This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/njVUBNP2pawlmJYfjO-aqV7rHxg.roa File: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (raw, json) Hash identifier: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk= Subject key identifier: 9E:35:54:04:D3:F6:A5:AC:25:98:96:1F:8C:EF:9A:A9:5E:EB:1F:18 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019B783501E0FE8591BF3B6B3A9719D71F2B Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/njVUBNP2pawlmJYfjO-aqV7rHxg.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43349 IP address blocks: 178.16.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:01:e0:fe:85:91:bf:3b:6b:3a:97:19:d7:1f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e355404d3f6a5ac2598961f8cef9aa95eeb1f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:a2:80:a3:e0:87:b0:be:98:1a:38:94:90: dc:95:bf:b7:0c:70:ab:8e:59:72:2e:b3:92:f1:5d: 25:3e:2b:28:7c:53:2f:35:2c:90:ef:0f:88:8a:bf: f9:1c:86:37:8e:35:3a:f8:1a:07:f3:0a:54:bb:02: e2:cb:4e:f4:c3:f0:ec:ce:64:5e:51:de:41:74:12: b7:2c:58:34:e7:02:b4:bb:7c:75:82:cb:32:64:96: 50:70:18:a5:ca:58:3d:2b:ff:4c:73:14:75:cc:ae: a8:87:6d:e6:cd:32:0a:ee:d5:b3:a5:ed:b4:81:c7: 30:a1:c2:35:7d:e7:41:75:1c:b1:5a:f6:68:0c:d8: 05:d2:b7:22:02:3f:d3:43:d2:06:10:fe:51:6c:e0: 83:74:75:a7:e2:c7:4e:f5:1c:ab:6c:f3:a6:67:e1: e4:23:54:c9:80:f2:24:11:7d:19:3b:8e:9f:f8:c9: d7:f1:1f:65:d8:92:0a:c6:8c:a1:80:0c:31:bf:92: 41:f9:2c:51:9f:c9:fe:dd:23:a5:11:2f:75:5b:95: a0:bf:bb:b8:9b:72:95:55:ac:af:c9:d1:1f:66:2b: fa:1c:65:3b:71:41:3c:16:47:1c:9a:ac:0a:71:a8: 7b:62:ae:19:f2:05:2e:55:3b:b6:db:d7:89:92:ae: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:54:04:D3:F6:A5:AC:25:98:96:1F:8C:EF:9A:A9:5E:EB:1F:18 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/njVUBNP2pawlmJYfjO-aqV7rHxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.16.148.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:b0:2e:6e:b6:9a:b9:53:e1:81:fa:57:9f:89:ff:a0:ad:86: 18:bc:58:53:24:63:43:68:38:2f:42:56:02:f5:a3:2f:55:18: 0c:fb:ab:8f:fb:97:0b:8c:0d:83:3e:02:84:cb:bf:6e:4c:69: fa:da:f3:7f:d0:97:72:e0:59:08:bd:33:66:00:00:5c:1c:f3: 32:b6:69:6e:d9:70:d3:58:52:ee:92:1c:1f:48:88:e1:25:e2: 53:e6:22:ad:42:26:8c:08:ca:75:3f:f2:4f:18:56:7e:b8:79: 16:9a:b0:f3:90:65:68:d6:f3:53:af:a2:86:93:5f:ea:ba:f3: 80:db:dc:85:0d:70:14:2b:15:af:bd:b2:71:66:06:61:ba:f2: 45:2c:d9:e1:a9:41:a5:f3:be:ff:fe:fb:b9:2b:fa:59:8b:8f: 38:d7:75:a6:a0:cd:eb:78:32:63:33:b0:ae:ab:1d:27:67:fe: ea:43:ef:0b:0b:f7:0e:9c:48:de:9d:93:76:3e:9c:2b:c3:19: 5e:9b:c1:3b:70:6d:e3:42:33:46:8a:0c:2c:8d:0b:47:37:94: ed:83:8a:8b:8b:9b:c8:dc:30:32:5f:63:39:4b:00:ce:4b:f2: b1:22:93:87:ed:af:0c:7b:6c:5f:ad:f9:ca:72:07:bd:11:a5: e7:f4:f6:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQHg/oWRvztrOpcZ1x8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTM1NTQwNGQzZjZhNWFjMjU5ODk2MWY4Y2VmOWFhOTVlZWIxZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jOigKPgh7C+mBo4lJDclb+3DHCr jllyLrOS8V0lPisofFMvNSyQ7w+Iir/5HIY3jjU6+BoH8wpUuwLiy070w/DszmRe Ud5BdBK3LFg05wK0u3x1gssyZJZQcBilylg9K/9McxR1zK6oh23mzTIK7tWzpe20 gccwocI1fedBdRyxWvZoDNgF0rciAj/TQ9IGEP5RbOCDdHWn4sdO9RyrbPOmZ+Hk I1TJgPIkEX0ZO46f+MnX8R9l2JIKxoyhgAwxv5JB+SxRn8n+3SOlES91W5Wgv7u4 m3KVVayvydEfZiv6HGU7cUE8FkccmqwKcah7Yq4Z8gUuVTu229eJkq6LBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ41VATT9qWsJZiWH4zvmqle6x8YMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvbmpWVUJOUDJwYXdsbUpZZmpPLWFxVjdySHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshCUMA0G CSqGSIb3DQEBCwUAA4IBAQArsC5utpq5U+GB+lefif+grYYYvFhTJGNDaDgvQlYC 9aMvVRgM+6uP+5cLjA2DPgKEy79uTGn62vN/0Jdy4FkIvTNmAABcHPMytmlu2XDT WFLukhwfSIjhJeJT5iKtQiaMCMp1P/JPGFZ+uHkWmrDzkGVo1vNTr6KGk1/quvOA 29yFDXAUKxWvvbJxZgZhuvJFLNnhqUGl877//vu5K/pZi48413WmoM3reDJjM7Cu qx0nZ/7qQ+8LC/cOnEjenZN2Ppwrwxlem8E7cG3jQjNGigwsjQtHN5Ttg4qLi5vI 3DAyX2M5SwDOS/KxIpOH7a8Me2xfrfnKcge9EaXn9PaZ -----END CERTIFICATE-----Generated at Wed Jan 7 07:15:37 2026 by rpki-client