This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa File: nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa (raw, json) Hash identifier: vJGnJ09KsNCLqUU0mMe45rZ6HVT1LYGlujB5Bsrl4iE= Subject key identifier: 9D:10:70:43:66:3E:F4:E8:19:ED:1A:42:55:C2:99:00:9C:B8:B1:99 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A32EF978C6296089D80A6F04E9BAAC Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 2.56.8.0/24 maxlen: 24 2.56.9.0/24 maxlen: 24 5.183.76.0/24 maxlen: 24 5.183.77.0/24 maxlen: 24 45.14.113.0/24 maxlen: 24 45.95.185.0/24 maxlen: 24 45.95.187.0/24 maxlen: 24 147.189.128.0/24 maxlen: 24 147.189.131.0/24 maxlen: 24 147.189.132.0/24 maxlen: 24 147.189.135.0/24 maxlen: 24 176.111.217.0/24 maxlen: 24 185.215.224.0/24 maxlen: 24 185.215.227.0/24 maxlen: 24 2a0b:ae40:1::/48 maxlen: 48 2a0b:ae40:2::/48 maxlen: 48 2a0b:ae40:3::/48 maxlen: 48 2a0b:ae40:4::/48 maxlen: 48 2a0b:ae47:3::/48 maxlen: 48 2a0b:ae47:4::/48 maxlen: 48 2a0e:c80:3::/48 maxlen: 48 2a0e:c80:323::/48 maxlen: 48 2a0e:c80:403::/48 maxlen: 48 2a0e:c80:743::/48 maxlen: 48 2a0e:3840:2::/48 maxlen: 48 2a0e:3840:4::/48 maxlen: 48 2a0e:3840:242::/48 maxlen: 48 2a0e:3840:415::/48 maxlen: 48 2a0e:3840:801::/48 maxlen: 48 2a0f:9980:6::/48 maxlen: 48 2a0f:9980:195::/48 maxlen: 48 2a0f:9980:598::/48 maxlen: 48 2a0f:9980:936::/48 maxlen: 48 2a0f:9981::/32 maxlen: 32 2a0f:9982::/32 maxlen: 32 2a0f:9983::/32 maxlen: 32 2a0f:9984::/32 maxlen: 32 2a0f:9985::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:f9:78:c6:29:60:89:d8:0a:6f:04:e9:ba:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d107043663ef4e819ed1a4255c299009cb8b199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:60:b0:90:98:84:ae:d6:92:6e:55:0c:4a: 36:4d:c2:6a:7c:e4:74:a6:6b:48:a5:23:19:5d:9d: c9:33:c5:bc:8b:fe:ca:a5:7c:7d:54:d7:bc:a3:a5: 05:56:ae:b6:fc:71:de:a8:64:bf:c6:ce:4d:c0:a8: 23:6f:eb:f6:1d:34:34:3e:bc:39:fd:29:f9:ed:77: 74:e1:b9:43:42:30:de:ac:b9:4e:ef:61:6f:f3:c9: 38:89:e0:2a:22:89:06:82:5b:98:de:e8:2d:db:cf: 96:38:b4:25:6d:4a:44:81:40:25:d5:08:a5:2a:01: 45:39:cf:0e:72:ce:9d:36:f8:f5:28:8d:0b:56:be: 45:b8:7d:2d:b0:bf:30:e4:88:e5:98:2c:cc:41:d4: f1:80:8f:bc:fe:b9:b1:24:25:75:b0:b6:37:0f:0e: ca:b2:99:cc:d1:72:8e:c3:da:aa:4e:5f:12:bd:f4: e5:66:36:10:3e:ad:6c:88:8a:2d:16:ef:23:b6:40: 69:c1:24:a8:b1:5a:7f:27:9e:53:97:5e:2f:9c:fc: c3:44:a6:a2:b5:eb:df:f6:66:76:19:2b:9c:19:c4: ec:f1:df:f9:10:4e:e6:2e:c3:d2:ba:7c:0d:e4:03: 5b:b7:78:d6:35:3e:f5:70:d2:62:1b:d9:b7:90:66: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:70:43:66:3E:F4:E8:19:ED:1A:42:55:C2:99:00:9C:B8:B1:99 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.8.0/23 5.183.76.0/23 45.14.113.0/24 45.95.185.0/24 45.95.187.0/24 147.189.128.0/24 147.189.131.0-147.189.132.255 147.189.135.0/24 176.111.217.0/24 185.215.224.0/24 185.215.227.0/24 IPv6: 