This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/na40Ok_i5qXlAc5-oaWGzhjqYgo.roa File: na40Ok_i5qXlAc5-oaWGzhjqYgo.roa (raw, json) Hash identifier: fwFOgCfZSKadLjWHLtjDEi/Ibt41w2vO2VBSuz+dD5w= Subject key identifier: 9D:AE:34:3A:4F:E2:E6:A5:E5:01:CE:7E:A1:A5:86:CE:18:EA:62:0A Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B775893B18B074BE7D72255E10059B599 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/na40Ok_i5qXlAc5-oaWGzhjqYgo.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16611 IP address blocks: 194.4.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:93:b1:8b:07:4b:e7:d7:22:55:e1:00:59:b5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dae343a4fe2e6a5e501ce7ea1a586ce18ea620a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:43:a3:a9:2b:e9:d9:c9:36:46:57:08:d6: 7b:3d:d4:6a:66:ab:ef:55:0f:a8:d5:77:69:9b:3d: c0:63:4f:2e:d6:b5:82:60:64:f8:3d:c4:c1:a3:e5: 8c:f3:e2:a0:d0:12:85:a4:43:6c:3c:b5:3e:70:48: 73:22:28:bb:fc:64:49:f4:66:ea:a4:49:66:72:00: 63:93:30:52:6c:35:07:15:f3:4d:24:9c:99:37:e2: d9:c2:bd:fa:77:77:28:1f:59:20:19:0d:1f:97:ff: 94:98:1b:8f:04:e5:88:9d:25:2e:11:77:f9:5e:35: a1:fc:36:ce:b0:ef:06:bf:99:71:99:4e:4d:76:a7: 40:5d:67:8e:44:2a:c5:df:92:03:40:88:6d:0b:c2: f6:63:f1:92:dd:9e:75:ad:8a:0a:2d:bb:46:82:c7: 36:e4:d7:07:ff:25:13:40:53:82:65:95:bf:14:0c: cc:19:cb:a9:eb:d5:16:b3:64:27:fb:92:d1:ab:74: 5a:32:87:e1:18:58:3c:d5:15:f7:a7:10:0d:b6:02: 94:83:b3:20:9b:73:61:97:f6:13:99:80:13:ad:1b: 6b:32:de:b4:e9:4a:87:07:d6:00:54:5b:ba:bc:9c: 2d:52:e5:11:2e:d0:84:8b:dd:ab:34:cc:9d:f9:a9: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:34:3A:4F:E2:E6:A5:E5:01:CE:7E:A1:A5:86:CE:18:EA:62:0A X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/na40Ok_i5qXlAc5-oaWGzhjqYgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.55.0/24 Signature Algorithm: sha256WithRSAEncryption 94:fb:82:aa:03:3d:f6:3d:35:5e:75:3f:5f:ec:59:bb:82:d9: 47:e8:46:12:44:f7:86:3d:90:57:2d:0d:4f:1c:cf:0d:b1:bd: 04:5c:e9:ef:b5:8e:13:48:15:7e:9d:60:6e:06:6c:7b:a2:14: ed:cc:5e:6e:51:73:85:0f:d1:f4:86:a9:bd:c7:d8:20:a0:92: e3:cc:3d:34:f6:09:05:15:ee:e4:fe:b8:a2:98:c4:e3:84:51: e2:52:4c:cf:87:0f:05:9e:26:d1:1d:26:67:0d:0a:a6:74:d7: ab:5c:86:68:b9:53:32:f6:61:90:4f:c6:24:0e:8e:d5:e7:a7: 3d:c9:e0:e7:7a:76:48:ee:d5:d8:79:b6:7f:c4:6f:99:70:ff: 75:f9:76:c5:75:f8:04:77:a8:79:ef:b7:9e:a7:85:8c:bb:c8: 04:26:91:59:bd:27:62:19:82:35:42:f5:b9:c9:e5:72:cc:d8: d8:9d:f4:eb:9c:cd:d2:e4:85:1d:e8:46:87:73:15:9f:9d:63: ed:54:10:01:e9:4b:31:a9:98:24:70:3e:c4:b8:f7:32:91:aa: 7b:40:1b:eb:b3:55:cd:47:4e:d0:02:26:06:8f:36:c8:2c:63: 3c:15:aa:8c:97:99:b4:ba:96:ea:76:58:d3:20:79:4a:d3:0d: d5:ff:f5:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJOxiwdL59ciVeEAWbWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGFlMzQzYTRmZTJlNmE1ZTUwMWNlN2VhMWE1ODZjZTE4ZWE2MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjahDo6kr6dnJNkZXCNZ7PdRqZqvv VQ+o1Xdpmz3AY08u1rWCYGT4PcTBo+WM8+Kg0BKFpENsPLU+cEhzIii7/GRJ9Gbq pElmcgBjkzBSbDUHFfNNJJyZN+LZwr36d3coH1kgGQ0fl/+UmBuPBOWInSUuEXf5 XjWh/DbOsO8Gv5lxmU5NdqdAXWeORCrF35IDQIhtC8L2Y/GS3Z51rYoKLbtGgsc2 5NcH/yUTQFOCZZW/FAzMGcup69UWs2Qn+5LRq3RaMofhGFg81RX3pxANtgKUg7Mg m3Nhl/YTmYATrRtrMt606UqHB9YAVFu6vJwtUuURLtCEi92rNMyd+anGJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2uNDpP4ual5QHOfqGlhs4Y6mIKMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvbmE0ME9rX2k1cVhsQWM1LW9hV0d6aGpxWWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ3MA0G CSqGSIb3DQEBCwUAA4IBAQCU+4KqAz32PTVedT9f7Fm7gtlH6EYSRPeGPZBXLQ1P HM8Nsb0EXOnvtY4TSBV+nWBuBmx7ohTtzF5uUXOFD9H0hqm9x9ggoJLjzD009gkF Fe7k/riimMTjhFHiUkzPhw8FnibRHSZnDQqmdNerXIZouVMy9mGQT8YkDo7V56c9 yeDnenZI7tXYebZ/xG+ZcP91+XbFdfgEd6h577eep4WMu8gEJpFZvSdiGYI1QvW5 yeVyzNjYnfTrnM3S5IUd6EaHcxWfnWPtVBAB6UsxqZgkcD7EuPcykap7QBvrs1XN R07QAiYGjzbILGM8FaqMl5m0upbqdljTIHlK0w3V//W8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:53 2026 by rpki-client