This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/nkrV5tLs-lefafrDVBSQgulDPOI.roa File: nkrV5tLs-lefafrDVBSQgulDPOI.roa (raw, json) Hash identifier: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA= Subject key identifier: 9E:4A:D5:E6:D2:EC:FA:57:9F:69:FA:C3:54:14:90:82:E9:43:3C:E2 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B6052668C3515A1761CE9FC6132EF Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/nkrV5tLs-lefafrDVBSQgulDPOI.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203565 IP address blocks: 176.124.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:60:52:66:8c:35:15:a1:76:1c:e9:fc:61:32:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e4ad5e6d2ecfa579f69fac354149082e9433ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:70:44:25:b5:99:40:de:01:0a:32:15:42: 07:d1:12:6f:18:b8:4f:5d:77:34:2a:59:7c:72:4f: 82:eb:8c:21:cc:bd:54:b1:e1:96:44:79:09:59:c5: 15:60:22:56:00:f5:b6:26:ed:2b:48:93:8d:d9:97: d4:2c:6a:c7:99:0d:6c:8c:27:9b:66:f8:49:b6:df: d1:2d:98:9d:38:d9:ab:8b:10:0e:16:93:69:bd:c3: 36:e4:97:8f:ae:c1:76:8d:e0:fa:63:ae:55:00:2a: d5:81:25:2d:7d:6c:da:45:eb:d4:94:8d:3a:6f:ac: 05:23:23:bf:1c:d2:f6:34:60:66:fb:6e:e6:49:f3: df:02:ca:96:73:58:0f:a1:bf:96:4f:d7:c1:63:bb: 50:54:aa:56:73:ec:4d:6c:27:f1:cc:96:cb:39:a5: 36:1c:51:d7:0d:85:5a:8a:ec:d5:4f:b3:07:69:ad: b8:50:75:fd:08:2f:d1:30:80:76:6c:ba:e1:fe:d3: fa:1b:10:7d:f6:38:d0:04:5c:d6:c7:30:74:6a:17: d0:cb:2d:ae:f4:b3:60:aa:a2:10:49:8f:bf:a8:c2: 78:d6:7a:47:14:55:98:4e:e8:f6:cd:0c:42:65:a5: ae:be:7f:33:85:f1:a9:93:94:0b:82:87:94:75:4b: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4A:D5:E6:D2:EC:FA:57:9F:69:FA:C3:54:14:90:82:E9:43:3C:E2 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/nkrV5tLs-lefafrDVBSQgulDPOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.28.0/23 Signature Algorithm: sha256WithRSAEncryption 71:f5:4e:2f:05:8d:75:e8:0c:e5:c7:39:82:e4:99:07:7f:c5: a4:55:9c:bf:6e:be:30:bc:b8:0b:e1:40:67:43:47:6e:b2:54: 3d:a1:4b:3f:8f:47:f5:af:45:b8:92:ef:0c:14:d7:72:9b:36: 55:d9:2d:d0:5a:6d:d9:bd:18:77:8f:3a:93:65:55:7c:cc:7a: e9:da:a9:79:75:97:fa:8e:e1:62:05:24:cf:3c:52:13:a7:a8: 72:d7:39:c6:70:2b:7f:13:f6:5d:28:0a:7d:ff:95:6c:67:51: 8e:c7:d4:b8:85:f2:85:1e:d3:77:67:1b:0f:d1:71:0d:eb:f4: 3f:7e:ef:87:c6:8e:46:ff:2c:d7:ee:32:82:b5:07:56:0a:57: e0:4d:39:4f:33:5a:f4:f0:0b:39:32:eb:e7:3b:27:ef:03:98: 9b:e5:a6:9b:1c:44:ba:51:93:9e:e1:f1:14:98:53:f8:82:99: bb:b3:20:9c:ac:3a:b9:52:3a:45:d2:67:35:50:4b:e0:70:d8: f1:48:1f:bf:48:bb:22:7d:0c:51:0c:e2:49:0a:8c:32:d6:3e: d6:ea:3d:9c:b5:b2:14:c7:0b:3c:c0:af:53:4a:8d:97:6c:5b: 2d:02:05:4c:4c:a5:9c:53:3f:f6:d3:fe:45:c9:11:c9:78:2c: 22:c9:24:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2BSZow1FaF2HOn8YTLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTRhZDVlNmQyZWNmYTU3OWY2OWZhYzM1NDE0OTA4MmU5NDMzY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GVwRCW1mUDeAQoyFUIH0RJvGLhP XXc0Kll8ck+C64whzL1UseGWRHkJWcUVYCJWAPW2Ju0rSJON2ZfULGrHmQ1sjCeb ZvhJtt/RLZidONmrixAOFpNpvcM25JePrsF2jeD6Y65VACrVgSUtfWzaRevUlI06 b6wFIyO/HNL2NGBm+27mSfPfAsqWc1gPob+WT9fBY7tQVKpWc+xNbCfxzJbLOaU2 HFHXDYVaiuzVT7MHaa24UHX9CC/RMIB2bLrh/tP6GxB99jjQBFzWxzB0ahfQyy2u 9LNgqqIQSY+/qMJ41npHFFWYTuj2zQxCZaWuvn8zhfGpk5QLgoeUdUs2oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5K1ebS7PpXn2n6w1QUkILpQzziMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvbmtyVjV0THMtbGVmYWZyRFZCU1FndWxEUE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHwcMA0G CSqGSIb3DQEBCwUAA4IBAQBx9U4vBY116AzlxzmC5JkHf8WkVZy/br4wvLgL4UBn Q0duslQ9oUs/j0f1r0W4ku8MFNdymzZV2S3QWm3ZvRh3jzqTZVV8zHrp2ql5dZf6 juFiBSTPPFITp6hy1znGcCt/E/ZdKAp9/5VsZ1GOx9S4hfKFHtN3ZxsP0XEN6/Q/ fu+Hxo5G/yzX7jKCtQdWClfgTTlPM1r08As5MuvnOyfvA5ib5aabHES6UZOe4fEU mFP4gpm7syCcrDq5UjpF0mc1UEvgcNjxSB+/SLsifQxRDOJJCowy1j7W6j2ctbIU xws8wK9TSo2XbFstAgVMTKWcUz/20/5FyRHJeCwiySRG -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:21 2026 by rpki-client