This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NCFpucR4-r83kyx2khhJCgLkruU.roa File: NCFpucR4-r83kyx2khhJCgLkruU.roa (raw, json) Hash identifier: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA= Subject key identifier: 34:21:69:B9:C4:78:FA:BF:37:93:2C:76:92:18:49:0A:02:E4:AE:E5 Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973 Certificate serial: 019B77C746370E293473885CFC11E50F6DF1 Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NCFpucR4-r83kyx2khhJCgLkruU.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210422 IP address blocks: 80.68.154.0/24 maxlen: 24 2a12:9f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:46:37:0e:29:34:73:88:5c:fc:11:e5:0f:6d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342169b9c478fabf37932c769218490a02e4aee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:b4:56:cd:ad:2d:62:78:7c:53:77:11:ff: 57:93:77:71:85:aa:75:65:e2:aa:e7:cb:95:94:84: 5e:44:14:95:44:8e:14:ba:c2:f4:78:cb:7d:b8:12: 84:4f:29:ba:ca:e5:ac:9a:4a:19:4d:7d:1e:78:d9: 82:3b:a7:c1:99:c5:0d:81:88:4d:71:31:a8:7e:c3: 94:61:28:43:4d:da:a6:86:17:60:7b:8f:18:cd:c8: ee:ca:2a:e8:3d:18:8d:36:6c:6d:a1:1b:a5:dd:4d: 5a:d1:3f:fc:1c:1c:bc:08:05:a5:c6:81:0a:a7:80: e0:b8:cf:66:c2:0b:a1:68:da:2c:41:4d:92:99:1f: 73:84:1f:87:c2:32:50:c9:b5:96:47:a0:95:fd:b0: 25:fe:02:fa:7b:c4:35:84:4c:15:cf:7e:d9:3a:36: a9:f7:47:d4:91:5a:38:dc:9a:d1:10:49:bf:4f:b3: f2:fb:82:7a:54:13:8b:36:30:93:71:a8:f5:bd:11: 91:62:79:1a:7e:9a:35:d8:2d:80:05:56:a7:29:ff: 9e:bd:66:42:dc:09:ec:1b:bc:13:90:96:97:53:f5: f8:ee:fa:c2:cd:9d:2a:e5:cd:17:7a:79:1c:bd:ae: 14:7a:db:8e:3b:2f:0f:ef:9c:86:4f:b9:f5:86:bd: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:69:B9:C4:78:FA:BF:37:93:2C:76:92:18:49:0A:02:E4:AE:E5 X509v3 Authority Key Identifier: keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NCFpucR4-r83kyx2khhJCgLkruU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.154.0/24 IPv6: 2a12:9f80::/29 Signature Algorithm: sha256WithRSAEncryption 71:c9:7f:c6:c8:a4:ab:a9:42:28:bd:de:ac:2d:03:c6:0e:0b: a5:cb:83:90:41:32:e5:d3:7a:ac:f8:00:96:d9:c2:25:e4:f4: 14:c7:0e:84:9a:fc:7d:ad:68:43:32:54:b4:99:08:c3:f8:1c: 00:cd:72:50:2e:5f:27:be:e6:47:2e:38:c3:6a:91:72:92:2c: dd:4a:8b:ae:0f:d2:49:1e:09:a1:f3:52:9f:12:58:a3:d9:33: d7:df:56:5e:8a:cd:22:29:87:8f:f7:09:a9:2e:c3:32:ee:03: f5:66:6b:30:3f:69:6d:8a:c5:26:da:b3:f1:96:2a:5c:fb:3e: c1:b5:93:df:db:7a:ce:51:9b:f7:03:28:01:f4:bd:a5:7f:18: 0b:31:df:9a:22:d7:26:32:b2:56:70:e7:d5:ba:84:5c:20:6d: 6d:d7:82:64:c6:8f:98:80:c2:b8:93:8d:ae:22:b4:c6:8e:c7: de:9a:07:77:ef:8f:af:23:ec:71:7c:4d:d0:3d:95:c3:df:89: 37:48:90:22:51:ae:45:b3:16:a0:d8:19:c5:c6:55:88:8d:eb: dc:7b:8b:99:40:e9:35:7d:77:2c:33:72:a6:10:4c:bb:e0:2f: 3e:72:f0:2d:c7:f3:56:cc:99:15:70:5e:b3:59:d0:81:d1:18: 3b:e4:7d:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x0Y3Dik0c4hc/BHlD23xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1 NTg5NzMwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDIxNjliOWM0NzhmYWJmMzc5MzJjNzY5MjE4NDkwYTAyZTRhZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKe0Vs2tLWJ4fFN3Ef9Xk3dxhap1 ZeKq58uVlIReRBSVRI4UusL0eMt9uBKETym6yuWsmkoZTX0eeNmCO6fBmcUNgYhN cTGofsOUYShDTdqmhhdge48YzcjuyiroPRiNNmxtoRul3U1a0T/8HBy8CAWlxoEK p4DguM9mwguhaNosQU2SmR9zhB+HwjJQybWWR6CV/bAl/gL6e8Q1hEwVz37ZOjap 90fUkVo43JrREEm/T7Py+4J6VBOLNjCTcaj1vRGRYnkafpo12C2ABVanKf+evWZC 3AnsG7wTkJaXU/X47vrCzZ0q5c0Xenkcva4UetuOOy8P75yGT7n1hr2ikQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDQhabnEePq/N5MsdpIYSQoC5K7lMB8GA1UdIwQY MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt OWM5ZjIwOTAzMjlhLzEvTkNGcHVjUjQtcjgza3l4MmtoaEpDZ0xrcnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUESaMA0E AgACMAcDBQMqEp+AMA0GCSqGSIb3DQEBCwUAA4IBAQBxyX/GyKSrqUIovd6sLQPG Dguly4OQQTLl03qs+ACW2cIl5PQUxw6Emvx9rWhDMlS0mQjD+BwAzXJQLl8nvuZH LjjDapFykizdSouuD9JJHgmh81KfElij2TPX31Zeis0iKYeP9wmpLsMy7gP1Zmsw P2ltisUm2rPxlipc+z7BtZPf23rOUZv3AygB9L2lfxgLMd+aItcmMrJWcOfVuoRc IG1t14Jkxo+YgMK4k42uIrTGjsfemgd374+vI+xxfE3QPZXD34k3SJAiUa5Fsxag 2BnFxlWIjevce4uZQOk1fXcsM3KmEEy74C8+cvAtx/NWzJkVcF6zWdCB0Rg75H19 -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:39 2026 by rpki-client