This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/NtzsNYpCi4I-ALT3pdij0HNI5X4.roa File: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (raw, json) Hash identifier: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c= Subject key identifier: 36:DC:EC:35:8A:42:8B:82:3E:00:B4:F7:A5:D8:A3:D0:73:48:E5:7E Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C8A666F1D80C539646A1F0CD090A Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/NtzsNYpCi4I-ALT3pdij0HNI5X4.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199435 IP address blocks: 5.34.128.0/19 maxlen: 24 185.93.80.0/22 maxlen: 22 188.92.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c8:a6:66:f1:d8:0c:53:96:46:a1:f0:cd:09:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36dcec358a428b823e00b4f7a5d8a3d07348e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:ff:39:d8:bb:7a:d3:ea:c6:08:cb:11:25: 43:32:52:1c:73:b4:09:c5:0e:37:ac:68:2b:dc:1c: 5d:90:95:98:4a:43:fe:9c:ab:f5:94:54:87:a2:17: 3a:89:d8:86:4c:66:10:b5:19:ec:d9:af:11:ed:e8: da:1d:fb:03:c5:a4:cc:04:71:41:4c:fd:dc:bd:a7: 80:ca:a1:59:92:91:b8:34:72:0f:8e:a4:18:25:9b: a9:51:0a:46:12:0a:8c:32:0a:ad:1b:3c:f7:1b:88: 3e:8b:44:04:69:d7:28:1d:12:92:94:38:78:e9:e3: 0d:fb:45:cc:43:02:d3:8b:1d:2f:d2:d7:a3:05:a9: 6a:5b:4f:ad:90:fd:a3:74:9c:5c:9f:58:65:ae:52: 2f:f2:0a:b7:a5:44:9f:4c:22:f6:13:74:65:f1:88: 3b:d9:20:6d:67:36:ac:f6:81:84:cd:ce:1e:04:76: 4d:f5:58:9a:7c:6a:6c:5f:6c:d3:f6:04:c1:ed:3f: fd:f6:e5:bd:93:35:d2:39:1b:74:b1:4a:aa:8e:7b: 4e:f5:3e:24:8a:bf:51:65:5a:2f:b7:41:e7:b7:32: 01:b2:da:ba:46:51:66:2b:68:bf:44:df:7e:9e:56: 56:15:75:03:5f:32:34:d6:87:09:10:82:47:ff:3d: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:EC:35:8A:42:8B:82:3E:00:B4:F7:A5:D8:A3:D0:73:48:E5:7E X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/NtzsNYpCi4I-ALT3pdij0HNI5X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.128.0/19 185.93.80.0/22 188.92.124.0/22 Signature Algorithm: sha256WithRSAEncryption a5:b4:b3:67:d3:7e:46:ca:c6:87:44:74:e0:60:e6:b2:bf:ce: 05:29:51:10:93:32:a6:f8:50:be:18:70:f7:84:a6:47:e2:f0: ef:28:f5:58:a4:0a:5a:99:ea:03:b1:44:bd:99:7c:53:7d:f0: 42:50:11:fa:f1:30:b0:c6:98:c7:4a:3d:ef:82:36:4a:0f:27: c7:64:72:d1:01:c3:a4:fc:be:67:2b:3a:9b:86:94:65:7b:6f: c8:e9:d3:1b:22:2b:8d:78:4c:94:6d:2d:0d:de:14:e6:b6:1b: 65:ef:a6:0f:14:11:00:d1:31:9a:05:4e:66:b3:53:d7:1b:8d: bf:31:84:39:f9:46:0f:04:27:3d:e0:bf:a1:d4:64:70:ac:19: 44:73:4f:f5:ff:54:a5:1c:91:82:52:2a:50:38:a1:b8:ff:7f: 05:79:ae:7d:22:84:dd:8f:ac:25:e0:7a:24:a2:40:3e:75:07: 74:62:0a:32:aa:aa:e9:2f:29:d4:b2:d2:68:1b:90:b9:da:8d: 5b:3c:04:77:1f:0c:51:d5:65:ba:3e:b6:da:78:b5:7f:fa:74: c1:cb:ef:4d:69:64:ec:01:0e:a0:69:1d:83:b2:77:de:7e:de: 3b:39:b5:02:6a:88:da:78:32:ff:5d:b2:ca:ef:bd:3b:ed:43: d8:50:8f:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o8imZvHYDFOWRqHwzQkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmRjZWMzNThhNDI4YjgyM2UwMGI0ZjdhNWQ4YTNkMDczNDhlNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3/Odi7etPqxgjLESVDMlIcc7QJ xQ43rGgr3BxdkJWYSkP+nKv1lFSHohc6idiGTGYQtRns2a8R7ejaHfsDxaTMBHFB TP3cvaeAyqFZkpG4NHIPjqQYJZupUQpGEgqMMgqtGzz3G4g+i0QEadcoHRKSlDh4 6eMN+0XMQwLTix0v0tejBalqW0+tkP2jdJxcn1hlrlIv8gq3pUSfTCL2E3Rl8Yg7 2SBtZzas9oGEzc4eBHZN9ViafGpsX2zT9gTB7T/99uW9kzXSORt0sUqqjntO9T4k ir9RZVovt0HntzIBstq6RlFmK2i/RN9+nlZWFXUDXzI01ocJEIJH/z2bUwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDbc7DWKQouCPgC096XYo9BzSOV+MB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvTnR6c05ZcENpNEktQUxUM3BkaWowSE5JNVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFBSKAAwQC uV1QAwQCvFx8MA0GCSqGSIb3DQEBCwUAA4IBAQCltLNn035GysaHRHTgYOayv84F KVEQkzKm+FC+GHD3hKZH4vDvKPVYpApameoDsUS9mXxTffBCUBH68TCwxpjHSj3v gjZKDyfHZHLRAcOk/L5nKzqbhpRle2/I6dMbIiuNeEyUbS0N3hTmthtl76YPFBEA 0TGaBU5ms1PXG42/MYQ5+UYPBCc94L+h1GRwrBlEc0/1/1SlHJGCUipQOKG4/38F ea59IoTdj6wl4HokokA+dQd0YgoyqqrpLynUstJoG5C52o1bPAR3HwxR1WW6Prba eLV/+nTBy+9NaWTsAQ6gaR2Dsnfeft47ObUCaojaeDL/XbLK77077UPYUI/r -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:48 2026 by rpki-client