This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Npq1TNKuwMiLXj4xggfpdtKHUTs.roa File: Npq1TNKuwMiLXj4xggfpdtKHUTs.roa (raw, json) Hash identifier: pux+9ScdO8KAjs6UbE4YP82eUBIvaNdfwIFp9r1xoyQ= Subject key identifier: 36:9A:B5:4C:D2:AE:C0:C8:8B:5E:3E:31:82:07:E9:76:D2:87:51:3B Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019A9D59C600BE2D87A1956B3FFDB1C6F1BC Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Npq1TNKuwMiLXj4xggfpdtKHUTs.roa Signing time: Wed 19 Nov 2025 18:21:37 +0000 ROA not before: Wed 19 Nov 2025 18:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33659 IP address blocks: 62.106.83.0/24 maxlen: 24 77.246.242.0/24 maxlen: 24 193.109.82.0/24 maxlen: 24 194.26.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:59:c6:00:be:2d:87:a1:95:6b:3f:fd:b1:c6:f1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Nov 19 18:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=369ab54cd2aec0c88b5e3e318207e976d287513b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:9c:78:d7:a3:40:fc:0e:34:64:41:de:36: 42:2a:d8:89:3b:54:38:4d:18:c8:21:29:f7:8b:fc: 03:6e:b0:86:18:65:3c:67:a4:d2:7b:af:90:34:72: 13:2b:36:e1:8e:a3:73:34:1c:e3:e8:c4:1e:e1:18: fd:b3:e7:9e:ef:70:d5:83:3f:41:1a:d3:89:dd:84: f5:4d:4c:5b:4e:d7:eb:27:63:a3:17:f1:93:7b:66: 9c:ad:c4:97:f0:27:c3:20:1b:d9:8e:6a:42:91:a2: a5:bc:df:85:6a:c7:f9:c0:ce:79:17:3b:34:91:c5: b8:0d:11:60:04:9b:b5:b2:36:3a:62:b2:1d:4f:eb: 93:93:9d:32:69:7b:25:21:76:15:ae:9f:31:79:d4: 8b:c5:2a:75:c3:39:7e:4d:1b:77:1e:77:b3:ef:e0: fb:f4:99:40:60:f0:59:84:de:81:99:e8:85:ab:2d: 30:19:51:9f:97:e3:ab:ec:a6:88:34:fc:25:e5:67: f1:c5:50:9b:9b:18:3a:71:6e:b6:8b:e1:29:a0:40: 6d:13:e2:59:45:37:98:e8:d9:24:db:e7:42:7c:3d: c5:76:85:dd:a0:d6:28:87:53:a6:3c:7a:72:aa:e3: 82:ad:e2:2f:07:d2:4b:54:6a:29:e1:19:cb:3a:07: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:B5:4C:D2:AE:C0:C8:8B:5E:3E:31:82:07:E9:76:D2:87:51:3B X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Npq1TNKuwMiLXj4xggfpdtKHUTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.83.0/24 77.246.242.0/24 193.109.82.0/24 194.26.218.0/24 Signature Algorithm: sha256WithRSAEncryption 84:5c:5d:2a:00:ee:82:d3:ba:a0:51:12:7e:5b:2c:05:b4:f4: 2a:c4:6f:0e:a6:80:7c:39:b4:fe:e2:14:28:f7:cb:29:4c:44: 7b:d4:1b:96:dc:54:4c:8d:89:72:83:5f:a9:2b:dd:e9:36:e8: 0c:82:c5:57:26:ed:9b:93:78:a6:3d:60:65:a1:bd:c8:86:d1: a2:6b:4f:80:f4:95:4a:4e:fb:8a:c2:2e:a1:e9:b9:29:14:ee: 63:e1:83:19:92:7a:c3:79:90:fd:51:70:69:bd:f3:d8:56:36: 8e:14:e9:7a:f9:a0:67:57:3a:ed:8e:75:6a:fd:89:ae:95:a0: bb:1b:aa:7c:33:1b:f0:e6:5c:eb:dd:79:c4:c8:f2:3a:75:9e: 7e:c0:bb:25:1e:58:6c:ee:fa:30:8e:51:33:b4:3a:a7:61:67: 8b:44:e3:8f:cc:f8:56:50:4a:73:93:ae:3a:46:1f:d6:a1:2b: 97:aa:03:54:3e:2b:22:7d:97:06:56:27:ea:c5:e5:92:fe:30: ed:f0:c9:f4:c4:f7:af:59:2c:d0:d2:2c:23:f2:23:30:c5:7b: 37:a6:b5:da:26:9a:e2:ed:35:e2:27:c4:3b:09:8d:ce:3b:98: db:26:5f:a7:f9:55:d7:35:3d:3f:34:d1:ab:49:9f:d7:97:82: 5b:e5:ad:54 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqdWcYAvi2HoZVrP/2xxvG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMTE5MTgyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlhYjU0Y2QyYWVjMGM4OGI1ZTNlMzE4MjA3ZTk3NmQyODc1MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qOceNejQPwONGRB3jZCKtiJO1Q4 TRjIISn3i/wDbrCGGGU8Z6TSe6+QNHITKzbhjqNzNBzj6MQe4Rj9s+ee73DVgz9B GtOJ3YT1TUxbTtfrJ2OjF/GTe2acrcSX8CfDIBvZjmpCkaKlvN+Fasf5wM55Fzs0 kcW4DRFgBJu1sjY6YrIdT+uTk50yaXslIXYVrp8xedSLxSp1wzl+TRt3Hnez7+D7 9JlAYPBZhN6BmeiFqy0wGVGfl+Or7KaINPwl5WfxxVCbmxg6cW62i+EpoEBtE+JZ RTeY6Nkk2+dCfD3FdoXdoNYoh1OmPHpyquOCreIvB9JLVGop4RnLOgfuZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDaatUzSrsDIi14+MYIH6XbSh1E7MB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvTnBxMVROS3V3TWlMWGo0eGdnZnBkdEtIVVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPmpTAwQA TfbyAwQAwW1SAwQAwhraMA0GCSqGSIb3DQEBCwUAA4IBAQCEXF0qAO6C07qgURJ+ WywFtPQqxG8OpoB8ObT+4hQo98spTER71BuW3FRMjYlyg1+pK93pNugMgsVXJu2b k3imPWBlob3IhtGia0+A9JVKTvuKwi6h6bkpFO5j4YMZknrDeZD9UXBpvfPYVjaO FOl6+aBnVzrtjnVq/YmulaC7G6p8Mxvw5lzr3XnEyPI6dZ5+wLslHlhs7vowjlEz tDqnYWeLROOPzPhWUEpzk646Rh/WoSuXqgNUPisifZcGVifqxeWS/jDt8Mn0xPev WSzQ0iwj8iMwxXs3prXaJpri7TXiJ8Q7CY3OO5jbJl+n+VXXNT0/NNGrSZ/Xl4Jb 5a1U -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:06 2025 by rpki-client