This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NZaoRHSQSjGrBg3EIzAh9JoKg4k.roa File: NZaoRHSQSjGrBg3EIzAh9JoKg4k.roa (raw, json) Hash identifier: 1OLvNNxQTXlwmOhLOTd7oW6L7k0zMEefEcIjD49aFDw= Subject key identifier: 35:96:A8:44:74:90:4A:31:AB:06:0D:C4:23:30:21:F4:9A:0A:83:89 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806D0FD902DB8AF58B7CB719B7F43F Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NZaoRHSQSjGrBg3EIzAh9JoKg4k.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 80.64.17.0/24 maxlen: 24 80.242.56.0/24 maxlen: 24 80.242.58.0/24 maxlen: 24 194.32.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6d:0f:d9:02:db:8a:f5:8b:7c:b7:19:b7:f4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3596a84474904a31ab060dc4233021f49a0a8389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:27:4a:96:88:d3:fe:08:bc:2f:45:c5:9d: af:95:3f:f7:43:f2:02:76:04:c2:4a:cb:97:06:11: 6b:44:65:34:0d:c3:a9:91:b8:eb:96:67:3f:d3:bb: 00:b6:25:4c:0a:33:48:c0:cf:c3:86:01:aa:67:6e: 6d:e9:5e:51:72:c8:1f:90:f1:a7:5b:a5:33:59:e1: bb:88:6a:33:85:e9:9c:6d:08:f7:88:f9:34:92:b6: ad:b4:6c:ad:de:24:63:ea:9f:14:41:89:80:e9:87: b6:cc:f0:85:40:39:8b:2a:8a:26:53:62:45:3b:4b: 93:e3:1e:d3:e3:de:a4:88:a4:6c:e8:38:5e:01:fb: d1:ce:3d:24:73:86:90:85:e5:56:fd:f3:83:d6:4a: f5:b8:f0:1a:e8:15:df:1b:1c:94:10:bd:10:98:70: 06:df:14:c5:59:4e:e4:fe:26:67:c8:4b:03:e6:36: 58:50:79:52:41:97:57:95:68:9a:32:0a:74:29:63: fe:70:8a:cb:9c:92:87:bd:06:76:e8:0a:4a:12:d5: 90:5b:27:2a:6e:64:99:41:b7:a3:e2:dd:16:c4:23: a5:0b:b7:94:3d:c6:3e:19:8f:12:72:21:ec:78:c8: 00:96:04:98:d5:81:c0:c9:7c:39:df:5a:a9:22:4c: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:96:A8:44:74:90:4A:31:AB:06:0D:C4:23:30:21:F4:9A:0A:83:89 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NZaoRHSQSjGrBg3EIzAh9JoKg4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.17.0/24 80.242.56.0/24 80.242.58.0/24 194.32.98.0/24 Signature Algorithm: sha256WithRSAEncryption 92:86:88:7e:f6:52:10:1b:42:21:32:74:37:2c:bf:e1:13:f9: 7f:9c:9f:d7:79:6b:4f:8a:23:99:81:62:a4:55:b0:d6:ad:6d: 41:8c:9c:bc:3f:5e:71:b4:6e:08:be:ad:af:1e:38:4a:50:b2: 26:9d:24:97:95:4d:7a:f8:4e:9d:4d:9d:6e:f8:77:2e:8a:b5: 19:28:61:d6:96:2e:dc:aa:58:d9:ec:90:6b:1b:1f:04:73:20: 65:3d:19:58:42:bb:99:2e:3e:31:ba:52:11:de:77:18:bc:64: 2c:57:70:6b:87:33:c1:b7:63:14:2b:36:8f:da:65:c8:66:89: 56:8e:9d:3e:49:f1:43:32:72:49:3a:ab:ef:36:7e:9f:86:a5: e5:78:6f:4b:14:93:10:b7:24:23:da:2a:81:1f:ba:bb:29:bd: 6b:3b:37:99:0b:cf:d5:d4:9b:03:41:ee:58:ec:6f:75:75:37: 20:46:af:16:6e:01:2e:d2:65:f3:0a:0b:dc:7e:b3:24:62:8a: 0e:90:7b:ef:32:83:60:95:85:54:95:8c:69:e9:ea:04:64:22: 95:54:11:0e:42:32:3a:9e:06:db:5c:99:10:7b:74:e9:cf:3a: 81:ec:a4:f9:f2:72:d3:58:27:2f:1e:98:98:30:6c:98:13:c3: 5e:7c:d8:43 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gG0P2QLbivWLfLcZt/Q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTk2YTg0NDc0OTA0YTMxYWIwNjBkYzQyMzMwMjFmNDlhMGE4Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotInSpaI0/4IvC9FxZ2vlT/3Q/IC dgTCSsuXBhFrRGU0DcOpkbjrlmc/07sAtiVMCjNIwM/DhgGqZ25t6V5RcsgfkPGn W6UzWeG7iGozhemcbQj3iPk0krattGyt3iRj6p8UQYmA6Ye2zPCFQDmLKoomU2JF O0uT4x7T496kiKRs6DheAfvRzj0kc4aQheVW/fOD1kr1uPAa6BXfGxyUEL0QmHAG 3xTFWU7k/iZnyEsD5jZYUHlSQZdXlWiaMgp0KWP+cIrLnJKHvQZ26ApKEtWQWycq bmSZQbej4t0WxCOlC7eUPcY+GY8SciHseMgAlgSY1YHAyXw531qpIkx+vQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDWWqER0kEoxqwYNxCMwIfSaCoOJMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvTlphb1JIU1FTakdyQmczRUl6QWg5Sm9LZzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEARAwQA UPI4AwQAUPI6AwQAwiBiMA0GCSqGSIb3DQEBCwUAA4IBAQCShoh+9lIQG0IhMnQ3 LL/hE/l/nJ/XeWtPiiOZgWKkVbDWrW1BjJy8P15xtG4Ivq2vHjhKULImnSSXlU16 +E6dTZ1u+HcuirUZKGHWli7cqljZ7JBrGx8EcyBlPRlYQruZLj4xulIR3ncYvGQs V3BrhzPBt2MUKzaP2mXIZolWjp0+SfFDMnJJOqvvNn6fhqXleG9LFJMQtyQj2iqB H7q7Kb1rOzeZC8/V1JsDQe5Y7G91dTcgRq8WbgEu0mXzCgvcfrMkYooOkHvvMoNg lYVUlYxp6eoEZCKVVBEOQjI6ngbbXJkQe3TpzzqB7KT58nLTWCcvHpiYMGyYE8Ne fNhD -----END CERTIFICATE-----Generated at Sat Jan 10 03:56:08 2026 by rpki-client