This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/nPjSwNBUUM13Tg6_9mJUyIANhto.roa File: nPjSwNBUUM13Tg6_9mJUyIANhto.roa (raw, json) Hash identifier: UvGs3oxzD5HQvlKZxXIqRuFwcuTXRYY9KaR2Cx14PP0= Subject key identifier: 9C:F8:D2:C0:D0:54:50:CD:77:4E:0E:BF:F6:62:54:C8:80:0D:86:DA Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Certificate serial: 019B46FAF26807E93ADE22D2A4C2EC948178 Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/nPjSwNBUUM13Tg6_9mJUyIANhto.roa Signing time: Mon 22 Dec 2025 16:53:29 +0000 ROA not before: Mon 22 Dec 2025 16:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210671 IP address blocks: 46.243.150.0/24 maxlen: 24 85.92.119.0/24 maxlen: 24 194.48.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:fa:f2:68:07:e9:3a:de:22:d2:a4:c2:ec:94:81:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Validity Not Before: Dec 22 16:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9cf8d2c0d05450cd774e0ebff66254c8800d86da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:72:5a:36:03:9d:8e:b1:5f:09:95:3e:ad:3c: 45:1b:83:28:df:bf:a9:3c:4c:bd:04:28:29:ba:78: 8a:b3:02:89:3c:ab:f5:3c:f4:7e:10:85:55:d8:8a: 1a:f3:06:97:a6:0a:e4:40:bc:84:98:89:7b:39:18: c1:71:9a:5b:7f:02:f7:6f:7f:c0:d4:28:32:46:8e: eb:7c:bb:ae:0c:40:fe:a6:5a:95:be:a6:70:7a:a8: 46:a0:7a:21:d9:18:8b:84:3f:89:e0:73:e5:f1:33: 46:49:1e:e0:53:42:ad:79:76:a5:6d:3e:a4:8f:fc: 4e:8f:0b:7a:ab:6b:0e:25:64:e5:32:9a:94:5f:f7: 84:41:ce:39:2d:9a:18:98:c7:22:92:46:1a:98:3b: c0:97:8d:b9:21:a8:9a:ac:7b:a4:35:8b:d7:13:14: c3:19:d1:fa:c8:db:4b:9e:20:23:17:84:f2:52:84: 73:71:6d:28:51:14:2e:8e:d3:62:b9:ae:6f:51:3f: 2e:d1:e7:5c:dd:5a:03:94:0d:38:0e:a1:52:2d:41: ba:ce:ab:d1:f0:b7:ca:75:6b:ae:a7:89:ef:11:cd: ca:56:c2:49:b6:9f:a7:a3:dd:ac:f1:77:8e:4f:1c: d6:b0:01:0c:1c:b0:20:25:29:b7:98:17:a7:ee:a4: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F8:D2:C0:D0:54:50:CD:77:4E:0E:BF:F6:62:54:C8:80:0D:86:DA X509v3 Authority Key Identifier: keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/nPjSwNBUUM13Tg6_9mJUyIANhto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.150.0/24 85.92.119.0/24 194.48.211.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:f3:af:17:87:66:e0:d1:08:f4:7c:e0:02:66:df:17:ff:3c: 0e:62:22:ef:4b:28:bf:71:10:80:4b:47:96:fc:04:9e:d9:6e: bb:0c:9a:b9:52:53:93:15:4e:2f:39:25:47:4b:0b:24:8e:2f: 1b:30:8f:d0:4d:cc:8f:9f:b7:b9:b8:25:0e:d1:c0:73:93:7f: 1b:58:c8:58:eb:18:e9:60:06:41:c9:5f:36:2b:01:67:a0:f1: 35:d4:4d:f7:f9:a0:f0:95:c2:a6:a5:dc:84:5d:97:a4:70:ad: e1:66:80:74:2f:03:a6:6d:a8:3f:e9:79:53:77:e8:d4:62:ac: 95:ae:ef:59:ca:a3:59:5e:bf:a0:f7:5e:61:b3:27:17:51:38: aa:21:49:5a:75:3f:73:87:9a:fe:74:bb:70:b1:51:f8:29:af: 6c:c4:b5:0d:42:0c:58:c8:db:a7:29:12:f3:9d:28:1c:cf:0b: 4b:43:ec:73:ff:b1:38:3c:b5:00:9d:28:9d:d9:0b:1a:47:57: cc:fd:73:18:ab:c5:91:f0:61:25:47:af:ca:c6:08:9f:8e:e1: 43:65:d7:98:52:e0:8b:3b:15:e3:6a:16:99:fc:da:18:c8:a7: d8:2e:e5:f2:0e:c7:23:8e:0c:ce:56:a4:1a:79:ae:06:79:41: 7d:dd:ab:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtG+vJoB+k63iLSpMLslIF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjdmZDU3MTBhZTVhNDczZTE1OGRjM2ZkNmM4ZjE3ZWZh M2U1NWIwHhcNMjUxMjIyMTY1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Y4ZDJjMGQwNTQ1MGNkNzc0ZTBlYmZmNjYyNTRjODgwMGQ4NmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53JaNgOdjrFfCZU+rTxFG4Mo37+p PEy9BCgpuniKswKJPKv1PPR+EIVV2Ioa8waXpgrkQLyEmIl7ORjBcZpbfwL3b3/A 1CgyRo7rfLuuDED+plqVvqZweqhGoHoh2RiLhD+J4HPl8TNGSR7gU0KteXalbT6k j/xOjwt6q2sOJWTlMpqUX/eEQc45LZoYmMcikkYamDvAl425IaiarHukNYvXExTD GdH6yNtLniAjF4TyUoRzcW0oURQujtNiua5vUT8u0edc3VoDlA04DqFSLUG6zqvR 8LfKdWuup4nvEc3KVsJJtp+no92s8XeOTxzWsAEMHLAgJSm3mBen7qQPMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJz40sDQVFDNd04Ov/ZiVMiADYbaMB8GA1UdIwQY MBaAFP73/VcQrlpHPhWNw/1sjxfvo+VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODIt NDUzZDM3YjQ5MjFjLzEvblBqU3dOQlVVTTEzVGc2XzltSlV5SUFOaHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODItNDUzZDM3YjQ5MjFj LzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvOWAwQA VVx3AwQAwjDTMA0GCSqGSIb3DQEBCwUAA4IBAQBK868Xh2bg0Qj0fOACZt8X/zwO YiLvSyi/cRCAS0eW/ASe2W67DJq5UlOTFU4vOSVHSwskji8bMI/QTcyPn7e5uCUO 0cBzk38bWMhY6xjpYAZByV82KwFnoPE11E33+aDwlcKmpdyEXZekcK3hZoB0LwOm bag/6XlTd+jUYqyVru9ZyqNZXr+g915hsycXUTiqIUladT9zh5r+dLtwsVH4Ka9s xLUNQgxYyNunKRLznSgczwtLQ+xz/7E4PLUAnSid2QsaR1fM/XMYq8WR8GElR6/K xgifjuFDZdeYUuCLOxXjahaZ/NoYyKfYLuXyDscjjgzOVqQaea4GeUF93asN -----END CERTIFICATE-----Generated at Tue Dec 23 00:41:23 2025 by rpki-client