This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/ncoQIgVQq-l4i3o7afgIeOVITh8.roa File: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (raw, json) Hash identifier: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg= Subject key identifier: 9D:CA:10:22:05:50:AB:E9:78:8B:7A:3B:69:F8:08:78:E5:48:4E:1F Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019B7D5B4E03BA71297A2B22B59F4F480ACF Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/ncoQIgVQq-l4i3o7afgIeOVITh8.roa Signing time: Fri 02 Jan 2026 06:18:14 +0000 ROA not before: Fri 02 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212725 IP address blocks: 2001:67c:24b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:4e:03:ba:71:29:7a:2b:22:b5:9f:4f:48:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Jan 2 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dca10220550abe9788b7a3b69f80878e5484e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:21:64:da:ba:ad:57:36:27:eb:59:33:bf: 55:78:8a:29:de:34:d9:ab:37:fe:0b:80:23:bc:01: 39:dd:0c:74:2f:d4:ff:47:ad:c8:21:87:dc:d2:63: ab:14:78:04:71:97:50:cc:fb:f4:a9:0b:24:a1:31: 64:61:3f:38:e2:2b:18:be:c1:1c:d1:66:94:81:c6: d6:4a:50:4b:15:89:dc:c6:37:68:f5:e2:4c:49:df: de:be:91:3f:8b:08:8b:db:77:e5:37:08:89:3f:10: 46:5a:6c:28:97:38:2c:7b:99:30:9f:20:9e:56:1d: 88:d4:e2:b4:81:61:e1:79:43:8d:6d:d2:78:2c:85: ea:0a:f8:9d:a5:d2:46:fa:49:4c:d6:f7:6a:af:e4: 39:6f:a5:42:91:15:a0:d1:01:cd:2d:33:1a:7c:70: 52:20:78:04:c3:52:53:e4:76:41:25:4c:f4:da:13: 0b:77:ee:e1:28:7e:31:e6:99:bd:ac:41:6c:2e:08: 71:ca:30:d9:8c:d2:c9:22:b6:8f:1d:5e:46:89:75: d8:26:ee:94:85:d4:d8:c3:27:65:57:4e:4a:2c:2f: 7a:df:bc:66:fe:c6:58:a0:6b:bd:05:9f:53:98:98: 4f:b3:fd:23:3a:eb:ca:f0:e4:be:fc:2e:c2:77:f5: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:10:22:05:50:AB:E9:78:8B:7A:3B:69:F8:08:78:E5:48:4E:1F X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/ncoQIgVQq-l4i3o7afgIeOVITh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:24b8::/48 Signature Algorithm: sha256WithRSAEncryption 34:4b:93:a2:d6:1b:eb:df:3d:df:56:63:ac:27:24:90:2e:de: 94:8a:a6:de:e8:de:06:ea:4a:cc:e5:2c:e2:4f:c1:ab:a0:5a: 2a:85:10:e8:c0:e8:c0:70:fb:51:dd:85:2b:c7:c6:5b:0f:a0: cd:1e:cb:f3:d2:5b:1e:13:4e:9c:a6:1d:b5:51:24:57:8f:ce: 6b:4c:e7:c2:90:2f:8e:a5:03:47:7a:7f:88:54:c9:8e:e3:9b: b2:2c:25:e6:8f:ea:56:57:3c:b3:00:f8:68:96:f2:d1:57:53: a1:16:34:61:fb:b3:ea:cb:dc:4a:2d:ed:86:f2:71:03:64:7b: fa:89:70:ad:a5:dc:46:96:c0:cc:21:dc:f5:cb:88:9c:5a:91: ee:b9:68:d5:83:68:9a:5c:3a:8a:2d:9c:8d:c0:66:5d:3d:75: a7:48:26:f4:65:6d:67:b1:b2:91:90:aa:7f:18:a3:92:ce:49: 84:aa:dc:be:50:39:08:b5:13:c5:1a:bb:8e:d8:26:c7:ff:ef: ab:38:d9:26:fd:b3:c7:67:92:f8:40:40:c4:2c:18:5b:93:84: eb:9d:b2:1a:24:c1:e2:c9:9a:3d:e7:ba:35:d8:b7:58:66:9a: 6c:84:8d:17:29:24:91:7a:2c:d9:e1:d0:33:0b:09:e5:aa:40: ef:5e:69:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W04DunEpeisitZ9PSArPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjYwMTAyMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGNhMTAyMjA1NTBhYmU5Nzg4YjdhM2I2OWY4MDg3OGU1NDg0ZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDwhZNq6rVc2J+tZM79VeIop3jTZ qzf+C4AjvAE53Qx0L9T/R63IIYfc0mOrFHgEcZdQzPv0qQskoTFkYT844isYvsEc 0WaUgcbWSlBLFYncxjdo9eJMSd/evpE/iwiL23flNwiJPxBGWmwolzgse5kwnyCe Vh2I1OK0gWHheUONbdJ4LIXqCvidpdJG+klM1vdqr+Q5b6VCkRWg0QHNLTMafHBS IHgEw1JT5HZBJUz02hMLd+7hKH4x5pm9rEFsLghxyjDZjNLJIraPHV5GiXXYJu6U hdTYwydlV05KLC9637xm/sZYoGu9BZ9TmJhPs/0jOuvK8OS+/C7Cd/WeUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ3KECIFUKvpeIt6O2n4CHjlSE4fMB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvbmNvUUlnVlFxLWw0aTNvN2FmZ0llT1ZJVGg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCS4 MA0GCSqGSIb3DQEBCwUAA4IBAQA0S5Oi1hvr3z3fVmOsJySQLt6Uiqbe6N4G6krM 5SziT8GroFoqhRDowOjAcPtR3YUrx8ZbD6DNHsvz0lseE06cph21USRXj85rTOfC kC+OpQNHen+IVMmO45uyLCXmj+pWVzyzAPholvLRV1OhFjRh+7Pqy9xKLe2G8nED ZHv6iXCtpdxGlsDMIdz1y4icWpHuuWjVg2iaXDqKLZyNwGZdPXWnSCb0ZW1nsbKR kKp/GKOSzkmEqty+UDkItRPFGruO2CbH/++rONkm/bPHZ5L4QEDELBhbk4TrnbIa JMHiyZo957o12LdYZppshI0XKSSReizZ4dAzCwnlqkDvXmn1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:47 2026 by rpki-client