This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/ncyBejndA1O6Npn4AIKSva2FQys.roa File: ncyBejndA1O6Npn4AIKSva2FQys.roa (raw, json) Hash identifier: PYhp4XEiwuMa3ftKl/IMy6aF+MdAGyTyTOoqUY5QIjs= Subject key identifier: 9D:CC:81:7A:39:DD:03:53:BA:36:99:F8:00:82:92:BD:AD:85:43:2B Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019AD48D1A7F490C6BB2E2F726610B892066 Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/ncyBejndA1O6Npn4AIKSva2FQys.roa Signing time: Sun 30 Nov 2025 11:36:48 +0000 ROA not before: Sun 30 Nov 2025 11:36:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216426 IP address blocks: 81.172.96.0/22 maxlen: 22 81.172.96.0/24 maxlen: 24 81.172.97.0/24 maxlen: 24 81.172.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d4:8d:1a:7f:49:0c:6b:b2:e2:f7:26:61:0b:89:20:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Nov 30 11:36:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9dcc817a39dd0353ba3699f8008292bdad85432b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:ac:f8:9b:cc:66:96:6b:60:aa:c7:2f:03: d0:59:d0:5a:27:4a:03:6c:1f:1d:37:0f:9e:f8:78: 7a:53:c5:02:bb:0e:e1:23:5f:18:b7:7a:fa:ab:75: 4c:8b:f1:79:05:6f:17:74:4e:68:93:04:5d:9e:4f: 9f:05:12:1f:63:63:72:cd:97:9c:a5:b0:28:d0:61: 80:0f:e2:6f:bd:58:c0:d4:2d:8e:d2:07:3a:75:62: a5:25:4c:8b:0d:04:e8:dd:48:3b:40:e4:19:1b:4f: b2:cc:69:00:68:1b:72:e0:2b:4a:24:d8:30:8d:6c: 72:78:90:85:2a:90:57:78:b8:60:cb:c3:2c:8a:47: e6:bb:dc:07:a1:a5:ca:d5:b6:98:de:c5:63:97:ae: 67:7d:66:c9:92:00:7d:88:3a:be:d2:6c:d4:a8:a9: ff:61:c2:b2:d5:08:63:ac:2c:6b:ad:02:e7:f0:43: 99:44:c3:b6:7c:64:19:73:ca:ed:2d:fe:3b:cf:4f: cd:be:3b:50:fb:39:3f:85:e8:0f:17:df:69:46:7f: 04:8e:da:db:7e:9d:54:a5:58:6f:0b:f8:aa:13:d2: 06:d1:6e:76:13:91:ad:9a:32:b2:fe:5e:8c:58:8f: ae:a0:d3:e2:22:21:e3:e6:a1:b1:c0:58:25:77:2a: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:81:7A:39:DD:03:53:BA:36:99:F8:00:82:92:BD:AD:85:43:2B X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/ncyBejndA1O6Npn4AIKSva2FQys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.96.0/22 Signature Algorithm: sha256WithRSAEncryption a0:4f:4c:ad:e5:7f:86:57:65:86:f7:2b:4e:a8:97:59:a4:9f: f8:dd:4d:a6:83:12:e4:ed:34:4b:6c:d7:c0:4b:6f:61:70:ae: ff:7a:21:99:39:7d:fe:6a:3a:40:bd:41:ee:da:1c:2e:df:2d: ba:5e:2d:1e:e9:0d:e8:e5:f2:01:fc:0f:88:39:16:e7:97:e5: ec:80:0b:06:4f:2d:98:c6:d7:b4:39:96:a8:c4:f8:f1:85:0f: f4:63:0f:0b:f5:7f:11:75:b9:59:2c:88:fc:62:ca:ea:31:42: 8f:02:ec:26:01:ca:8f:fc:cf:da:83:8b:d4:49:af:53:5d:ac: ac:e4:e0:31:41:a1:f3:8d:a1:d1:a0:16:60:77:2f:88:fa:71: 5e:62:a0:f8:96:47:55:0a:7f:6a:85:b6:57:dc:cf:1f:af:7d: 60:69:71:88:ce:34:40:e3:6b:79:c4:57:5f:8e:13:68:99:38: fc:aa:cc:56:1d:3f:0e:3a:09:e6:49:31:8b:dc:0e:09:bf:29: 70:80:a9:86:ef:29:43:05:c9:a8:c9:2a:a3:7c:32:19:41:68: 8f:fc:f0:60:71:60:f4:7b:39:50:53:dc:67:95:1a:ed:d4:c4: 9e:59:6b:a3:6d:66:fc:53:7d:bd:b5:04:0a:62:f2:bf:7c:23: 0b:0c:99:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrUjRp/SQxrsuL3JmELiSBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjUxMTMwMTEzNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGNjODE3YTM5ZGQwMzUzYmEzNjk5ZjgwMDgyOTJiZGFkODU0MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYCs+JvMZpZrYKrHLwPQWdBaJ0oD bB8dNw+e+Hh6U8UCuw7hI18Yt3r6q3VMi/F5BW8XdE5okwRdnk+fBRIfY2NyzZec pbAo0GGAD+JvvVjA1C2O0gc6dWKlJUyLDQTo3Ug7QOQZG0+yzGkAaBty4CtKJNgw jWxyeJCFKpBXeLhgy8Msikfmu9wHoaXK1baY3sVjl65nfWbJkgB9iDq+0mzUqKn/ YcKy1QhjrCxrrQLn8EOZRMO2fGQZc8rtLf47z0/NvjtQ+zk/hegPF99pRn8Ejtrb fp1UpVhvC/iqE9IG0W52E5GtmjKy/l6MWI+uoNPiIiHj5qGxwFgldyqX5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3MgXo53QNTujaZ+ACCkr2thUMrMB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvbmN5QmVqbmRBMU82TnBuNEFJS1N2YTJGUXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUaxgMA0G CSqGSIb3DQEBCwUAA4IBAQCgT0yt5X+GV2WG9ytOqJdZpJ/43U2mgxLk7TRLbNfA S29hcK7/eiGZOX3+ajpAvUHu2hwu3y26Xi0e6Q3o5fIB/A+IORbnl+XsgAsGTy2Y xte0OZaoxPjxhQ/0Yw8L9X8RdblZLIj8YsrqMUKPAuwmAcqP/M/ag4vUSa9TXays 5OAxQaHzjaHRoBZgdy+I+nFeYqD4lkdVCn9qhbZX3M8fr31gaXGIzjRA42t5xFdf jhNomTj8qsxWHT8OOgnmSTGL3A4JvylwgKmG7ylDBcmoySqjfDIZQWiP/PBgcWD0 ezlQU9xnlRrt1MSeWWujbWb8U329tQQKYvK/fCMLDJnf -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:42 2025 by rpki-client