:76: d6:0b:c4:51:24:1c:58:4f:a4:44:c6:f8:bd:d6:98:7e:41:69: f1:a4:ca:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHowiskfKLnGGbTQrPewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzFhZDIxYWJkYmUxNjgyMzY2YmVjYjA3ODk3ZDE5MWRjZDQ3NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGeC5yFtF7Rk3CjlEhrmu6s3p887 Vgc3qHeuieqLETQ/Rm0ikGuMEEKPRjvfkXuowbSZE6G2MF+ZmvjH5BgK4+x840aZ Bo81q8GY4DJQs0Z0/SxqRSP2iy+zKm5IjAefvHa8j0jdunb6bClO4/ii4znUwbyZ fq7BZiTk94D5izk4Pg/v4pk4UeqZFr2C9VAPPKsMRl3ygNEz7xfvlKs5qcTN1Pon JIVZ+TIomXNm3RLx635WaNKEzqDfZguP06g/nevqG+t5SO1CtyiFlcq5jmP9oGx8 y/MFYWALewDtzD/eZK+l+1+Y2vDQ4fI6KEKjnbHlJCmSXsqkrriItryYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwa0hq9vhaCNmvssHiX0ZHc1HbgMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvbkJyU0dyMi1Gb0kyYS15d2VKZlJrZHpVZHVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJrMA0G CSqGSIb3DQEBCwUAA4IBAQCQl7hgZ0iR1nTg1FEibqUmTHGRVGNhuQzaYDpXBhnL JIWnbg/e+7/oMvTOBI+uz+Jfsg8gCZiTOZLUjyqO34D7zzYhbgBISd4WS4BTyqMe Mf6Xvb5SB+9CatJtoOEKqiq0KY6MFstl34KLNMXt3r6q9v7HZ78gn49YU3HKzL9p aYHZw35bBeRxqeK7L7otbwYJ/mlWorfoIlJBV72920p3GIE+1sUeTemffe171X3e vYExs76zbscdNkO+TrX/XdsSqo/6A/e64EADI2PiX8pg/CwMxbjv+7kqW61Nmy6T h1tskT+s1vI/3XbWC8RRJBxYT6RExvi91ph+QWnxpMpZ -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:25 2026 by rpki-client