This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa File: NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa (raw, json) Hash identifier: mVHm7YHZkLILOmiDQhdBTk3AqxRLfPypCLO+wiwEnVg= Subject key identifier: 34:57:2C:DF:FB:ED:2B:67:0C:C0:4C:74:01:93:24:01:6E:16:8B:F3 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783441EAF64A848FD685B469B360BBE2 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42360 IP address blocks: 94.16.6.0/24 maxlen: 32 94.16.13.0/24 maxlen: 24 2a00:11c0:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:41:ea:f6:4a:84:8f:d6:85:b4:69:b3:60:bb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34572cdffbed2b670cc04c74019324016e168bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:d9:9a:7e:1a:d2:3c:54:c9:5b:c5:1d:98: 35:39:35:44:fc:81:cf:76:d3:10:a2:8d:81:d9:3a: fb:fa:0f:cb:21:ca:ee:39:24:19:76:bc:99:25:76: 05:ff:e4:be:72:09:97:6f:09:43:5b:ff:df:86:8f: 06:54:ea:b0:3f:79:67:2e:27:14:96:b1:7b:03:59: 67:c8:ae:e2:79:57:8c:32:94:f0:3b:f9:db:96:a5: 20:62:71:55:21:28:cd:32:f4:81:6b:b8:94:99:72: e2:26:82:50:af:ca:93:c8:01:1e:34:07:55:8e:be: 95:78:66:f3:89:d1:93:b4:b7:4d:25:ed:45:e2:9e: 06:78:45:f8:8e:07:4b:a4:ec:aa:cb:54:27:17:90: a7:da:b5:35:25:ce:31:ab:43:dc:83:36:e3:84:cc: 01:0c:ad:80:47:6b:42:98:e3:83:9a:16:04:d9:4a: 3c:bc:09:0e:c6:5d:bb:dc:72:5e:16:0e:72:52:5b: a0:3e:86:e2:23:6a:b6:d2:82:58:70:1b:fc:48:c8: 35:ef:bc:ea:89:33:75:57:6a:a1:69:b6:65:c0:9b: c9:26:4f:ad:9d:97:b2:d4:45:09:a5:b2:08:17:3b: 46:6d:bf:83:79:dd:18:61:3c:4f:53:f5:0d:dd:21: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:57:2C:DF:FB:ED:2B:67:0C:C0:4C:74:01:93:24:01:6E:16:8B:F3 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.16.6.0/24 94.16.13.0/24 IPv6: 2a00:11c0:77::/48 Signature Algorithm: sha256WithRSAEncryption 4c:03:da:3e:1f:9d:8a:8c:65:ad:ca:40:39:d5:c5:fe:d8:aa: 21:25:a7:13:06:d1:47:95:f9:3f:6c:e2:22:be:cc:0a:0e:bb: a7:06:62:98:ec:46:32:1e:90:02:35:7e:3d:7b:f3:60:68:06: af:dc:e0:37:27:21:20:1b:1d:2d:e1:74:5d:d7:ef:27:33:7c: 5b:0f:1b:10:61:ce:6e:23:4b:1a:14:3e:2a:99:16:f1:35:37: 73:f7:ea:58:55:6d:1a:f0:89:87:25:64:91:78:bb:de:f0:38: 13:1c:c2:29:de:db:12:3c:34:2e:79:fe:23:66:fb:b4:4f:45: 47:2d:e6:07:a9:c4:db:16:0b:f0:2b:2f:0f:c8:b3:2e:35:39: 3c:21:c4:a8:98:bc:40:55:a4:56:7a:54:a0:b0:d0:f1:67:87: 7e:93:b3:8b:d7:9c:bd:73:ab:1e:93:b7:10:d1:6b:58:f8:fe: 13:bd:25:ed:48:30:96:81:dd:7f:3a:74:2a:b0:9c:88:c3:7e: 19:2b:c6:40:64:d7:e9:cd:a6:41:ca:7e:d1:d4:70:1a:43:60: 0e:a0:58:ed:6f:15:15:8a:e9:c5:3e:b9:c5:21:08:f1:e3:17: 19:34:6f:d8:9c:e8:e6:08:47:cd:46:fc:61:80:ce:23:e6:3b: 29:ad:7d:4d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NEHq9kqEj9aFtGmzYLviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDU3MmNkZmZiZWQyYjY3MGNjMDRjNzQwMTkzMjQwMTZlMTY4YmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrrZmn4a0jxUyVvFHZg1OTVE/IHP dtMQoo2B2Tr7+g/LIcruOSQZdryZJXYF/+S+cgmXbwlDW//fho8GVOqwP3lnLicU lrF7A1lnyK7ieVeMMpTwO/nblqUgYnFVISjNMvSBa7iUmXLiJoJQr8qTyAEeNAdV jr6VeGbzidGTtLdNJe1F4p4GeEX4jgdLpOyqy1QnF5Cn2rU1Jc4xq0PcgzbjhMwB DK2AR2tCmOODmhYE2Uo8vAkOxl273HJeFg5yUlugPobiI2q20oJYcBv8SMg177zq iTN1V2qhabZlwJvJJk+tnZey1EUJpbIIFztGbb+Ded0YYTxPU/UN3SHNtwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDRXLN/77StnDMBMdAGTJAFuFovzMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvTkZjczNfdnRLMmNNd0V4MEFaTWtBVzRXaV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXhAGAwQA XhANMA8EAgACMAkDBwAqABHAAHcwDQYJKoZIhvcNAQELBQADggEBAEwD2j4fnYqM Za3KQDnVxf7YqiElpxMG0UeV+T9s4iK+zAoOu6cGYpjsRjIekAI1fj1782BoBq/c 4DcnISAbHS3hdF3X7yczfFsPGxBhzm4jSxoUPiqZFvE1N3P36lhVbRrwiYclZJF4 u97wOBMcwine2xI8NC55/iNm+7RPRUct5gepxNsWC/ArLw/Isy41OTwhxKiYvEBV pFZ6VKCw0PFnh36Ts4vXnL1zqx6TtxDRa1j4/hO9Je1IMJaB3X86dCqwnIjDfhkr xkBk1+nNpkHKftHUcBpDYA6gWO1vFRWK6cU+ucUhCPHjFxk0b9ic6OYIR81G/GGA ziPmOymtfU0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:58 2026 by rpki-client