This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/NUAzeiweOuAdospdZKprFcrpT_A.roa File: NUAzeiweOuAdospdZKprFcrpT_A.roa (raw, json) Hash identifier: 1ElfmDWVh8gEsGgcrn15DX/GYQtHYpQEuEeNVWQ/qKA= Subject key identifier: 35:40:33:7A:2C:1E:3A:E0:1D:A2:CA:5D:64:AA:6B:15:CA:E9:4F:F0 Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Certificate serial: 019B79110C08E6183FFC10C3A5CA53C309C7 Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/NUAzeiweOuAdospdZKprFcrpT_A.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208735 IP address blocks: 185.121.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0c:08:e6:18:3f:fc:10:c3:a5:ca:53:c3:09:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3540337a2c1e3ae01da2ca5d64aa6b15cae94ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:a5:cd:7f:0d:a3:45:c9:c1:a4:ca:a5:08: 8c:83:88:25:fc:ac:9e:4b:a3:b0:cb:33:09:eb:f4: b5:94:46:c4:df:b7:00:2d:b7:a2:7a:65:a3:e1:d9: 79:51:cd:3a:dd:dd:5e:02:8d:38:c6:26:0b:69:ba: bd:48:63:6b:33:5f:de:ff:8c:34:27:76:e5:76:02: e3:8d:33:84:9d:d5:fa:22:21:12:f8:82:b8:0e:f0: 30:28:3c:22:6c:ba:4d:73:f1:60:60:90:ab:29:f6: ec:e1:37:7f:56:b0:08:05:f3:ef:5e:7c:44:08:72: 32:22:a2:d4:19:f7:e5:80:ce:c3:e2:01:37:42:8c: 75:ca:d7:bf:84:df:17:af:05:e7:e8:38:b1:6e:f0: 8d:1e:6a:7e:30:6b:87:3f:29:e6:25:0a:a8:2b:f9: e5:fe:ab:4e:35:ed:57:0b:04:b0:15:81:b7:c8:f3: d4:c3:bd:b2:0d:a5:fc:69:d1:2f:97:7b:ec:cc:a6: b9:1a:0e:0f:99:d4:23:07:0b:b6:65:62:12:be:e6: 3b:d6:74:fd:93:53:46:33:88:9d:62:bd:19:f3:8e: d6:c7:25:fc:c6:d3:e8:91:11:dd:42:e4:b2:62:81: 3f:bd:26:c1:db:f7:4c:c7:3e:68:3b:cd:3d:ca:8c: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:33:7A:2C:1E:3A:E0:1D:A2:CA:5D:64:AA:6B:15:CA:E9:4F:F0 X509v3 Authority Key Identifier: keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/NUAzeiweOuAdospdZKprFcrpT_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.104.0/22 Signature Algorithm: sha256WithRSAEncryption 91:ba:7a:42:4d:42:42:b0:66:a0:d7:2e:54:c2:c8:4d:9f:33: f4:39:ac:97:6c:24:7f:4c:e3:2a:37:8c:d7:1d:a0:89:6c:b7: b9:ac:6a:c5:e3:b6:48:18:ca:3c:9a:ca:d7:2a:88:5e:5b:72: 27:44:da:8c:d7:7b:0c:29:59:cf:48:9c:a5:65:02:6a:5a:c2: e0:24:7d:f4:12:12:32:94:36:17:18:17:8d:8f:d4:8e:a5:e5: b1:0a:dc:30:ca:7e:fc:a2:4e:cd:cc:3d:cb:70:18:53:29:c8: 27:83:f4:bf:ac:9f:cd:0a:30:0a:0c:16:25:aa:c0:c9:a4:d0: 07:bd:15:42:4b:cd:58:f9:4f:da:14:aa:fd:61:f6:d1:cd:cd: 3b:1e:5c:41:a0:66:7b:21:da:dc:5f:32:30:f5:d6:6c:c3:83: 78:4f:ef:67:dc:2a:1d:0e:a1:d7:2b:0d:9a:05:77:4f:a7:73: 99:e3:33:54:d1:a5:40:a7:10:cd:09:fc:7f:c2:d3:66:33:23: d8:e1:d9:b1:ea:66:40:f7:0c:1a:f9:71:40:85:4e:6a:c6:03: 50:55:9e:95:9d:72:ad:17:4a:09:b6:55:9e:3c:b0:5b:e3:68: 7f:d0:2b:75:a7:53:3e:91:ce:79:f6:4b:bd:47:91:08:13:2e: 70:f9:b7:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQwI5hg//BDDpcpTwwnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGI5ZTE4ZWViMDk0ZDkxMmRlYjU5NWRjN2FhYzg2NjFi MGQ2YzcwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTQwMzM3YTJjMWUzYWUwMWRhMmNhNWQ2NGFhNmIxNWNhZTk0ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEalzX8No0XJwaTKpQiMg4gl/Kye S6OwyzMJ6/S1lEbE37cALbeiemWj4dl5Uc063d1eAo04xiYLabq9SGNrM1/e/4w0 J3bldgLjjTOEndX6IiES+IK4DvAwKDwibLpNc/FgYJCrKfbs4Td/VrAIBfPvXnxE CHIyIqLUGfflgM7D4gE3Qox1yte/hN8XrwXn6DixbvCNHmp+MGuHPynmJQqoK/nl /qtONe1XCwSwFYG3yPPUw72yDaX8adEvl3vszKa5Gg4PmdQjBwu2ZWISvuY71nT9 k1NGM4idYr0Z847WxyX8xtPokRHdQuSyYoE/vSbB2/dMxz5oO809yozs0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVAM3osHjrgHaLKXWSqaxXK6U/wMB8GA1UdIwQY MBaAFJQLnhjusJTZEt61ldx6rIZhsNbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgt NTY1OTZiZWVkMWM3LzEvTlVBemVpd2VPdUFkb3NwZFpLcHJGY3JwVF9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgtNTY1OTZiZWVkMWM3 LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXloMA0G CSqGSIb3DQEBCwUAA4IBAQCRunpCTUJCsGag1y5UwshNnzP0OayXbCR/TOMqN4zX HaCJbLe5rGrF47ZIGMo8msrXKoheW3InRNqM13sMKVnPSJylZQJqWsLgJH30EhIy lDYXGBeNj9SOpeWxCtwwyn78ok7NzD3LcBhTKcgng/S/rJ/NCjAKDBYlqsDJpNAH vRVCS81Y+U/aFKr9YfbRzc07HlxBoGZ7IdrcXzIw9dZsw4N4T+9n3CodDqHXKw2a BXdPp3OZ4zNU0aVApxDNCfx/wtNmMyPY4dmx6mZA9wwa+XFAhU5qxgNQVZ6VnXKt F0oJtlWePLBb42h/0Ct1p1M+kc559ku9R5EIEy5w+bey -----END CERTIFICATE-----Generated at Thu Jan 1 19:50:32 2026 by rpki-client