This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/nwdisTGCO1HdotM4w00vTV5nTWw.roa File: nwdisTGCO1HdotM4w00vTV5nTWw.roa (raw, json) Hash identifier: KEQcv5DEoUNOudiFBJJ9GLGu+X9chyb1tuUa5pQKKuI= Subject key identifier: 9F:07:62:B1:31:82:3B:51:DD:A2:D3:38:C3:4D:2F:4D:5E:67:4D:6C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F83657A40162FC32F9A6F0E7B353D20 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/nwdisTGCO1HdotM4w00vTV5nTWw.roa Signing time: Fri 02 Jan 2026 16:21:16 +0000 ROA not before: Fri 02 Jan 2026 16:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214038 IP address blocks: 31.192.210.0/24 maxlen: 24 89.252.136.0/24 maxlen: 24 95.173.183.0/24 maxlen: 24 2a03:2102:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:65:7a:40:16:2f:c3:2f:9a:6f:0e:7b:35:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0762b131823b51dda2d338c34d2f4d5e674d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:57:8d:8e:fd:ee:48:0d:27:c8:f1:98:8a: 73:af:cf:0b:bd:9a:52:89:1b:9d:18:03:a5:8d:e8: 26:54:56:21:ca:4a:e3:e1:d9:e4:11:06:96:17:80: e1:64:1c:bc:9c:0f:3c:5d:52:0a:94:71:31:de:18: 49:04:ff:9f:b4:f4:9c:c7:86:7f:b8:ba:cb:30:c9: fe:3d:d7:b0:bf:ad:f5:60:9c:11:8e:28:9a:dd:a6: ef:5d:b0:77:2d:50:3a:7a:a5:01:f2:eb:68:b6:f3: 25:67:bf:e4:a3:d2:97:9a:db:d0:36:b0:9d:bb:e1: 5a:d7:f0:e2:54:d1:19:4d:8f:2d:90:16:a3:b9:c4: 64:52:18:71:ca:91:fe:5f:6a:b1:c8:43:89:42:3e: f6:d0:61:cf:81:68:8f:cd:99:d4:12:d4:c4:e7:7b: d3:1c:ef:3a:fe:29:fc:92:62:18:b9:f7:f6:90:e7: 87:2c:26:24:89:c8:b1:ea:b3:38:22:0a:64:05:fa: e4:45:c0:83:d8:73:bd:f1:7c:a7:b2:d4:e8:72:28: 89:ce:07:9a:a2:04:80:fd:1f:d5:7b:35:ce:3f:ba: a3:1b:3e:29:1b:db:0c:29:1d:5d:59:6f:6c:08:2a: b0:e6:81:8e:e3:14:e6:83:76:2f:27:50:de:e2:f5: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:07:62:B1:31:82:3B:51:DD:A2:D3:38:C3:4D:2F:4D:5E:67:4D:6C X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/nwdisTGCO1HdotM4w00vTV5nTWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.210.0/24 89.252.136.0/24 95.173.183.0/24 IPv6: 2a03:2102:1::/48 Signature Algorithm: sha256WithRSAEncryption 50:dc:2d:65:75:b3:f6:b8:aa:a0:80:6b:3f:2d:8d:bb:bd:68: cb:6f:a2:b4:64:20:ad:db:19:4b:cf:0d:e5:c8:25:7d:c2:61: fa:6a:74:c8:4f:93:03:3b:cd:4b:2a:ff:67:25:cc:79:44:f7: fb:6a:68:09:e0:7b:a6:77:23:bd:14:49:89:5a:a3:b2:e8:7c: 53:85:30:f9:92:1f:f5:5c:06:ce:bb:52:8b:c8:3a:87:c1:cd: 91:cc:bf:d1:b9:d5:fe:3c:67:ce:fc:0f:47:f6:e1:a8:5c:a5: 8b:79:4a:8d:51:f4:3d:55:60:70:0d:9f:d8:9e:98:2b:f5:6c: f3:4c:d8:db:56:d8:36:24:b0:e6:d8:6a:d6:be:de:a1:63:55: cf:bb:cd:51:9c:80:0d:b5:7c:ea:17:83:39:56:ff:ff:0d:8c: c9:6b:77:9c:9b:01:2c:9b:c8:97:42:b0:2c:a4:dd:88:18:c1: 3e:65:dd:44:d2:fa:a2:4d:d0:6e:75:35:67:2b:ce:f4:28:b4: f9:c7:bd:c4:cb:d6:79:c2:d6:31:d1:e0:e7:61:77:d7:71:e3: d2:5e:98:0c:ec:f8:3a:f9:27:72:73:7a:68:65:a9:6e:d6:42: 8f:dd:86:80:a9:ad:5e:84:48:5d:7c:c3:f2:64:13:79:98:cd: e0:8f:e0:5c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/g2V6QBYvwy+abw57NT0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjA3NjJiMTMxODIzYjUxZGRhMmQzMzhjMzRkMmY0ZDVlNjc0ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj5XjY797kgNJ8jxmIpzr88LvZpS iRudGAOljegmVFYhykrj4dnkEQaWF4DhZBy8nA88XVIKlHEx3hhJBP+ftPScx4Z/ uLrLMMn+Pdewv631YJwRjiia3abvXbB3LVA6eqUB8utotvMlZ7/ko9KXmtvQNrCd u+Fa1/DiVNEZTY8tkBajucRkUhhxypH+X2qxyEOJQj720GHPgWiPzZnUEtTE53vT HO86/in8kmIYuff2kOeHLCYkicix6rM4IgpkBfrkRcCD2HO98XynstTociiJzgea ogSA/R/VezXOP7qjGz4pG9sMKR1dWW9sCCqw5oGO4xTmg3YvJ1De4vXWkwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJ8HYrExgjtR3aLTOMNNL01eZ01sMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvbndkaXNUR0NPMUhkb3RNNHcwMHZUVjVuVFd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAH8DSAwQA WfyIAwQAX623MA8EAgACMAkDBwAqAyECAAEwDQYJKoZIhvcNAQELBQADggEBAFDc LWV1s/a4qqCAaz8tjbu9aMtvorRkIK3bGUvPDeXIJX3CYfpqdMhPkwM7zUsq/2cl zHlE9/tqaAnge6Z3I70USYlao7LofFOFMPmSH/VcBs67UovIOofBzZHMv9G51f48 Z878D0f24ahcpYt5So1R9D1VYHANn9iemCv1bPNM2NtW2DYksObYata+3qFjVc+7 zVGcgA21fOoXgzlW//8NjMlrd5ybASybyJdCsCyk3YgYwT5l3UTS+qJN0G51NWcr zvQotPnHvcTL1nnC1jHR4Odhd9dx49JemAzs+Dr5J3JzemhlqW7WQo/dhoCprV6E SF18w/JkE3mYzeCP4Fw= -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:33 2026 by rpki-client