This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Nj-fcrd8btYTmooIT07USGH4uhc.roa File: Nj-fcrd8btYTmooIT07USGH4uhc.roa (raw, json) Hash identifier: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY= Subject key identifier: 36:3F:9F:72:B7:7C:6E:D6:13:9A:8A:08:4F:4E:D4:48:61:F8:BA:17 Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019B7AC8A136A3672325067AA1D33F3F951E Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Nj-fcrd8btYTmooIT07USGH4uhc.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15442 IP address blocks: 193.17.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:36:a3:67:23:25:06:7a:a1:d3:3f:3f:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363f9f72b77c6ed6139a8a084f4ed44861f8ba17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:3e:44:74:a7:30:16:d6:54:fd:03:2e:98: f7:43:71:70:01:6d:d8:b0:b2:ec:66:23:bd:99:e8: 72:d2:05:9b:58:d5:71:0a:18:d2:2d:b9:b4:49:11: 4b:f7:14:4c:d1:30:ed:a5:e4:dc:2a:43:3b:43:bf: 5a:e4:31:74:1f:59:56:a7:ca:4e:e6:10:b4:df:b4: ec:52:53:c0:3f:b3:73:5c:a1:6c:74:57:22:7e:67: fd:f9:21:4e:ec:d7:58:96:69:77:d4:de:a4:6c:33: 64:69:1f:80:5c:7f:4c:f0:87:34:c6:40:07:8b:4c: a9:ca:86:2b:90:aa:21:54:0a:8d:f6:1f:99:43:37: 17:de:ef:b4:74:f8:f8:61:b6:3c:00:63:ea:e2:36: 67:4b:f3:0a:fb:44:2c:b9:b3:15:a0:65:88:a0:5f: 3e:b1:42:e7:7b:e0:a4:60:85:bf:3b:e9:b7:1d:39: 25:c3:18:2a:41:2b:63:b2:5b:37:65:64:b7:a6:9e: 3c:91:16:54:65:a6:ae:7b:6a:87:74:31:51:91:92: 57:27:7c:36:25:f9:ec:dc:1b:47:8d:fb:1a:be:7b: 6c:c9:7c:5d:01:c0:aa:13:08:88:2d:94:a3:27:35: 6a:0a:b9:2c:ee:01:26:e5:59:97:c9:35:1d:c9:23: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:9F:72:B7:7C:6E:D6:13:9A:8A:08:4F:4E:D4:48:61:F8:BA:17 X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/Nj-fcrd8btYTmooIT07USGH4uhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.96.0/21 Signature Algorithm: sha256WithRSAEncryption 43:f5:d0:c3:06:ea:ac:0a:6c:c2:a3:b0:ab:b5:c6:e4:bf:f0: 4e:0b:3b:fe:e7:4f:c3:cf:40:64:d0:a3:8d:de:b0:0b:93:4e: 74:e5:1c:e0:5e:02:f9:dc:2e:79:ef:ea:32:e7:1b:45:98:f9: d2:07:34:c4:27:06:37:45:53:80:2a:ac:0f:97:b9:1c:57:1a: 0c:e9:45:aa:f0:d5:69:e5:d3:32:db:53:87:49:20:f0:a5:3d: 11:fc:b8:40:b7:ce:69:34:82:30:4c:43:25:ad:0f:ed:1e:54: 4c:ac:d2:be:fe:fd:cf:2e:4f:b7:2f:17:ac:21:99:0f:2e:39: 84:cb:2b:f6:67:82:f0:15:78:df:ad:bb:5f:c9:63:c7:aa:0c: 5a:bd:e4:1b:0a:9c:a6:a6:f2:59:3a:0b:01:d0:5d:e4:57:91: 56:f3:42:3d:b8:f6:52:d5:e2:7c:9e:c8:0f:01:d6:f3:68:5c: 56:0c:cd:84:11:d7:de:8b:84:f7:50:b1:cc:e4:22:d0:45:cc: 8d:ad:b9:f8:e8:44:7e:68:d5:63:f0:17:8e:cc:cb:84:2a:db: 34:e2:00:e5:5b:ec:a9:bd:09:3e:39:98:06:c5:05:8f:9e:15: d4:38:a3:ae:1f:5d:19:33:61:61:e5:ba:84:95:19:4d:6f:f7: b9:a8:8c:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKE2o2cjJQZ6odM/P5UeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjNmOWY3MmI3N2M2ZWQ2MTM5YThhMDg0ZjRlZDQ0ODYxZjhiYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyg+RHSnMBbWVP0DLpj3Q3FwAW3Y sLLsZiO9mehy0gWbWNVxChjSLbm0SRFL9xRM0TDtpeTcKkM7Q79a5DF0H1lWp8pO 5hC037TsUlPAP7NzXKFsdFcifmf9+SFO7NdYlml31N6kbDNkaR+AXH9M8Ic0xkAH i0ypyoYrkKohVAqN9h+ZQzcX3u+0dPj4YbY8AGPq4jZnS/MK+0QsubMVoGWIoF8+ sULne+CkYIW/O+m3HTklwxgqQStjsls3ZWS3pp48kRZUZaaue2qHdDFRkZJXJ3w2 Jfns3BtHjfsavntsyXxdAcCqEwiILZSjJzVqCrks7gEm5VmXyTUdySMJjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDY/n3K3fG7WE5qKCE9O1Ehh+LoXMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvTmotZmNyZDhidFlUbW9vSVQwN1VTR0g0dWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRFgMA0G CSqGSIb3DQEBCwUAA4IBAQBD9dDDBuqsCmzCo7Crtcbkv/BOCzv+50/Dz0Bk0KON 3rALk0505RzgXgL53C557+oy5xtFmPnSBzTEJwY3RVOAKqwPl7kcVxoM6UWq8NVp 5dMy21OHSSDwpT0R/LhAt85pNIIwTEMlrQ/tHlRMrNK+/v3PLk+3LxesIZkPLjmE yyv2Z4LwFXjfrbtfyWPHqgxaveQbCpympvJZOgsB0F3kV5FW80I9uPZS1eJ8nsgP AdbzaFxWDM2EEdfei4T3ULHM5CLQRcyNrbn46ER+aNVj8BeOzMuEKts04gDlW+yp vQk+OZgGxQWPnhXUOKOuH10ZM2Fh5bqElRlNb/e5qIyE -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:59 2026 by rpki-client