This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/NClggN0wLJ85L4j0M-AlKoavWIs.roa File: NClggN0wLJ85L4j0M-AlKoavWIs.roa (raw, json) Hash identifier: RQbNyHxkHjmlTCVrLCtmPaAgU136neh5P8KR9dFLw8U= Subject key identifier: 34:29:60:80:DD:30:2C:9F:39:2F:88:F4:33:E0:25:2A:86:AF:58:8B Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019B21A12D5A57559C431CD732088E445DE7 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/NClggN0wLJ85L4j0M-AlKoavWIs.roa Signing time: Mon 15 Dec 2025 10:49:29 +0000 ROA not before: Mon 15 Dec 2025 10:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 86.109.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:a1:2d:5a:57:55:9c:43:1c:d7:32:08:8e:44:5d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Dec 15 10:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34296080dd302c9f392f88f433e0252a86af588b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:ff:a4:3c:0a:3a:6c:89:9e:86:bc:7e:db: 21:41:e8:32:3f:62:8b:81:83:4c:9f:3e:77:e2:7b: fe:10:1e:da:24:87:8d:63:c1:9b:0e:ec:f3:05:43: 41:0a:a0:ab:c9:b7:f4:0a:d0:dd:01:03:94:f2:db: 65:fd:68:35:11:c7:ef:27:c4:9e:99:f6:39:45:39: 3e:0d:95:35:08:fb:ff:36:1b:c8:ed:3c:ab:22:1f: 3a:80:0d:08:5c:ac:1e:fd:81:59:a3:15:f1:85:cf: 9f:40:91:3a:2d:55:d0:41:2e:0a:0f:69:f0:20:94: 86:a7:c3:bb:a9:ee:0f:b7:a0:13:9a:45:c4:56:bb: e1:e6:56:ab:86:86:ae:b3:10:8a:f1:d5:f3:c1:37: 71:cc:27:c4:c2:a3:54:0b:45:cf:66:ca:8f:00:ce: d3:2e:6f:cc:de:b2:03:7b:64:63:06:a3:81:65:90: 39:e8:2b:f2:fc:7b:6d:63:69:45:3a:b8:1b:89:1c: 48:2f:2d:29:7a:18:64:b1:b9:15:d7:22:0b:39:7c: d6:90:6a:17:f9:73:b5:37:b1:b3:22:16:74:70:80: 6e:25:61:c3:6c:98:57:59:1e:16:1e:30:53:f6:6b: a1:1e:5b:03:15:fa:4b:6a:eb:69:a5:38:8c:ed:63: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:29:60:80:DD:30:2C:9F:39:2F:88:F4:33:E0:25:2A:86:AF:58:8B X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/NClggN0wLJ85L4j0M-AlKoavWIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.74.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:ba:3a:ad:56:71:0d:c3:4d:9e:bd:9b:25:f3:d7:ac:27:e0: f0:e5:1f:40:fe:41:e7:a4:59:3b:b6:47:67:76:86:39:d0:eb: c2:52:f1:6e:e7:f4:8d:79:2d:92:27:11:32:7a:d7:9c:84:95: b1:a9:df:41:cf:22:88:b7:d7:73:73:6d:a3:7c:fa:b6:5b:fe: ed:4c:39:a1:e1:43:3a:49:b5:41:cc:05:d2:26:ba:9a:de:56: 9b:40:63:40:58:f0:3d:f3:f5:97:d2:7e:9c:0e:e4:4f:6a:f8: d3:98:88:23:b4:93:c8:a2:4f:c6:a7:33:95:0a:53:fb:87:70: c1:0f:39:91:00:ae:f0:f8:2c:b1:21:ff:cb:0e:d0:b9:ad:e9: c2:25:01:48:e5:05:43:84:31:77:1d:1a:fb:1f:fe:35:9b:64: 66:de:41:ae:b0:ef:89:94:05:cd:96:fa:a7:ed:7e:1d:92:a7: 25:51:31:ac:82:41:0a:8c:56:2b:a0:cb:94:54:75:4d:d6:35: cd:59:7f:a7:5d:58:d2:c4:bc:e1:0a:89:72:87:20:68:c0:d5: 19:16:4b:17:c4:02:43:c8:0b:07:cf:7f:14:85:ea:22:41:23: e5:c8:bb:f8:89:d3:43:e7:28:f2:bf:60:42:99:a5:1f:12:b4: 7f:8c:d7:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshoS1aV1WcQxzXMgiORF3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjUxMjE1MTA0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDI5NjA4MGRkMzAyYzlmMzkyZjg4ZjQzM2UwMjUyYTg2YWY1ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluf/pDwKOmyJnoa8ftshQegyP2KL gYNMnz534nv+EB7aJIeNY8GbDuzzBUNBCqCrybf0CtDdAQOU8ttl/Wg1EcfvJ8Se mfY5RTk+DZU1CPv/NhvI7TyrIh86gA0IXKwe/YFZoxXxhc+fQJE6LVXQQS4KD2nw IJSGp8O7qe4Pt6ATmkXEVrvh5larhoausxCK8dXzwTdxzCfEwqNUC0XPZsqPAM7T Lm/M3rIDe2RjBqOBZZA56Cvy/HttY2lFOrgbiRxILy0pehhksbkV1yILOXzWkGoX +XO1N7GzIhZ0cIBuJWHDbJhXWR4WHjBT9muhHlsDFfpLautppTiM7WPw8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQpYIDdMCyfOS+I9DPgJSqGr1iLMB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvTkNsZ2dOMHdMSjg1TDRqME0tQWxLb2F2V0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm1KMA0G CSqGSIb3DQEBCwUAA4IBAQAtujqtVnENw02evZsl89esJ+Dw5R9A/kHnpFk7tkdn doY50OvCUvFu5/SNeS2SJxEyetechJWxqd9BzyKIt9dzc22jfPq2W/7tTDmh4UM6 SbVBzAXSJrqa3labQGNAWPA98/WX0n6cDuRPavjTmIgjtJPIok/GpzOVClP7h3DB DzmRAK7w+CyxIf/LDtC5renCJQFI5QVDhDF3HRr7H/41m2Rm3kGusO+JlAXNlvqn 7X4dkqclUTGsgkEKjFYroMuUVHVN1jXNWX+nXVjSxLzhColyhyBowNUZFksXxAJD yAsHz38UheoiQSPlyLv4idND5yjyv2BCmaUfErR/jNfI -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:26 2025 by rpki-client