This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/_NSxXKWLAT32ACYjnb_Q_v0bth4.roa File: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (raw, json) Hash identifier: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08= Subject key identifier: FC:D4:B1:5C:A5:8B:01:3D:F6:00:26:23:9D:BF:D0:FE:FD:1B:B6:1E Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa Certificate serial: 019B7759044DABC9B6D0ABE035ADFE790BF7 Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/_NSxXKWLAT32ACYjnb_Q_v0bth4.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 152.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:4d:ab:c9:b6:d0:ab:e0:35:ad:fe:79:0b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd4b15ca58b013df60026239dbfd0fefd1bb61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:ce:7a:3e:3e:ec:37:87:f0:19:df:16:2b: 96:0b:68:df:6f:2d:c1:26:43:5e:c7:a8:1f:3e:11: 0a:ef:77:09:40:88:e0:90:26:01:56:35:e8:be:d5: a3:0c:45:e5:4d:0f:67:ae:5a:8a:43:d0:0b:7c:49: c0:06:6c:db:0c:f9:b8:2d:91:49:a4:09:f9:ae:29: e2:e6:7c:60:ad:6c:c7:a2:78:88:5b:13:37:69:b3: 6e:d1:6e:b8:28:35:0a:e7:76:80:68:d8:af:15:75: b0:c1:db:5f:ad:5a:55:e1:d9:d0:c3:29:82:da:43: 9f:bf:ba:a0:3d:e2:23:f5:a2:08:4c:a2:a9:41:fd: cc:63:60:51:9c:b8:a6:78:4f:64:43:70:a2:32:28: 49:85:c3:f4:ef:78:28:38:d9:20:b2:da:37:ac:f7: 8b:a0:8d:a9:82:1d:57:4f:56:aa:5b:4f:e1:9e:92: 39:7b:3b:f1:51:6d:66:15:a6:d1:c6:24:77:e0:cb: 66:67:05:dc:c0:10:1b:93:66:e6:0c:7c:e6:6b:6f: 30:48:19:49:fe:a6:8e:0e:09:51:b5:70:3b:2c:97: a2:12:2c:7d:20:04:3b:ad:e7:c9:f2:0c:e2:43:05: 3b:78:3c:eb:1b:cc:c7:c5:04:d1:84:27:00:a5:8d: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D4:B1:5C:A5:8B:01:3D:F6:00:26:23:9D:BF:D0:FE:FD:1B:B6:1E X509v3 Authority Key Identifier: keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/_NSxXKWLAT32ACYjnb_Q_v0bth4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption c9:9b:a8:41:36:6b:68:da:80:16:bc:b4:f4:bb:b2:1d:bf:3f: 5d:63:09:a0:f0:9b:3f:39:e4:9c:e5:47:08:99:4f:84:ac:46: f8:c1:2c:53:9a:fc:7d:49:32:7d:5b:38:f5:2d:41:a0:f8:e2: c1:9e:77:0f:b7:ac:7c:07:62:a9:9d:97:2d:9b:27:33:58:86: 2a:3a:40:b2:1a:24:98:ff:0a:ba:fc:38:ce:cf:97:7a:37:9e: 6f:11:b3:45:5b:1d:bb:22:d0:49:02:d5:e8:b9:be:cf:04:fa: af:32:04:ce:20:b3:61:a7:80:05:88:3c:44:b8:b3:33:da:0b: be:45:f4:02:d2:9f:2a:37:7a:18:15:15:6f:dd:44:96:1d:33: 7a:33:f3:28:d6:1b:bf:3e:71:37:0e:5a:23:13:e1:13:52:0b: ba:70:20:df:2f:22:52:52:6f:39:39:12:57:92:1a:9e:c8:29: fa:93:0e:9e:a1:66:96:5f:31:61:f1:42:92:23:96:52:93:12: a6:ad:cf:15:09:7b:c6:50:d4:93:9d:8d:9a:d2:aa:3f:e1:c3: 94:e6:16:e1:bc:ef:b9:c9:42:cc:33:37:ee:2d:a2:29:b3:5e: 95:c7:39:11:b2:9f:7f:e9:bf:65:6b:c8:9d:23:69:d5:21:d1: 20:64:ea:3b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WQRNq8m20KvgNa3+eQv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz ODg1YWEwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Q0YjE1Y2E1OGIwMTNkZjYwMDI2MjM5ZGJmZDBmZWZkMWJiNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+bOej4+7DeH8BnfFiuWC2jfby3B JkNex6gfPhEK73cJQIjgkCYBVjXovtWjDEXlTQ9nrlqKQ9ALfEnABmzbDPm4LZFJ pAn5rini5nxgrWzHoniIWxM3abNu0W64KDUK53aAaNivFXWwwdtfrVpV4dnQwymC 2kOfv7qgPeIj9aIITKKpQf3MY2BRnLimeE9kQ3CiMihJhcP073goONkgsto3rPeL oI2pgh1XT1aqW0/hnpI5ezvxUW1mFabRxiR34MtmZwXcwBAbk2bmDHzma28wSBlJ /qaODglRtXA7LJeiEix9IAQ7refJ8gziQwU7eDzrG8zHxQTRhCcApY3DCQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFPzUsVyliwE99gAmI52/0P79G7YeMB8GA1UdIwQY MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt YzEzYjFmOTc3ZDU3LzEvX05TeFhLV0xBVDMyQUNZam5iX1FfdjBidGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3 LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmFgwDQYJ KoZIhvcNAQELBQADggEBAMmbqEE2a2jagBa8tPS7sh2/P11jCaDwmz855JzlRwiZ T4SsRvjBLFOa/H1JMn1bOPUtQaD44sGedw+3rHwHYqmdly2bJzNYhio6QLIaJJj/ Crr8OM7Pl3o3nm8Rs0VbHbsi0EkC1ei5vs8E+q8yBM4gs2GngAWIPES4szPaC75F 9ALSnyo3ehgVFW/dRJYdM3oz8yjWG78+cTcOWiMT4RNSC7pwIN8vIlJSbzk5EleS Gp7IKfqTDp6hZpZfMWHxQpIjllKTEqatzxUJe8ZQ1JOdjZrSqj/hw5TmFuG877nJ QswzN+4toimzXpXHORGyn3/pv2VryJ0jadUh0SBk6js= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:20 2026 by rpki-client