This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/NcDn26l6X1jaA0rTBfljUSQkQrA.roa File: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (raw, json) Hash identifier: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw= Subject key identifier: 35:C0:E7:DB:A9:7A:5F:58:DA:03:4A:D3:05:F9:63:51:24:24:42:B0 Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0 Certificate serial: 019B7E3871CD553068DB40190DB7782003CC Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/NcDn26l6X1jaA0rTBfljUSQkQrA.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42216 IP address blocks: 46.254.48.0/24 maxlen: 24 46.254.51.0/24 maxlen: 24 46.254.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:71:cd:55:30:68:db:40:19:0d:b7:78:20:03:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c0e7dba97a5f58da034ad305f96351242442b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:05:7b:13:b1:39:53:74:7d:3c:60:2f:b7: af:0e:cd:92:a3:e6:80:be:54:3b:c0:09:48:16:5c: 78:c5:9d:36:ec:db:5f:2f:0a:07:8e:63:32:c9:04: 61:52:5b:a3:53:67:02:2a:92:4a:1d:18:7d:55:88: 17:56:a7:74:2c:27:d6:67:be:42:d5:f8:88:f0:15: e8:27:23:cb:f6:4b:eb:49:f4:66:85:5a:92:89:87: 85:7e:94:54:a5:78:6d:b2:de:e8:04:74:22:6c:7b: fa:22:73:7e:ff:24:45:f5:88:ff:21:58:ea:5e:cb: 82:ee:c3:7a:e6:5d:92:21:24:a9:58:28:8e:b5:d2: 1d:64:d4:06:04:e3:f2:02:57:a9:34:c6:a7:64:5a: 84:90:b3:a6:d5:1a:1a:fc:84:e1:aa:65:b4:1a:25: f2:3d:dc:29:a1:da:1b:c8:cb:e5:8f:df:30:f4:d4: 2c:7c:50:1d:10:ba:13:60:db:cb:2e:51:9c:c6:3f: 3c:94:f6:02:fe:64:90:88:13:bd:0b:d9:2b:f3:a6: 6c:78:2e:e5:0e:00:3c:75:a6:09:3c:14:e9:f0:b1: f9:ae:7c:b8:76:3e:99:ae:43:10:93:49:3b:cf:48: 18:d7:ff:20:b6:c9:49:ad:a7:48:f1:42:51:c8:ef: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:E7:DB:A9:7A:5F:58:DA:03:4A:D3:05:F9:63:51:24:24:42:B0 X509v3 Authority Key Identifier: keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/NcDn26l6X1jaA0rTBfljUSQkQrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.48.0/24 46.254.51.0/24 46.254.55.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a6:9d:c3:37:55:d9:54:01:d6:ea:a4:87:99:5d:00:0e:08: 01:e5:ed:94:9e:5c:94:89:62:75:32:ff:9d:bc:10:89:4e:58: 0e:21:a7:5a:c7:1e:39:80:bc:ac:af:44:a7:d0:2e:28:0d:54: 12:f2:a7:b2:9e:e3:33:6e:10:d2:ea:02:4b:52:9d:ae:72:96: 33:33:7d:c4:30:f9:ae:3a:b4:5a:14:aa:f3:d0:a6:5f:a5:46: fa:8d:c9:ec:ad:2e:2c:40:64:03:fb:da:f8:fe:78:45:93:57: a9:2a:cd:3b:05:c5:8d:fe:e3:74:28:a8:a6:7e:cb:ea:e4:09: 6b:7c:67:a6:fa:e7:12:ec:90:25:44:3a:19:9d:25:65:d5:69: 53:91:e9:5b:88:e5:91:99:c5:35:0d:da:5b:07:de:84:34:02: c9:8c:42:d0:e1:99:81:0c:66:fc:56:82:8b:72:2d:ba:c1:7c: 85:cf:96:cd:46:f1:5c:1b:a1:db:b8:b3:56:e7:7f:be:78:35: f7:e3:77:06:bb:a0:bd:f1:22:44:34:16:d1:a6:e9:0f:98:ee: 64:b0:8e:bd:58:a3:a1:d0:da:79:e1:2f:03:ac:52:3d:61:e9: e7:a2:94:9c:73:5f:5b:9c:4e:89:0d:d1:64:32:8b:4e:80:5b: a5:6b:69:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OHHNVTBo20AZDbd4IAPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3 MzJlZTAwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWMwZTdkYmE5N2E1ZjU4ZGEwMzRhZDMwNWY5NjM1MTI0MjQ0MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp8FexOxOVN0fTxgL7evDs2So+aA vlQ7wAlIFlx4xZ027NtfLwoHjmMyyQRhUlujU2cCKpJKHRh9VYgXVqd0LCfWZ75C 1fiI8BXoJyPL9kvrSfRmhVqSiYeFfpRUpXhtst7oBHQibHv6InN+/yRF9Yj/IVjq XsuC7sN65l2SISSpWCiOtdIdZNQGBOPyAlepNManZFqEkLOm1Roa/IThqmW0GiXy PdwpodobyMvlj98w9NQsfFAdELoTYNvLLlGcxj88lPYC/mSQiBO9C9kr86ZseC7l DgA8daYJPBTp8LH5rny4dj6ZrkMQk0k7z0gY1/8gtslJradI8UJRyO+emQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDXA59upel9Y2gNK0wX5Y1EkJEKwMB8GA1UdIwQY MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt Y2VjMjJlYTc5NTEzLzEvTmNEbjI2bDZYMWphQTByVEJmbGpVU1FrUXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALv4wAwQA Lv4zAwQALv43MA0GCSqGSIb3DQEBCwUAA4IBAQBzpp3DN1XZVAHW6qSHmV0ADggB 5e2UnlyUiWJ1Mv+dvBCJTlgOIadaxx45gLysr0Sn0C4oDVQS8qeynuMzbhDS6gJL Up2ucpYzM33EMPmuOrRaFKrz0KZfpUb6jcnsrS4sQGQD+9r4/nhFk1epKs07BcWN /uN0KKimfsvq5AlrfGem+ucS7JAlRDoZnSVl1WlTkelbiOWRmcU1DdpbB96ENALJ jELQ4ZmBDGb8VoKLci26wXyFz5bNRvFcG6HbuLNW53++eDX343cGu6C98SJENBbR pukPmO5ksI69WKOh0Np54S8DrFI9YennopScc19bnE6JDdFkMotOgFula2m8 -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:55 2026 by rpki-client