This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa File: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (raw, json) Hash identifier: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0= Subject key identifier: 9F:8D:02:0B:2D:41:0A:95:F9:89:FA:F0:2E:C3:75:16:9F:30:ED:DB Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C13351BAA75A997D21A4F353DF7F2FC Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7393 IP address blocks: 5.172.176.0/24 maxlen: 24 62.204.59.0/24 maxlen: 24 80.71.151.0/24 maxlen: 24 89.107.8.0/24 maxlen: 24 91.247.191.0/24 maxlen: 24 146.19.121.0/24 maxlen: 24 185.235.224.0/24 maxlen: 24 185.249.55.0/24 maxlen: 24 188.244.127.0/24 maxlen: 24 193.3.171.0/24 maxlen: 24 193.163.23.0/24 maxlen: 24 193.201.13.0/24 maxlen: 24 195.225.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:35:1b:aa:75:a9:97:d2:1a:4f:35:3d:f7:f2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8d020b2d410a95f989faf02ec375169f30eddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:f7:82:cd:0d:ea:7a:f7:04:f0:c0:b5:d1: 35:d5:02:18:6d:f0:aa:72:e4:42:78:22:f5:b5:37: 9f:d8:ca:7c:5e:b7:e1:f9:88:9a:e8:07:27:4b:b4: 46:31:01:e1:ad:7c:e7:97:14:74:2b:05:d5:86:78: 27:12:92:fe:da:5c:07:d2:03:5d:82:f6:e5:e7:86: 8e:bc:51:89:54:9b:81:68:95:23:45:fe:e9:3f:ae: a3:12:ba:3c:60:3a:bd:20:e1:53:fc:31:72:ba:2f: d6:52:34:b8:eb:ea:63:4f:06:23:a6:b9:a3:ab:17: 2d:d9:5c:39:56:20:bd:15:5c:b5:da:56:2f:e2:cb: 3d:39:9b:14:97:9c:d4:38:ab:a7:ce:8b:08:ff:91: cd:ea:c3:d4:2c:cb:24:ee:d1:cf:5a:60:fc:5b:fb: 44:cf:04:ee:f5:c9:d3:7f:9a:21:9c:c0:2a:52:28: e9:a7:e4:ca:93:02:ba:15:cd:e9:98:e2:d8:15:5b: d9:b6:f6:cf:78:fe:c6:22:82:b6:bf:a5:32:14:f8: 90:0a:39:e4:b3:f3:32:b7:f1:d1:a1:db:f8:17:54: 1f:93:2f:1b:95:2d:5e:0c:e1:ff:39:a6:82:43:7a: e5:b1:d6:f7:ae:87:99:06:de:68:80:43:a8:4b:e9: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8D:02:0B:2D:41:0A:95:F9:89:FA:F0:2E:C3:75:16:9F:30:ED:DB X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.176.0/24 62.204.59.0/24 80.71.151.0/24 89.107.8.0/24 91.247.191.0/24 146.19.121.0/24 185.235.224.0/24 185.249.55.0/24 188.244.127.0/24 193.3.171.0/24 193.163.23.0/24 193.201.13.0/24 195.225.97.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:8e:77:ed:97:14:1e:4b:06:d5:d3:0e:84:94:e6:2d:8a:a8: 71:f1:21:ca:4e:d6:e9:21:d3:7c:12:f3:11:28:9a:bd:3b:18: 3c:79:d5:d1:34:88:c3:a5:05:41:b8:95:0d:d2:92:ea:5c:e6: 0f:26:af:4d:52:6c:4c:fc:89:45:2a:58:6b:8c:8e:16:30:a9: 62:d6:43:04:6d:0d:9c:ac:70:98:bd:46:24:1d:53:f1:b5:d5: 7c:40:55:ce:f3:06:96:ea:dd:8e:ab:b5:d0:30:2b:b1:8f:91: 0e:36:86:fa:db:ef:ad:0e:2a:44:3a:4d:ce:5e:f9:25:63:53: 09:3a:e9:e7:8f:43:5b:7d:03:73:d1:25:03:49:51:e5:cc:ef: cb:e2:b8:4c:bd:1c:7a:df:6c:f5:cf:9f:40:c5:ac:40:bd:aa: 8c:65:92:33:71:bc:69:07:3a:40:ad:76:40:6d:0e:5d:63:8c: 7f:e5:63:56:fa:7f:85:05:5c:4c:12:70:69:44:74:3b:c5:42: 36:43:be:48:6e:47:76:67:b3:dc:44:20:f9:cc:70:80:d1:71: 70:33:d2:ce:29:0f:3d:19:b8:7f:2d:4c:70:fa:4f:20:49:ea: 72:d6:1a:a7:b4:12:3b:8c:08:bc:3e:af:e3:1e:d9:ce:d1:d4: 62:65:58:b8 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt8EzUbqnWpl9IaTzU99/L8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjhkMDIwYjJkNDEwYTk1Zjk4OWZhZjAyZWMzNzUxNjlmMzBlZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/33gs0N6nr3BPDAtdE11QIYbfCq cuRCeCL1tTef2Mp8Xrfh+Yia6AcnS7RGMQHhrXznlxR0KwXVhngnEpL+2lwH0gNd gvbl54aOvFGJVJuBaJUjRf7pP66jEro8YDq9IOFT/DFyui/WUjS46+pjTwYjprmj qxct2Vw5ViC9FVy12lYv4ss9OZsUl5zUOKunzosI/5HN6sPULMsk7tHPWmD8W/tE zwTu9cnTf5ohnMAqUijpp+TKkwK6Fc3pmOLYFVvZtvbPeP7GIoK2v6UyFPiQCjnk s/Myt/HRodv4F1Qfky8blS1eDOH/OaaCQ3rlsdb3roeZBt5ogEOoS+ke2QIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFJ+NAgstQQqV+Yn68C7DdRafMO3bMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbjQwQ0N5MUJDcFg1aWZyd0xzTjFGcDh3N2RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABaywAwQA Psw7AwQAUEeXAwQAWWsIAwQAW/e/AwQAkhN5AwQAuevgAwQAufk3AwQAvPR/AwQA wQOrAwQAwaMXAwQAwckNAwQAw+FhMA0GCSqGSIb3DQEBCwUAA4IBAQBsjnftlxQe SwbV0w6ElOYtiqhx8SHKTtbpIdN8EvMRKJq9Oxg8edXRNIjDpQVBuJUN0pLqXOYP Jq9NUmxM/IlFKlhrjI4WMKli1kMEbQ2crHCYvUYkHVPxtdV8QFXO8waW6t2Oq7XQ MCuxj5EONob62++tDipEOk3OXvklY1MJOunnj0NbfQNz0SUDSVHlzO/L4rhMvRx6 32z1z59AxaxAvaqMZZIzcbxpBzpArXZAbQ5dY4x/5WNW+n+FBVxMEnBpRHQ7xUI2 Q75Ibkd2Z7PcRCD5zHCA0XFwM9LOKQ89Gbh/LUxw+k8gSepy1hqntBI7jAi8Pq/j HtnO0dRiZVi4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client