This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/N55eH_oAjxUzygUu8ZpQX2jQHJY.roa File: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (raw, json) Hash identifier: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks= Subject key identifier: 37:9E:5E:1F:FA:00:8F:15:33:CA:05:2E:F1:9A:50:5F:68:D0:1C:96 Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Certificate serial: 019B7FF256FD51C8E48E0C0948D719268A94 Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/N55eH_oAjxUzygUu8ZpQX2jQHJY.roa Signing time: Fri 02 Jan 2026 18:22:26 +0000 ROA not before: Fri 02 Jan 2026 18:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204155 IP address blocks: 194.31.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:56:fd:51:c8:e4:8e:0c:09:48:d7:19:26:8a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Validity Not Before: Jan 2 18:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=379e5e1ffa008f1533ca052ef19a505f68d01c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:76:d5:1b:10:5a:aa:eb:a2:68:a2:35:b0: e7:a1:26:f5:0b:b1:bc:02:71:b5:aa:28:b8:9d:bc: 8b:34:a4:9d:d5:de:fa:bc:d7:c1:8d:aa:23:f3:4f: dc:79:35:e7:84:ff:54:84:3d:43:c6:10:47:1a:2c: 86:8a:44:51:5f:7c:a8:20:a4:d1:0a:61:a8:4d:95: da:94:b7:30:77:34:97:f8:4e:35:c1:3d:7f:c9:2e: 3c:98:53:c6:a2:6b:59:b6:76:9c:11:ea:d5:c2:7f: 4f:65:5a:f9:44:2e:d2:b1:eb:23:6b:74:a7:aa:07: 9e:f8:6b:a4:1f:eb:58:70:3a:8a:40:34:51:7b:3d: ef:fa:08:ca:8a:7d:30:04:3a:0d:96:fb:ea:8e:e6: 95:57:d6:4b:d8:d5:fc:78:fd:4f:e3:1b:55:7a:46: c1:e7:b8:b6:80:0e:37:98:f6:28:ef:69:3b:ba:c1: 1c:fa:aa:82:8b:6a:41:e8:c1:51:0c:7f:19:5a:78: 3b:0a:5f:66:94:6d:d0:8b:f2:8e:9f:4c:74:fd:34: ac:fe:96:d4:35:1d:b0:cb:27:8f:b4:42:11:fc:6f: c9:25:0a:3f:15:de:04:74:42:a7:cb:7c:06:ef:fc: a5:2a:26:1d:85:50:96:0c:2b:ba:56:da:01:82:6e: 38:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:5E:1F:FA:00:8F:15:33:CA:05:2E:F1:9A:50:5F:68:D0:1C:96 X509v3 Authority Key Identifier: keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/N55eH_oAjxUzygUu8ZpQX2jQHJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.120.0/21 Signature Algorithm: sha256WithRSAEncryption a7:e9:cc:4e:13:29:62:70:ef:c9:2c:6e:f4:34:7e:79:df:f6: a0:d6:89:76:f7:56:d1:93:b9:c2:4c:95:fd:e3:1a:db:1b:a7: 6c:74:2e:28:54:4e:54:90:28:3e:68:99:99:17:a5:61:e3:1b: 5a:e4:20:bf:ba:6a:1f:4c:d3:cf:e4:6b:e1:61:24:51:ec:8e: f2:3e:84:e3:46:42:93:56:d7:3c:9b:85:b0:88:39:0e:1a:e1: f2:a4:e5:2c:45:8c:1d:e4:b7:97:ca:a5:d9:4a:64:00:7c:d3: d5:0c:05:7a:ae:cc:d6:40:1f:12:31:79:f2:88:4a:bc:7c:c1: 47:86:94:a8:a5:65:cd:c7:29:04:c1:0f:11:40:3c:ca:ab:29: 32:72:6f:8d:43:ce:f1:ed:50:23:85:82:1a:7b:80:c3:7d:22: e1:81:21:51:7b:b4:ba:ea:d0:e9:af:d7:09:98:72:02:d1:48: 0c:64:a5:9b:99:be:9e:0c:7c:05:8d:06:d5:f3:f6:7c:a2:0a: ea:dd:6c:7f:44:22:e0:1b:41:22:10:3a:10:16:19:4d:37:05: 3b:98:e4:17:6a:a6:10:83:3b:38:e2:a2:fe:d2:54:24:9b:fb: be:ce:85:e1:66:ca:09:ff:79:f0:8c:da:ca:6f:70:d1:73:4a: 00:69:e9:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8lb9UcjkjgwJSNcZJoqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm NjFhMjEwHhcNMjYwMTAyMTgyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzllNWUxZmZhMDA4ZjE1MzNjYTA1MmVmMTlhNTA1ZjY4ZDAxYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpx21RsQWqrromiiNbDnoSb1C7G8 AnG1qii4nbyLNKSd1d76vNfBjaoj80/ceTXnhP9UhD1DxhBHGiyGikRRX3yoIKTR CmGoTZXalLcwdzSX+E41wT1/yS48mFPGomtZtnacEerVwn9PZVr5RC7Ssesja3Sn qgee+GukH+tYcDqKQDRRez3v+gjKin0wBDoNlvvqjuaVV9ZL2NX8eP1P4xtVekbB 57i2gA43mPYo72k7usEc+qqCi2pB6MFRDH8ZWng7Cl9mlG3Qi/KOn0x0/TSs/pbU NR2wyyePtEIR/G/JJQo/Fd4EdEKny3wG7/ylKiYdhVCWDCu6VtoBgm44ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeeXh/6AI8VM8oFLvGaUF9o0ByWMB8GA1UdIwQY MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt ZGFiOWY4YmE4ZmI2LzEvTjU1ZUhfb0FqeFV6eWdVdThacFFYMmpRSEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2 LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwh94MA0G CSqGSIb3DQEBCwUAA4IBAQCn6cxOEylicO/JLG70NH553/ag1ol291bRk7nCTJX9 4xrbG6dsdC4oVE5UkCg+aJmZF6Vh4xta5CC/umofTNPP5GvhYSRR7I7yPoTjRkKT Vtc8m4WwiDkOGuHypOUsRYwd5LeXyqXZSmQAfNPVDAV6rszWQB8SMXnyiEq8fMFH hpSopWXNxykEwQ8RQDzKqykycm+NQ87x7VAjhYIae4DDfSLhgSFRe7S66tDpr9cJ mHIC0UgMZKWbmb6eDHwFjQbV8/Z8ogrq3Wx/RCLgG0EiEDoQFhlNNwU7mOQXaqYQ gzs44qL+0lQkm/u+zoXhZsoJ/3nwjNrKb3DRc0oAaeko -----END CERTIFICATE-----Generated at Mon Jan 12 22:43:58 2026 by rpki-client