This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/N8RpRoFAx_TftoeK1tbsuyPjWrQ.roa File: N8RpRoFAx_TftoeK1tbsuyPjWrQ.roa (raw, json) Hash identifier: y+IGGd9WTM0s1smEsZEh0vOtrtW968xCdzrK98VZZFQ= Subject key identifier: 37:C4:69:46:81:40:C7:F4:DF:B6:87:8A:D6:D6:EC:BB:23:E3:5A:B4 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAED3B9C7E380555E6A37D634E383C Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/N8RpRoFAx_TftoeK1tbsuyPjWrQ.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45650 IP address blocks: 188.253.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:3b:9c:7e:38:05:55:e6:a3:7d:63:4e:38:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37c469468140c7f4dfb6878ad6d6ecbb23e35ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:07:a0:d6:1d:77:93:8c:98:a2:8f:a5:84:b6: 7e:62:4c:e0:ac:83:cb:65:8c:52:5b:93:f2:ac:1c: d8:34:33:58:9b:36:60:e8:33:fc:76:69:f8:e5:bb: 63:31:50:83:91:74:74:77:fb:02:dc:84:13:24:fc: 38:b4:c5:17:33:3a:c2:9b:33:6d:89:6d:69:c5:d3: 33:e9:af:e0:30:c7:03:c4:4d:9d:f5:97:9c:76:2d: 04:ad:35:46:a5:13:fc:ce:31:d7:34:79:da:d6:ae: d8:00:41:e9:3a:62:35:f6:ba:f2:7c:9c:35:47:15: 23:ab:4d:57:93:77:81:74:1f:ff:4b:15:3b:a5:b7: a5:48:e4:5f:1b:0a:de:3d:6c:25:ec:54:8c:d2:6d: 93:3a:df:d8:c2:fa:33:61:72:21:7d:ea:29:a5:69: 46:0f:5c:e3:76:62:06:48:3f:78:10:66:8a:cf:37: 5f:a6:69:6a:d5:ef:30:87:35:60:88:b7:a8:f5:d9: 48:f9:59:73:64:bd:09:20:cb:5e:8c:84:6d:48:a3: 0c:e2:f4:70:e5:ca:49:14:7f:07:bd:03:7c:2a:0f: 51:14:71:1c:88:31:f3:99:9b:23:f7:c6:9b:73:7a: 71:cc:14:b9:3f:a4:63:4c:e5:a4:38:30:59:e2:e3: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:69:46:81:40:C7:F4:DF:B6:87:8A:D6:D6:EC:BB:23:E3:5A:B4 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/N8RpRoFAx_TftoeK1tbsuyPjWrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.253.96.0/21 Signature Algorithm: sha256WithRSAEncryption 60:67:9e:81:8a:da:54:70:f0:f5:19:db:c4:89:b7:ea:39:a4: c0:57:41:5a:50:b7:88:a9:a3:73:28:16:23:1a:85:32:4d:eb: 16:4a:da:c0:4d:c9:51:59:aa:c4:a3:61:bd:35:b4:24:78:b9: 78:cf:15:3e:5b:3f:24:e0:8c:72:cb:6a:be:87:40:1c:a8:bf: 04:b2:b1:9a:ec:d9:b6:a2:93:2c:76:5a:09:79:ac:0a:a9:14: b8:b4:6f:73:3b:46:1a:f0:e9:61:c7:89:29:d3:17:e0:bc:2f: 71:66:62:69:f8:91:60:c2:31:bc:bb:06:30:2e:09:fa:79:47: 4f:13:94:74:12:2b:e9:b7:ba:a5:24:8e:66:71:ec:52:4f:21: 5a:98:95:ca:83:40:9c:a6:01:96:7a:f3:2b:38:ea:96:66:93: f2:c4:01:9f:40:da:86:06:aa:b1:be:02:24:c0:b1:47:fa:fc: 05:f8:03:9c:ba:37:b6:4c:75:68:23:b3:eb:de:29:f5:07:4e: 80:8e:c0:94:49:96:17:89:ed:a2:a8:60:0a:59:07:10:06:00: d7:97:4d:8e:fd:1b:da:30:4a:41:09:9c:b6:94:4d:86:31:7b: 55:7d:5d:62:29:8a:df:a0:43:e3:fa:98:a9:4e:2f:68:35:44: 29:59:ed:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26u07nH44BVXmo31jTjg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2M0Njk0NjgxNDBjN2Y0ZGZiNjg3OGFkNmQ2ZWNiYjIzZTM1YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Aeg1h13k4yYoo+lhLZ+YkzgrIPL ZYxSW5PyrBzYNDNYmzZg6DP8dmn45btjMVCDkXR0d/sC3IQTJPw4tMUXMzrCmzNt iW1pxdMz6a/gMMcDxE2d9Zecdi0ErTVGpRP8zjHXNHna1q7YAEHpOmI19rryfJw1 RxUjq01Xk3eBdB//SxU7pbelSORfGwrePWwl7FSM0m2TOt/YwvozYXIhfeoppWlG D1zjdmIGSD94EGaKzzdfpmlq1e8whzVgiLeo9dlI+VlzZL0JIMtejIRtSKMM4vRw 5cpJFH8HvQN8Kg9RFHEciDHzmZsj98abc3pxzBS5P6RjTOWkODBZ4uPG/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfEaUaBQMf037aHitbW7Lsj41q0MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvTjhScFJvRkF4X1RmdG9lSzF0YnN1eVBqV3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvP1gMA0G CSqGSIb3DQEBCwUAA4IBAQBgZ56BitpUcPD1GdvEibfqOaTAV0FaULeIqaNzKBYj GoUyTesWStrATclRWarEo2G9NbQkeLl4zxU+Wz8k4Ixyy2q+h0AcqL8EsrGa7Nm2 opMsdloJeawKqRS4tG9zO0Ya8Olhx4kp0xfgvC9xZmJp+JFgwjG8uwYwLgn6eUdP E5R0Eivpt7qlJI5mcexSTyFamJXKg0CcpgGWevMrOOqWZpPyxAGfQNqGBqqxvgIk wLFH+vwF+AOcuje2THVoI7Pr3in1B06AjsCUSZYXie2iqGAKWQcQBgDXl02O/Rva MEpBCZy2lE2GMXtVfV1iKYrfoEPj+pipTi9oNUQpWe2c -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:24 2026 by rpki-client