2a0b:ae40:1::-2a0b:ae40:4:ffff:ffff:ffff:ffff:ffff 2a0b:ae47:3::-2a0b:ae47:4:ffff:ffff:ffff:ffff:ffff 2a0e:c80:3::/48 2a0e:c80:323::/48 2a0e:c80:403::/48 2a0e:c80:743::/48 2a0e:3840:2::/48 2a0e:3840:4::/48 2a0e:3840:242::/48 2a0e:3840:415::/48 2a0e:3840:801::/48 2a0f:9980:6::/48 2a0f:9980:195::/48 2a0f:9980:598::/48 2a0f:9980:936::/48 2a0f:9981::-2a0f:9985:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1a:5e:93:0e:41:81:37:1e:46:0d:da:ad:20:e9:a5:08:99:e5: 98:48:52:f4:2e:8b:9d:d0:95:da:88:bd:2c:6f:e7:30:f2:ad: 4d:f0:76:a1:f8:3c:0b:16:00:8f:22:46:e2:ff:d4:18:c9:c2: 45:8c:c9:29:1e:49:a8:10:4c:8a:03:20:32:81:0f:1f:aa:6c: 06:6e:9e:1e:5d:48:1c:23:4f:4e:81:42:83:97:6b:d5:4e:88: b5:dc:b3:5b:bc:65:d6:18:fa:d3:87:48:d5:03:0d:09:3d:96: 69:6d:a6:74:8e:f9:d2:c6:6c:96:95:1b:a5:90:8a:68:25:ec: dc:ca:a4:72:9e:5e:36:a4:aa:7e:52:c6:1e:55:4f:67:81:20: e5:36:d5:76:f4:06:5f:0b:04:6e:dd:3c:0e:ad:9e:14:a9:07: 8b:e9:4d:e4:0f:f0:c8:d3:ca:5e:67:88:0e:2e:68:b6:30:cc: b7:fe:f4:ff:4f:12:e6:5d:d0:0b:39:82:11:b1:03:50:55:79: 0e:01:4f:d5:79:2e:41:b5:c8:71:58:24:06:58:f9:7e:49:41: a5:07:82:a2:93:a4:9a:64:05:2f:f8:22:cc:9a:39:4a:57:e3: 66:3d:4d:f4:40:02:ec:d8:dd:b6:6a:b3:25:55:11:e3:74:48: 51:f2:5f:0d -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt4oy75eMYpYInYCm8E6bqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDEwNzA0MzY2M2VmNGU4MTllZDFhNDI1NWMyOTkwMDljYjhiMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nFgsJCYhK7Wkm5VDEo2TcJqfOR0 pmtIpSMZXZ3JM8W8i/7KpXx9VNe8o6UFVq62/HHeqGS/xs5NwKgjb+v2HTQ0Prw5 /Sn57Xd04blDQjDerLlO72Fv88k4ieAqIokGgluY3ugt28+WOLQlbUpEgUAl1Qil KgFFOc8Ocs6dNvj1KI0LVr5FuH0tsL8w5IjlmCzMQdTxgI+8/rmxJCV1sLY3Dw7K spnM0XKOw9qqTl8SvfTlZjYQPq1siIotFu8jtkBpwSSosVp/J55Tl14vnPzDRKai tevf9mZ2GSucGcTs8d/5EE7mLsPSunwN5ANbt3jWNT71cNJiG9m3kGYXGwIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFJ0QcENmPvToGe0aQlXCmQCcuLGZMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL25SQndRMlktOU9nWjdScENWY0taQUp5NHNaay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwggEeBggrBgEFBQcBBwEB/wSCAQ0wggEJMFAEAgABMEoD BAECOAgDBAEFt0wDBAAtDnEDBAAtX7kDBAAtX7sDBACTvYAwDAMEAJO9gwMEAJO9 hAMEAJO9hwMEALBv2QMEALnX4AMEALnX4zCBtAQCAAIwga0wEgMHACoLrkAAAQMH ACoLrkAABDASAwcAKguuRwADAwcAKguuRwAEAwcAKg4MgAADAwcAKg4MgAMjAwcA Kg4MgAQDAwcAKg4MgAdDAwcAKg44QAACAwcAKg44QAAEAwcAKg44QAJCAwcAKg44 QAQVAwcAKg44QAgBAwcAKg+ZgAAGAwcAKg+ZgAGVAwcAKg+ZgAWYAwcAKg+ZgAk2 MA4DBQAqD5mBAwUBKg+ZhDANBgkqhkiG9w0BAQsFAAOCAQEAGl6TDkGBNx5GDdqt IOmlCJnlmEhS9C6LndCV2oi9LG/nMPKtTfB2ofg8CxYAjyJG4v/UGMnCRYzJKR5J qBBMigMgMoEPH6psBm6eHl1IHCNPToFCg5dr1U6ItdyzW7xl1hj604dI1QMNCT2W aW2mdI750sZslpUbpZCKaCXs3Mqkcp5eNqSqflLGHlVPZ4Eg5TbVdvQGXwsEbt08 Dq2eFKkHi+lN5A/wyNPKXmeIDi5otjDMt/70/08S5l3QCzmCEbEDUFV5DgFP1Xku QbXIcVgkBlj5fklBpQeCopOkmmQFL/gizJo5SlfjZj1N9EAC7NjdtmqzJVUR43RI UfJfDQ== -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:48 2026 by rpki-client