This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nCw-8U_e-vesUJrIZdav3xNtIF8.roa File: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (raw, json) Hash identifier: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E= Subject key identifier: 9C:2C:3E:F1:4F:DE:FA:F7:AC:50:9A:C8:65:D6:AF:DF:13:6D:20:5F Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B797F0B8142D73D5811926DD3B781D807 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nCw-8U_e-vesUJrIZdav3xNtIF8.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 45.92.232.0/22 maxlen: 24 45.147.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:81:42:d7:3d:58:11:92:6d:d3:b7:81:d8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2c3ef14fdefaf7ac509ac865d6afdf136d205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:2d:10:2c:3a:8b:80:ba:0d:25:98:5a:e8: a9:7d:a3:f1:5b:87:e7:c2:6b:58:99:73:51:99:8c: 4e:ac:94:8a:32:45:0d:81:ea:fc:94:41:86:d8:1a: 42:e5:ee:8c:71:bb:47:e9:42:ae:ee:6b:63:61:7c: 35:9a:1a:40:dd:95:a3:5e:9a:d6:ab:85:43:44:a9: 11:f4:cb:4e:82:59:d5:40:6b:89:7a:f2:16:8c:fe: a6:d0:6f:95:73:0c:2d:a6:d0:34:2e:8a:51:80:8b: 2e:31:5c:60:92:e4:9c:b0:ae:90:d3:f7:da:55:c9: a3:46:9a:f5:64:d8:fe:b3:6c:4a:88:5f:0b:d4:d8: 15:0d:10:7e:1d:07:13:9c:63:43:8d:16:77:bc:2b: 35:00:69:d5:94:0a:31:0e:03:d1:68:19:cb:bf:ed: 89:22:e9:df:4b:3a:cb:f3:7a:45:14:d2:b8:b6:51: 2c:9d:e0:bb:42:53:e3:f3:09:fb:f3:ac:dc:1b:38: 61:f7:74:57:5d:5a:18:3d:17:bb:b2:d2:da:05:6e: d1:25:f0:09:4c:4a:03:cd:cd:59:ac:58:a3:25:7e: d2:99:62:bf:c4:16:a4:b5:37:14:a1:82:3c:11:0d: fa:8b:ac:cc:78:96:3e:96:2e:56:6d:32:e0:34:49: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:3E:F1:4F:DE:FA:F7:AC:50:9A:C8:65:D6:AF:DF:13:6D:20:5F X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nCw-8U_e-vesUJrIZdav3xNtIF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.232.0/22 45.147.32.0/22 Signature Algorithm: sha256WithRSAEncryption 97:be:76:01:e2:c2:3a:6f:89:fa:7b:55:cd:a1:32:99:36:08: 75:c0:68:b7:71:c6:2b:55:72:9f:4a:3d:65:c5:74:ff:4d:68: bc:9e:94:b1:68:34:cc:36:b3:6c:62:96:8d:e7:38:d0:ac:52: c8:14:f8:ad:44:0b:7c:13:dd:36:a6:6a:cc:ab:c4:eb:03:bf: a4:c7:37:02:cb:ba:85:63:1b:9d:ed:85:7c:e6:21:65:fe:d1: 74:62:7b:45:1a:cb:37:fa:e5:5e:59:11:d8:5c:9e:56:40:2d: e3:21:e3:fa:74:db:64:eb:60:16:50:b2:a9:e2:b6:ed:e5:f9: 0a:07:07:9e:93:76:fb:80:5c:1b:25:e4:ea:e9:e6:90:bb:85: ae:0a:7f:0d:8a:54:a8:59:6a:2b:71:cb:e7:3c:df:1b:ec:a6: 32:c5:35:76:7d:dc:75:f7:1b:88:dd:9b:4f:3d:77:39:67:07: dd:d6:13:8d:08:21:3b:36:cd:89:69:d0:36:01:76:f2:9e:c3: af:bd:9f:67:cb:d1:12:84:e0:32:99:e6:67:9a:8f:10:f2:c6: ae:59:a1:38:33:45:f1:d7:53:e9:82:13:52:1c:35:cf:21:a2: d6:2c:2e:8b:e3:e0:29:b5:17:b2:5e:4c:a0:ef:4a:01:f4:f2: e3:ce:c8:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fwuBQtc9WBGSbdO3gdgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzJjM2VmMTRmZGVmYWY3YWM1MDlhYzg2NWQ2YWZkZjEzNmQyMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1EtECw6i4C6DSWYWuipfaPxW4fn wmtYmXNRmYxOrJSKMkUNger8lEGG2BpC5e6McbtH6UKu7mtjYXw1mhpA3ZWjXprW q4VDRKkR9MtOglnVQGuJevIWjP6m0G+VcwwtptA0LopRgIsuMVxgkuScsK6Q0/fa VcmjRpr1ZNj+s2xKiF8L1NgVDRB+HQcTnGNDjRZ3vCs1AGnVlAoxDgPRaBnLv+2J IunfSzrL83pFFNK4tlEsneC7QlPj8wn786zcGzhh93RXXVoYPRe7stLaBW7RJfAJ TEoDzc1ZrFijJX7SmWK/xBaktTcUoYI8EQ36i6zMeJY+li5WbTLgNElDMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJwsPvFP3vr3rFCayGXWr98TbSBfMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvbkN3LThVX2UtdmVzVUpySVpkYXYzeE50SUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVzoAwQC LZMgMA0GCSqGSIb3DQEBCwUAA4IBAQCXvnYB4sI6b4n6e1XNoTKZNgh1wGi3ccYr VXKfSj1lxXT/TWi8npSxaDTMNrNsYpaN5zjQrFLIFPitRAt8E902pmrMq8TrA7+k xzcCy7qFYxud7YV85iFl/tF0YntFGss3+uVeWRHYXJ5WQC3jIeP6dNtk62AWULKp 4rbt5fkKBweek3b7gFwbJeTq6eaQu4WuCn8NilSoWWorccvnPN8b7KYyxTV2fdx1 9xuI3ZtPPXc5Zwfd1hONCCE7Ns2JadA2AXbynsOvvZ9ny9EShOAymeZnmo8Q8sau WaE4M0Xx11PpghNSHDXPIaLWLC6L4+AptReyXkyg70oB9PLjzsgj -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:25 2026 by rpki-client