This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/npI4kx8XN3dD9EUfXLup5Uxufpo.roa File: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (raw, json) Hash identifier: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk= Subject key identifier: 9E:92:38:93:1F:17:37:77:43:F4:45:1F:5C:BB:A9:E5:4C:6E:7E:9A Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019B7DCABC29CAF30C9EC953E151537432F1 Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/npI4kx8XN3dD9EUfXLup5Uxufpo.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.238.140.0/22 maxlen: 24 87.238.140.0/24 maxlen: 24 2a06:56c1::/32 maxlen: 48 2a06:56c1::/40 maxlen: 48 2a06:56c2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:29:ca:f3:0c:9e:c9:53:e1:51:53:74:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e9238931f17377743f4451f5cbba9e54c6e7e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:9d:98:68:a7:d5:9a:d0:0b:f0:1e:87:78: 8d:4c:5f:9c:c6:02:bd:80:26:b0:6e:58:26:91:3d: 5e:0f:de:cd:ba:9e:c3:bf:2a:d6:99:e7:c8:af:0d: a8:81:2f:ce:f5:b5:c6:77:58:c5:81:d3:0b:e8:52: 17:c9:64:65:bd:96:f3:24:14:de:88:f4:25:4c:d6: 27:fb:6e:79:62:4c:41:bb:df:1b:32:6e:01:e6:ab: 39:13:02:89:84:de:ea:b6:50:d0:33:69:75:d3:34: bb:b3:1b:98:a2:9e:f1:cf:3f:03:fb:e2:90:4f:bd: c3:6a:fa:48:da:1d:74:27:f2:da:08:1a:a0:78:fd: 47:81:f9:b1:61:5d:d4:69:ed:36:60:3f:fd:3e:7d: e0:27:3a:b2:83:e4:bc:e3:be:9a:2c:92:9a:4d:ad: 4b:ce:33:e9:24:32:77:ee:f3:ed:31:3c:58:e8:01: 7e:3d:7c:f7:e5:0a:b5:c3:2e:ad:63:bc:ae:70:23: 6f:0b:4d:6b:d1:ec:97:31:3f:be:fd:be:8a:a3:7c: 61:4e:56:08:8a:95:d6:7e:e8:15:18:a1:f8:7a:6d: f1:58:3b:cb:52:d8:04:a8:7a:62:77:6c:fd:5d:73: 71:ec:51:9d:e0:76:fa:77:6d:a2:50:de:ec:67:84: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:92:38:93:1F:17:37:77:43:F4:45:1F:5C:BB:A9:E5:4C:6E:7E:9A X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/npI4kx8XN3dD9EUfXLup5Uxufpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.140.0/22 IPv6: 2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a7:e1:da:fb:4c:24:b0:c3:de:e7:1c:bd:13:47:95:65:0e:c7: d4:8e:47:84:ab:86:29:1e:10:fe:d2:ad:81:ea:5c:58:61:c7: 84:9c:e0:a7:d3:e0:30:21:18:19:06:df:42:c1:88:f7:26:52: e2:95:de:ec:eb:4d:99:42:da:fb:aa:82:a0:fb:21:4b:b0:00: f6:2b:54:0b:d9:1f:52:44:b7:e4:b1:38:89:50:bb:e7:35:0d: 2f:84:b5:97:71:50:4b:a3:94:f9:4d:5e:f1:9c:7a:b5:cd:36: ba:e0:53:36:85:a4:28:36:f8:59:7d:6b:2e:60:f5:af:b3:d1: f6:02:6b:27:80:84:b5:0b:74:d0:fa:98:ea:54:ea:7c:ed:f0: ce:bd:94:1f:21:af:d2:3d:d8:e4:23:5b:49:93:3f:a4:45:d2: ad:e1:7e:1a:16:c8:e3:30:eb:b8:db:37:79:11:ba:9a:44:4d: b6:92:8b:d0:8a:c4:a4:ad:97:3c:38:78:8b:fa:26:8b:c1:a9: a7:2c:ae:1a:81:4d:85:d7:37:63:aa:b8:71:37:62:42:a4:44: 1b:d1:28:d2:fd:22:3e:f3:f7:1f:d2:55:ca:1a:81:aa:a4:59: ee:e6:4c:e0:06:af:4a:22:21:f5:b4:e9:15:98:33:bb:2d:8b: 79:75:ea:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9yrwpyvMMnslT4VFTdDLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTkyMzg5MzFmMTczNzc3NDNmNDQ1MWY1Y2JiYTllNTRjNmU3ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncKdmGin1ZrQC/Aeh3iNTF+cxgK9 gCawblgmkT1eD97Nup7DvyrWmefIrw2ogS/O9bXGd1jFgdML6FIXyWRlvZbzJBTe iPQlTNYn+255YkxBu98bMm4B5qs5EwKJhN7qtlDQM2l10zS7sxuYop7xzz8D++KQ T73DavpI2h10J/LaCBqgeP1HgfmxYV3Uae02YD/9Pn3gJzqyg+S8476aLJKaTa1L zjPpJDJ37vPtMTxY6AF+PXz35Qq1wy6tY7yucCNvC01r0eyXMT++/b6Ko3xhTlYI ipXWfugVGKH4em3xWDvLUtgEqHpid2z9XXNx7FGd4Hb6d22iUN7sZ4SRPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6SOJMfFzd3Q/RFH1y7qeVMbn6aMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvbnBJNGt4OFhOM2REOUVVZlhMdXA1VXh1ZnBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQCV+6MMBcE AgACMBEwDwMFACoGVsEDBgAqBlbCADANBgkqhkiG9w0BAQsFAAOCAQEAp+Ha+0wk sMPe5xy9E0eVZQ7H1I5HhKuGKR4Q/tKtgepcWGHHhJzgp9PgMCEYGQbfQsGI9yZS 4pXe7OtNmULa+6qCoPshS7AA9itUC9kfUkS35LE4iVC75zUNL4S1l3FQS6OU+U1e 8Zx6tc02uuBTNoWkKDb4WX1rLmD1r7PR9gJrJ4CEtQt00PqY6lTqfO3wzr2UHyGv 0j3Y5CNbSZM/pEXSreF+GhbI4zDruNs3eRG6mkRNtpKL0IrEpK2XPDh4i/omi8Gp pyyuGoFNhdc3Y6q4cTdiQqREG9Eo0v0iPvP3H9JVyhqBqqRZ7uZM4AavSiIh9bTp FZgzuy2LeXXqgw== -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client