This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/nwIwVLXIvem69G9q9KDnzvsmAhg.roa File: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (raw, json) Hash identifier: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo= Subject key identifier: 9F:02:30:54:B5:C8:BD:E9:BA:F4:6F:6A:F4:A0:E7:CE:FB:26:02:18 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019B7C126942EB85D983FBE02F53399FEE0B Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/nwIwVLXIvem69G9q9KDnzvsmAhg.roa Signing time: Fri 02 Jan 2026 00:18:59 +0000 ROA not before: Fri 02 Jan 2026 00:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209517 IP address blocks: 176.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:69:42:eb:85:d9:83:fb:e0:2f:53:39:9f:ee:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f023054b5c8bde9baf46f6af4a0e7cefb260218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:6b:b3:d2:bf:1a:9c:01:51:17:48:1d:84: 2c:a8:bc:93:af:ff:b6:b0:42:2d:28:82:a4:d0:31: 2f:6c:1b:8d:7b:63:f3:96:e6:42:16:e6:ee:b6:27: 04:84:26:27:83:01:fa:dc:b6:de:19:3f:8c:dd:0f: 63:82:31:b0:30:7c:dd:69:72:f6:cd:85:6c:82:9c: 95:0e:ee:af:a0:96:a5:4b:d7:77:0d:e3:b9:c3:16: f2:ef:7d:33:0c:5f:1d:68:ad:ab:83:df:68:86:3e: 4a:8e:41:8a:95:ae:f7:97:1e:b9:03:8c:6b:d2:fb: fc:cf:d5:a2:a8:47:61:2a:f9:2d:96:1c:24:26:a0: d9:a4:83:6b:21:d5:d9:ee:22:c1:a7:c3:ad:6a:2a: a7:d6:cf:d4:f2:45:5b:ab:4a:cc:67:e7:63:a8:eb: 7c:d0:5d:84:4f:c1:50:4e:61:15:c0:1f:b6:fa:3c: 23:3e:6c:9d:ea:2c:2b:8c:3d:21:7d:0b:f9:1d:7c: 57:cf:72:24:66:f6:3f:41:20:37:a8:2d:e3:de:4a: 5d:bf:80:09:fa:b0:3a:f3:d4:67:4a:07:68:ab:b0: bf:ae:9a:91:23:0c:e1:39:62:57:f9:72:33:7e:bc: e7:ca:6d:a8:a7:07:74:24:d0:a7:b0:85:3d:1d:af: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:30:54:B5:C8:BD:E9:BA:F4:6F:6A:F4:A0:E7:CE:FB:26:02:18 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/nwIwVLXIvem69G9q9KDnzvsmAhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.96.224.0/24 Signature Algorithm: sha256WithRSAEncryption 10:91:5b:05:9d:c4:b3:8d:24:16:03:ce:a8:8d:76:e0:da:8b: 43:87:1c:3e:26:20:38:38:52:4c:58:ea:d0:23:b9:f5:b8:7a: c8:89:0d:56:a1:d3:6b:ef:5f:55:67:ec:87:25:b1:7f:e3:58: 4a:9b:11:0a:1f:08:dd:9e:e3:a1:39:c9:7b:6e:ce:49:90:91: cf:77:3c:02:10:8b:a2:4f:32:a0:db:87:55:b9:a0:11:9d:5f: 57:19:1f:70:30:7e:c7:ac:2a:50:b5:3e:0d:08:fb:0f:4a:be: 9d:b9:e3:2e:2f:f1:b6:4a:8e:86:80:2c:61:44:eb:89:e4:0c: 09:5d:e8:55:db:47:d3:fc:ea:f5:44:99:09:e0:35:8e:c2:da: 27:cb:e8:a9:c7:d9:92:23:11:f0:96:bd:90:21:ab:ee:07:ea: 3a:2d:c9:fe:f2:95:20:39:72:15:2b:26:f2:4d:c2:6d:f2:ac: 79:e7:f9:41:aa:97:2b:43:8f:85:85:49:27:b6:a8:b1:9e:29: 3f:0c:6c:f9:43:e4:e0:8f:c9:43:19:80:9f:25:d6:32:c1:77: 56:3f:c7:1f:29:6e:97:6b:b7:27:d0:6f:dd:3a:b2:06:cb:39: 39:19:94:dd:02:07:c7:62:28:c7:dc:8c:de:89:b0:a4:db:fa: 36:7a:66:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmlC64XZg/vgL1M5n+4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAyMzA1NGI1YzhiZGU5YmFmNDZmNmFmNGEwZTdjZWZiMjYwMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Nrs9K/GpwBURdIHYQsqLyTr/+2 sEItKIKk0DEvbBuNe2PzluZCFubuticEhCYngwH63LbeGT+M3Q9jgjGwMHzdaXL2 zYVsgpyVDu6voJalS9d3DeO5wxby730zDF8daK2rg99ohj5KjkGKla73lx65A4xr 0vv8z9WiqEdhKvktlhwkJqDZpINrIdXZ7iLBp8Otaiqn1s/U8kVbq0rMZ+djqOt8 0F2ET8FQTmEVwB+2+jwjPmyd6iwrjD0hfQv5HXxXz3IkZvY/QSA3qC3j3kpdv4AJ +rA689RnSgdoq7C/rpqRIwzhOWJX+XIzfrznym2opwd0JNCnsIU9Ha/uiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8CMFS1yL3puvRvavSg5877JgIYMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvbndJd1ZMWEl2ZW02OUc5cTlLRG56dnNtQWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGDgMA0G CSqGSIb3DQEBCwUAA4IBAQAQkVsFncSzjSQWA86ojXbg2otDhxw+JiA4OFJMWOrQ I7n1uHrIiQ1WodNr719VZ+yHJbF/41hKmxEKHwjdnuOhOcl7bs5JkJHPdzwCEIui TzKg24dVuaARnV9XGR9wMH7HrCpQtT4NCPsPSr6dueMuL/G2So6GgCxhROuJ5AwJ XehV20fT/Or1RJkJ4DWOwtony+ipx9mSIxHwlr2QIavuB+o6Lcn+8pUgOXIVKyby TcJt8qx55/lBqpcrQ4+FhUkntqixnik/DGz5Q+Tgj8lDGYCfJdYywXdWP8cfKW6X a7cn0G/dOrIGyzk5GZTdAgfHYijH3IzeibCk2/o2emY/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:19 2026 by rpki-client