This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa File: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (raw, json) Hash identifier: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk= Subject key identifier: 34:6C:8C:1D:C0:56:44:89:28:22:82:7F:9D:C1:89:0E:A1:C2:39:34 Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Certificate serial: 019B7CED512F5C7AC0DE67293DEA4A4BD727 Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205185 IP address blocks: 93.187.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:51:2f:5c:7a:c0:de:67:29:3d:ea:4a:4b:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=346c8c1dc05644892822827f9dc1890ea1c23934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:65:87:2c:46:fb:4d:60:7f:da:dc:00:8b: 5f:4b:12:a7:13:7a:51:d9:fa:7b:2a:91:44:e8:07: ec:af:ba:51:6f:71:a0:54:70:1c:15:ff:a8:ed:2a: 90:1a:3d:84:b6:89:21:56:ee:8a:30:e3:24:f0:b4: 98:16:99:45:24:91:52:a6:a1:41:ef:91:d5:ee:8a: 57:98:ca:e0:1e:75:3d:72:d5:08:30:90:f2:83:d5: 56:54:ea:b8:58:1a:bc:21:47:b9:91:52:63:4d:d8: 76:d5:4a:49:f9:c6:f9:fe:81:ed:f2:e6:5e:fc:b7: 74:68:16:a3:f2:3b:29:b0:3f:f1:03:6a:2e:ea:a2: 88:8f:52:63:9f:c1:ee:4a:07:29:82:70:f2:90:88: 57:b3:2d:70:96:b6:1a:35:dd:7e:29:a8:7f:25:3b: 81:be:41:bd:96:9c:dc:7f:1f:46:be:61:87:a3:7a: a9:a5:05:50:84:a0:1d:4e:e6:7d:4a:c5:56:a6:d6: b0:d4:b1:2b:6a:34:1b:05:54:7a:8b:8e:ed:1a:88: c8:71:05:c8:67:2d:59:f2:c5:3d:6a:6f:a0:0d:ea: e1:0e:23:dc:a3:1e:65:34:ac:ac:09:b6:36:46:57: e6:2b:1a:2b:dd:75:b0:52:e9:e7:73:62:0a:8d:8f: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:8C:1D:C0:56:44:89:28:22:82:7F:9D:C1:89:0E:A1:C2:39:34 X509v3 Authority Key Identifier: keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.48.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c4:8b:6d:20:8c:f0:c9:c5:c9:15:c2:7e:bf:19:aa:b7:80: 9a:90:62:28:1d:fa:df:20:da:64:d1:c7:e6:b1:98:0f:2c:39: e3:93:c2:e5:48:40:b6:40:2e:22:28:80:42:c1:9f:07:c1:a6: 90:9b:7d:51:cc:c9:5d:fe:ed:99:d5:59:67:0a:69:0e:6b:35: 84:f2:a6:01:76:ce:44:64:c0:02:0e:8d:17:e2:94:15:5a:62: 56:03:9a:94:76:46:14:f2:66:4b:ab:c8:93:a6:e0:95:c8:4f: ae:cf:17:fd:4a:e0:f6:90:69:85:1d:12:cb:92:49:11:1e:1f: 47:e9:9b:c5:9c:87:a0:7e:6e:6d:00:9f:df:9d:c2:8c:2a:67: 06:b8:25:a4:30:a2:ac:c5:f4:ba:01:fa:40:5f:03:2d:f7:b1: 20:55:8b:cc:f4:a6:be:d8:6d:34:8e:00:74:86:25:f8:dc:fa: b9:b4:f8:97:8a:6a:66:94:50:e3:58:78:1e:29:0d:40:8f:00: 01:df:03:51:1d:47:b6:86:2f:46:51:df:eb:da:b1:48:e8:45: e6:cb:16:2a:ee:2a:15:b6:ee:7f:f5:bc:d7:a7:c3:68:96:6a: ec:74:a9:f9:29:f8:11:02:fc:a6:e3:f3:18:c0:c2:9a:1e:53: eb:3c:c1:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VEvXHrA3mcpPepKS9cnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0 MmFhYjAwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDZjOGMxZGMwNTY0NDg5MjgyMjgyN2Y5ZGMxODkwZWExYzIzOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8hlhyxG+01gf9rcAItfSxKnE3pR 2fp7KpFE6Afsr7pRb3GgVHAcFf+o7SqQGj2EtokhVu6KMOMk8LSYFplFJJFSpqFB 75HV7opXmMrgHnU9ctUIMJDyg9VWVOq4WBq8IUe5kVJjTdh21UpJ+cb5/oHt8uZe /Ld0aBaj8jspsD/xA2ou6qKIj1Jjn8HuSgcpgnDykIhXsy1wlrYaNd1+Kah/JTuB vkG9lpzcfx9GvmGHo3qppQVQhKAdTuZ9SsVWptaw1LErajQbBVR6i47tGojIcQXI Zy1Z8sU9am+gDerhDiPcox5lNKysCbY2RlfmKxor3XWwUunnc2IKjY/ZmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRsjB3AVkSJKCKCf53BiQ6hwjk0MB8GA1UdIwQY MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt ODZmODhjZTQ0NzkzLzEvTkd5TUhjQldSSWtvSW9KX25jR0pEcUhDT1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbswMA0G CSqGSIb3DQEBCwUAA4IBAQBFxIttIIzwycXJFcJ+vxmqt4CakGIoHfrfINpk0cfm sZgPLDnjk8LlSEC2QC4iKIBCwZ8HwaaQm31RzMld/u2Z1VlnCmkOazWE8qYBds5E ZMACDo0X4pQVWmJWA5qUdkYU8mZLq8iTpuCVyE+uzxf9SuD2kGmFHRLLkkkRHh9H 6ZvFnIegfm5tAJ/fncKMKmcGuCWkMKKsxfS6AfpAXwMt97EgVYvM9Ka+2G00jgB0 hiX43Pq5tPiXimpmlFDjWHgeKQ1AjwAB3wNRHUe2hi9GUd/r2rFI6EXmyxYq7ioV tu5/9bzXp8NolmrsdKn5KfgRAvym4/MYwMKaHlPrPMFQ -----END CERTIFICATE-----Generated at Mon Jan 26 09:54:16 2026 by rpki-client