This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/NCpae5NUBzzwFjKHO6HKoQsFaNo.roa File: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (raw, json) Hash identifier: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI= Subject key identifier: 34:2A:5A:7B:93:54:07:3C:F0:16:32:87:3B:A1:CA:A1:0B:05:68:DA Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B7835646AC1D6456D2DF18973C2FC38A7 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/NCpae5NUBzzwFjKHO6HKoQsFaNo.roa Signing time: Thu 01 Jan 2026 06:18:43 +0000 ROA not before: Thu 01 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 5.62.152.0/21 maxlen: 32 31.14.26.0/24 maxlen: 32 46.102.105.0/24 maxlen: 32 77.81.92.0/22 maxlen: 32 79.139.80.0/23 maxlen: 32 85.217.220.0/23 maxlen: 32 86.105.241.0/24 maxlen: 32 86.106.176.0/23 maxlen: 32 89.32.125.0/24 maxlen: 32 89.37.58.0/24 maxlen: 32 89.38.234.0/24 maxlen: 32 89.40.41.0/24 maxlen: 32 89.40.81.0/24 maxlen: 32 89.40.164.0/23 maxlen: 32 89.47.43.0/24 maxlen: 32 89.104.122.0/23 maxlen: 32 89.223.22.0/23 maxlen: 32 91.92.22.0/23 maxlen: 32 91.92.138.0/24 maxlen: 32 91.92.178.0/23 maxlen: 32 91.92.216.0/23 maxlen: 32 91.92.218.0/24 maxlen: 32 91.192.212.0/22 maxlen: 32 92.114.60.0/22 maxlen: 32 92.114.81.0/24 maxlen: 32 92.114.110.0/24 maxlen: 32 92.255.0.0/24 maxlen: 32 92.255.52.0/24 maxlen: 32 92.255.64.0/24 maxlen: 32 92.255.80.0/24 maxlen: 32 92.255.81.0/24 maxlen: 32 92.255.82.0/24 maxlen: 32 92.255.83.0/24 maxlen: 32 93.113.52.0/23 maxlen: 32 93.114.84.0/24 maxlen: 32 93.115.4.0/23 maxlen: 32 93.115.36.0/24 maxlen: 32 93.119.193.0/24 maxlen: 32 94.139.56.0/22 maxlen: 32 94.139.60.0/23 maxlen: 32 94.139.224.0/20 maxlen: 32 94.176.0.0/23 maxlen: 32 94.176.132.0/23 maxlen: 32 94.176.150.0/24 maxlen: 32 94.177.6.0/23 maxlen: 32 94.177.14.0/23 maxlen: 32 94.177.23.0/24 maxlen: 32 110.238.192.0/19 maxlen: 32 110.239.208.0/22 maxlen: 32 110.239.212.0/22 maxlen: 32 110.239.216.0/21 maxlen: 32 119.12.176.0/20 maxlen: 32 119.12.192.0/21 maxlen: 32 119.12.200.0/21 maxlen: 32 176.126.198.0/23 maxlen: 32 176.126.204.0/24 maxlen: 32 176.223.104.0/22 maxlen: 32 176.223.182.0/23 maxlen: 32 180.149.0.0/20 maxlen: 32 180.149.16.0/20 maxlen: 32 180.235.160.0/20 maxlen: 32 185.66.136.0/22 maxlen: 32 188.94.84.0/22 maxlen: 32 188.208.108.0/24 maxlen: 32 188.208.116.0/24 maxlen: 32 188.210.254.0/24 maxlen: 32 188.211.24.0/23 maxlen: 32 188.211.234.0/24 maxlen: 32 188.212.136.0/21 maxlen: 32 188.214.81.0/24 maxlen: 32 188.215.76.0/23 maxlen: 32 188.240.48.0/23 maxlen: 32 188.241.15.0/24 maxlen: 32 188.241.56.0/23 maxlen: 32 188.241.200.0/21 maxlen: 32 188.241.249.0/24 maxlen: 32 193.56.24.0/23 maxlen: 32 193.56.26.0/23 maxlen: 32 193.142.103.0/24 maxlen: 32 193.200.104.