This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa File: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (raw, json) Hash identifier: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4= Subject key identifier: 9F:02:6D:58:1B:47:1C:23:97:6D:D0:D1:54:98:29:C1:4F:72:11:57 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019B78350007A858C0C658497831C339B30E Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43998 IP address blocks: 185.111.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:07:a8:58:c0:c6:58:49:78:31:c3:39:b3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f026d581b471c23976dd0d1549829c14f721157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bd:de:3c:13:5f:05:ca:22:65:e7:d2:de:8a: d4:de:f3:e5:af:f5:e8:fe:41:ac:32:95:c4:c0:4a: 99:f6:ef:c1:78:3a:58:73:ad:5f:04:c0:60:a1:b6: 3c:65:8e:3a:f0:e1:93:a8:13:36:72:68:97:4e:1c: 1f:39:2d:3c:d5:0c:7d:ba:80:39:66:69:92:b9:1a: 1d:ae:76:9e:0c:25:61:d8:c3:4e:32:6d:5e:35:00: 99:e8:a5:60:04:2c:fb:46:6b:0b:15:38:b6:c0:ff: ff:25:7d:2c:8d:d5:2f:df:d9:bd:04:d1:c9:0c:c1: 5c:37:3e:9a:2f:e3:df:32:97:0f:84:ec:26:18:e4: 7c:d0:5c:9d:6a:7d:a2:59:51:e1:db:60:6c:54:06: ef:30:72:88:ee:6a:ec:ef:89:08:81:05:40:de:17: d6:e6:fe:82:98:cb:a6:7f:75:4e:8f:7b:bf:a5:2c: db:16:8e:18:61:e6:8a:fa:6a:7a:01:c9:a2:06:6c: db:a5:d2:3f:55:12:c7:47:c2:55:b2:1c:b3:6e:d5: 55:2f:95:6a:25:cd:c9:cc:67:04:91:88:cc:50:5a: 82:d1:7e:e9:53:d4:6c:fc:ee:5f:51:c3:3c:f2:bb: 03:8d:e6:ee:cd:e6:9f:e8:45:6a:32:77:96:db:f5: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:6D:58:1B:47:1C:23:97:6D:D0:D1:54:98:29:C1:4F:72:11:57 X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:91:a0:86:f3:2e:27:9f:1d:ba:18:bc:22:92:f8:33:f6:32: 2d:b5:2f:5d:3c:30:6a:8a:87:e5:4f:12:08:6d:df:a1:9c:44: ff:85:55:41:2c:59:60:a4:76:5e:d0:d0:77:5e:95:8c:be:11: 41:e5:ad:33:0f:1c:ae:ca:15:2f:f2:eb:b9:d9:61:e0:db:db: ef:81:bd:5f:f3:87:45:8e:52:1c:68:52:ce:d4:52:3a:9a:25: 98:b1:0a:00:b4:4e:d0:21:92:a6:da:68:3d:69:ae:e7:df:e8: 54:82:07:df:50:b6:31:e0:a6:50:e5:f0:b6:2d:4b:4c:df:6e: 6f:14:51:45:12:b0:f7:b2:9a:92:f6:58:53:b9:92:1f:f0:40: 01:ba:52:62:f6:88:c0:3d:10:54:9b:4e:e2:0b:2b:fa:e3:8b: fa:51:2d:17:ff:a2:1d:c7:41:52:a1:97:2d:74:34:e1:28:3c: bc:40:60:60:04:cd:7e:1b:f3:9c:0e:55:05:e1:87:ca:e5:d8: 9b:d7:dd:4e:bd:04:7c:2b:01:db:a0:74:26:2b:d0:d1:da:ae: b3:32:26:27:af:86:ab:77:db:2d:29:5b:25:d2:25:67:8c:a2: 33:60:8e:03:7a:f2:38:78:ab:5e:dd:a2:e9:54:0a:69:8b:cc: 7e:6c:d1:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQAHqFjAxlhJeDHDObMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAyNmQ1ODFiNDcxYzIzOTc2ZGQwZDE1NDk4MjljMTRmNzIxMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b3ePBNfBcoiZefS3orU3vPlr/Xo /kGsMpXEwEqZ9u/BeDpYc61fBMBgobY8ZY468OGTqBM2cmiXThwfOS081Qx9uoA5 ZmmSuRodrnaeDCVh2MNOMm1eNQCZ6KVgBCz7RmsLFTi2wP//JX0sjdUv39m9BNHJ DMFcNz6aL+PfMpcPhOwmGOR80Fydan2iWVHh22BsVAbvMHKI7mrs74kIgQVA3hfW 5v6CmMumf3VOj3u/pSzbFo4YYeaK+mp6AcmiBmzbpdI/VRLHR8JVshyzbtVVL5Vq Jc3JzGcEkYjMUFqC0X7pU9Rs/O5fUcM88rsDjebuzeaf6EVqMneW2/U6wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8CbVgbRxwjl23Q0VSYKcFPchFXMB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvbndKdFdCdEhIQ09YYmREUlZKZ3B3VTl5RVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW90MA0G CSqGSIb3DQEBCwUAA4IBAQBdkaCG8y4nnx26GLwikvgz9jIttS9dPDBqioflTxII bd+hnET/hVVBLFlgpHZe0NB3XpWMvhFB5a0zDxyuyhUv8uu52WHg29vvgb1f84dF jlIcaFLO1FI6miWYsQoAtE7QIZKm2mg9aa7n3+hUggffULYx4KZQ5fC2LUtM325v FFFFErD3spqS9lhTuZIf8EABulJi9ojAPRBUm07iCyv644v6US0X/6Idx0FSoZct dDThKDy8QGBgBM1+G/OcDlUF4YfK5dib191OvQR8KwHboHQmK9DR2q6zMiYnr4ar d9stKVsl0iVnjKIzYI4DevI4eKte3aLpVAppi8x+bNHH -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:20 2026 by rpki-client