This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1NJrUEv9Bt0x372X5yweG9JeKbk.roa File: 1NJrUEv9Bt0x372X5yweG9JeKbk.roa (raw, json) Hash identifier: S6OqBfqA27CZ5lgQWoDV23LfWwUs3uLESRa+vcboqbA= Subject key identifier: D4:D2:6B:50:4B:FD:06:DD:31:DF:BD:97:E7:2C:1E:1B:D2:5E:29:B9 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019AE38BE80C127D31D2A156D85BCF1ACFB9 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1NJrUEv9Bt0x372X5yweG9JeKbk.roa Signing time: Wed 03 Dec 2025 09:29:48 +0000 ROA not before: Wed 03 Dec 2025 09:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210712 IP address blocks: 5.39.200.0/22 maxlen: 24 46.29.224.0/21 maxlen: 24 78.111.112.0/20 maxlen: 24 91.192.32.0/22 maxlen: 24 93.91.144.0/20 maxlen: 24 109.235.0.0/21 maxlen: 24 185.15.108.0/22 maxlen: 24 185.40.80.0/22 maxlen: 24 185.94.4.0/22 maxlen: 24 213.109.172.0/22 maxlen: 24 217.75.208.0/20 maxlen: 24 2a02:17a0::/29 maxlen: 32 2a02:17a0::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:8b:e8:0c:12:7d:31:d2:a1:56:d8:5b:cf:1a:cf:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Dec 3 09:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d4d26b504bfd06dd31dfbd97e72c1e1bd25e29b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:a1:68:34:c1:42:d1:0c:a4:df:1d:44:cc: fa:ac:db:ab:11:21:14:5a:cf:7a:75:43:cf:be:31: df:94:64:a4:90:c7:23:56:4f:49:99:90:76:98:20: 64:4b:97:9a:a6:e7:0a:d5:a2:ed:0f:03:db:a3:7a: ab:f4:58:b2:60:95:f6:b3:4d:3e:57:26:83:f5:e9: 4b:cc:13:af:7a:6e:ca:b3:d9:e9:92:88:9f:79:22: b7:7e:97:f5:3d:4f:e3:d9:b4:aa:3d:1e:c7:eb:c9: b8:84:d2:31:71:7b:d0:83:22:db:a8:5e:0a:80:ab: a0:b6:ea:b9:32:6f:59:7b:34:e7:5b:a8:b5:28:fc: 49:95:01:dc:6c:af:7d:41:13:d6:24:d2:e6:0d:0e: a3:65:e6:a0:03:85:34:80:3d:40:c8:02:37:4d:b6: 8a:b9:da:9a:d7:c8:4d:54:d7:ce:af:96:1a:2e:cc: 9c:8c:98:d1:93:56:84:fc:63:dd:1b:92:c1:07:3f: b4:d3:57:5f:44:4d:df:07:62:17:93:45:a7:2e:c4: 3c:95:52:21:fa:4a:55:db:fc:41:5d:71:2b:5b:05: 31:d1:d6:47:60:92:4c:71:e0:c8:79:28:33:62:8c: 98:89:33:c2:83:18:fd:56:84:c0:92:44:10:e2:08: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:6B:50:4B:FD:06:DD:31:DF:BD:97:E7:2C:1E:1B:D2:5E:29:B9 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/1NJrUEv9Bt0x372X5yweG9JeKbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.200.0/22 46.29.224.0/21 78.111.112.0/20 91.192.32.0/22 93.91.144.0/20 109.235.0.0/21 