This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/NxRrglg9z7QgupLz2wQSQ7EX5Ew.roa File: NxRrglg9z7QgupLz2wQSQ7EX5Ew.roa (raw, json) Hash identifier: swibubg/GpdzdJCQS09t6LuWYsBmSLJkKcOcxwxVKk4= Subject key identifier: 37:14:6B:82:58:3D:CF:B4:20:BA:92:F3:DB:04:12:43:B1:17:E4:4C Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019ABA3793466E9BE83AF9B2625FC12F686E Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/NxRrglg9z7QgupLz2wQSQ7EX5Ew.roa Signing time: Tue 25 Nov 2025 08:53:15 +0000 ROA not before: Tue 25 Nov 2025 08:53:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200291 IP address blocks: 193.16.224.0/23 maxlen: 24 2a00:fe00:a000::/36 maxlen: 36 2a00:fe00:a000::/38 maxlen: 38 2a00:fe00:a400::/38 maxlen: 38 2a00:fe00:a800::/38 maxlen: 38 2a00:fe00:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:37:93:46:6e:9b:e8:3a:f9:b2:62:5f:c1:2f:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Nov 25 08:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37146b82583dcfb420ba92f3db041243b117e44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:ff:ff:69:52:05:af:1e:7e:c5:bf:54:04: b3:fa:fc:7d:58:5e:93:6c:d8:80:55:84:15:6b:50: 09:df:bd:b0:c4:70:b1:97:e1:6d:45:5b:c3:c0:27: f3:f9:88:01:19:93:a3:8e:98:ab:b0:4b:6d:9e:2e: 63:fd:95:6d:1f:34:b2:25:ce:06:a1:05:6e:96:ba: 8f:c8:05:63:0e:aa:f8:17:80:f9:24:f2:d7:c7:b7: dc:3c:30:70:8d:f0:80:bc:1d:a2:a4:7a:bb:f0:b6: 1a:36:09:29:98:e3:60:ea:81:ee:95:c1:c0:b2:1d: 7a:e3:ac:22:90:be:3a:cc:22:e9:6c:07:93:b9:89: 19:a5:98:34:92:48:c9:46:b0:4c:b3:de:f9:4c:8b: 95:b4:4f:cb:c7:0e:b9:07:fc:46:e3:e2:79:6e:e0: c6:e1:dd:a8:7a:35:73:b7:96:1b:14:2c:97:9a:50: 05:b2:38:26:80:12:95:94:a3:aa:14:14:ce:d3:0a: c0:4f:60:60:b8:fb:55:74:35:72:99:db:26:c3:59: 96:ec:99:7e:f4:54:57:dc:eb:84:98:c2:9a:0c:a8: 2c:c7:de:bf:5f:7c:be:30:4b:57:67:1d:c4:41:56: bb:98:ac:ce:85:2e:be:a5:06:e7:46:8c:3a:d5:2c: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:14:6B:82:58:3D:CF:B4:20:BA:92:F3:DB:04:12:43:B1:17:E4:4C X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/NxRrglg9z7QgupLz2wQSQ7EX5Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.224.0/23 IPv6: 2a00:fe00:a000::/36 Signature Algorithm: sha256WithRSAEncryption 31:41:85:e9:c6:5c:19:ee:03:c6:d0:c4:f1:18:24:40:92:ba: de:fb:ca:be:46:0b:f5:81:77:00:39:94:65:88:c6:df:7b:15: b7:cd:71:b0:b1:85:b5:27:48:bb:46:2c:a0:24:cd:40:14:bf: 6b:f1:cc:e8:2d:3d:69:e1:e3:00:c9:cf:44:ae:61:72:58:a9: 6c:18:a6:1e:00:2f:06:0a:c7:16:83:e0:7e:fe:b3:bb:d6:17: 55:b2:3b:05:14:81:cd:a7:af:c4:d8:ea:6d:8f:8a:7a:e1:46: 74:a5:71:30:d9:da:2b:8d:05:34:31:9e:0c:0e:00:6e:41:97: b0:41:6b:22:66:dc:56:99:bb:56:32:df:d9:ca:ac:44:2d:1b: 56:76:df:9c:54:92:99:28:43:18:bf:c4:9e:20:6b:ed:b2:03: c1:26:cd:66:97:cf:ed:13:bc:13:dc:61:01:5f:8b:ec:04:87: 3d:54:c1:f1:4d:2d:28:0a:dc:ba:2e:1f:d9:b6:5a:b4:16:6a: 6c:7b:bf:3e:c2:2c:6b:48:20:c8:d1:34:f8:2c:b8:71:52:19: 34:a6:dc:3f:b3:ef:aa:d8:bc:16:d9:29:28:7e:ba:4c:62:be: c1:1a:82:2b:94:23:c8:f6:a9:1d:33:a8:44:ef:15:81:08:39: 83:35:0a:b8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZq6N5NGbpvoOvmyYl/BL2huMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUxMTI1MDg1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzE0NmI4MjU4M2RjZmI0MjBiYTkyZjNkYjA0MTI0M2IxMTdlNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ir//2lSBa8efsW/VASz+vx9WF6T bNiAVYQVa1AJ372wxHCxl+FtRVvDwCfz+YgBGZOjjpirsEttni5j/ZVtHzSyJc4G oQVulrqPyAVjDqr4F4D5JPLXx7fcPDBwjfCAvB2ipHq78LYaNgkpmONg6oHulcHA sh1646wikL46zCLpbAeTuYkZpZg0kkjJRrBMs975TIuVtE/Lxw65B/xG4+J5buDG 4d2oejVzt5YbFCyXmlAFsjgmgBKVlKOqFBTO0wrAT2BguPtVdDVymdsmw1mW7Jl+ 9FRX3OuEmMKaDKgsx96/X3y+MEtXZx3EQVa7mKzOhS6+pQbnRow61Sw7GQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDcUa4JYPc+0ILqS89sEEkOxF+RMMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvTnhScmdsZzl6N1FndXBMejJ3UVNRN0VYNUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwRDgMA4E AgACMAgDBgQqAP4AoDANBgkqhkiG9w0BAQsFAAOCAQEAMUGF6cZcGe4DxtDE8Rgk QJK63vvKvkYL9YF3ADmUZYjG33sVt81xsLGFtSdIu0YsoCTNQBS/a/HM6C09aeHj AMnPRK5hclipbBimHgAvBgrHFoPgfv6zu9YXVbI7BRSBzaevxNjqbY+KeuFGdKVx MNnaK40FNDGeDA4AbkGXsEFrImbcVpm7VjLf2cqsRC0bVnbfnFSSmShDGL/EniBr 7bIDwSbNZpfP7RO8E9xhAV+L7ASHPVTB8U0tKArcui4f2bZatBZqbHu/PsIsa0gg yNE0+Cy4cVIZNKbcP7Pvqti8FtkpKH66TGK+wRqCK5QjyPapHTOoRO8VgQg5gzUK uA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:29 2025 by rpki-client