This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/NrghsoBul7tbolTWF8ZamRT2aQc.roa File: NrghsoBul7tbolTWF8ZamRT2aQc.roa (raw, json) Hash identifier: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04= Subject key identifier: 36:B8:21:B2:80:6E:97:BB:5B:A2:54:D6:17:C6:5A:99:14:F6:69:07 Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec Certificate serial: 019B7CEE23AB3FD10C319C94BEAE501F8A7A Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/NrghsoBul7tbolTWF8ZamRT2aQc.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206495 IP address blocks: 193.177.245.0/24 maxlen: 24 2a0b:7c80:2::/48 maxlen: 48 2a0b:7c80:3::/48 maxlen: 48 2a0b:7c80:4::/48 maxlen: 48 2a0b:7c80:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:23:ab:3f:d1:0c:31:9c:94:be:ae:50:1f:8a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b821b2806e97bb5ba254d617c65a9914f66907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:a9:95:d5:f7:a8:f7:c1:17:06:d4:35:5b: 0f:ca:f7:e3:56:18:9c:19:cb:1e:0f:e7:eb:c2:e0: cb:0b:e4:78:af:d7:2c:8f:ce:3c:8e:07:31:1e:02: c4:df:56:d0:fe:d2:60:15:83:19:d6:fd:ce:b9:ac: c8:d4:6d:f4:20:5f:a8:60:1d:6a:33:3a:ea:fd:61: ea:47:e6:db:c8:a5:50:5e:c6:77:90:14:a8:a9:bf: 58:c7:62:14:21:9e:9f:ce:bd:3b:b1:89:43:4b:62: c0:9e:68:ce:b4:37:c6:7d:81:e6:b6:39:df:60:53: 3b:0a:5e:0b:ce:d2:7f:05:a6:c1:06:db:5b:1c:cd: 21:99:24:4e:40:36:24:65:67:7e:65:a7:df:a0:cf: d1:16:46:c7:1c:c2:38:39:29:cc:06:61:4a:cd:b9: fd:5d:e1:16:59:76:27:a9:60:9c:0d:93:57:35:b1: 53:a8:b1:41:d8:52:06:bc:3e:79:7d:59:74:c5:30: d4:06:48:5a:75:cf:b2:5f:ef:46:dc:13:bb:c8:e9: 1f:43:b4:86:ae:db:c4:89:e0:30:99:61:d6:eb:b2: 70:5f:3b:f2:86:a0:3a:51:58:08:3d:47:b0:ff:4b: 9e:d3:d9:89:04:a8:7e:0a:69:00:ef:2b:6f:f9:22: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:21:B2:80:6E:97:BB:5B:A2:54:D6:17:C6:5A:99:14:F6:69:07 X509v3 Authority Key Identifier: keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/NrghsoBul7tbolTWF8ZamRT2aQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.245.0/24 IPv6: 2a0b:7c80:2::-2a0b:7c80:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 44:1b:aa:f7:78:8a:c2:f8:58:58:9b:36:ac:b9:8f:9f:eb:78: ea:39:16:4e:11:a5:c9:99:15:30:bd:5b:cc:61:85:d3:e0:57: 20:0e:9c:08:76:38:a0:56:31:fd:be:f0:6a:e6:6b:f3:e6:33: a5:ce:5e:ff:4a:9b:b5:e6:2f:84:fa:99:d4:9f:36:4e:cb:53: 90:56:96:a7:cc:0e:0e:d7:3f:b1:a0:27:08:b0:da:2e:9f:09: 2f:16:26:93:25:c8:4d:63:90:d7:e6:5f:e7:34:d9:55:46:64: cb:6d:13:2f:1e:51:3c:08:e5:5d:54:a2:14:cc:62:5b:1e:96: a3:63:fe:00:c9:f5:04:b2:d1:70:47:15:f4:f7:54:bc:b1:39: 9b:da:08:a7:57:3d:b1:b3:ba:f8:e4:44:af:e7:01:47:fd:0a: 25:ea:d8:6a:d5:62:44:68:04:2c:11:8a:dd:df:3f:6c:71:51: 6a:f0:33:a1:b2:f1:f8:e5:9a:26:50:c4:5b:0e:d7:e6:a1:74: 11:33:2c:93:d4:e7:c1:b6:0b:77:69:99:bc:d5:e4:af:94:14: 74:ca:f8:c7:90:dc:8f:9d:83:d4:bb:1b:29:f8:f7:14:30:c1: ae:56:98:f2:b3:08:aa:ca:51:f4:77:02:45:6b:1e:a5:3c:75: 55:9e:20:00 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87iOrP9EMMZyUvq5QH4p6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi NWFhZWMwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI4MjFiMjgwNmU5N2JiNWJhMjU0ZDYxN2M2NWE5OTE0ZjY2OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i+pldX3qPfBFwbUNVsPyvfjVhic GcseD+frwuDLC+R4r9csj848jgcxHgLE31bQ/tJgFYMZ1v3OuazI1G30IF+oYB1q Mzrq/WHqR+bbyKVQXsZ3kBSoqb9Yx2IUIZ6fzr07sYlDS2LAnmjOtDfGfYHmtjnf YFM7Cl4LztJ/BabBBttbHM0hmSROQDYkZWd+ZaffoM/RFkbHHMI4OSnMBmFKzbn9 XeEWWXYnqWCcDZNXNbFTqLFB2FIGvD55fVl0xTDUBkhadc+yX+9G3BO7yOkfQ7SG rtvEieAwmWHW67JwXzvyhqA6UVgIPUew/0ue09mJBKh+CmkA7ytv+SKHywIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDa4IbKAbpe7W6JU1hfGWpkU9mkHMB8GA1UdIwQY MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt MWRkNWZhYTA2YjBhLzEvTnJnaHNvQnVsN3Rib2xUV0Y4WmFtUlQyYVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAwbH1MBoE AgACMBQwEgMHASoLfIAAAgMHASoLfIAABDANBgkqhkiG9w0BAQsFAAOCAQEARBuq 93iKwvhYWJs2rLmPn+t46jkWThGlyZkVML1bzGGF0+BXIA6cCHY4oFYx/b7wauZr 8+Yzpc5e/0qbteYvhPqZ1J82TstTkFaWp8wODtc/saAnCLDaLp8JLxYmkyXITWOQ 1+Zf5zTZVUZky20TLx5RPAjlXVSiFMxiWx6Wo2P+AMn1BLLRcEcV9PdUvLE5m9oI p1c9sbO6+OREr+cBR/0KJerYatViRGgELBGK3d8/bHFRavAzobLx+OWaJlDEWw7X 5qF0ETMsk9TnwbYLd2mZvNXkr5QUdMr4x5Dcj52D1LsbKfj3FDDBrlaY8rMIqspR 9HcCRWsepTx1VZ4gAA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:32 2026 by rpki-client