This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa File: NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa (raw, json) Hash identifier: 8br5HNMvqSMJ3h3ONJIZMwSXpIgb/ZWSf4M8Oa8bT9o= Subject key identifier: 35:66:7A:5F:D6:FE:E6:1C:44:7C:9F:50:AD:33:FD:8D:9F:F3:99:86 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 019AE2E288740793851A7073C123E8441BFE Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa Signing time: Wed 03 Dec 2025 06:24:48 +0000 ROA not before: Wed 03 Dec 2025 06:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 194.26.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:e2:88:74:07:93:85:1a:70:73:c1:23:e8:44:1b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: Dec 3 06:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35667a5fd6fee61c447c9f50ad33fd8d9ff39986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:43:3b:2d:19:e9:dc:13:1a:af:52:56:f4: 41:fe:e0:15:e7:69:99:78:e8:4c:1e:bc:bd:8b:ab: c1:ba:22:7c:c2:27:c4:6d:66:1e:03:5e:42:b5:14: b2:69:0d:77:e2:8f:1c:5b:4a:d4:97:c1:f9:b6:4b: e6:a2:37:c2:c7:6f:87:30:6a:fe:82:57:26:9b:b2: 14:1f:08:1e:5a:5c:e6:f1:a2:6e:74:fb:10:26:44: b0:9e:67:f9:8f:20:05:53:e2:38:83:74:27:97:6c: 89:60:1f:d3:24:5a:a4:87:06:92:ca:c0:e4:21:07: 5d:c5:8d:3d:b8:30:79:de:5d:e2:fe:87:b5:51:b4: ad:cc:9a:15:6e:41:5b:61:d7:4e:c9:fb:2d:36:92: 47:89:f9:21:8d:33:2c:c2:f4:6f:3b:c7:97:ec:eb: df:67:32:63:36:e7:0a:12:28:5c:2d:41:08:f8:53: 39:cd:6f:24:b0:45:bc:f6:81:fd:d5:e0:5d:b5:75: b9:6f:09:5d:c2:35:02:0f:d1:4b:42:9e:51:53:12: e6:c1:19:95:9b:72:c2:32:a3:26:98:12:75:b2:c3: 29:10:f3:89:ca:19:82:28:ef:e1:f2:0a:84:f6:04: 79:ca:e8:e4:7d:12:f0:29:20:6d:e2:78:30:b4:25: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:66:7A:5F:D6:FE:E6:1C:44:7C:9F:50:AD:33:FD:8D:9F:F3:99:86 X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.195.0/24 Signature Algorithm: sha256WithRSAEncryption 75:c6:1f:32:68:b6:05:bc:68:c6:f4:81:ec:a0:0e:de:df:0b: 7e:60:90:53:b3:6d:33:67:6e:4b:23:d9:3a:d2:8c:79:a2:32: b8:c1:ab:12:e0:50:12:f0:1d:9f:ba:df:3e:d1:b3:a3:2c:6e: 49:7a:06:8a:f5:01:76:1d:81:ae:58:8e:88:8b:e0:96:eb:78: 4b:79:26:58:94:38:cc:9d:4a:7c:5a:70:a5:a7:63:f5:5f:8a: aa:24:59:7d:2b:60:d6:f4:38:86:7e:f5:8d:82:52:c4:41:c5: 11:70:db:48:99:63:d9:91:d2:7a:a9:03:a7:29:82:f1:b2:d7: 64:f8:91:b3:fe:03:ce:e5:a5:e5:ad:b4:c8:79:84:68:76:47: 0b:25:79:a1:83:65:40:a8:f5:4f:49:75:a0:2f:ae:a1:76:38: 36:b8:87:ed:b5:9a:96:ec:7f:93:b5:5e:f3:56:36:8e:ff:ff: d9:55:67:34:4e:d6:bc:38:eb:61:7c:da:71:c8:44:60:97:58: 5f:da:c5:fc:84:bf:4d:02:26:d6:b1:4a:fc:91:3b:7d:85:95: d6:df:7b:cf:ae:49:db:df:d7:8e:57:88:6f:98:ec:34:8a:b2: 76:2f:24:65:bd:c9:f0:7e:9f:81:86:34:b6:c6:4e:90:eb:13: 8b:da:90:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZri4oh0B5OFGnBzwSPoRBv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjUxMjAzMDYyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY2N2E1ZmQ2ZmVlNjFjNDQ3YzlmNTBhZDMzZmQ4ZDlmZjM5OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XJDOy0Z6dwTGq9SVvRB/uAV52mZ eOhMHry9i6vBuiJ8wifEbWYeA15CtRSyaQ134o8cW0rUl8H5tkvmojfCx2+HMGr+ glcmm7IUHwgeWlzm8aJudPsQJkSwnmf5jyAFU+I4g3Qnl2yJYB/TJFqkhwaSysDk IQddxY09uDB53l3i/oe1UbStzJoVbkFbYddOyfstNpJHifkhjTMswvRvO8eX7Ovf ZzJjNucKEihcLUEI+FM5zW8ksEW89oH91eBdtXW5bwldwjUCD9FLQp5RUxLmwRmV m3LCMqMmmBJ1ssMpEPOJyhmCKO/h8gqE9gR5yujkfRLwKSBt4ngwtCVGCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVmel/W/uYcRHyfUK0z/Y2f85mGMB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvTldaNlg5Yi01aHhFZko5UXJUUDlqWl96bVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrDMA0G CSqGSIb3DQEBCwUAA4IBAQB1xh8yaLYFvGjG9IHsoA7e3wt+YJBTs20zZ25LI9k6 0ox5ojK4wasS4FAS8B2fut8+0bOjLG5JegaK9QF2HYGuWI6Ii+CW63hLeSZYlDjM nUp8WnClp2P1X4qqJFl9K2DW9DiGfvWNglLEQcURcNtImWPZkdJ6qQOnKYLxstdk +JGz/gPO5aXlrbTIeYRodkcLJXmhg2VAqPVPSXWgL66hdjg2uIfttZqW7H+TtV7z VjaO///ZVWc0Tta8OOthfNpxyERgl1hf2sX8hL9NAibWsUr8kTt9hZXW33vPrknb 39eOV4hvmOw0irJ2LyRlvcnwfp+BhjS2xk6Q6xOL2pBW -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:58 2025 by rpki-client