This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/NrZRCuerFzj4EhFGKoh_NKbZNxM.roa File: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (raw, json) Hash identifier: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs= Subject key identifier: 36:B6:51:0A:E7:AB:17:38:F8:12:11:46:2A:88:7F:34:A6:D9:37:13 Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Certificate serial: 019B7F15296CD15A392401912619B751BA00 Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/NrZRCuerFzj4EhFGKoh_NKbZNxM.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20625 IP address blocks: 2001:67c:1784::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:29:6c:d1:5a:39:24:01:91:26:19:b7:51:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b6510ae7ab1738f81211462a887f34a6d93713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:ef:df:fc:0a:75:56:88:e9:6a:1f:b5:4b: a0:e5:71:ac:86:ff:72:f3:76:e5:f8:e1:96:a1:29: 1d:af:e5:ce:94:f0:38:14:a8:00:4c:7f:14:c0:be: 65:7f:e9:e3:99:d0:ed:60:8c:31:1d:48:5f:3e:de: 4a:d4:4b:74:f6:32:c6:f3:0c:49:67:ef:2e:78:65: 7e:2e:bb:9d:52:a7:f8:87:8e:20:e9:68:53:97:a5: 16:78:9d:74:e9:f5:91:b3:c8:01:58:60:06:73:06: 9e:3a:b5:fa:69:04:48:11:36:a2:28:5d:91:88:77: dc:9a:96:65:32:a1:63:47:8f:fe:2d:f6:ca:b4:72: 1d:a8:3f:eb:c6:2b:c9:1a:48:73:ab:bf:56:be:b4: 4b:dd:b3:05:c8:be:48:9f:a3:74:dd:0e:6d:cc:d1: 6c:eb:52:54:55:79:65:59:25:07:cb:0d:f9:e4:3c: 89:a5:68:de:b6:04:d0:20:35:7a:b9:2e:a5:e0:f0: ba:9b:be:63:d2:2a:6b:7b:e8:ec:96:14:2c:77:a8: c0:6d:de:54:bc:bb:16:06:98:60:09:be:d6:2f:64: a4:33:1d:fb:6b:2a:5b:45:e2:bf:84:3e:0e:f5:2f: f1:76:a8:f0:bd:33:5d:1e:97:96:5b:8f:7d:ee:7d: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B6:51:0A:E7:AB:17:38:F8:12:11:46:2A:88:7F:34:A6:D9:37:13 X509v3 Authority Key Identifier: keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/NrZRCuerFzj4EhFGKoh_NKbZNxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1784::/48 Signature Algorithm: sha256WithRSAEncryption 06:97:d5:af:fc:83:bf:ff:3e:5a:cb:b1:c9:a9:d5:cc:ac:5c: 87:57:be:80:1c:9c:46:36:02:9c:e3:21:9b:d8:0b:b9:78:f1: 42:66:b8:96:55:10:3f:d0:cd:2d:d9:7f:8b:54:fb:c0:fe:f6: 17:92:03:75:36:fd:4a:8b:7f:e5:7d:e9:de:83:79:66:74:00: 27:0c:a6:6a:2b:f5:9d:6f:30:14:72:fb:5c:ab:ac:b6:24:f9: 8a:a1:81:4b:ba:05:bd:e5:6e:1b:ed:37:02:19:08:19:a7:f5: ff:8b:ee:c5:c3:93:9e:cb:d2:24:46:9f:74:07:6f:9f:52:9e: 9f:f5:bd:d5:7e:43:f9:ef:e5:8c:7f:b0:c5:c1:5a:f8:2c:19: e3:fc:b3:16:5b:28:39:09:94:cb:11:2c:18:08:34:3a:73:24: f4:03:8a:ba:18:39:74:ce:a8:69:7c:d7:0e:ec:8b:c0:1d:5d: 8f:53:99:d7:f9:5d:27:41:eb:25:ba:fd:a3:55:65:36:8d:c2: 94:42:c4:e0:c2:32:0f:06:7e:b8:f5:25:e4:a9:46:ec:03:0c: c9:b9:38:b2:68:9d:5d:56:49:1c:8f:f0:ff:c0:f1:10:12:3e: e2:a5:13:38:7c:b3:32:04:82:13:28:9c:fb:8f:03:61:ff:95: 0c:0c:82:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FSls0Vo5JAGRJhm3UboAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMTEwYTJiMGFlYjM3ZjBjOTMyYTk2YmRiYmY3ZWYzNmMy MTE5N2MwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI2NTEwYWU3YWIxNzM4ZjgxMjExNDYyYTg4N2YzNGE2ZDkzNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLv3/wKdVaI6WoftUug5XGshv9y 83bl+OGWoSkdr+XOlPA4FKgATH8UwL5lf+njmdDtYIwxHUhfPt5K1Et09jLG8wxJ Z+8ueGV+LrudUqf4h44g6WhTl6UWeJ106fWRs8gBWGAGcwaeOrX6aQRIETaiKF2R iHfcmpZlMqFjR4/+LfbKtHIdqD/rxivJGkhzq79WvrRL3bMFyL5In6N03Q5tzNFs 61JUVXllWSUHyw355DyJpWjetgTQIDV6uS6l4PC6m75j0ipre+jslhQsd6jAbd5U vLsWBphgCb7WL2SkMx37aypbReK/hD4O9S/xdqjwvTNdHpeWW4997n1UQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDa2UQrnqxc4+BIRRiqIfzSm2TcTMB8GA1UdIwQY MBaAFFwRCisK6zfwyTKpa9u/fvNsIRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzIt YTQ0MjI0ZmFjM2ZmLzEvTnJaUkN1ZXJGemo0RWhGR0tvaF9OS2JaTnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzItYTQ0MjI0ZmFjM2Zm LzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBeE MA0GCSqGSIb3DQEBCwUAA4IBAQAGl9Wv/IO//z5ay7HJqdXMrFyHV76AHJxGNgKc 4yGb2Au5ePFCZriWVRA/0M0t2X+LVPvA/vYXkgN1Nv1Ki3/lfeneg3lmdAAnDKZq K/WdbzAUcvtcq6y2JPmKoYFLugW95W4b7TcCGQgZp/X/i+7Fw5Oey9IkRp90B2+f Up6f9b3VfkP57+WMf7DFwVr4LBnj/LMWWyg5CZTLESwYCDQ6cyT0A4q6GDl0zqhp fNcO7IvAHV2PU5nX+V0nQesluv2jVWU2jcKUQsTgwjIPBn649SXkqUbsAwzJuTiy aJ1dVkkcj/D/wPEQEj7ipRM4fLMyBIITKJz7jwNh/5UMDIKV -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:51 2026 by rpki-client