This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NGPMuWiFeknKXkwM3nxouEoeXyk.roa File: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (raw, json) Hash identifier: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8= Subject key identifier: 34:63:CC:B9:68:85:7A:49:CA:5E:4C:0C:DE:7C:68:B8:4A:1E:5F:29 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B7EA69D72151FA7A5E6B7C969429AEF3B Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NGPMuWiFeknKXkwM3nxouEoeXyk.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212496 IP address blocks: 77.73.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9d:72:15:1f:a7:a5:e6:b7:c9:69:42:9a:ef:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3463ccb968857a49ca5e4c0cde7c68b84a1e5f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:22:0d:09:fc:e2:c9:82:00:91:34:51:4d: 6f:85:49:56:98:52:b0:ff:41:67:01:db:e4:76:6f: 02:b3:bb:19:8a:c8:ef:40:a5:89:76:f0:c5:67:ee: 5c:b8:62:5e:b8:cd:72:f0:5f:a3:17:15:3e:da:80: ea:76:66:5b:16:9e:20:5f:5b:ad:13:c6:35:ff:bb: 29:0d:76:28:bd:32:46:ee:1f:8e:da:84:74:56:ad: a6:3f:57:ef:60:90:92:e4:c9:a2:e1:08:94:5b:78: 23:4c:04:1b:e1:9a:ad:48:fe:d0:52:c6:13:35:dc: 0a:65:b2:4c:a2:99:73:64:b2:46:97:41:77:bd:c0: 95:95:5e:58:89:62:10:34:a2:05:82:49:7d:04:d1: 59:cc:4c:1a:3c:24:be:80:a9:f5:38:1c:66:92:f1: a9:91:d8:ba:ef:f4:03:20:f3:87:54:a2:24:1a:5e: 40:ce:2e:e7:4d:4f:13:68:61:d1:b3:8b:cd:7f:08: 9e:5b:f5:8d:f4:b3:4b:2a:1b:5b:a6:ea:34:b5:0d: 2a:fc:1d:9e:e0:94:c3:b6:2e:46:d9:52:a0:f8:44: 1f:91:7a:76:4f:4b:99:a5:e8:b1:dc:55:3d:30:66: c8:08:11:8f:4e:ba:8d:20:7f:81:31:7b:f6:34:47: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:63:CC:B9:68:85:7A:49:CA:5E:4C:0C:DE:7C:68:B8:4A:1E:5F:29 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NGPMuWiFeknKXkwM3nxouEoeXyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.134.0/24 Signature Algorithm: sha256WithRSAEncryption 89:6a:17:7c:7a:a4:e8:3b:98:74:d5:80:e2:8b:69:f7:02:7a: 3a:a1:a6:8b:31:ad:13:17:7b:51:59:a9:5e:71:a0:d4:4e:15: ff:9e:85:f4:b9:20:31:3a:af:54:6c:da:14:34:1a:07:e5:a1: 81:b1:44:31:40:e5:e0:6b:89:00:49:7f:67:27:fb:34:9b:52: d2:32:fe:06:03:2b:98:53:d8:37:f8:2c:b2:ca:6c:00:4f:2e: a6:87:8f:21:58:1d:f5:6e:8d:8e:24:0b:c4:30:9a:40:4a:cb: aa:c0:bf:ff:24:9d:4c:d4:15:d3:54:8e:4a:9e:8d:e2:82:50: 75:a8:5c:c0:ae:7a:90:9e:de:38:c4:d4:b6:fc:d9:03:45:c3: f5:1f:24:fd:db:45:6e:2f:e5:99:09:28:14:4b:14:6d:eb:1c: 39:df:3f:55:8c:eb:18:b4:9d:62:08:f6:4d:72:f2:2c:57:13: 6b:2a:06:5e:4f:1a:45:22:b5:aa:9e:d7:d6:9e:2a:7a:85:71: f2:83:da:a1:d0:bd:c8:a3:ab:98:d6:02:3a:5e:2e:5c:a1:d4: 37:f2:9b:ec:35:7c:32:73:ec:d1:5b:7d:76:57:ca:00:2c:e3: 73:67:62:ce:98:b2:c3:80:73:59:4e:6f:0f:5d:bb:1d:27:a0: 54:81:80:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pp1yFR+npea3yWlCmu87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDYzY2NiOTY4ODU3YTQ5Y2E1ZTRjMGNkZTdjNjhiODRhMWU1ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xkiDQn84smCAJE0UU1vhUlWmFKw /0FnAdvkdm8Cs7sZisjvQKWJdvDFZ+5cuGJeuM1y8F+jFxU+2oDqdmZbFp4gX1ut E8Y1/7spDXYovTJG7h+O2oR0Vq2mP1fvYJCS5Mmi4QiUW3gjTAQb4ZqtSP7QUsYT NdwKZbJMoplzZLJGl0F3vcCVlV5YiWIQNKIFgkl9BNFZzEwaPCS+gKn1OBxmkvGp kdi67/QDIPOHVKIkGl5Azi7nTU8TaGHRs4vNfwieW/WN9LNLKhtbpuo0tQ0q/B2e 4JTDti5G2VKg+EQfkXp2T0uZpeix3FU9MGbICBGPTrqNIH+BMXv2NEeFFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRjzLlohXpJyl5MDN58aLhKHl8pMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvTkdQTXVXaUZla25LWGt3TTNueG91RW9lWHlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmGMA0G CSqGSIb3DQEBCwUAA4IBAQCJahd8eqToO5h01YDii2n3Ano6oaaLMa0TF3tRWale caDUThX/noX0uSAxOq9UbNoUNBoH5aGBsUQxQOXga4kASX9nJ/s0m1LSMv4GAyuY U9g3+CyyymwATy6mh48hWB31bo2OJAvEMJpASsuqwL//JJ1M1BXTVI5Kno3iglB1 qFzArnqQnt44xNS2/NkDRcP1HyT920VuL+WZCSgUSxRt6xw53z9VjOsYtJ1iCPZN cvIsVxNrKgZeTxpFIrWqntfWnip6hXHyg9qh0L3Io6uY1gI6Xi5codQ38pvsNXwy c+zRW312V8oALONzZ2LOmLLDgHNZTm8PXbsdJ6BUgYBw -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:55 2026 by rpki-client