This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa File: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (raw, json) Hash identifier: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw= Subject key identifier: 35:69:86:FB:78:9B:DC:AF:67:CB:65:F6:BF:6B:93:C4:CD:03:42:A0 Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B77594B7A32911D07C42E6F523592820D Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43128 IP address blocks: 146.247.24.0/22 maxlen: 24 185.148.72.0/22 maxlen: 24 212.44.96.0/19 maxlen: 24 212.44.96.0/20 maxlen: 24 212.44.112.0/24 maxlen: 24 212.44.113.0/24 maxlen: 24 212.44.118.0/24 maxlen: 24 212.44.119.0/24 maxlen: 24 212.44.120.0/24 maxlen: 24 212.44.126.0/23 maxlen: 24 2a02:e8::/32 maxlen: 48 2a02:ec::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:7a:32:91:1d:07:c4:2e:6f:52:35:92:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356986fb789bdcaf67cb65f6bf6b93c4cd0342a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:ea:62:5a:12:8e:fb:a2:e3:84:39:9f:9c: 50:c8:f5:11:ee:5c:12:06:72:e2:bf:46:2a:a9:2d: a1:26:14:b9:82:2d:5c:37:62:f6:96:96:54:85:0a: 98:d1:cf:3e:1b:ae:10:df:90:8f:4c:9c:14:b7:57: 1c:3d:5c:a0:8f:77:df:3a:76:dc:cb:63:c0:3a:c5: 65:14:5f:e9:46:6b:bb:31:4b:3c:6b:93:e7:ff:e4: d9:32:98:a0:f3:dc:d8:b0:87:ad:3a:d6:92:04:45: 93:64:d4:e1:54:0c:84:37:1f:7a:2b:6e:91:2b:b1: 39:27:be:f2:ae:27:10:64:a8:23:3c:0d:fc:7e:25: d8:8d:ec:ea:d3:04:6b:cb:b0:8e:0f:3a:ed:c7:d6: 36:f7:9e:d7:d1:0c:2e:53:2e:e0:83:2a:1b:fa:16: 3a:35:89:42:cd:9b:21:56:1b:8c:dd:4c:9d:20:d4: a8:dd:9a:e0:51:d2:98:d0:4f:7e:fc:1c:45:5b:34: e6:93:65:ab:b8:35:4c:83:21:89:78:0b:79:09:da: 2f:e1:1e:59:2c:37:6d:8d:26:17:d6:64:2b:b0:6f: fd:f5:4d:f9:cb:18:ec:10:0b:ff:75:0f:26:46:25: e0:4f:cb:7b:b1:75:4f:83:17:ec:c1:de:bd:45:01: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:69:86:FB:78:9B:DC:AF:67:CB:65:F6:BF:6B:93:C4:CD:03:42:A0 X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.24.0/22 185.148.72.0/22 212.44.96.0/19 IPv6: 2a02:e8::/32 2a02:ec::/32 Signature Algorithm: sha256WithRSAEncryption 35:be:55:a9:34:5c:96:f5:89:a1:d5:36:4b:c7:8d:ef:c1:44: 29:2a:fa:10:66:ef:41:c7:8a:cd:6b:56:ce:a2:d8:ba:dc:2a: fe:80:f2:7c:25:d5:fb:10:ff:f1:de:05:3a:14:c0:5b:ca:de: 19:f6:5f:8c:bf:ab:34:6b:d1:03:73:57:3b:b1:c0:b3:6b:e0: 35:01:59:fc:04:15:90:af:99:4e:69:3d:ee:12:49:93:d9:3f: 2f:19:4f:c2:39:63:a8:43:8b:0a:83:28:01:b1:b4:54:2e:33: 8d:ed:fc:f9:ed:99:15:f2:84:b5:2b:02:2b:7a:9e:11:ef:67: db:0a:ce:5a:8b:4c:1e:dd:98:73:e7:d8:2e:0f:27:75:a4:6d: 16:29:da:ed:1b:85:02:7d:55:06:40:ca:7c:87:a8:aa:00:1d: c7:f2:ac:0f:41:19:1b:de:ad:7d:a0:6f:7c:5f:fa:78:db:72: e6:0c:ad:7e:b9:e9:2e:1d:c7:f7:57:91:fc:b0:70:e4:e6:00: 77:6d:67:c0:15:f3:80:98:dd:46:99:a7:e5:54:ca:85:23:c1: 51:89:46:ee:79:e6:35:47:2e:be:b2:30:4c:6d:83:99:da:5e: 71:71:67:22:41:c1:78:ac:cd:96:7c:56:69:8e:58:2a:1f:20: 4d:4b:34:96 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3WUt6MpEdB8Qub1I1koINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY5ODZmYjc4OWJkY2FmNjdjYjY1ZjZiZjZiOTNjNGNkMDM0MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3qYloSjvui44Q5n5xQyPUR7lwS BnLiv0YqqS2hJhS5gi1cN2L2lpZUhQqY0c8+G64Q35CPTJwUt1ccPVygj3ffOnbc y2PAOsVlFF/pRmu7MUs8a5Pn/+TZMpig89zYsIetOtaSBEWTZNThVAyENx96K26R K7E5J77yricQZKgjPA38fiXYjezq0wRry7CODzrtx9Y2957X0QwuUy7ggyob+hY6 NYlCzZshVhuM3UydINSo3ZrgUdKY0E9+/BxFWzTmk2WruDVMgyGJeAt5Cdov4R5Z LDdtjSYX1mQrsG/99U35yxjsEAv/dQ8mRiXgT8t7sXVPgxfswd69RQHp9QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDVphvt4m9yvZ8tl9r9rk8TNA0KgMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvTldtRy0zaWIzSzlueTJYMnYydVR4TTBEUXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCkvcYAwQC uZRIAwQF1CxgMBQEAgACMA4DBQAqAgDoAwUAKgIA7DANBgkqhkiG9w0BAQsFAAOC AQEANb5VqTRclvWJodU2S8eN78FEKSr6EGbvQceKzWtWzqLYutwq/oDyfCXV+xD/ 8d4FOhTAW8reGfZfjL+rNGvRA3NXO7HAs2vgNQFZ/AQVkK+ZTmk97hJJk9k/LxlP wjljqEOLCoMoAbG0VC4zje38+e2ZFfKEtSsCK3qeEe9n2wrOWotMHt2Yc+fYLg8n daRtFina7RuFAn1VBkDKfIeoqgAdx/KsD0EZG96tfaBvfF/6eNty5gytfrnpLh3H 91eR/LBw5OYAd21nwBXzgJjdRpmn5VTKhSPBUYlG7nnmNUcuvrIwTG2DmdpecXFn IkHBeKzNlnxWaY5YKh8gTUs0lg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:21 2026 by rpki-client