This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/NcBIwWrVfFqKGC-Ejlu0skUAVME.roa File: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (raw, json) Hash identifier: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg= Subject key identifier: 35:C0:48:C1:6A:D5:7C:5A:8A:18:2F:84:8E:5B:B4:B2:45:00:54:C1 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019B76EB0E55B5A2B325064CEE4726F174E9 Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/NcBIwWrVfFqKGC-Ejlu0skUAVME.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201863 IP address blocks: 89.207.12.0/24 maxlen: 24 89.207.13.0/24 maxlen: 24 89.207.14.0/24 maxlen: 24 89.207.15.0/24 maxlen: 24 185.32.12.0/24 maxlen: 24 185.32.13.0/24 maxlen: 24 185.32.14.0/24 maxlen: 24 185.32.15.0/24 maxlen: 24 185.187.184.0/24 maxlen: 24 185.187.185.0/24 maxlen: 24 185.187.186.0/24 maxlen: 24 185.187.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:55:b5:a2:b3:25:06:4c:ee:47:26:f1:74:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c048c16ad57c5a8a182f848e5bb4b2450054c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:43:95:03:4e:a4:94:58:d2:68:37:7c:06: 1c:75:63:6f:ab:18:8d:84:75:b2:b3:1b:8d:9e:4c: 2e:bc:e9:a1:13:1d:37:3d:6a:86:1f:3f:d5:89:c8: 4f:9b:ab:8c:c6:7b:3e:45:f0:73:d0:5f:3d:92:4e: a3:72:5f:8e:c1:8d:9f:bb:d2:b6:03:5d:fe:8a:3c: 34:90:12:2f:c5:b2:0a:79:a0:6b:8d:1c:43:d2:06: f3:4e:dd:89:9d:2d:d8:fd:4b:70:56:65:06:b0:d3: 0a:82:74:f5:64:cc:a0:15:00:f2:36:4c:cb:2a:aa: ac:48:cb:4a:0f:f7:8f:62:91:8d:1c:9a:c5:49:01: cf:8d:86:c7:b0:ad:21:2c:72:9c:c0:34:99:44:6d: 55:f0:08:43:52:50:bf:6d:51:a2:3d:9f:ff:b1:e6: 4b:23:c3:09:b8:05:ff:f8:d7:9b:2b:94:86:02:f1: d9:02:0b:cf:79:e4:0b:c6:00:1d:e9:71:50:08:ee: 14:da:64:77:66:c3:ac:9e:e2:44:d7:5e:28:0a:85: 15:4d:ba:7d:cc:8a:4e:3b:ab:60:1b:4c:1c:5b:f0: e1:d0:e5:87:93:93:9f:48:bc:57:85:1c:93:81:a8: ac:a6:a5:77:7a:fa:9d:c6:f8:d2:f7:82:d7:38:b9: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:48:C1:6A:D5:7C:5A:8A:18:2F:84:8E:5B:B4:B2:45:00:54:C1 X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/NcBIwWrVfFqKGC-Ejlu0skUAVME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.12.0/22 185.32.12.0/22 185.187.184.0/22 Signature Algorithm: sha256WithRSAEncryption 21:e7:75:64:9c:a5:13:33:2f:b7:9c:4c:43:90:9f:0b:d3:ea: 55:5c:f8:3a:ff:4e:b5:64:ad:c1:1f:10:cd:bb:45:c4:c8:0f: 12:63:61:8d:68:0d:e3:d4:7e:3b:0a:ad:6d:44:00:31:83:eb: c7:44:f8:0e:16:39:ef:9d:ee:41:8d:62:11:53:54:7d:0e:fc: 12:1a:0c:17:7c:a5:41:cf:43:e2:e3:f1:74:53:31:d1:a6:3f: b8:6f:74:d0:28:5a:8d:a6:8b:6f:31:95:a8:ea:38:19:c2:99: 33:d4:43:fd:0e:c2:e0:8c:1f:7e:08:8f:2c:7a:67:47:17:5e: 28:74:f8:51:13:1a:bc:12:35:50:16:e2:ab:dc:da:34:80:55: 1a:df:7a:64:c8:92:b9:d0:17:17:0b:13:1d:8e:7a:74:2a:2d: 36:e7:05:3b:60:c8:b8:e1:e1:5b:d3:d0:8b:ae:7a:92:86:cf: 09:e9:96:7d:f2:5c:df:13:b4:ec:0e:74:d0:9c:01:29:d6:0e: 89:5f:d5:71:23:b5:f6:27:e6:a1:e3:ac:8d:e0:b2:ba:75:a3: b2:36:25:40:af:41:ba:3e:97:33:ca:5d:f4:b6:47:0a:96:96: 71:89:62:1e:be:48:14:12:1d:b9:34:9e:f4:32:07:16:85:03: b8:3a:22:2b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26w5VtaKzJQZM7kcm8XTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWMwNDhjMTZhZDU3YzVhOGExODJmODQ4ZTViYjRiMjQ1MDA1NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj69DlQNOpJRY0mg3fAYcdWNvqxiN hHWysxuNnkwuvOmhEx03PWqGHz/VichPm6uMxns+RfBz0F89kk6jcl+OwY2fu9K2 A13+ijw0kBIvxbIKeaBrjRxD0gbzTt2JnS3Y/UtwVmUGsNMKgnT1ZMygFQDyNkzL KqqsSMtKD/ePYpGNHJrFSQHPjYbHsK0hLHKcwDSZRG1V8AhDUlC/bVGiPZ//seZL I8MJuAX/+NebK5SGAvHZAgvPeeQLxgAd6XFQCO4U2mR3ZsOsnuJE114oCoUVTbp9 zIpOO6tgG0wcW/Dh0OWHk5OfSLxXhRyTgaispqV3evqdxvjS94LXOLk5wwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDXASMFq1XxaihgvhI5btLJFAFTBMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvTmNCSXdXclZmRnFLR0MtRWpsdTBza1VBVk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWc8MAwQC uSAMAwQCubu4MA0GCSqGSIb3DQEBCwUAA4IBAQAh53VknKUTMy+3nExDkJ8L0+pV XPg6/061ZK3BHxDNu0XEyA8SY2GNaA3j1H47Cq1tRAAxg+vHRPgOFjnvne5BjWIR U1R9DvwSGgwXfKVBz0Pi4/F0UzHRpj+4b3TQKFqNpotvMZWo6jgZwpkz1EP9DsLg jB9+CI8semdHF14odPhRExq8EjVQFuKr3No0gFUa33pkyJK50BcXCxMdjnp0Ki02 5wU7YMi44eFb09CLrnqShs8J6ZZ98lzfE7TsDnTQnAEp1g6JX9VxI7X2J+ah46yN 4LK6daOyNiVAr0G6Ppczyl30tkcKlpZxiWIevkgUEh25NJ70MgcWhQO4OiIr -----END CERTIFICATE-----Generated at Sat Jan 10 23:46:23 2026 by rpki-client