This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NTVnEx-KssKf-XzySjEYcHljzYE.roa File: NTVnEx-KssKf-XzySjEYcHljzYE.roa (raw, json) Hash identifier: WgWubpWTv3uxZRcUw+m+abG/oz0AyT2yucrET/VO7N0= Subject key identifier: 35:35:67:13:1F:8A:B2:C2:9F:F9:7C:F2:4A:31:18:70:79:63:CD:81 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C748D5764BF95992BCD7C38322E00B Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NTVnEx-KssKf-XzySjEYcHljzYE.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202984 IP address blocks: 62.76.142.0/24 maxlen: 24 195.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:d5:76:4b:f9:59:92:bc:d7:c3:83:22:e0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353567131f8ab2c29ff97cf24a3118707963cd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:73:e6:81:4f:19:a2:97:58:5b:76:1e:93: 8e:d4:1e:f9:7f:5f:19:29:58:c1:cb:40:6d:54:b2: fa:de:ad:40:54:7d:b1:07:fa:60:7b:6b:d2:ee:f0: 0a:e9:df:c9:89:33:cf:8f:d8:85:a5:7e:ae:86:0b: 66:be:e9:32:4f:2e:39:f6:c7:14:cf:30:ab:7b:c3: 6f:a4:6e:e3:41:9e:48:e1:c7:84:b8:8b:ed:2d:23: 74:9b:89:b7:3a:51:76:0c:f8:4c:36:fb:4c:92:bd: 36:f4:b9:2e:97:c1:ce:42:d8:ad:c8:80:ce:96:55: fe:23:84:a3:05:f7:78:4c:7a:63:92:d0:fa:8a:5b: ea:6f:7b:a2:a6:bc:63:e2:73:fc:b6:73:55:1e:d8: 0c:05:3f:84:8f:2b:93:e4:c8:38:eb:d2:75:75:79: 0e:aa:2d:31:ed:d8:96:f2:62:62:dd:c7:07:96:61: c4:9c:94:e2:e7:d1:8c:ec:52:d0:f7:1d:c7:c7:0d: 50:f7:f4:8a:d9:05:a4:16:6e:33:4c:fc:e7:89:0c: 67:e8:30:7e:42:87:ed:a5:19:9a:c6:a0:eb:56:35: 40:1d:2e:25:50:76:64:dd:a2:fe:80:5c:05:bb:94: a4:b6:e3:5a:d8:9f:af:3f:0b:2a:46:78:04:77:80: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:35:67:13:1F:8A:B2:C2:9F:F9:7C:F2:4A:31:18:70:79:63:CD:81 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NTVnEx-KssKf-XzySjEYcHljzYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.142.0/24 195.19.92.0/24 Signature Algorithm: sha256WithRSAEncryption b5:e1:84:56:79:d4:03:6b:3b:ad:27:ad:ea:9e:15:57:09:19: 54:1a:ad:9c:9d:a3:9a:64:6f:b1:81:dd:0c:32:a8:e3:a6:22: ff:30:c4:cf:37:1c:2c:7a:89:dc:6b:41:16:66:95:83:31:08: f1:31:9d:42:f3:6f:17:3b:c2:19:a8:c7:38:87:bd:56:0e:3f: 64:8c:52:c4:56:b4:6d:cd:03:de:df:48:d4:df:b8:51:7f:a8: da:78:2d:92:0a:ee:f8:3c:74:5a:c8:ef:3f:91:18:3b:95:0a: a6:0f:ab:9b:db:97:9a:98:0f:ae:8b:10:43:f2:d1:60:99:8f: 5b:5f:f1:7d:1c:3f:16:6c:23:ef:cf:87:11:be:39:cf:88:4e: c1:9e:fb:08:be:99:76:cc:ec:e5:2e:86:0d:e1:e1:b9:f6:53: 21:c6:9a:fd:f8:5e:fb:30:2a:13:96:44:a0:20:db:da:21:28: 13:16:44:b6:2b:b8:91:52:a4:92:b5:d2:be:ed:fb:ca:49:6c: 66:5a:83:22:7b:5b:91:ff:7d:3b:e5:a6:22:00:df:53:02:ab: 27:a2:54:90:53:4e:ca:ed:2e:62:1e:6e:48:b0:9a:10:c2:1f: 50:a5:ec:06:5d:0b:c1:61:d6:f5:3b:f0:1e:f7:a9:a6:4d:8e: 1f:91:e4:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0jVdkv5WZK818ODIuALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTM1NjcxMzFmOGFiMmMyOWZmOTdjZjI0YTMxMTg3MDc5NjNjZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9z5oFPGaKXWFt2HpOO1B75f18Z KVjBy0BtVLL63q1AVH2xB/pge2vS7vAK6d/JiTPPj9iFpX6uhgtmvukyTy459scU zzCre8NvpG7jQZ5I4ceEuIvtLSN0m4m3OlF2DPhMNvtMkr029Lkul8HOQtityIDO llX+I4SjBfd4THpjktD6ilvqb3uiprxj4nP8tnNVHtgMBT+EjyuT5Mg469J1dXkO qi0x7diW8mJi3ccHlmHEnJTi59GM7FLQ9x3Hxw1Q9/SK2QWkFm4zTPzniQxn6DB+ QoftpRmaxqDrVjVAHS4lUHZk3aL+gFwFu5SktuNa2J+vPwsqRngEd4CBqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDU1ZxMfirLCn/l88koxGHB5Y82BMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvTlRWbkV4LUtzc0tmLVh6eVNqRVljSGxqellFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkyOAwQA wxNcMA0GCSqGSIb3DQEBCwUAA4IBAQC14YRWedQDazutJ63qnhVXCRlUGq2cnaOa ZG+xgd0MMqjjpiL/MMTPNxwseonca0EWZpWDMQjxMZ1C828XO8IZqMc4h71WDj9k jFLEVrRtzQPe30jU37hRf6jaeC2SCu74PHRayO8/kRg7lQqmD6ub25eamA+uixBD 8tFgmY9bX/F9HD8WbCPvz4cRvjnPiE7BnvsIvpl2zOzlLoYN4eG59lMhxpr9+F77 MCoTlkSgINvaISgTFkS2K7iRUqSStdK+7fvKSWxmWoMie1uR/3075aYiAN9TAqsn olSQU07K7S5iHm5IsJoQwh9QpewGXQvBYdb1O/Ae96mmTY4fkeQT -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:00 2026 by rpki-client