This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NxDioS42mqzdQfLMxyB7X-GlaRk.roa File: NxDioS42mqzdQfLMxyB7X-GlaRk.roa (raw, json) Hash identifier: C3TTQFAalnMmHYCoE9DHkCJCL/yOjyVdjjZKsCzOrhY= Subject key identifier: 37:10:E2:A1:2E:36:9A:AC:DD:41:F2:CC:C7:20:7B:5F:E1:A5:69:19 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B2D28D7174CF452401E080BA082837836 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NxDioS42mqzdQfLMxyB7X-GlaRk.roa Signing time: Wed 17 Dec 2025 16:33:29 +0000 ROA not before: Wed 17 Dec 2025 16:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33659 IP address blocks: 62.106.83.0/24 maxlen: 24 77.246.242.0/24 maxlen: 24 194.26.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:28:d7:17:4c:f4:52:40:1e:08:0b:a0:82:83:78:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Dec 17 16:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3710e2a12e369aacdd41f2ccc7207b5fe1a56919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:fc:44:59:aa:3e:34:7a:8f:68:a8:12:55: db:12:cb:4f:8d:cc:f8:61:b2:2f:e0:8e:75:2e:ea: 35:a7:51:cf:db:bd:28:49:89:58:87:c4:98:38:3b: bd:45:6f:57:04:d0:88:97:72:7d:19:84:5a:47:7b: 2f:01:21:31:e4:23:41:df:ef:c5:82:96:d4:f0:bf: ff:d1:a2:4a:c1:c9:d9:7d:21:b9:9e:6d:ec:f4:52: 5c:92:49:e7:24:42:d3:a1:36:e4:f8:8b:8e:8a:a2: ea:2a:34:e8:b9:cf:f1:a1:8b:42:c4:3b:65:52:92: 94:a8:bc:00:18:0a:bf:44:37:79:5a:a6:5e:3f:d8: ab:2c:52:35:df:1f:22:a3:cb:24:9e:4c:de:e9:7f: 3f:70:84:09:ac:96:d9:81:5d:80:98:89:c0:ca:0c: 07:e9:4a:bd:6d:7a:eb:90:15:5e:e5:c7:84:b4:c9: 44:80:a5:6d:73:a8:e2:79:48:7e:50:4c:d9:d1:86: 9e:1d:2d:ca:d4:39:f4:c4:41:3f:6a:57:d0:ac:e5: a4:13:89:d9:9d:16:4f:d4:db:a1:86:4d:4a:a6:f1: 77:9d:e9:90:9f:37:95:4b:2d:08:d4:63:27:fe:0b: 39:81:c7:79:02:9c:14:d9:ba:82:84:19:59:30:b7: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:10:E2:A1:2E:36:9A:AC:DD:41:F2:CC:C7:20:7B:5F:E1:A5:69:19 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/NxDioS42mqzdQfLMxyB7X-GlaRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.83.0/24 77.246.242.0/24 194.26.218.0/24 Signature Algorithm: sha256WithRSAEncryption b8:fb:07:10:36:bf:00:bc:6e:c9:12:43:b1:8a:ab:a8:82:29: 88:1b:46:ed:f4:73:51:42:02:ec:6a:91:98:6e:65:95:f7:d0: 72:2f:a0:fb:cf:b0:3e:49:96:6c:b6:38:3b:5b:ff:14:14:f9: 60:fd:ba:e0:17:3c:b3:f8:da:ee:67:87:d3:71:24:cf:02:a0: 7a:ef:7f:f8:90:34:ef:ca:a9:58:dc:1c:2e:0c:62:bc:93:74: c7:f7:4c:f5:d8:0f:67:fc:26:a4:04:5e:0c:dd:30:6f:ff:69: 03:0c:60:99:b1:44:7d:13:42:9b:cb:01:66:34:4a:81:c8:53: b2:03:83:49:bf:44:4c:75:52:48:cd:2a:67:bd:7f:e3:b9:a2: cf:ad:c5:1a:7f:ab:cd:31:7e:68:29:35:f8:2d:a6:ca:66:a8: c9:99:7f:dd:42:f5:8e:ce:88:fc:53:23:7b:6b:92:3b:ff:1a: 8b:da:27:be:25:9f:3a:95:0e:e6:8e:4b:b6:d4:6c:a5:6d:89: aa:b9:cf:d2:3a:05:e7:9c:bb:d0:32:59:2a:cd:04:0c:04:32: d2:59:7c:28:9b:7b:62:b3:65:af:aa:dc:dc:8e:51:aa:25:af: e2:c6:71:4b:07:e7:b8:e5:20:99:7d:5e:c3:fb:23:0e:ed:0d: 27:14:3c:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZstKNcXTPRSQB4IC6CCg3g2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMjE3MTYzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzEwZTJhMTJlMzY5YWFjZGQ0MWYyY2NjNzIwN2I1ZmUxYTU2OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQz8RFmqPjR6j2ioElXbEstPjcz4 YbIv4I51Luo1p1HP270oSYlYh8SYODu9RW9XBNCIl3J9GYRaR3svASEx5CNB3+/F gpbU8L//0aJKwcnZfSG5nm3s9FJckknnJELToTbk+IuOiqLqKjTouc/xoYtCxDtl UpKUqLwAGAq/RDd5WqZeP9irLFI13x8io8sknkze6X8/cIQJrJbZgV2AmInAygwH 6Uq9bXrrkBVe5ceEtMlEgKVtc6jieUh+UEzZ0YaeHS3K1Dn0xEE/alfQrOWkE4nZ nRZP1Nuhhk1KpvF3nemQnzeVSy0I1GMn/gs5gcd5ApwU2bqChBlZMLeYQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDcQ4qEuNpqs3UHyzMcge1/hpWkZMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvTnhEaW9TNDJtcXpkUWZMTXh5QjdYLUdsYVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPmpTAwQA TfbyAwQAwhraMA0GCSqGSIb3DQEBCwUAA4IBAQC4+wcQNr8AvG7JEkOxiquogimI G0bt9HNRQgLsapGYbmWV99ByL6D7z7A+SZZstjg7W/8UFPlg/brgFzyz+NruZ4fT cSTPAqB673/4kDTvyqlY3BwuDGK8k3TH90z12A9n/CakBF4M3TBv/2kDDGCZsUR9 E0KbywFmNEqByFOyA4NJv0RMdVJIzSpnvX/juaLPrcUaf6vNMX5oKTX4LabKZqjJ mX/dQvWOzoj8UyN7a5I7/xqL2ie+JZ86lQ7mjku21GylbYmquc/SOgXnnLvQMlkq zQQMBDLSWXwom3tis2WvqtzcjlGqJa/ixnFLB+e45SCZfV7D+yMO7Q0nFDym -----END CERTIFICATE-----Generated at Sat Dec 20 18:22:03 2025 by rpki-client