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:64:6a:c1:d6:45:6d:2d:f1:89:73:c2:fc:38:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 1 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=342a5a7b9354073cf01632873ba1caa10b0568da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:3f:f0:38:44:56:0a:f5:99:10:f7:38:7a: e7:ec:a0:65:8a:8d:b5:62:85:fe:cb:32:35:8c:67: fc:bb:d9:8a:6a:e2:be:0e:44:f2:1a:e6:76:ab:2c: a6:ad:a7:8d:8e:28:b6:e2:94:29:6f:56:91:f6:a7: 47:a3:a2:4a:74:8a:f1:41:e6:1d:b5:6d:09:8e:1d: af:1a:14:cd:2d:64:99:78:3f:7d:bc:d1:60:ef:c2: 13:3b:d3:b1:c5:a7:f9:cb:5b:31:d7:ee:e2:95:bd: c3:a8:6d:f4:09:32:65:1f:4f:79:3f:59:f5:dc:ed: 61:8c:db:0a:c1:8c:20:f6:f2:e7:a6:bb:bd:ad:e5: 93:91:59:62:30:60:c3:ac:49:fe:05:a9:57:0c:f3: a7:68:a6:c9:27:76:88:c2:8a:27:33:07:28:43:44: 68:36:8f:0f:e9:f2:a6:dd:68:c6:42:da:82:0a:3e: 0b:1b:59:7b:32:90:d2:63:c7:b7:e3:79:89:59:04: 41:d8:9c:ee:d7:8f:44:0e:2c:12:c7:63:91:90:9f: 25:84:4a:e5:c8:fe:30:43:2c:44:c4:bf:81:f9:d0: f5:36:9b:04:bc:08:e2:8c:5a:0d:9d:a3:6f:87:7b: c1:d0:54:d1:d9:6b:8c:6f:77:e7:0c:f7:c4:78:4e: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:5A:7B:93:54:07:3C:F0:16:32:87:3B:A1:CA:A1:0B:05:68:DA X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/NCpae5NUBzzwFjKHO6HKoQsFaNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.152.0/21 31.14.26.0/24 46.102.105.0/24 77.81.92.0/22 79.139.80.0/23 85.217.220.0/23 86.105.241.0/24 86.106.176.0/23 89.32.125.0/24 89.37.58.0/24 89.38.234.0/24 89.40.41.0/24 89.40.81.0/24 89.40.164.0/23 89.47.43.0/24 89.104.122.0/23 89.223.22.0/23 91.92.22.0/23 91.92.138.0/24 91.92.178.0/23 91.92.216.0-91.92.218.255 91.192.212.0/22 92.114.60.0/22 92.114.81.0/24 92.114.110.0/24 92.255.0.0/24 92.255.52.0/24 92.255.64.0/24 92.255.80.0/22 93.113.52.0/23 93.114.84.0/24 93.115.4.0/23 93.115.36.0/24 93.119.193.0/24 94.139.56.0-94.139.61.255 94.139.224.0/20 94.176.0.0/23 94.176.132.0/23 94.176.150.0/24 94.177.6.0/23 94.177.14.0/23 94.177.23.0/24 110.238.192.0/19 110.239.208.0/20 119.12.176.0-119.12.207.255 176.126.198.0/23 176.126.204.0/24 176.223.104.0/22 176.223.182.0/23 180.149.0.0/19 180.235.160.0/20 185.66.136.0/22 188.94.84.0/22 188.208.108.0/24 188.208.116.0/24 188.210.254.0/24 188.211.24.0/23 188.211.234.0/24 188.212.136.0/21 188.214.81.0/24 188.215.76.0/23 188.240.48.0/23 188.241.15.0/24 188.241.56.0/23 188.241.200.0/21 188.241.249.0/24 193.56.24.0/22 193.142.103.0/24 193.200.104.0/23 Signature Algorithm: sha256WithRSAEncryption 68:86:65:fc:11:ad:52:51:e2:9a:e6:77:72:98:88:5a:8e:41: 