This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/nw0s_ZdcgrwGlu8u_HrQqTco1sU.roa File: nw0s_ZdcgrwGlu8u_HrQqTco1sU.roa (raw, json) Hash identifier: 5Wuom3Rjt43oB3Jg8yCoeJE3CjK9j1RDXnp2z20aTL0= Subject key identifier: 9F:0D:2C:FD:97:5C:82:BC:06:96:EF:2E:FC:7A:D0:A9:37:28:D6:C5 Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5 Certificate serial: 019BEB9B6DAE579EE2154468582F8F7BBDE6 Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/nw0s_ZdcgrwGlu8u_HrQqTco1sU.roa Signing time: Fri 23 Jan 2026 16:06:30 +0000 ROA not before: Fri 23 Jan 2026 16:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44472 IP address blocks: 86.111.52.0/23 maxlen: 24 86.111.52.0/24 maxlen: 24 86.111.53.0/24 maxlen: 24 93.187.68.0/24 maxlen: 24 185.43.147.0/24 maxlen: 24 185.169.105.0/24 maxlen: 24 2a12:c440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:9b:6d:ae:57:9e:e2:15:44:68:58:2f:8f:7b:bd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5 Validity Not Before: Jan 23 16:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0d2cfd975c82bc0696ef2efc7ad0a93728d6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:97:c0:b0:46:5c:20:eb:61:3f:1b:62:87: ce:01:a3:14:c5:a8:41:82:d6:65:9b:68:df:49:ea: 14:79:56:9b:7e:7f:8e:e0:4d:43:8d:8d:ee:21:ed: 74:eb:9c:71:3f:f4:a3:c1:56:ad:0a:de:fa:1a:50: 8b:de:7d:d3:ba:b7:df:99:d0:79:26:d4:7f:1c:2f: 3b:0a:8e:64:39:35:56:fc:43:7c:4f:a2:a1:0a:97: b4:b0:99:f1:eb:60:cd:23:2e:16:4a:10:dd:5e:f7: 66:e4:54:0c:d8:5e:de:4d:14:57:78:0c:f9:2e:c2: 1b:7d:16:50:24:09:f5:c2:c8:69:50:76:37:14:d6: ac:24:78:5c:90:bd:e6:8e:2c:6c:5d:2a:84:5c:a4: 37:04:4a:7d:92:06:34:d7:19:ec:d0:7f:47:01:ff: c1:b8:69:30:0e:42:6c:02:8b:b8:78:a7:24:ce:4f: c9:f8:b4:d8:8b:40:b3:52:40:08:78:f4:d3:e6:db: 0d:e5:79:f5:13:2c:88:ef:bf:0d:93:10:f3:32:16: 46:8a:f3:3b:e1:a7:d5:51:a9:1e:49:ec:0e:2e:46: ba:81:26:39:3e:df:e5:e6:20:bf:8c:6a:85:77:02: ed:0d:5b:04:77:64:e6:b2:c2:96:9b:6c:73:fb:5b: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:2C:FD:97:5C:82:BC:06:96:EF:2E:FC:7A:D0:A9:37:28:D6:C5 X509v3 Authority Key Identifier: keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/nw0s_ZdcgrwGlu8u_HrQqTco1sU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.52.0/23 93.187.68.0/24 185.43.147.0/24 185.169.105.0/24 IPv6: 2a12:c440::/29 Signature Algorithm: sha256WithRSAEncryption 6d:c9:c7:73:76:ab:88:be:0b:2c:15:b1:5b:19:5b:03:2c:c2: fe:6d:37:41:51:56:6e:91:39:8f:1c:31:e8:b3:0a:ad:57:67: 8b:ac:be:be:e7:e1:5b:58:c9:22:55:0d:ab:fd:66:82:7a:47: c5:77:ad:10:0e:6d:1c:9e:f4:de:5e:ee:dc:09:43:93:f2:b6: bb:5d:f5:5d:e9:c7:8d:e1:d8:76:d7:d2:36:ac:31:ae:64:db: b4:13:a1:84:d3:41:a8:fa:1f:97:4e:a3:4f:b4:66:9c:17:7a: e0:0f:cc:10:14:d2:fd:af:11:d4:77:67:03:e0:30:d6:57:04: 1d:21:99:61:5e:bb:88:dd:fe:3b:b9:e1:bb:ba:1e:32:7c:e5: 17:15:a1:15:a2:84:46:1b:44:98:41:5a:61:87:8a:af:f6:63: 0a:65:db:fe:1e:10:b6:d1:95:4b:91:96:20:46:55:80:05:a3: 17:48:17:a7:5c:68:d2:2d:65:1a:83:91:a9:d1:a5:7a:f2:1f: 8c:1b:6f:29:fb:dc:d7:5a:11:bd:5a:fb:fb:7a:a8:f4:d6:4f: 13:05:44:ae:be:88:73:fc:31:31:a1:58:c0:2c:78:a7:41:39: 29:5e:7b:9b:d6:2e:b9:db:41:79:82:6b:78:de:9a:75:ed:21: 45:76:f6:27 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZvrm22uV57iFURoWC+Pe73mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTk1OTFkNDg1ZmMwZDA5MDJhODliZTg0MThhM2JiMTI3 NTA2YTUwHhcNMjYwMTIzMTYwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjBkMmNmZDk3NWM4MmJjMDY5NmVmMmVmYzdhZDBhOTM3MjhkNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC+XwLBGXCDrYT8bYofOAaMUxahB gtZlm2jfSeoUeVabfn+O4E1DjY3uIe1065xxP/SjwVatCt76GlCL3n3TurffmdB5 JtR/HC87Co5kOTVW/EN8T6KhCpe0sJnx62DNIy4WShDdXvdm5FQM2F7eTRRXeAz5 LsIbfRZQJAn1wshpUHY3FNasJHhckL3mjixsXSqEXKQ3BEp9kgY01xns0H9HAf/B uGkwDkJsAou4eKckzk/J+LTYi0CzUkAIePTT5tsN5Xn1EyyI778NkxDzMhZGivM7 4afVUakeSewOLka6gSY5Pt/l5iC/jGqFdwLtDVsEd2TmssKWm2xz+1tJfwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJ8NLP2XXIK8BpbvLvx60Kk3KNbFMB8GA1UdIwQY MBaAFDepWR1IX8DQkCqJvoQYo7sSdQalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGIt YzU0YWY5NjBlZjE4LzEvbncwc19aZGNncndHbHU4dV9IclFxVGNvMXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGItYzU0YWY5NjBlZjE4 LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBVm80AwQA XbtEAwQAuSuTAwQAualpMA0EAgACMAcDBQMqEsRAMA0GCSqGSIb3DQEBCwUAA4IB AQBtycdzdquIvgssFbFbGVsDLML+bTdBUVZukTmPHDHoswqtV2eLrL6+5+FbWMki VQ2r/WaCekfFd60QDm0cnvTeXu7cCUOT8ra7XfVd6ceN4dh219I2rDGuZNu0E6GE 00Go+h+XTqNPtGacF3rgD8wQFNL9rxHUd2cD4DDWVwQdIZlhXruI3f47ueG7uh4y fOUXFaEVooRGG0SYQVphh4qv9mMKZdv+HhC20ZVLkZYgRlWABaMXSBenXGjSLWUa g5Gp0aV68h+MG28p+9zXWhG9Wvv7eqj01k8TBUSuvohz/DExoVjALHinQTkpXnub 1i6520F5gmt43pp17SFFdvYn -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:55 2026 by rpki-client