This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/NkvybtyieeqcXDjHG9gHl_XAsMQ.roa File: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (raw, json) Hash identifier: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk= Subject key identifier: 36:4B:F2:6E:DC:A2:79:EA:9C:5C:38:C7:1B:D8:07:97:F5:C0:B0:C4 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B7BA4EA296DDFF942C2DD2EB4D7172C3A Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/NkvybtyieeqcXDjHG9gHl_XAsMQ.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9989 IP address blocks: 139.123.232.0/24 maxlen: 24 193.24.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ea:29:6d:df:f9:42:c2:dd:2e:b4:d7:17:2c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=364bf26edca279ea9c5c38c71bd80797f5c0b0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:72:bc:e8:14:98:76:e7:ec:ce:a9:4e:d5: ef:6c:45:68:ab:33:1f:34:30:3e:32:53:21:bb:cf: 42:dc:2c:42:ff:33:62:c2:89:5a:ca:5d:7b:2c:fc: ea:df:45:e9:3c:27:c1:dc:5d:b0:b8:e6:7b:a2:cf: ef:60:42:57:dc:62:e8:4b:17:42:11:3b:47:01:65: 66:80:d0:cd:4e:97:91:d4:34:69:ea:38:9a:cd:f9: 09:04:54:db:d3:24:d4:18:d7:95:c8:04:b4:83:2a: 6d:c1:80:7c:ea:09:a8:d7:a1:15:65:cb:f3:d4:c7: 43:77:15:37:e6:7c:3d:cd:88:f4:68:c0:85:ac:26: a2:15:3c:19:0a:0a:16:c3:a2:9d:17:a4:a6:e7:57: 79:98:a9:0f:bd:9c:e7:cf:0e:09:ee:86:9f:37:fa: 15:fe:c3:39:be:25:6e:43:38:3c:6e:30:3e:c9:51: 76:a6:84:99:f0:89:7a:2d:70:55:2a:93:bf:cb:7a: b9:49:e4:d8:fc:6b:f9:e6:5b:ee:ec:36:4b:5a:0f: 52:57:1f:31:80:15:c6:45:17:c9:be:0f:15:c6:07: dd:a9:eb:f1:35:51:38:6e:9c:45:64:1b:36:51:d7: 36:8f:1c:a3:86:a5:5b:6a:e7:08:b4:f8:cc:4c:a9: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4B:F2:6E:DC:A2:79:EA:9C:5C:38:C7:1B:D8:07:97:F5:C0:B0:C4 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/NkvybtyieeqcXDjHG9gHl_XAsMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.232.0/24 193.24.65.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:b3:d7:d3:6c:c3:9a:9b:00:b1:c3:7a:73:6a:66:2c:11:bf: ce:2b:b4:e8:b2:38:16:87:18:14:e0:5d:b0:c6:c3:d4:54:e1: d2:a3:04:b2:22:41:c1:cf:5e:fd:a7:50:3a:26:75:b7:be:76: 2d:b1:22:5d:95:e9:40:8a:77:6a:9f:4e:f6:e1:4f:be:bd:5d: d8:cc:7b:dd:a8:f2:92:29:34:7e:5e:3a:4d:db:ab:06:71:0d: 78:f7:a1:52:ec:65:77:cd:1c:48:aa:9e:5f:02:33:33:27:63: dd:0b:09:d6:51:84:70:67:37:89:f2:44:e6:b4:92:3f:45:c2: 11:fb:0f:22:7d:d9:49:5c:9d:f3:7d:40:e6:b2:33:0b:32:40: 03:3f:e6:c3:a3:1a:e3:73:35:32:00:48:72:9b:2f:d1:33:4e: 74:64:33:36:b7:14:5e:0d:2c:c1:54:ca:cd:3a:40:42:d8:bc: 5e:df:f1:99:a1:f1:bf:bb:75:23:bc:e9:6f:ce:c0:26:6d:65: 0c:6e:e1:4a:e3:1e:8b:29:07:68:18:21:33:52:7e:18:ba:9f: 00:e4:d2:80:bd:44:a1:d3:66:89:82:77:50:b7:a1:01:d0:bc: d1:0c:ea:60:db:b8:a7:9f:a4:eb:c3:1c:b8:d3:86:6a:78:17: 0a:f8:3e:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pOopbd/5QsLdLrTXFyw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjRiZjI2ZWRjYTI3OWVhOWM1YzM4YzcxYmQ4MDc5N2Y1YzBiMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoblyvOgUmHbn7M6pTtXvbEVoqzMf NDA+MlMhu89C3CxC/zNiwolayl17LPzq30XpPCfB3F2wuOZ7os/vYEJX3GLoSxdC ETtHAWVmgNDNTpeR1DRp6jiazfkJBFTb0yTUGNeVyAS0gyptwYB86gmo16EVZcvz 1MdDdxU35nw9zYj0aMCFrCaiFTwZCgoWw6KdF6Sm51d5mKkPvZznzw4J7oafN/oV /sM5viVuQzg8bjA+yVF2poSZ8Il6LXBVKpO/y3q5SeTY/Gv55lvu7DZLWg9SVx8x gBXGRRfJvg8VxgfdqevxNVE4bpxFZBs2Udc2jxyjhqVbaucItPjMTKl8UwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDZL8m7connqnFw4xxvYB5f1wLDEMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvTmt2eWJ0eWllZXFjWERqSEc5Z0hsX1hBc01RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAi3voAwQA wRhBMA0GCSqGSIb3DQEBCwUAA4IBAQALs9fTbMOamwCxw3pzamYsEb/OK7TosjgW hxgU4F2wxsPUVOHSowSyIkHBz179p1A6JnW3vnYtsSJdlelAindqn0724U++vV3Y zHvdqPKSKTR+XjpN26sGcQ1496FS7GV3zRxIqp5fAjMzJ2PdCwnWUYRwZzeJ8kTm tJI/RcIR+w8ifdlJXJ3zfUDmsjMLMkADP+bDoxrjczUyAEhymy/RM050ZDM2txRe DSzBVMrNOkBC2Lxe3/GZofG/u3UjvOlvzsAmbWUMbuFK4x6LKQdoGCEzUn4Yup8A 5NKAvUSh02aJgndQt6EB0LzRDOpg27inn6Trwxy404ZqeBcK+D68 -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:47 2026 by rpki-client