This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/NcgEquPk4dqA6kZfv1d9WtImU1g.roa File: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (raw, json) Hash identifier: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI= Subject key identifier: 35:C8:04:AA:E3:E4:E1:DA:80:EA:46:5F:BF:57:7D:5A:D2:26:53:58 Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Certificate serial: 019B7BA4D9D1E8BD2DEAD1DC7E884EBED132 Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/NcgEquPk4dqA6kZfv1d9WtImU1g.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9201 IP address blocks: 2001:1400::/29 maxlen: 32 2001:1400:ffee::/48 maxlen: 48 2001:1401::/32 maxlen: 32 2001:1402::/32 maxlen: 32 2001:1403::/32 maxlen: 32 2001:1404::/32 maxlen: 32 2001:1405::/32 maxlen: 32 2001:1406::/32 maxlen: 32 2001:1407::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d9:d1:e8:bd:2d:ea:d1:dc:7e:88:4e:be:d1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c804aae3e4e1da80ea465fbf577d5ad2265358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:cf:0e:e2:82:dd:96:ab:8c:98:b9:f5:62: 4b:33:84:49:45:02:60:13:da:c0:d6:4b:3d:68:6c: 1e:d3:65:a7:ee:cf:64:06:bd:f6:81:19:e2:ec:85: 99:fa:29:f8:10:5a:25:8d:8e:b9:c3:87:e2:37:df: 67:f4:f5:b7:77:f6:40:12:3d:94:ed:64:87:9d:77: 2b:18:81:b5:bf:12:51:11:e0:3c:d9:8e:ae:7e:54: c7:41:95:70:2c:83:94:6e:8a:0a:75:fd:69:63:77: 7a:49:d4:33:5f:6f:ad:fc:c3:54:5d:ee:9b:40:b2: 77:3a:5c:52:b9:18:cc:18:51:7a:2b:c0:ee:42:5b: 53:af:f6:f7:ad:0c:25:30:1d:c2:30:1a:48:ba:f4: 88:26:86:6f:34:92:f1:c4:7f:7b:6e:41:a7:34:de: 4f:85:89:d4:05:1f:a0:ed:39:19:05:8a:00:11:29: 39:e3:8c:33:6f:34:87:9f:55:b9:f0:93:74:b8:5f: 2e:3e:78:72:1b:a3:91:aa:24:3b:dd:3f:26:ed:f7: cd:fe:d5:de:72:32:ca:7d:64:c5:57:a3:d8:89:fc: 5f:a2:c8:65:c7:a0:56:26:b0:78:7d:98:23:5c:5c: 77:ed:d1:5b:d9:cf:69:b3:b6:47:23:eb:eb:cb:0a: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:04:AA:E3:E4:E1:DA:80:EA:46:5F:BF:57:7D:5A:D2:26:53:58 X509v3 Authority Key Identifier: keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/NcgEquPk4dqA6kZfv1d9WtImU1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1400::/29 Signature Algorithm: sha256WithRSAEncryption 6e:5b:d6:ab:18:d2:79:ec:ab:9c:ec:c0:c8:5c:48:26:71:82: 57:98:84:75:05:87:67:50:59:0f:e9:48:80:6e:33:74:15:39: 4b:20:80:42:be:85:9a:c0:64:7c:62:b9:3f:4a:48:08:17:ab: 68:78:0a:4f:72:00:ab:a2:91:31:51:a5:3c:38:9b:5b:c8:d6: 94:49:3a:49:6d:42:e1:77:95:fd:a4:0c:4b:a4:b8:0b:a4:08: 54:a7:7d:c8:87:da:7f:74:34:31:70:a5:3f:5f:4f:84:33:6e: ef:ca:59:cf:8d:8b:3d:d6:a6:9c:a1:65:87:7b:48:52:de:99: d0:cf:f6:69:0b:48:4e:3a:28:0c:7f:58:63:f5:28:37:d5:72: 89:f6:6e:0b:32:5d:b9:2d:63:7c:0c:d1:fa:d2:f9:db:4d:90: 04:11:51:82:28:e4:fd:f5:6e:97:6a:d4:3c:17:5e:a5:29:f5: 9a:8f:a5:51:17:db:c5:49:2a:e8:42:26:df:4e:05:a6:9b:f3: 95:fb:1a:02:ed:76:29:23:60:a4:6f:b2:59:08:48:16:7f:be: 2e:e3:19:d3:e8:91:6d:cc:e8:6a:81:b5:13:a1:3c:5c:94:c6: eb:5d:ce:52:6a:cd:0b:3f:73:74:39:1f:a4:8c:c6:94:d9:69: 00:b1:23:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pNnR6L0t6tHcfohOvtEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3 OWE1NjcwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWM4MDRhYWUzZTRlMWRhODBlYTQ2NWZiZjU3N2Q1YWQyMjY1MzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVnPDuKC3ZarjJi59WJLM4RJRQJg E9rA1ks9aGwe02Wn7s9kBr32gRni7IWZ+in4EFoljY65w4fiN99n9PW3d/ZAEj2U 7WSHnXcrGIG1vxJREeA82Y6uflTHQZVwLIOUbooKdf1pY3d6SdQzX2+t/MNUXe6b QLJ3OlxSuRjMGFF6K8DuQltTr/b3rQwlMB3CMBpIuvSIJoZvNJLxxH97bkGnNN5P hYnUBR+g7TkZBYoAESk544wzbzSHn1W58JN0uF8uPnhyG6ORqiQ73T8m7ffN/tXe cjLKfWTFV6PYifxfoshlx6BWJrB4fZgjXFx37dFb2c9ps7ZHI+vrywpQWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDXIBKrj5OHagOpGX79XfVrSJlNYMB8GA1UdIwQY MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt NTVjMTQwYzlmNTRmLzEvTmNnRXF1UGs0ZHFBNmtaZnYxZDlXdEltVTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEUADAN BgkqhkiG9w0BAQsFAAOCAQEAblvWqxjSeeyrnOzAyFxIJnGCV5iEdQWHZ1BZD+lI gG4zdBU5SyCAQr6FmsBkfGK5P0pICBeraHgKT3IAq6KRMVGlPDibW8jWlEk6SW1C 4XeV/aQMS6S4C6QIVKd9yIfaf3Q0MXClP19PhDNu78pZz42LPdamnKFlh3tIUt6Z 0M/2aQtITjooDH9YY/UoN9VyifZuCzJduS1jfAzR+tL5202QBBFRgijk/fVul2rU PBdepSn1mo+lURfbxUkq6EIm304FppvzlfsaAu12KSNgpG+yWQhIFn++LuMZ0+iR bczoaoG1E6E8XJTG613OUmrNCz9zdDkfpIzGlNlpALEjWQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:31 2026 by rpki-client