185.15.108.0/22 185.40.80.0/22 185.94.4.0/22 213.109.172.0/22 217.75.208.0/20 IPv6: 2a02:17a0::/29 Signature Algorithm: sha256WithRSAEncryption b4:c5:48:64:5a:56:ea:a4:10:e1:4b:e6:25:b5:81:98:78:fd: 6e:3d:6c:86:19:01:fa:86:91:69:e1:25:74:97:50:41:2c:ac: 3b:3c:7f:d2:73:4c:71:7b:26:a3:f9:29:5c:62:8d:a5:d6:74: fd:af:01:fc:8a:f0:68:a4:34:ee:80:24:83:f1:eb:0f:a6:17: 18:8b:3c:fe:55:74:5c:c8:7b:6b:d0:ec:ba:c4:9b:7e:1a:cf: 85:42:d1:4e:52:50:65:92:11:33:f3:48:d5:ec:31:a8:be:9a: 97:3a:73:7f:86:8d:66:47:9d:e1:57:14:53:1b:22:b6:09:77: 0a:18:eb:9a:60:42:ca:83:b3:de:7d:df:de:5e:4f:32:12:70: 9c:24:0d:e5:1a:a3:59:f0:f1:f8:d6:b7:5d:4e:ae:eb:9d:7a: ce:84:58:a9:2b:bb:76:f4:16:f1:b6:59:3b:44:1f:e3:41:cb: 79:c3:33:3d:1e:86:92:e6:05:6b:43:46:5a:1a:b0:f5:f8:f3: 79:b5:22:fb:99:19:6e:76:68:07:61:ce:c9:aa:ac:a8:24:39: 7f:76:49:3a:2d:6e:1d:25:95:b5:df:3b:89:12:1b:8c:ed:ba: 01:46:24:c7:e2:9d:5d:b5:85:fc:ee:8f:29:21:a3:8f:f3:d7: 9e:72:4a:c3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZrji+gMEn0x0qFW2FvPGs+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUxMjAzMDkyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQyNmI1MDRiZmQwNmRkMzFkZmJkOTdlNzJjMWUxYmQyNWUyOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiOhaDTBQtEMpN8dRMz6rNurESEU Ws96dUPPvjHflGSkkMcjVk9JmZB2mCBkS5eapucK1aLtDwPbo3qr9FiyYJX2s00+ VyaD9elLzBOvem7Ks9npkoifeSK3fpf1PU/j2bSqPR7H68m4hNIxcXvQgyLbqF4K gKugtuq5Mm9ZezTnW6i1KPxJlQHcbK99QRPWJNLmDQ6jZeagA4U0gD1AyAI3TbaK udqa18hNVNfOr5YaLsycjJjRk1aE/GPdG5LBBz+001dfRE3fB2IXk0WnLsQ8lVIh +kpV2/xBXXErWwUx0dZHYJJMceDIeSgzYoyYiTPCgxj9VoTAkkQQ4gjglQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFNTSa1BL/QbdMd+9l+csHhvSXim5MB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvMU5KclVFdjlCdDB4MzcyWDV5d2VHOUplS2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQCBSfIAwQD Lh3gAwQETm9wAwQCW8AgAwQEXVuQAwQDbesAAwQCuQ9sAwQCuShQAwQCuV4EAwQC 1W2sAwQE2UvQMA0EAgACMAcDBQMqAhegMA0GCSqGSIb3DQEBCwUAA4IBAQC0xUhk WlbqpBDhS+YltYGYeP1uPWyGGQH6hpFp4SV0l1BBLKw7PH/Sc0xxeyaj+SlcYo2l 1nT9rwH8ivBopDTugCSD8esPphcYizz+VXRcyHtr0Oy6xJt+Gs+FQtFOUlBlkhEz 80jV7DGovpqXOnN/ho1mR53hVxRTGyK2CXcKGOuaYELKg7Pefd/eXk8yEnCcJA3l GqNZ8PH41rddTq7rnXrOhFipK7t29Bbxtlk7RB/jQct5wzM9HoaS5gVrQ0ZaGrD1 +PN5tSL7mRludmgHYc7JqqyoJDl/dkk6LW4dJZW13zuJEhuM7boBRiTH4p1dtYX8 7o8pIaOP89eeckrD -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:30 2025 by rpki-client