19:ef:6a:98:aa:d2:a3:43:de:82:06:8e:dd:28:59:91:7c:70: 2b:3d:de:31:93:20:e2:69:28:a8:7a:50:53:26:36:02:c8:0c: 4e:36:c6:17:11:82:f6:e2:d4:18:8d:9f:19:5d:3b:4b:2b:60: df:3f:28:0b:d1:9c:de:e3:f4:ae:b8:0d:89:43:31:b3:9f:5a: 2d:66:d0:51:33:75:50:8f:24:98:c8:c0:e5:b6:b0:0f:6e:a2: 3b:a8:c8:55:f9:65:1c:f3:5e:e2:9f:e2:23:a1:97:45:cf:fd: a1:db:9f:ce:95:bf:01:63:a2:96:8c:72:33:2f:df:0e:11:e8: 78:73:46:00:df:94:8e:ec:c5:23:5f:1c:01:7e:f6:8d:31:6d: 33:51:50:aa:39:29:27:10:16:c0:6b:22:6a:ee:1f:36:06:9c: db:43:81:80:6c:a9:39:18:bc:fc:2b:91:92:c4:b7:d6:a5:eb: 49:ef:55:62:db:73:06:bb:58:23:8a:44:fc:de:4c:36:a8:2b: 6f:cf:0f:17:f5:37:aa:06:27:a6:9d:8a:05:a3:2b:94:55:d2: e8:be:f5:52:b8:39:89:33:51:21:3d:03:20:de:b7:60:cf:8b: 77:0e:64:e8 -----BEGIN CERTIFICATE----- MIIGtzCCBZ+gAwIBAgISAZt4NWRqwdZFbS3xiXPC/DinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTAxMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDJhNWE3YjkzNTQwNzNjZjAxNjMyODczYmExY2FhMTBiMDU2OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W0/8DhEVgr1mRD3OHrn7KBlio21 YoX+yzI1jGf8u9mKauK+DkTyGuZ2qyymraeNjii24pQpb1aR9qdHo6JKdIrxQeYd tW0Jjh2vGhTNLWSZeD99vNFg78ITO9Oxxaf5y1sx1+7ilb3DqG30CTJlH095P1n1 3O1hjNsKwYwg9vLnpru9reWTkVliMGDDrEn+BalXDPOnaKbJJ3aIwoonMwcoQ0Ro No8P6fKm3WjGQtqCCj4LG1l7MpDSY8e343mJWQRB2Jzu149EDiwSx2ORkJ8lhErl yP4wQyxExL+B+dD1NpsEvAjijFoNnaNvh3vB0FTR2WuMb3fnDPfEeE6H+wIDAQAB o4IDwzCCA78wHQYDVR0OBBYEFDQqWnuTVAc88BYyhzuhyqELBWjaMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvTkNwYWU1TlVCenp3RmpLSE82SEtvUXNGYU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB1wYIKwYBBQUHAQcBAf8EggHGMIIBwjCCAb4EAgABMIIB tgMEAwU+mAMEAB8OGgMEAC5maQMEAk1RXAMEAU+LUAMEAVXZ3AMEAFZp8QMEAVZq sAMEAFkgfQMEAFklOgMEAFkm6gMEAFkoKQMEAFkoUQMEAVkopAMEAFkvKwMEAVlo egMEAVnfFgMEAVtcFgMEAFtcigMEAVtcsjAMAwQDW1zYAwQAW1zaAwQCW8DUAwQC XHI8AwQAXHJRAwQAXHJuAwQAXP8AAwQAXP80AwQAXP9AAwQCXP9QAwQBXXE0AwQA XXJUAwQBXXMEAwQAXXMkAwQAXXfBMAwDBANeizgDBAFeizwDBARei+ADBAFesAAD BAFesIQDBABesJYDBAFesQYDBAFesQ4DBABesRcDBAVu7sADBARu79AwDAMEBHcM sAMEBHcMwAMEAbB+xgMEALB+zAMEArDfaAMEAbDftgMEBbSVAAMEBLTroAMEArlC iAMEArxeVAMEALzQbAMEALzQdAMEALzS/gMEAbzTGAMEALzT6gMEA7zUiAMEALzW UQMEAbzXTAMEAbzwMAMEALzxDwMEAbzxOAMEA7zxyAMEALzx+QMEAsE4GAMEAMGO ZwMEAcHIaDANBgkqhkiG9w0BAQsFAAOCAQEAaIZl/BGtUlHimuZ3cpiIWo5BGe9q mKrSo0PeggaO3ShZkXxwKz3eMZMg4mkoqHpQUyY2AsgMTjbGFxGC9uLUGI2fGV07 Sytg3z8oC9Gc3uP0rrgNiUMxs59aLWbQUTN1UI8kmMjA5bawD26iO6jIVfllHPNe 4p/iI6GXRc/9odufzpW/AWOiloxyMy/fDhHoeHNGAN+UjuzFI18cAX72jTFtM1FQ qjkpJxAWwGsiau4fNgac20OBgGypORi8/CuRksS31qXrSe9VYttzBrtYI4pE/N5M Nqgrb88PF/U3qgYnpp2KBaMrlFXS6L71Urg5iTNRIT0DIN63YM+Ldw5k6A== -----END CERTIFICATE-----Generated at Fri Jan 2 09:49:55 2026 by rpki-client