This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/NcSh_-Ffauem6ez7_yno8PhT3YA.roa File: NcSh_-Ffauem6ez7_yno8PhT3YA.roa (raw, json) Hash identifier: x+fdD0W14LGnfLhl1bXQbaRHap4bSB42pwGqiN2+NHI= Subject key identifier: 35:C4:A1:FF:E1:5F:6A:E7:A6:E9:EC:FB:FF:29:E8:F0:F8:53:DD:80 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019B797EFD0AFA6CFCAC99882D80E25F9381 Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/NcSh_-Ffauem6ez7_yno8PhT3YA.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47603 IP address blocks: 78.41.61.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:0a:fa:6c:fc:ac:99:88:2d:80:e2:5f:93:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c4a1ffe15f6ae7a6e9ecfbff29e8f0f853dd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:df:20:74:f2:22:7f:10:43:7f:18:1c:ab: 0a:a4:3c:c4:c3:9a:97:6e:05:93:c0:12:62:2c:7e: 05:18:f0:50:14:ef:f0:5b:fd:04:38:27:04:18:bb: 7b:f2:6e:0e:ac:72:87:5f:e6:72:d9:82:11:c9:24: 21:6b:e9:13:43:eb:9b:09:c8:de:44:50:7f:a7:f4: 76:a9:13:8e:39:0c:da:ca:cd:ca:b5:08:69:b3:c9: 72:63:38:6a:36:1b:58:0d:f8:71:02:eb:a0:6a:0a: e7:ba:10:d3:0c:0f:6d:79:50:37:b0:11:20:93:ed: 01:d4:c2:f9:e2:fd:43:ec:47:6f:e6:c0:60:d0:1e: e9:bc:e6:69:51:44:3e:ca:1e:39:a7:eb:5c:57:d9: 2a:c5:61:b0:3b:83:5f:ec:05:84:ca:ab:36:f5:5a: 84:c3:3b:80:42:9d:38:28:07:d6:31:72:ba:3e:d9: 83:6a:49:74:26:9f:ec:a1:24:42:5e:19:7b:cb:9d: 70:bd:c8:ab:7f:2a:87:cf:36:f0:d9:c3:08:f8:65: 41:18:7b:e6:d2:24:54:e5:13:ab:e7:e9:f9:96:5e: 9c:61:85:b1:87:41:74:02:3c:bc:75:03:9c:95:c9: ab:00:83:1d:17:cb:f0:62:f3:27:9c:6f:d2:36:63: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:A1:FF:E1:5F:6A:E7:A6:E9:EC:FB:FF:29:E8:F0:F8:53:DD:80 X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/NcSh_-Ffauem6ez7_yno8PhT3YA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.61.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b0:50:7c:3b:c6:cb:30:7e:bf:58:4e:2c:2c:76:61:39:67: ca:14:31:3f:4a:b2:6e:e6:71:cb:0f:6f:16:f7:9f:7a:c8:39: 4b:86:ce:d3:4b:bf:1c:13:b4:e4:61:25:30:ad:56:e2:13:1a: ca:26:f2:a6:ed:e7:d7:a2:70:1d:52:d7:07:7c:8d:33:e7:04: 92:05:b2:fa:3d:a5:98:85:49:c1:89:b5:e6:50:e3:76:ca:ee: 59:66:74:7d:56:a2:bf:1e:7f:09:58:70:a2:52:9a:1a:87:20: cc:72:03:1f:de:4a:5b:f1:b4:d9:bd:5d:16:c6:04:a6:b3:81: 02:e8:26:b3:1c:46:61:0c:d7:25:2b:5d:c7:18:2f:c2:17:52: b1:b9:fb:65:1b:eb:7c:57:d7:bf:6f:48:aa:2e:f4:27:80:a8: 98:65:ee:ea:80:88:9e:7a:c9:fd:ac:ca:75:48:f9:01:0a:85: 56:29:a7:dc:70:8d:b3:b4:72:bb:9f:3a:8a:30:04:5d:bc:10: 8c:4b:ca:91:99:47:50:10:db:dc:6a:ca:29:da:aa:30:36:e1: d8:39:e8:21:cc:d8:c6:d9:aa:b1:f7:6d:12:6d:2e:a2:e7:fd: 11:7b:79:40:81:1c:84:cc:49:24:59:4c:1e:cc:ea:0e:fc:c1: 8c:dc:4b:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fv0K+mz8rJmILYDiX5OBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWM0YTFmZmUxNWY2YWU3YTZlOWVjZmJmZjI5ZThmMGY4NTNkZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj3fIHTyIn8QQ38YHKsKpDzEw5qX bgWTwBJiLH4FGPBQFO/wW/0EOCcEGLt78m4OrHKHX+Zy2YIRySQha+kTQ+ubCcje RFB/p/R2qROOOQzays3KtQhps8lyYzhqNhtYDfhxAuugagrnuhDTDA9teVA3sBEg k+0B1ML54v1D7Edv5sBg0B7pvOZpUUQ+yh45p+tcV9kqxWGwO4Nf7AWEyqs29VqE wzuAQp04KAfWMXK6PtmDakl0Jp/soSRCXhl7y51wvcirfyqHzzbw2cMI+GVBGHvm 0iRU5ROr5+n5ll6cYYWxh0F0Ajy8dQOclcmrAIMdF8vwYvMnnG/SNmPbtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXEof/hX2rnpuns+/8p6PD4U92AMB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvTmNTaF8tRmZhdWVtNmV6N195bm84UGhUM1lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATik9MA0G CSqGSIb3DQEBCwUAA4IBAQBqsFB8O8bLMH6/WE4sLHZhOWfKFDE/SrJu5nHLD28W 9596yDlLhs7TS78cE7TkYSUwrVbiExrKJvKm7efXonAdUtcHfI0z5wSSBbL6PaWY hUnBibXmUON2yu5ZZnR9VqK/Hn8JWHCiUpoahyDMcgMf3kpb8bTZvV0WxgSms4EC 6CazHEZhDNclK13HGC/CF1KxuftlG+t8V9e/b0iqLvQngKiYZe7qgIieesn9rMp1 SPkBCoVWKafccI2ztHK7nzqKMARdvBCMS8qRmUdQENvcasop2qowNuHYOeghzNjG 2aqx920SbS6i5/0Re3lAgRyEzEkkWUwezOoO/MGM3EtY -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:02 2026 by rpki-client