This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/NCqlkqIGFzrndqpB8YVxVNI4IxU.roa File: NCqlkqIGFzrndqpB8YVxVNI4IxU.roa (raw, json) Hash identifier: i1ZWD83oqkyY29wCd2f8eqlgp7kieNaGZPaKStI96uI= Subject key identifier: 34:2A:A5:92:A2:06:17:3A:E7:76:AA:41:F1:85:71:54:D2:38:23:15 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B7C1196A1AF80FC1462EAF373DD0F97C9 Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/NCqlkqIGFzrndqpB8YVxVNI4IxU.roa Signing time: Fri 02 Jan 2026 00:18:06 +0000 ROA not before: Fri 02 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 31.15.16.0/24 maxlen: 24 31.15.17.0/24 maxlen: 24 31.15.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:96:a1:af:80:fc:14:62:ea:f3:73:dd:0f:97:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Jan 2 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342aa592a206173ae776aa41f1857154d2382315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:a5:dc:0f:83:72:18:97:78:73:9d:31:42: 80:49:da:77:ca:c6:82:b2:23:c5:3f:c2:04:ac:46: 10:d1:8f:9c:3d:59:2a:4e:8d:89:3c:31:30:fa:02: 5c:c5:48:33:77:d7:6d:e2:aa:c5:91:30:ba:19:a5: 20:17:a0:08:0d:8a:21:be:b9:2b:71:09:5e:13:2e: da:4d:c6:ce:a2:a2:e1:4f:fb:3d:9c:96:81:79:1a: c9:b2:82:9f:c6:1f:49:f6:66:d8:6e:2e:b0:1e:5d: 3d:21:1f:06:5a:56:48:6b:3d:7b:c3:ad:9d:fb:a0: 8f:33:c2:dc:04:83:4b:50:a4:b3:a2:45:5f:dc:06: 09:28:cf:75:b7:1c:31:9b:8f:71:17:36:77:09:5f: 0c:60:b4:d3:1a:ae:cc:c3:71:08:26:2c:7f:aa:be: 5d:44:d9:bd:61:cd:7f:3c:a1:7f:b2:71:51:70:33: 58:da:c5:04:46:bc:cf:6b:f9:73:06:52:35:27:2e: ae:ac:97:a3:29:9d:27:ca:0b:4e:4c:2a:71:d2:00: 6b:d2:b7:ce:7f:7d:69:2c:5a:83:88:ac:dc:2d:ec: 45:61:64:79:b5:d4:ab:d2:28:b0:2f:1e:eb:8c:27: e1:12:70:f6:14:8c:b6:74:8f:97:79:b7:9b:6b:24: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:A5:92:A2:06:17:3A:E7:76:AA:41:F1:85:71:54:D2:38:23:15 X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/NCqlkqIGFzrndqpB8YVxVNI4IxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.16.0-31.15.18.255 Signature Algorithm: sha256WithRSAEncryption 60:f1:40:fe:4b:19:72:e0:e4:64:8b:fa:e0:d5:a6:a4:8d:2c: a5:4d:a6:48:5f:d4:44:d1:a5:f4:b5:28:ab:20:d1:d9:c7:b9: d6:4d:d9:15:49:a5:45:60:10:89:fa:71:c8:0f:6a:84:80:86: 1c:8e:a3:ef:72:75:19:8a:c3:3a:f8:da:28:88:98:bd:8c:ff: 4c:79:cc:c8:66:94:0b:36:72:3c:2e:73:4e:9d:2f:d1:e9:e0: c0:ee:9f:ce:2d:29:c6:51:22:90:17:b0:91:79:dc:53:d9:0e: f3:d9:cd:9f:61:f5:cb:26:bd:d0:80:42:f2:d8:0f:29:cb:92: b8:bd:4b:bd:8a:52:71:5b:a5:e3:98:7b:5d:9a:7a:89:de:a8: 68:b3:58:94:ed:53:95:c1:45:c6:c4:d9:f3:c7:d2:ce:f0:63: c7:f7:f9:60:e6:09:95:40:1e:0f:22:7e:2a:12:d4:47:3d:37: ac:60:24:6e:8d:53:cb:54:30:22:81:53:7c:9e:e9:61:3b:2b: 5d:88:86:32:51:f9:d3:f5:ec:e6:f1:1a:41:3b:ca:37:3c:4f: ca:6f:7c:5c:e0:6b:f7:94:06:d6:01:94:0e:79:71:0d:16:7c: 20:23:84:45:76:2d:a5:37:10:61:eb:36:e8:66:f3:c3:b5:8e: 47:e0:95:a5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EZahr4D8FGLq83PdD5fJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjYwMTAyMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJhYTU5MmEyMDYxNzNhZTc3NmFhNDFmMTg1NzE1NGQyMzgyMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf+l3A+DchiXeHOdMUKASdp3ysaC siPFP8IErEYQ0Y+cPVkqTo2JPDEw+gJcxUgzd9dt4qrFkTC6GaUgF6AIDYohvrkr cQleEy7aTcbOoqLhT/s9nJaBeRrJsoKfxh9J9mbYbi6wHl09IR8GWlZIaz17w62d +6CPM8LcBINLUKSzokVf3AYJKM91txwxm49xFzZ3CV8MYLTTGq7Mw3EIJix/qr5d RNm9Yc1/PKF/snFRcDNY2sUERrzPa/lzBlI1Jy6urJejKZ0nygtOTCpx0gBr0rfO f31pLFqDiKzcLexFYWR5tdSr0iiwLx7rjCfhEnD2FIy2dI+XebebayRptQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDQqpZKiBhc653aqQfGFcVTSOCMVMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvTkNxbGtxSUdGenJuZHFwQjhZVnhWTkk0SXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQfDxAD BAAfDxIwDQYJKoZIhvcNAQELBQADggEBAGDxQP5LGXLg5GSL+uDVpqSNLKVNpkhf 1ETRpfS1KKsg0dnHudZN2RVJpUVgEIn6ccgPaoSAhhyOo+9ydRmKwzr42iiImL2M /0x5zMhmlAs2cjwuc06dL9Hp4MDun84tKcZRIpAXsJF53FPZDvPZzZ9h9csmvdCA QvLYDynLkri9S72KUnFbpeOYe12aeoneqGizWJTtU5XBRcbE2fPH0s7wY8f3+WDm CZVAHg8ifioS1Ec9N6xgJG6NU8tUMCKBU3ye6WE7K12IhjJR+dP17ObxGkE7yjc8 T8pvfFzga/eUBtYBlA55cQ0WfCAjhEV2LaU3EGHrNuhm88O1jkfglaU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:41 2026 by rpki-client