This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NWfd370uH5lbUacr8duxGeUTYdk.roa File: NWfd370uH5lbUacr8duxGeUTYdk.roa (raw, json) Hash identifier: VFsocYh+H8xYkjBU76EMDy8y6zCloFEwH+T0zIEKZhI= Subject key identifier: 35:67:DD:DF:BD:2E:1F:99:5B:51:A7:2B:F1:DB:B1:19:E5:13:61:D9 Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B36116A1FE577DC4D80614941E844B001 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NWfd370uH5lbUacr8duxGeUTYdk.roa Signing time: Fri 19 Dec 2025 10:04:29 +0000 ROA not before: Fri 19 Dec 2025 10:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 92.12.0.0/14 maxlen: 24 213.208.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:11:6a:1f:e5:77:dc:4d:80:61:49:41:e8:44:b0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Dec 19 10:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3567dddfbd2e1f995b51a72bf1dbb119e51361d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:81:bb:0b:d7:4b:d4:84:60:18:15:08:ca: 5c:da:d9:8c:4c:64:26:a1:88:d5:d4:16:0b:69:f3: d8:59:78:bb:3c:24:34:ed:35:b8:db:ec:b3:ef:36: ba:99:23:d1:9b:69:cb:79:c0:c0:95:3d:35:d1:3a: df:0f:44:2a:09:6f:78:10:ce:a3:87:c2:1c:5e:3f: 70:24:7b:a9:a6:69:bd:41:ae:e1:02:bb:55:25:25: 41:dc:4e:a4:5d:ba:e4:e0:36:ed:43:c4:78:04:64: 60:15:3e:a5:84:f0:b9:81:0c:0c:05:ee:65:14:09: cf:ce:f6:22:8a:d9:76:5d:8d:b5:2a:88:40:67:bb: 2d:97:8d:36:3c:32:c2:c7:7f:16:ee:45:5c:03:28: 0b:0c:07:a5:b6:a0:95:8f:59:50:0b:b7:26:b1:29: e4:07:b5:82:86:00:3e:55:7d:fa:71:9b:1c:4a:52: f1:00:b3:27:16:e0:e8:57:e7:ce:e1:28:9c:0f:7e: 2f:d1:a2:20:a1:d7:22:2f:d4:51:53:7b:a8:57:c0: f4:e3:30:4c:8b:90:80:1c:ed:58:63:61:65:62:ee: 00:d3:43:c7:93:01:e8:55:c1:98:dd:ae:ee:29:1b: 61:4b:52:97:ff:05:a1:a7:0d:e4:5b:ce:22:6f:75: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:DD:DF:BD:2E:1F:99:5B:51:A7:2B:F1:DB:B1:19:E5:13:61:D9 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NWfd370uH5lbUacr8duxGeUTYdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.12.0.0/14 213.208.64.0/18 Signature Algorithm: sha256WithRSAEncryption 22:b4:65:aa:07:e5:85:48:c4:1d:45:a2:91:17:40:ff:a2:52: 1b:16:2f:80:25:e9:98:8b:0b:2f:cb:d4:88:a4:b7:44:e6:3b: 4a:f0:41:f7:02:a6:e4:69:7e:21:6d:9b:e9:40:0d:a5:f7:32: 4a:e7:cf:6d:66:8c:9a:40:a8:56:b5:54:8c:86:fe:cc:72:78: 53:d3:07:1f:5a:bc:d6:30:14:c0:15:45:ad:2b:1a:2c:55:37: 30:3a:7c:67:6a:46:43:53:a9:39:81:c1:f5:25:60:b3:48:4f: d3:1c:02:60:64:68:f8:ec:ac:5f:1d:d0:30:55:fa:1b:82:19: 5c:5f:ea:4c:b2:c1:e1:a7:55:0f:b4:92:46:0a:32:11:dc:d5: 44:40:bb:77:9e:fe:fb:b4:73:81:2d:92:9b:3c:33:d0:69:1f: dd:14:01:96:76:d8:8d:c6:43:a5:2b:91:7a:3e:7d:d8:08:0b: d4:a1:5a:69:84:bd:cb:fc:3a:db:f1:2a:07:5b:66:cb:df:cf: a0:5b:53:f4:0f:b4:ad:87:db:eb:0f:d8:ec:08:c1:47:10:eb: fc:2a:bf:bf:9d:0b:0c:05:7e:b6:64:0c:f7:bd:6b:1f:5d:e1: 9b:2f:76:d3:9d:6f:a4:c7:dc:fd:86:2d:60:8b:10:ac:0e:d6: 45:df:8d:d1 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZs2EWof5XfcTYBhSUHoRLABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjUxMjE5MTAwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTY3ZGRkZmJkMmUxZjk5NWI1MWE3MmJmMWRiYjExOWU1MTM2MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaOBuwvXS9SEYBgVCMpc2tmMTGQm oYjV1BYLafPYWXi7PCQ07TW42+yz7za6mSPRm2nLecDAlT010TrfD0QqCW94EM6j h8IcXj9wJHuppmm9Qa7hArtVJSVB3E6kXbrk4DbtQ8R4BGRgFT6lhPC5gQwMBe5l FAnPzvYiitl2XY21KohAZ7stl402PDLCx38W7kVcAygLDAeltqCVj1lQC7cmsSnk B7WChgA+VX36cZscSlLxALMnFuDoV+fO4SicD34v0aIgodciL9RRU3uoV8D04zBM i5CAHO1YY2FlYu4A00PHkwHoVcGY3a7uKRthS1KX/wWhpw3kW84ib3UEywIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDVn3d+9Lh+ZW1GnK/HbsRnlE2HZMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvTldmZDM3MHVINWxiVWFjcjhkdXhHZVVUWWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMCXAwDBAbV 0EAwDQYJKoZIhvcNAQELBQADggEBACK0ZaoH5YVIxB1FopEXQP+iUhsWL4Al6ZiL Cy/L1Iikt0TmO0rwQfcCpuRpfiFtm+lADaX3Mkrnz21mjJpAqFa1VIyG/sxyeFPT Bx9avNYwFMAVRa0rGixVNzA6fGdqRkNTqTmBwfUlYLNIT9McAmBkaPjsrF8d0DBV +huCGVxf6kyyweGnVQ+0kkYKMhHc1URAu3ee/vu0c4Etkps8M9BpH90UAZZ22I3G Q6UrkXo+fdgIC9ShWmmEvcv8OtvxKgdbZsvfz6BbU/QPtK2H2+sP2OwIwUcQ6/wq v7+dCwwFfrZkDPe9ax9d4ZsvdtOdb6TH3P2GLWCLEKwO1kXfjdE= -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:14 2025 by rpki-client