This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa File: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (raw, json) Hash identifier: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0= Subject key identifier: 36:93:4A:FA:EC:C4:64:97:43:8E:4E:68:71:13:D4:A5:B7:10:0A:6E Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Certificate serial: 019B7910E1A49E14ACF18BF7D4EED02762F3 Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214171 IP address blocks: 5.22.202.0/24 maxlen: 24 5.22.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e1:a4:9e:14:ac:f1:8b:f7:d4:ee:d0:27:62:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36934afaecc46497438e4e687113d4a5b7100a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:49:06:28:81:8f:34:3b:c1:7b:81:38:55:8a: cb:99:33:2d:ea:01:b2:20:f5:17:12:58:ad:07:69: a0:56:c1:e8:72:cf:5b:52:60:9d:ab:cf:0c:e8:bf: 8e:de:ec:ba:47:41:ab:0b:c4:4f:02:98:42:1a:f7: cd:c8:31:91:4d:d1:33:64:49:b8:14:20:23:b0:d1: 9a:54:af:64:61:65:cb:ec:7b:bb:0e:c0:ba:66:8a: 10:10:aa:3b:6a:90:a4:06:ac:84:1f:58:f3:52:55: b1:56:51:e7:c6:96:28:d9:5f:86:78:f5:1c:a0:87: 5a:92:b0:b2:d0:c2:c0:d7:e5:cd:d1:c7:e4:f9:ce: e6:97:e3:66:1f:2b:68:53:ef:e9:96:49:5b:2f:f3: 40:ac:a5:63:a4:a0:61:bd:cd:a4:b8:3e:ee:b8:d3: 7e:01:d4:ed:b1:db:f6:c0:07:44:21:0d:b4:98:4f: 53:08:7d:5b:d4:41:57:0b:97:36:9e:dc:01:42:f8: dd:a8:d7:55:55:f3:2b:d7:49:b7:12:45:5d:80:4a: 33:88:79:1e:c8:4e:dd:ca:d8:db:1a:95:85:8a:4c: fb:07:28:3a:b1:1c:4d:fe:1c:69:23:94:73:08:5c: fa:62:ec:f9:d9:02:73:fc:2b:78:d9:c3:f1:cc:81: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:93:4A:FA:EC:C4:64:97:43:8E:4E:68:71:13:D4:A5:B7:10:0A:6E X509v3 Authority Key Identifier: keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.202.0/23 Signature Algorithm: sha256WithRSAEncryption 72:82:4c:c3:41:29:a1:92:8f:19:ed:15:96:f0:a3:9b:b5:cd: 65:a9:f6:41:aa:b7:67:18:79:9a:3b:0f:6b:1e:d1:3b:1e:2b: 03:5c:5b:17:2c:55:55:d1:40:4a:ce:ea:ad:b3:c4:2e:9a:c5: 6a:46:db:a0:a1:9d:9c:d7:55:2b:6a:24:d3:b7:e3:81:da:0c: 5f:d5:01:26:ec:39:bd:1e:60:c5:06:1a:0b:ea:1b:0f:b5:54: 86:9c:0a:95:1c:1d:e3:b5:58:d3:36:22:6d:7b:24:c2:b2:68: e4:24:2b:61:56:7f:3c:60:71:f5:a9:46:b9:0a:fe:bd:27:3d: 5f:a0:4c:43:30:fd:65:76:3a:68:62:71:07:5d:23:ad:1f:b0: 22:43:94:59:93:44:a9:ec:2d:10:9a:62:f8:28:66:b1:8d:fe: 66:a9:17:49:d1:ea:15:08:31:b8:ba:7d:ff:9d:36:36:9a:0b: 2d:31:32:1e:82:1c:91:99:db:f6:20:02:02:72:c2:82:69:6c: a7:d4:fa:59:be:68:c3:dd:4a:b5:b8:74:2a:ff:65:d6:f0:aa: fe:35:a0:a8:4a:c1:f5:50:60:df:e2:7a:6e:e7:94:98:c4:0d: 16:02:53:35:e6:e1:82:bf:de:aa:46:42:b4:6e:97:15:39:4b: bb:25:06:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOGknhSs8Yv31O7QJ2LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGY2ZjNlM2NiOTczYmFjOGE0M2Y2YzBiODA2YjNkMTFj OWFkYzMwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjkzNGFmYWVjYzQ2NDk3NDM4ZTRlNjg3MTEzZDRhNWI3MTAwYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0kGKIGPNDvBe4E4VYrLmTMt6gGy IPUXElitB2mgVsHocs9bUmCdq88M6L+O3uy6R0GrC8RPAphCGvfNyDGRTdEzZEm4 FCAjsNGaVK9kYWXL7Hu7DsC6ZooQEKo7apCkBqyEH1jzUlWxVlHnxpYo2V+GePUc oIdakrCy0MLA1+XN0cfk+c7ml+NmHytoU+/plklbL/NArKVjpKBhvc2kuD7uuNN+ AdTtsdv2wAdEIQ20mE9TCH1b1EFXC5c2ntwBQvjdqNdVVfMr10m3EkVdgEoziHke yE7dytjbGpWFikz7Byg6sRxN/hxpI5RzCFz6Yuz52QJz/Ct42cPxzIGdqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDaTSvrsxGSXQ45OaHET1KW3EApuMB8GA1UdIwQY MBaAFDdPbz48uXO6yKQ/bAuAaz0Rya3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMt YzAxNzdkZmRhODQ3LzEvTnBOSy11ekVaSmREams1b2NSUFVwYmNRQ200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMtYzAxNzdkZmRhODQ3 LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBRbKMA0G CSqGSIb3DQEBCwUAA4IBAQBygkzDQSmhko8Z7RWW8KObtc1lqfZBqrdnGHmaOw9r HtE7HisDXFsXLFVV0UBKzuqts8QumsVqRtugoZ2c11UraiTTt+OB2gxf1QEm7Dm9 HmDFBhoL6hsPtVSGnAqVHB3jtVjTNiJteyTCsmjkJCthVn88YHH1qUa5Cv69Jz1f oExDMP1ldjpoYnEHXSOtH7AiQ5RZk0Sp7C0QmmL4KGaxjf5mqRdJ0eoVCDG4un3/ nTY2mgstMTIeghyRmdv2IAICcsKCaWyn1PpZvmjD3Uq1uHQq/2XW8Kr+NaCoSsH1 UGDf4npu55SYxA0WAlM15uGCv96qRkK0bpcVOUu7JQau -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:46 2026 by rpki-client