This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/NaxJ_NtLLDPENMvIhnNYLJraogc.roa File: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (raw, json) Hash identifier: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0= Subject key identifier: 35:AC:49:FC:DB:4B:2C:33:C4:34:CB:C8:86:73:58:2C:9A:DA:A2:07 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388F5F7987B698FBBDF86BB893D328 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/NaxJ_NtLLDPENMvIhnNYLJraogc.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42585 IP address blocks: 194.213.126.0/23 maxlen: 24 213.249.64.0/21 maxlen: 24 213.249.92.0/22 maxlen: 24 2a01:448::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:5f:79:87:b6:98:fb:bd:f8:6b:b8:93:d3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35ac49fcdb4b2c33c434cbc88673582c9adaa207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:81:6a:a3:8f:98:5a:87:eb:b2:03:a6:da:e3: 19:7d:e8:ed:dc:63:bd:0c:5a:be:ef:c0:22:20:6b: b1:fa:99:3d:6c:c8:82:22:39:02:83:ea:45:a4:5c: 95:8e:08:6e:d4:62:05:3f:1d:f7:c6:eb:ec:9f:d5: 10:9f:a0:33:be:4b:bf:ab:79:70:32:92:fa:40:6a: 11:33:7e:4c:48:be:cb:ec:cf:1b:51:b6:27:4f:55: 92:b0:17:91:7b:00:4c:48:51:48:86:24:30:9c:3d: ab:46:0a:d9:a6:5d:8c:f9:51:8e:d8:a8:b2:28:29: 1e:c7:ec:87:67:0a:df:9c:72:23:08:3e:94:81:96: 6d:8e:67:a4:c5:50:43:c0:9f:a4:53:a3:68:a2:89: 81:62:d2:4b:ce:7e:b1:6c:af:20:80:fa:2e:62:f5: 4b:3c:75:73:d5:09:fc:81:2f:18:75:b7:1d:2c:5c: ef:d1:e7:e1:30:76:04:cc:6b:4b:b5:32:b4:cb:13: dc:05:53:1a:da:21:50:d5:d2:a5:81:1a:d3:da:fe: ca:ad:0a:d4:32:c8:3c:3c:a1:e9:bd:ce:6a:94:39: ba:87:ec:78:f5:f6:73:72:b5:10:61:7f:e7:b7:89: 01:ab:1b:1a:4a:48:8d:34:45:47:a2:b5:d8:83:b0: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:49:FC:DB:4B:2C:33:C4:34:CB:C8:86:73:58:2C:9A:DA:A2:07 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/NaxJ_NtLLDPENMvIhnNYLJraogc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.213.126.0/23 213.249.64.0/21 213.249.92.0/22 IPv6: 2a01:448::/32 Signature Algorithm: sha256WithRSAEncryption 03:b4:ec:30:0b:bb:20:26:83:ed:4f:d8:78:3f:df:43:6b:4a: ed:12:d9:10:e8:d9:67:bd:f4:67:ae:97:96:6b:fa:45:11:34: 82:48:f8:92:a8:1b:90:b0:56:51:7d:01:ba:5e:ad:81:6a:23: 0c:c4:b1:69:db:d9:3a:06:18:32:10:ee:03:1a:95:20:01:78: 3b:6a:ca:2b:c0:d7:a4:f0:74:8c:6e:62:17:a3:aa:b2:83:30: 6e:f5:3c:8e:1d:05:c1:c3:74:8b:0a:8d:db:5f:32:5c:69:4c: e2:0f:47:9e:ea:5d:e9:5c:fd:ef:21:82:ff:3d:60:f4:4a:6c: 16:67:4d:46:e9:a4:96:bd:b1:b2:5d:fd:04:78:a5:3a:61:5c: f2:9a:82:3f:f3:8c:0a:0d:1c:b2:48:2a:61:52:1d:61:91:30: de:27:3f:83:17:00:db:6f:a9:d3:d8:4c:3c:58:c7:38:b5:dd: e0:08:9a:5a:b9:e1:88:67:d2:68:d1:81:fa:c4:31:c1:e2:4b: fa:5a:cf:d6:e4:7d:0f:8d:c4:75:1e:b7:4e:0b:8f:d4:60:63: 61:ed:aa:89:59:b8:f4:5d:43:bf:c3:ce:6d:cb:6a:b9:6c:b2: ea:86:37:70:70:f7:14:fc:0f:5f:42:2c:60:33:88:47:cc:fc: d2:38:2c:e3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OI9feYe2mPu9+Gu4k9MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWFjNDlmY2RiNGIyYzMzYzQzNGNiYzg4NjczNTgyYzlhZGFhMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YFqo4+YWofrsgOm2uMZfejt3GO9 DFq+78AiIGux+pk9bMiCIjkCg+pFpFyVjghu1GIFPx33xuvsn9UQn6Azvku/q3lw MpL6QGoRM35MSL7L7M8bUbYnT1WSsBeRewBMSFFIhiQwnD2rRgrZpl2M+VGO2Kiy KCkex+yHZwrfnHIjCD6UgZZtjmekxVBDwJ+kU6NooomBYtJLzn6xbK8ggPouYvVL PHVz1Qn8gS8YdbcdLFzv0efhMHYEzGtLtTK0yxPcBVMa2iFQ1dKlgRrT2v7KrQrU Msg8PKHpvc5qlDm6h+x49fZzcrUQYX/nt4kBqxsaSkiNNEVHorXYg7A4QQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDWsSfzbSywzxDTLyIZzWCya2qIHMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvTmF4Sl9OdExMRFBFTk12SWhuTllMSnJhb2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwtV+AwQD 1flAAwQC1flcMA0EAgACMAcDBQAqAQRIMA0GCSqGSIb3DQEBCwUAA4IBAQADtOww C7sgJoPtT9h4P99Da0rtEtkQ6NlnvfRnrpeWa/pFETSCSPiSqBuQsFZRfQG6Xq2B aiMMxLFp29k6BhgyEO4DGpUgAXg7asorwNek8HSMbmIXo6qygzBu9TyOHQXBw3SL Co3bXzJcaUziD0ee6l3pXP3vIYL/PWD0SmwWZ01G6aSWvbGyXf0EeKU6YVzymoI/ 84wKDRyySCphUh1hkTDeJz+DFwDbb6nT2Ew8WMc4td3gCJpaueGIZ9Jo0YH6xDHB 4kv6Ws/W5H0PjcR1HrdOC4/UYGNh7aqJWbj0XUO/w85ty2q5bLLqhjdwcPcU/A9f QixgM4hHzPzSOCzj -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:47 2026 by rpki-client