This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NbCfvlMkcPKFjrE_BrUGmXsTkrU.roa File: NbCfvlMkcPKFjrE_BrUGmXsTkrU.roa (raw, json) Hash identifier: Y31F+qm5gxvILP0aj6Rq2o3aiJKBvCzBBRsl8fbekns= Subject key identifier: 35:B0:9F:BE:53:24:70:F2:85:8E:B1:3F:06:B5:06:99:7B:13:92:B5 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EDF131D05ACD10E54923CA57C620 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NbCfvlMkcPKFjrE_BrUGmXsTkrU.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31490 IP address blocks: 85.217.188.0/24 maxlen: 24 87.121.121.0/24 maxlen: 32 93.123.23.0/24 maxlen: 24 94.156.178.0/24 maxlen: 24 94.156.233.0/24 maxlen: 24 185.219.124.0/24 maxlen: 24 2a00:1728:20::/48 maxlen: 48 2a00:1728:20:100::/56 maxlen: 56 2a00:1728:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ed:f1:31:d0:5a:cd:10:e5:49:23:ca:57:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b09fbe532470f2858eb13f06b506997b1392b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:16:5c:31:0e:a7:bd:f0:83:8a:f5:43:67: 8c:6c:af:3b:f1:de:0e:51:99:7b:99:14:ce:86:c2: 77:25:b3:d7:b2:42:99:0c:f4:40:cc:7b:94:5d:f2: 70:97:f3:78:5c:29:02:43:9f:ef:55:e8:47:fc:b5: ba:f1:b3:7d:24:12:4f:f2:79:79:fc:39:e7:b7:70: 63:c1:58:11:9d:3e:b5:5e:24:71:8c:68:37:6f:8f: 91:23:cc:c0:50:b2:50:21:80:47:be:bb:c3:63:2d: 7e:3c:f6:78:69:9e:73:81:29:5c:7c:ae:b4:19:9f: 1e:24:fe:40:0f:44:48:e6:d2:94:8d:9f:80:bc:66: 3e:82:90:2e:c2:47:f1:cf:ba:33:0e:6e:1b:36:23: 74:45:23:e1:0b:74:aa:1b:77:83:d3:9a:a4:6b:81: f8:6d:14:eb:e1:9c:13:bc:f8:ac:1b:41:3d:2b:9a: f0:02:ba:b4:62:99:56:02:a6:5e:a9:80:b5:00:b1: 06:02:76:d7:6d:de:64:59:34:e9:7f:d6:a9:b4:d9: 41:6c:93:c9:f7:c8:e3:91:77:a3:2b:8f:27:14:2e: f1:70:bb:1a:1c:f7:e9:68:f1:af:63:1c:40:d5:82: e4:35:b8:00:0b:15:81:22:c2:26:c7:25:c9:7e:26: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B0:9F:BE:53:24:70:F2:85:8E:B1:3F:06:B5:06:99:7B:13:92:B5 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NbCfvlMkcPKFjrE_BrUGmXsTkrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.188.0/24 87.121.121.0/24 93.123.23.0/24 94.156.178.0/24 94.156.233.0/24 185.219.124.0/24 IPv6: 2a00:1728:20::/48 2a00:1728:33::/48 Signature Algorithm: sha256WithRSAEncryption a2:ee:2c:74:6f:b7:2d:5b:42:80:2a:ec:a3:3d:75:03:e2:2e: 53:72:6c:d5:46:c8:68:07:ac:a1:55:c5:42:24:65:a5:3d:12: 4b:11:d3:55:b2:95:75:c8:20:a0:77:bb:81:db:61:d3:da:2a: 83:ee:5e:75:7c:72:43:dd:d5:b8:12:e4:a0:0b:7e:e6:0c:ae: 22:45:b1:fe:d4:5e:81:09:95:b2:c6:9c:12:c0:25:cd:6b:61: 00:d5:40:76:ca:ac:87:6f:53:87:28:99:bd:fe:3d:54:94:11: 2e:27:f4:f5:ab:6d:27:6f:09:42:a1:a4:6d:86:a8:21:6d:41: 64:a8:3e:86:40:59:da:87:b2:13:10:d6:b3:7e:4e:7b:35:cb: a1:20:eb:fa:b1:d9:f7:c3:f1:56:bf:c4:7f:2c:6b:33:99:b7: 6f:15:97:b0:6a:72:dc:8c:53:a1:b6:de:04:5b:b7:6f:ec:a1: e2:9a:c6:59:3f:2c:b4:a0:ec:2d:4c:82:7c:05:c5:ea:60:94: 7e:fd:00:51:f4:e1:9a:25:e2:bf:68:6c:7f:2f:90:78:56:3a: 0c:68:63:b0:2a:0c:98:d3:e3:49:e1:03:de:4f:8f:e3:ed:98: c0:32:2a:3a:a0:63:48:13:e4:72:06:6c:98:a5:80:f7:e9:0e: 0c:50:92:cf -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt4ou3xMdBazRDlSSPKV8YgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWIwOWZiZTUzMjQ3MGYyODU4ZWIxM2YwNmI1MDY5OTdiMTM5MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVQWXDEOp73wg4r1Q2eMbK878d4O UZl7mRTOhsJ3JbPXskKZDPRAzHuUXfJwl/N4XCkCQ5/vVehH/LW68bN9JBJP8nl5 /Dnnt3BjwVgRnT61XiRxjGg3b4+RI8zAULJQIYBHvrvDYy1+PPZ4aZ5zgSlcfK60 GZ8eJP5AD0RI5tKUjZ+AvGY+gpAuwkfxz7ozDm4bNiN0RSPhC3SqG3eD05qka4H4 bRTr4ZwTvPisG0E9K5rwArq0YplWAqZeqYC1ALEGAnbXbd5kWTTpf9aptNlBbJPJ 98jjkXejK48nFC7xcLsaHPfpaPGvYxxA1YLkNbgACxWBIsImxyXJfib2bQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDWwn75TJHDyhY6xPwa1Bpl7E5K1MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTmJDZnZsTWtjUEtGanJFX0JyVUdtWHNUa3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQAVdm8AwQA V3l5AwQAXXsXAwQAXpyyAwQAXpzpAwQAudt8MBgEAgACMBIDBwAqABcoACADBwAq ABcoADMwDQYJKoZIhvcNAQELBQADggEBAKLuLHRvty1bQoAq7KM9dQPiLlNybNVG yGgHrKFVxUIkZaU9EksR01WylXXIIKB3u4HbYdPaKoPuXnV8ckPd1bgS5KALfuYM riJFsf7UXoEJlbLGnBLAJc1rYQDVQHbKrIdvU4comb3+PVSUES4n9PWrbSdvCUKh pG2GqCFtQWSoPoZAWdqHshMQ1rN+Tns1y6Eg6/qx2ffD8Va/xH8sazOZt28Vl7Bq ctyMU6G23gRbt2/soeKaxlk/LLSg7C1MgnwFxepglH79AFH04Zol4r9obH8vkHhW OgxoY7AqDJjT40nhA95Pj+PtmMAyKjqgY0gT5HIGbJilgPfpDgxQks8= -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:58 2026 by rpki-client