This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/N30OROJ-GP4W9Jh1DhollfBhBIc.roa File: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (raw, json) Hash identifier: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0= Subject key identifier: 37:7D:0E:44:E2:7E:18:FE:16:F4:98:75:0E:1A:25:95:F0:61:04:87 Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Certificate serial: 019B7E38853A5290DD92525E4953E3853FDE Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/N30OROJ-GP4W9Jh1DhollfBhBIc.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216371 IP address blocks: 94.101.106.0/24 maxlen: 24 2a14:7cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:85:3a:52:90:dd:92:52:5e:49:53:e3:85:3f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377d0e44e27e18fe16f498750e1a2595f0610487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:43:4a:b9:c8:ea:cb:89:eb:3b:83:a7:40: 06:b6:81:ff:85:2b:2c:40:c6:06:ff:ff:cf:26:7a: 4e:cd:00:03:5b:95:d3:55:ee:58:0b:c6:e3:e4:29: 25:2a:51:89:d4:0e:35:d7:76:ad:43:d6:27:70:66: 55:20:ef:4b:5d:fe:c6:d0:39:82:b2:46:ce:80:99: 86:84:4a:00:2f:d5:f1:b4:c5:26:a2:07:41:ed:3a: 9c:06:a3:0e:52:1e:ce:d4:c7:d0:83:2d:d0:c4:89: c3:f3:0b:b3:07:c7:e0:2c:19:6b:3c:62:99:97:e2: d3:9b:2d:69:80:66:60:42:46:5e:11:05:fb:17:41: ed:4d:b9:b4:09:d3:1e:68:69:9a:9a:f3:73:b0:a5: c0:95:07:8f:69:25:68:94:d9:27:88:d8:03:6b:46: ad:e1:6d:33:60:f7:77:b5:6b:7f:e5:82:ab:72:9d: 23:6c:2a:17:e5:72:ee:39:2e:f8:49:30:42:c9:64: 95:ec:7b:d2:5c:eb:95:86:c2:33:a6:d1:cc:db:da: 0b:ee:ef:26:80:30:2a:12:91:ea:6d:c1:09:47:f6: 4b:28:e0:3b:50:8b:ea:4a:74:ce:c1:14:95:e8:8c: ac:b5:0c:67:e8:f6:c7:88:b1:d2:a9:47:2d:72:1b: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7D:0E:44:E2:7E:18:FE:16:F4:98:75:0E:1A:25:95:F0:61:04:87 X509v3 Authority Key Identifier: keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/N30OROJ-GP4W9Jh1DhollfBhBIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.106.0/24 IPv6: 2a14:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 6d:24:ec:4b:15:76:c0:c4:68:ae:af:4b:55:d7:b7:95:ce:14: 73:f4:45:85:de:11:24:3b:b1:7f:67:f8:91:fb:77:f1:55:41: 2b:d4:84:e5:89:21:f5:5b:d5:f3:6a:b9:c2:85:ab:0e:24:99: 16:fd:83:e1:b1:5d:91:81:52:65:4a:1a:76:2f:b9:38:ea:82: b9:58:1b:cc:fb:a9:5d:14:af:80:56:b6:30:24:a1:c6:f5:56: 5b:ca:f8:80:10:7d:2c:81:47:79:e5:c7:a7:b3:5b:0b:02:80: 3e:cf:6d:d2:af:b6:53:d2:f9:57:aa:fb:77:83:91:42:be:cd: 8b:f6:cf:dc:8f:e8:37:77:50:f4:7b:f9:7d:f9:66:62:7d:f2: 0b:d3:c9:b7:5e:3b:8c:2f:7f:7f:74:16:4b:23:e3:fa:d5:c5: 2a:a9:49:30:33:b8:00:64:c8:6b:00:49:c9:0f:ab:07:e6:64: f6:b1:1f:db:cf:b1:1d:b8:e2:39:91:ba:e9:a1:e7:f3:6d:23: 6c:8e:60:5a:dd:9e:52:e4:a7:30:2c:5d:67:bd:fa:93:c5:e0: 6f:a0:21:9a:c3:0d:cf:de:b4:3e:ed:64:50:81:d0:16:fc:d3: 3a:ec:bb:84:72:2a:94:df:04:ae:ff:a8:68:44:1a:f2:7a:5a: 15:c9:0b:ab -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OIU6UpDdklJeSVPjhT/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1 YTViMWUwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzdkMGU0NGUyN2UxOGZlMTZmNDk4NzUwZTFhMjU5NWYwNjEwNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzddDSrnI6suJ6zuDp0AGtoH/hSss QMYG///PJnpOzQADW5XTVe5YC8bj5CklKlGJ1A4113atQ9YncGZVIO9LXf7G0DmC skbOgJmGhEoAL9XxtMUmogdB7TqcBqMOUh7O1MfQgy3QxInD8wuzB8fgLBlrPGKZ l+LTmy1pgGZgQkZeEQX7F0HtTbm0CdMeaGmamvNzsKXAlQePaSVolNkniNgDa0at 4W0zYPd3tWt/5YKrcp0jbCoX5XLuOS74STBCyWSV7HvSXOuVhsIzptHM29oL7u8m gDAqEpHqbcEJR/ZLKOA7UIvqSnTOwRSV6IystQxn6PbHiLHSqUctchsDfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDd9DkTifhj+FvSYdQ4aJZXwYQSHMB8GA1UdIwQY MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt ZjllYzU2NjY4NmI5LzEvTjMwT1JPSi1HUDRXOUpoMURob2xsZkJoQkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5 LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXmVqMA0E AgACMAcDBQMqFHzAMA0GCSqGSIb3DQEBCwUAA4IBAQBtJOxLFXbAxGiur0tV17eV zhRz9EWF3hEkO7F/Z/iR+3fxVUEr1ITliSH1W9XzarnChasOJJkW/YPhsV2RgVJl Shp2L7k46oK5WBvM+6ldFK+AVrYwJKHG9VZbyviAEH0sgUd55cens1sLAoA+z23S r7ZT0vlXqvt3g5FCvs2L9s/cj+g3d1D0e/l9+WZiffIL08m3XjuML39/dBZLI+P6 1cUqqUkwM7gAZMhrAEnJD6sH5mT2sR/bz7EduOI5kbrpoefzbSNsjmBa3Z5S5Kcw LF1nvfqTxeBvoCGaww3P3rQ+7WRQgdAW/NM67LuEciqU3wSu/6hoRBryeloVyQur -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:54 2026 by rpki-client