This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa File: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (raw, json) Hash identifier: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo= Subject key identifier: 36:0D:03:41:60:C7:4C:19:85:4B:1E:70:BF:71:49:DF:99:65:81:CB Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Certificate serial: 019B7C1298242FAE692A69991A1D30B46EF1 Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa Signing time: Fri 02 Jan 2026 00:19:11 +0000 ROA not before: Fri 02 Jan 2026 00:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 194.147.196.0/22 maxlen: 24 194.147.200.0/21 maxlen: 24 2001:67c:2ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:98:24:2f:ae:69:2a:69:99:1a:1d:30:b4:6e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=360d034160c74c19854b1e70bf7149df996581cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:d3:c2:11:7b:20:a7:3b:d5:51:26:d3:07: ee:be:6d:07:5f:4b:2d:78:42:4c:b1:98:e7:fa:26: 41:f3:66:34:1f:02:91:53:84:79:fb:ea:b8:85:91: 67:15:f6:e8:e6:79:a7:28:d2:3f:78:dc:e7:07:07: 14:59:6f:12:c1:bc:45:4d:dd:f3:c0:a3:0e:62:e8: 3f:c6:29:ad:29:8d:6a:11:10:c3:ad:c0:1a:92:85: 1c:48:d4:50:9f:74:cc:29:3c:8f:bd:d9:67:99:9c: df:39:54:42:6f:77:54:1f:df:08:f4:ea:a7:c2:1d: 6b:12:c5:83:b4:50:71:68:98:40:ff:d8:30:62:d0: 62:67:56:34:2c:74:68:e5:1c:f4:9f:1f:e0:7b:3d: 9c:88:17:73:a0:fc:22:fe:12:68:32:cc:04:a1:23: b6:a3:3d:6a:18:f8:d9:e6:2d:10:25:70:1a:03:60: 55:39:f2:be:25:66:a7:7e:a0:12:b7:0a:ce:2c:15: 9a:7c:fb:58:f3:d1:89:25:2b:e9:8b:27:e2:f4:83: 3b:2c:4d:9b:b8:cd:14:a1:ca:8d:fe:36:31:be:3a: 0d:bb:e4:e9:29:24:a3:c8:fc:a3:c4:5e:92:d3:71: 9d:f9:61:8d:2a:1d:3c:b2:e2:c9:c1:fc:1f:13:9d: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:03:41:60:C7:4C:19:85:4B:1E:70:BF:71:49:DF:99:65:81:CB X509v3 Authority Key Identifier: keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.196.0-194.147.207.255 IPv6: 2001:67c:2ec0::/48 Signature Algorithm: sha256WithRSAEncryption a0:2e:38:2f:10:4a:77:0c:6f:42:4e:d0:9b:a2:6c:4e:76:87: 01:20:c2:70:ef:9d:9d:25:7a:be:55:64:c6:15:70:4b:79:70: b2:8a:3c:54:1f:06:8c:30:81:ed:a8:db:e5:94:4e:54:40:80: cd:ce:8e:0a:9b:e3:cb:ac:38:77:a0:7b:e0:1f:a3:e9:83:ee: 5a:7b:d8:17:93:a5:1f:a8:e3:60:2e:4d:0b:55:3c:c3:de:ef: 47:04:42:a0:5f:a9:52:71:f0:f5:a2:9b:8f:80:a8:85:67:e7: 61:c7:c1:12:7e:0f:ed:f9:f6:e8:94:00:28:d0:c7:31:c7:10: 22:c3:d9:43:0e:37:aa:3d:41:4b:3a:a3:a4:f9:aa:65:1c:0d: a7:71:7b:9d:3d:2a:19:95:31:c4:26:a4:7b:d8:e4:41:3a:68: 1a:f9:4c:b2:5c:17:00:b9:3e:a5:e5:9c:33:11:79:0f:5c:de: 79:2f:42:5f:9f:6e:b8:0b:d7:1e:20:3d:10:1a:71:1e:9a:5f: 50:32:50:47:50:1a:da:df:00:9b:5f:38:5d:2b:a3:85:65:76: 9e:b4:c3:dd:99:51:f5:c6:48:ba:d8:ee:36:3a:74:2c:03:ea: 21:95:98:32:ed:5c:14:8f:79:88:b9:e8:1b:bc:49:a3:e3:cd: ed:e3:f1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8EpgkL65pKmmZGh0wtG7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj NzNiMWMwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjBkMDM0MTYwYzc0YzE5ODU0YjFlNzBiZjcxNDlkZjk5NjU4MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvTwhF7IKc71VEm0wfuvm0HX0st eEJMsZjn+iZB82Y0HwKRU4R5++q4hZFnFfbo5nmnKNI/eNznBwcUWW8SwbxFTd3z wKMOYug/ximtKY1qERDDrcAakoUcSNRQn3TMKTyPvdlnmZzfOVRCb3dUH98I9Oqn wh1rEsWDtFBxaJhA/9gwYtBiZ1Y0LHRo5Rz0nx/gez2ciBdzoPwi/hJoMswEoSO2 oz1qGPjZ5i0QJXAaA2BVOfK+JWanfqAStwrOLBWafPtY89GJJSvpiyfi9IM7LE2b uM0UocqN/jYxvjoNu+TpKSSjyPyjxF6S03Gd+WGNKh08suLJwfwfE50+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYNA0Fgx0wZhUsecL9xSd+ZZYHLMB8GA1UdIwQY MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt NGFkNDAzNWZhZTdiLzEvTmcwRFFXREhUQm1GU3g1d3YzRkozNWxsZ2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBALCk8QD BATCk8AwDwQCAAIwCQMHACABBnwuwDANBgkqhkiG9w0BAQsFAAOCAQEAoC44LxBK dwxvQk7Qm6JsTnaHASDCcO+dnSV6vlVkxhVwS3lwsoo8VB8GjDCB7ajb5ZROVECA zc6OCpvjy6w4d6B74B+j6YPuWnvYF5OlH6jjYC5NC1U8w97vRwRCoF+pUnHw9aKb j4CohWfnYcfBEn4P7fn26JQAKNDHMccQIsPZQw43qj1BSzqjpPmqZRwNp3F7nT0q GZUxxCake9jkQTpoGvlMslwXALk+peWcMxF5D1zeeS9CX59uuAvXHiA9EBpxHppf UDJQR1Aa2t8Am184XSujhWV2nrTD3ZlR9cZIutjuNjp0LAPqIZWYMu1cFI95iLno G7xJo+PN7ePx2w== -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:19 2026 by rpki-client