This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa File: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (raw, json) Hash identifier: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE= Subject key identifier: 36:ED:C4:26:43:53:FC:BE:18:D5:D5:5B:5D:D0:5A:3A:EC:22:F1:A9 Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B77592D8431607721B949CBDBAE2F02C8 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50606 IP address blocks: 31.6.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2d:84:31:60:77:21:b9:49:cb:db:ae:2f:02:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36edc4264353fcbe18d5d55b5dd05a3aec22f1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:e9:1b:0d:7c:a5:9d:28:22:03:c2:b9:f8: a3:16:02:56:17:0d:12:fe:df:7b:30:0c:9a:28:82: f5:14:ed:15:40:f0:78:9b:03:f8:62:98:f8:a6:c7: 93:f0:2b:54:53:25:36:96:4d:2b:82:55:0b:a6:c3: 65:d5:36:6c:5f:b1:0a:72:bc:41:95:be:c6:b6:a3: f4:7a:d4:af:b1:36:72:dc:fb:8d:8d:60:f5:c7:7d: 49:d2:ba:d4:04:7f:dd:b8:bf:ed:f4:4a:67:39:3b: 67:1d:ab:cf:9b:c3:fe:8f:7d:62:55:20:f4:7b:bb: 51:26:55:cb:01:ee:7a:ef:16:23:cf:40:43:55:25: bf:a9:4a:56:ba:11:78:d5:02:e4:58:4d:aa:f0:4c: b4:c6:3c:72:18:4e:08:f6:b2:77:6f:9a:4b:a8:5e: 25:b1:77:95:3a:e7:33:b8:32:ef:01:29:6d:93:a2: f1:3a:fe:6b:5e:04:96:f6:75:a2:88:6d:a1:01:33: aa:c0:01:38:bf:74:d2:63:06:9c:a7:65:e8:27:91: 8c:97:76:24:07:9d:83:77:af:1e:af:99:09:88:26: 42:69:e2:79:b4:d2:9a:be:89:59:70:4b:1a:60:16: 19:28:65:ad:08:57:d6:55:e2:06:7f:d1:e8:a7:06: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:C4:26:43:53:FC:BE:18:D5:D5:5B:5D:D0:5A:3A:EC:22:F1:A9 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.247.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:cc:2d:ed:dd:2b:97:95:27:af:22:7d:c6:82:00:e5:c8:c0: 19:80:e3:49:2f:93:68:f9:38:54:41:aa:13:c6:20:11:2d:59: 62:6d:73:8d:a1:3b:1e:da:d9:d0:3f:89:b6:a0:25:48:75:60: 3e:4e:22:05:5d:38:48:eb:ff:68:bd:fe:9c:24:a5:be:8e:6f: b7:cc:7d:27:e9:31:8a:b2:bb:ff:8e:ce:02:f9:ce:53:94:bc: 45:a0:5c:8d:48:64:fc:e9:15:80:e1:bb:f7:43:16:86:db:f7: e3:b6:25:b9:92:b6:4a:ae:28:fa:a9:85:80:52:f0:37:b5:5b: 25:e9:b9:06:4d:14:a9:03:52:ef:b5:1e:05:2c:a0:03:c6:f0: 4b:42:8e:2a:5d:41:54:63:19:be:15:a3:1a:54:ed:03:56:10: f6:cb:22:14:c6:7b:97:cd:10:0e:41:23:ab:10:a1:ab:d8:6f: a7:44:73:50:a2:0d:6f:78:47:11:2c:9c:b6:1b:b9:a9:a9:eb: 6a:c8:64:e4:59:3d:89:86:66:17:53:5c:af:9d:80:65:22:3f: c5:46:ef:f1:7f:42:6c:f4:95:29:c2:5a:60:c1:83:f5:d8:1d: 28:91:1e:b5:c3:2b:ed:98:50:8a:46:cc:c5:49:e4:55:a3:fb: 60:60:8e:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WS2EMWB3IblJy9uuLwLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmVkYzQyNjQzNTNmY2JlMThkNWQ1NWI1ZGQwNWEzYWVjMjJmMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+rpGw18pZ0oIgPCufijFgJWFw0S /t97MAyaKIL1FO0VQPB4mwP4Ypj4pseT8CtUUyU2lk0rglULpsNl1TZsX7EKcrxB lb7GtqP0etSvsTZy3PuNjWD1x31J0rrUBH/duL/t9EpnOTtnHavPm8P+j31iVSD0 e7tRJlXLAe567xYjz0BDVSW/qUpWuhF41QLkWE2q8Ey0xjxyGE4I9rJ3b5pLqF4l sXeVOuczuDLvASltk6LxOv5rXgSW9nWiiG2hATOqwAE4v3TSYwacp2XoJ5GMl3Yk B52Dd68er5kJiCZCaeJ5tNKavolZcEsaYBYZKGWtCFfWVeIGf9HopwYldwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbtxCZDU/y+GNXVW13QWjrsIvGpMB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvTnUzRUprTlRfTDRZMWRWYlhkQmFPdXdpOGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwb3MA0G CSqGSIb3DQEBCwUAA4IBAQBbzC3t3SuXlSevIn3GggDlyMAZgONJL5No+ThUQaoT xiARLVlibXONoTse2tnQP4m2oCVIdWA+TiIFXThI6/9ovf6cJKW+jm+3zH0n6TGK srv/js4C+c5TlLxFoFyNSGT86RWA4bv3QxaG2/fjtiW5krZKrij6qYWAUvA3tVsl 6bkGTRSpA1LvtR4FLKADxvBLQo4qXUFUYxm+FaMaVO0DVhD2yyIUxnuXzRAOQSOr EKGr2G+nRHNQog1veEcRLJy2G7mpqetqyGTkWT2JhmYXU1yvnYBlIj/FRu/xf0Js 9JUpwlpgwYP12B0okR61wyvtmFCKRszFSeRVo/tgYI5C -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:11 2026 by rpki-client