This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/nSIWzrKrg4GjqhgpayTMFVNoI0o.roa File: nSIWzrKrg4GjqhgpayTMFVNoI0o.roa (raw, json) Hash identifier: NKyEbfssfTO/AuyoEB3SBezTKuVFFwPGKSQkU1grmd8= Subject key identifier: 9D:22:16:CE:B2:AB:83:81:A3:AA:18:29:6B:24:CC:15:53:68:23:4A Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B2AEE76CDE37B054650D4A165B828B077 Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/nSIWzrKrg4GjqhgpayTMFVNoI0o.roa Signing time: Wed 17 Dec 2025 06:10:29 +0000 ROA not before: Wed 17 Dec 2025 06:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 62.182.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ee:76:cd:e3:7b:05:46:50:d4:a1:65:b8:28:b0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 17 06:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d2216ceb2ab8381a3aa18296b24cc155368234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:66:78:6d:46:0c:6c:50:11:d5:d7:b5:be: 6f:4e:5b:10:f9:39:84:5f:67:b9:75:49:20:b5:08: 90:b5:3c:c6:68:c4:12:00:d6:ca:b2:13:ff:65:29: 7f:a6:7b:71:f4:02:8e:0a:4f:eb:6f:0f:40:48:5e: 1a:a3:e3:6a:b8:23:de:f0:95:0d:3e:53:67:92:38: fe:27:1e:71:a3:1c:15:00:8d:84:98:30:1d:64:20: 0a:53:13:3d:16:e7:b1:42:a3:6a:b2:70:a4:1d:07: 5c:24:8d:26:37:0f:38:f4:46:ca:b0:1d:73:c5:ba: f7:31:43:75:76:9a:8e:73:31:04:03:dc:f6:12:54: e6:36:14:94:bc:5b:70:e8:9f:65:b6:d8:57:7a:bc: 0a:7d:2f:fd:60:be:f1:98:69:8e:b1:86:68:9a:ce: 34:fd:eb:41:3b:38:98:7d:d8:7c:79:79:65:17:59: 90:0e:02:32:4b:75:0c:95:01:a2:b6:c3:f9:01:e8: 3b:a2:1b:c4:65:45:3e:8d:88:13:22:f7:37:b8:34: f3:f2:b6:00:d5:bb:f6:49:e7:f1:25:8c:06:cd:4a: 63:93:d6:92:8f:9c:d7:7f:e9:d1:29:2b:fc:68:a7: 0a:01:96:3b:9e:14:4b:0d:c2:26:2b:7c:f8:51:74: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:22:16:CE:B2:AB:83:81:A3:AA:18:29:6B:24:CC:15:53:68:23:4A X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/nSIWzrKrg4GjqhgpayTMFVNoI0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.189.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ad:d3:3a:d2:fe:6b:66:ca:37:74:c3:1b:37:4a:0c:36:07: 8f:5e:2d:56:aa:45:3e:fb:1e:5c:97:d2:bf:c1:b4:0b:7b:a9: 52:10:32:db:73:2a:66:1e:1a:2b:aa:65:88:a4:f0:2b:25:48: 22:33:c7:df:2f:3b:d8:65:18:5d:1d:52:71:f3:f6:c6:79:4a: fc:fe:88:95:20:46:44:27:0d:f3:9b:a8:73:1d:7d:25:52:75: de:2f:45:06:83:ce:f0:af:64:e5:e2:79:0b:78:75:5b:10:81: 15:5b:a4:c5:94:aa:c2:c3:f9:e1:49:bb:90:19:3b:4c:38:18: b5:81:35:74:16:19:8f:54:72:d4:45:96:3d:fc:b0:0c:ea:56: 94:58:2a:45:c4:f6:76:14:c2:b0:f8:72:85:c0:1b:43:a2:ea: 29:d8:ff:84:37:12:9a:be:15:e2:6f:fb:2e:bd:e6:80:5c:06: 09:e2:51:60:9d:6f:7e:e9:04:d7:50:22:6d:9e:de:c1:0f:d5: 19:d9:48:a0:28:72:8e:25:5d:42:3e:4c:d3:23:01:6b:e3:74: b5:52:15:52:70:58:22:f0:5b:76:b4:d1:ab:50:0b:ad:91:0f: 73:47:95:d5:c7:6e:71:62:85:96:fc:d6:be:1c:69:b9:6f:ae: a0:0a:2b:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsq7nbN43sFRlDUoWW4KLB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjE3MDYxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDIyMTZjZWIyYWI4MzgxYTNhYTE4Mjk2YjI0Y2MxNTUzNjgyMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1meG1GDGxQEdXXtb5vTlsQ+TmE X2e5dUkgtQiQtTzGaMQSANbKshP/ZSl/pntx9AKOCk/rbw9ASF4ao+NquCPe8JUN PlNnkjj+Jx5xoxwVAI2EmDAdZCAKUxM9FuexQqNqsnCkHQdcJI0mNw849EbKsB1z xbr3MUN1dpqOczEEA9z2ElTmNhSUvFtw6J9ltthXerwKfS/9YL7xmGmOsYZoms40 /etBOziYfdh8eXllF1mQDgIyS3UMlQGitsP5Aeg7ohvEZUU+jYgTIvc3uDTz8rYA 1bv2SefxJYwGzUpjk9aSj5zXf+nRKSv8aKcKAZY7nhRLDcImK3z4UXRmPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0iFs6yq4OBo6oYKWskzBVTaCNKMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvblNJV3pyS3JnNEdqcWhncGF5VE1GVk5vSTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra9MA0G CSqGSIb3DQEBCwUAA4IBAQAFrdM60v5rZso3dMMbN0oMNgePXi1WqkU++x5cl9K/ wbQLe6lSEDLbcypmHhorqmWIpPArJUgiM8ffLzvYZRhdHVJx8/bGeUr8/oiVIEZE Jw3zm6hzHX0lUnXeL0UGg87wr2Tl4nkLeHVbEIEVW6TFlKrCw/nhSbuQGTtMOBi1 gTV0FhmPVHLURZY9/LAM6laUWCpFxPZ2FMKw+HKFwBtDouop2P+ENxKavhXib/su veaAXAYJ4lFgnW9+6QTXUCJtnt7BD9UZ2UigKHKOJV1CPkzTIwFr43S1UhVScFgi 8Ft2tNGrUAutkQ9zR5XVx25xYoWW/Na+HGm5b66gCisA -----END CERTIFICATE-----Generated at Fri Dec 19 23:20:06 2025 by rpki-client