This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/NvHVcOuHPgyc57kdkgknLviy86E.roa File: NvHVcOuHPgyc57kdkgknLviy86E.roa (raw, json) Hash identifier: y99G00GU2pSghDNIsvoE0LPbq8qsxNZ2XK//ZEAFwIQ= Subject key identifier: 36:F1:D5:70:EB:87:3E:0C:9C:E7:B9:1D:92:09:27:2E:F8:B2:F3:A1 Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Certificate serial: 019B7AC881AE16E441C057AB37D523C9486F Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/NvHVcOuHPgyc57kdkgknLviy86E.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 2001:678:95c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:81:ae:16:e4:41:c0:57:ab:37:d5:23:c9:48:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f1d570eb873e0c9ce7b91d9209272ef8b2f3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:23:b4:e5:7b:2f:d2:17:7d:71:a6:55:cf: e0:7f:b7:41:7d:43:81:2d:b7:84:c8:43:e9:36:6e: 90:f5:a3:60:0b:72:d6:6d:65:10:4d:18:a2:4b:a9: 07:4b:30:41:c0:bd:50:5e:19:a1:72:a0:1d:7c:e0: 11:d6:c6:bd:f5:b1:fb:57:3b:96:c6:8f:9c:40:5d: 1c:77:e2:3f:a6:9c:1f:7f:27:90:41:3d:90:6b:40: 42:f5:4a:fa:d3:61:f4:51:84:fe:19:a4:11:e0:e1: 1a:15:5c:19:b3:eb:ad:46:b9:eb:3a:a2:9f:7d:c5: e4:83:ff:90:a3:06:1f:c8:c2:9f:66:e2:5e:74:89: eb:12:9e:c7:86:6b:41:29:c6:1f:a0:21:06:81:0b: 0f:88:60:72:cc:d3:d9:f0:41:99:df:c6:98:2a:40: f7:7d:51:43:8e:dc:9a:a5:38:2a:82:31:e8:f6:1f: 05:cc:ac:4b:e1:6d:48:ef:31:67:02:0a:82:c4:f7: 9a:b5:46:f1:b9:99:d2:59:0c:37:c0:b9:91:b6:b5: 69:eb:8e:a0:5c:e1:70:eb:76:d2:5e:30:f0:2b:12: 36:f4:c7:d7:26:88:d0:ec:ac:e2:2c:1f:a9:b7:81: e0:99:5a:dc:1a:cd:d3:e2:b2:60:5d:f8:55:1f:cb: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:D5:70:EB:87:3E:0C:9C:E7:B9:1D:92:09:27:2E:F8:B2:F3:A1 X509v3 Authority Key Identifier: keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/NvHVcOuHPgyc57kdkgknLviy86E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:95c::/48 Signature Algorithm: sha256WithRSAEncryption 33:4f:e3:96:6e:73:62:5b:a8:59:d3:01:ff:89:d6:b2:d1:db: b3:47:1a:0c:90:77:90:fc:20:6c:fc:46:dc:03:38:27:8d:ca: a5:00:3e:60:cb:4f:42:a7:9b:bb:18:a6:55:d2:68:5d:ec:15: 9a:3c:23:48:84:a3:27:8f:ba:fe:91:d1:26:35:ec:fd:40:df: 25:16:f3:c7:8b:60:03:c4:4c:24:0d:ec:ea:cf:38:e1:5e:65: 7f:14:0f:27:7e:e5:2a:26:35:16:cd:ab:39:3f:e7:25:96:59: 17:6e:64:e1:d4:03:48:ab:dd:5d:8a:f9:ff:a5:9d:f0:3f:08: 51:a5:cf:65:38:5a:50:1a:70:ac:56:da:a0:42:35:d4:39:4a: 78:6d:03:5b:22:e8:c0:5b:df:81:20:3f:5e:3c:60:e2:6d:ca: 66:f3:db:56:0f:23:a3:ab:bc:1d:a9:65:b6:51:87:39:ed:f1: 4d:d6:7b:22:3e:cd:29:8e:b7:cb:78:2d:7b:37:0d:71:a5:ca: 08:b7:c6:76:70:23:c2:ef:04:04:bc:a9:19:f7:ac:72:2e:8c: 69:01:df:63:7c:db:09:97:97:68:dd:21:c9:d4:57:c9:3d:04: 11:dd:74:ce:9f:94:84:5e:79:4a:fc:ea:d6:e5:12:c0:89:50: 57:f3:8c:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yIGuFuRBwFerN9UjyUhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2M5MDNiNGQwZTgzYmM4YjJkNDU0MzEzNmU5Y2Q1ZjM5 ODY0ZjUwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmYxZDU3MGViODczZTBjOWNlN2I5MWQ5MjA5MjcyZWY4YjJmM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mojtOV7L9IXfXGmVc/gf7dBfUOB LbeEyEPpNm6Q9aNgC3LWbWUQTRiiS6kHSzBBwL1QXhmhcqAdfOAR1sa99bH7VzuW xo+cQF0cd+I/ppwffyeQQT2Qa0BC9Ur602H0UYT+GaQR4OEaFVwZs+utRrnrOqKf fcXkg/+QowYfyMKfZuJedInrEp7HhmtBKcYfoCEGgQsPiGByzNPZ8EGZ38aYKkD3 fVFDjtyapTgqgjHo9h8FzKxL4W1I7zFnAgqCxPeatUbxuZnSWQw3wLmRtrVp646g XOFw63bSXjDwKxI29MfXJojQ7KziLB+pt4HgmVrcGs3T4rJgXfhVH8v+pQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDbx1XDrhz4MnOe5HZIJJy74svOhMB8GA1UdIwQY MBaAFJQ8kDtNDoO8iy1FQxNunNXzmGT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTkt Zjk4Yzc1ZGVhMjkyLzEvTnZIVmNPdUhQZ3ljNTdrZGtna25Mdml5ODZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81MDhhMjYtZTE5OS00MWI5LTllMTktZjk4Yzc1ZGVhMjky LzEvbER5UU8wME9nN3lMTFVWREUyNmMxZk9ZWlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAlc MA0GCSqGSIb3DQEBCwUAA4IBAQAzT+OWbnNiW6hZ0wH/iday0duzRxoMkHeQ/CBs /EbcAzgnjcqlAD5gy09Cp5u7GKZV0mhd7BWaPCNIhKMnj7r+kdEmNez9QN8lFvPH i2ADxEwkDezqzzjhXmV/FA8nfuUqJjUWzas5P+clllkXbmTh1ANIq91divn/pZ3w PwhRpc9lOFpQGnCsVtqgQjXUOUp4bQNbIujAW9+BID9ePGDibcpm89tWDyOjq7wd qWW2UYc57fFN1nsiPs0pjrfLeC17Nw1xpcoIt8Z2cCPC7wQEvKkZ96xyLoxpAd9j fNsJl5do3SHJ1FfJPQQR3XTOn5SEXnlK/OrW5RLAiVBX84zI -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:23 2026 by rpki-client