This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NxEDLtsFouO05fRaksvMemsGsX8.roa File: NxEDLtsFouO05fRaksvMemsGsX8.roa (raw, json) Hash identifier: ntuzARseJiRCKRKE8Y6KCeBxSAAjx2rrROAhijcglkc= Subject key identifier: 37:11:03:2E:DB:05:A2:E3:B4:E5:F4:5A:92:CB:CC:7A:6B:06:B1:7F Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73B863D1BF956EFE2817558F2A881 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NxEDLtsFouO05fRaksvMemsGsX8.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51054 IP address blocks: 62.76.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:86:3d:1b:f9:56:ef:e2:81:75:58:f2:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3711032edb05a2e3b4e5f45a92cbcc7a6b06b17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4b:5c:9f:7c:e7:61:55:b0:d3:09:f3:6f:12: af:b3:bd:45:99:07:08:27:76:3f:e6:f2:12:75:1f: 0d:1e:e0:25:81:b6:ed:7a:6b:6d:a7:28:24:4e:39: 88:46:6e:6a:cc:18:ea:37:ad:b5:10:5c:1d:9b:60: 7c:bd:2a:d2:7c:7d:c8:bf:96:e9:e2:b8:8d:a3:4d: 2b:91:9f:64:61:ff:b3:d8:27:6c:78:e0:7a:b4:43: 1a:5c:b6:9f:02:22:02:0a:ea:47:f8:23:8c:52:c7: 80:dd:fd:e1:10:13:0e:0d:f0:91:c9:21:0a:b5:e4: a5:b9:ae:87:c3:b9:ec:ea:27:c0:ca:92:d7:f6:1e: ee:75:0c:ff:9d:5a:77:09:79:4e:b9:45:67:6d:8f: d9:d5:d9:b1:1f:db:0c:5c:78:8c:88:1d:19:7b:db: 9a:15:3d:bf:5e:78:bb:e5:c3:56:db:a1:4b:00:a6: fa:5b:eb:a2:d9:f1:ef:f9:9f:37:d5:60:72:79:da: 4e:21:d6:36:70:30:fc:99:58:2f:99:77:ec:6c:2b: 2c:6b:a6:83:10:87:8c:bd:2e:46:c3:6d:cf:2b:6f: 28:75:93:52:ad:ea:3c:54:0e:d5:b0:f9:8f:ec:ac: a1:ce:99:0b:66:0f:18:38:3e:d2:ae:3c:a9:ad:a8: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:11:03:2E:DB:05:A2:E3:B4:E5:F4:5A:92:CB:CC:7A:6B:06:B1:7F X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NxEDLtsFouO05fRaksvMemsGsX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:96:32:99:dd:f9:b3:c6:5f:b7:9c:f7:b4:19:42:66:50:a6: 74:c2:1d:81:49:ca:27:19:65:8b:68:54:6d:15:91:a5:c5:0d: ea:b1:fa:da:18:de:ae:5e:48:18:2d:f0:52:bf:01:23:b9:70: 1c:fd:81:cf:c2:2e:0f:6a:42:19:4f:06:16:ff:2b:de:31:5a: fe:7b:d3:e9:cb:c6:01:6f:48:3e:f6:95:39:70:0b:02:a6:d2: 35:7b:2e:6a:63:ef:16:d7:95:b3:9d:a2:d9:cc:71:5a:75:a8: bb:2b:65:51:b4:52:6c:7c:08:72:6e:b8:b3:38:b2:80:de:69: 84:0a:de:5b:61:41:29:d9:aa:de:cf:09:86:4b:dd:b0:58:0d: 7c:c7:34:b6:85:80:c3:d2:5a:b9:a3:5b:17:66:db:50:f1:bf: d3:70:7d:28:35:16:3c:df:5c:3b:f6:4e:ad:e8:6b:0e:df:ae: f5:01:52:38:72:1f:1a:d2:e4:22:84:2c:f9:3e:86:51:fe:e6: e3:2f:f0:13:40:7e:e7:f5:42:61:c3:79:6c:cb:27:56:bc:29: f9:dc:77:4e:86:b6:f8:b2:67:b4:43:05:1f:49:62:a3:27:4b: b7:18:6d:d7:cc:2f:76:c4:f6:d7:ff:27:e3:bb:b3:bc:be:0a: bd:14:73:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzuGPRv5Vu/igXVY8qiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzExMDMyZWRiMDVhMmUzYjRlNWY0NWE5MmNiY2M3YTZiMDZiMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEtcn3znYVWw0wnzbxKvs71FmQcI J3Y/5vISdR8NHuAlgbbtemttpygkTjmIRm5qzBjqN621EFwdm2B8vSrSfH3Iv5bp 4riNo00rkZ9kYf+z2CdseOB6tEMaXLafAiICCupH+COMUseA3f3hEBMODfCRySEK teSlua6Hw7ns6ifAypLX9h7udQz/nVp3CXlOuUVnbY/Z1dmxH9sMXHiMiB0Ze9ua FT2/Xni75cNW26FLAKb6W+ui2fHv+Z831WByedpOIdY2cDD8mVgvmXfsbCssa6aD EIeMvS5Gw23PK28odZNSreo8VA7VsPmP7KyhzpkLZg8YOD7SrjyprahIuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcRAy7bBaLjtOX0WpLLzHprBrF/MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvTnhFREx0c0ZvdU8wNWZSYWtzdk1lbXNHc1g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkxGMA0G CSqGSIb3DQEBCwUAA4IBAQA/ljKZ3fmzxl+3nPe0GUJmUKZ0wh2BSconGWWLaFRt FZGlxQ3qsfraGN6uXkgYLfBSvwEjuXAc/YHPwi4PakIZTwYW/yveMVr+e9Ppy8YB b0g+9pU5cAsCptI1ey5qY+8W15WznaLZzHFadai7K2VRtFJsfAhybrizOLKA3mmE Ct5bYUEp2arezwmGS92wWA18xzS2hYDD0lq5o1sXZttQ8b/TcH0oNRY831w79k6t 6GsO3671AVI4ch8a0uQihCz5PoZR/ubjL/ATQH7n9UJhw3lsyydWvCn53HdOhrb4 sme0QwUfSWKjJ0u3GG3XzC92xPbX/yfju7O8vgq9FHMi -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:05 2026 by rpki-client