This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/xxNKD__MfC3tXrljCZUMrUeng0c.roa File: xxNKD__MfC3tXrljCZUMrUeng0c.roa (raw, json) Hash identifier: FfDe8iy9Ky+2+Rcak20KsuzuWHSUYNBDy8CSykrzm6c= Subject key identifier: C7:13:4A:0F:FF:CC:7C:2D:ED:5E:B9:63:09:95:0C:AD:47:A7:83:47 Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4 Certificate serial: 019B7F8587DCC689316978E75B7C7F4B60F4 Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/xxNKD__MfC3tXrljCZUMrUeng0c.roa Signing time: Fri 02 Jan 2026 16:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:23:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 212.82.233.0/24 maxlen: 24 2a00:1798:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:87:dc:c6:89:31:69:78:e7:5b:7c:7f:4b:60:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4 Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7134a0fffcc7c2ded5eb96309950cad47a78347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:52:0b:42:38:3c:e2:0e:fe:4a:66:9d:ce: f3:e9:21:ad:e1:96:df:d5:3a:39:de:89:51:50:0f: 5f:83:43:fb:67:be:0f:86:03:db:d9:36:e6:e7:c6: df:8e:76:05:7d:35:be:8e:d2:34:cd:ed:43:a0:35: 1a:7f:3c:e9:da:d0:06:0e:45:18:a2:e2:9e:ee:99: e0:c3:d9:b3:00:3c:c9:a9:ea:46:f1:2e:29:bd:40: 48:7f:91:ef:f3:d2:ec:b6:69:03:01:f5:a8:a2:8f: 74:fc:39:5e:04:4d:07:b0:fa:1d:49:ab:ec:06:38: 90:2a:79:d0:9a:c1:96:98:68:77:a3:19:5d:6c:f1: 95:14:94:2f:f4:0b:af:29:35:05:fe:ba:1b:ea:81: cf:e2:16:4d:4d:65:d5:bf:1c:d6:27:2d:40:1a:93: 20:d1:2c:32:c2:e1:c7:60:00:cc:52:b5:81:4b:7e: 0a:f8:fd:1e:27:73:a1:ef:0a:e9:ee:84:84:b9:7e: f9:c5:f5:c0:15:86:6d:20:50:54:f5:96:32:2d:8c: 2d:1c:2f:53:1c:7c:59:53:40:59:12:e0:9b:2d:b9: 2c:fd:fe:a2:09:d4:e4:01:d8:cb:1b:ed:fa:4a:d0: e3:29:5d:15:ec:e2:f6:3a:63:da:e3:56:24:9b:2f: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:4A:0F:FF:CC:7C:2D:ED:5E:B9:63:09:95:0C:AD:47:A7:83:47 X509v3 Authority Key Identifier: keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/xxNKD__MfC3tXrljCZUMrUeng0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.82.233.0/24 IPv6: 2a00:1798:6::/48 Signature Algorithm: sha256WithRSAEncryption 08:b7:69:b7:20:31:73:8e:ab:3b:79:f7:02:13:4c:c8:fa:93: 3d:e2:31:9d:79:98:f8:10:0e:00:b2:87:1c:bc:97:db:39:bf: 5d:f5:37:e7:ed:86:d8:e6:2c:a7:1e:92:f5:1b:cf:fa:08:0b: 2c:34:20:0c:1f:ea:37:ce:06:0a:b1:5e:b2:15:94:8f:47:29: 7a:4a:a5:7f:c8:2b:f9:20:57:3e:ac:1c:06:24:26:5a:83:f3: 4d:64:75:92:e2:e1:09:0f:ef:ae:89:df:b7:ea:08:cc:90:6a: 79:af:f1:fc:ee:c7:7c:16:48:3f:fc:2f:a9:5d:64:fe:b9:a7: 13:15:e5:ad:99:57:8b:7f:d3:9a:b1:f4:dd:b7:cb:3e:96:ea: df:d0:5e:f2:1f:d6:a8:7e:e9:47:e3:6d:73:c8:38:80:0d:40: f6:6b:b6:c8:98:7d:d2:64:1a:9e:5a:83:32:fb:f7:c5:41:f9: 20:c6:3b:23:a9:c0:22:06:af:8f:70:d7:3d:96:84:24:7c:46: 09:b5:cd:bd:3a:27:83:82:19:79:d4:46:3b:84:a1:f0:14:6c: be:97:62:da:71:de:4d:14:a4:f1:8c:09:24:12:ae:4c:c6:e1: 90:be:0a:9d:64:1e:a6:7a:aa:03:61:d9:9e:10:7b:7b:a1:aa: 75:6a:22:1d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hYfcxokxaXjnW3x/S2D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjgzY2ZmYTA2MWYyOGE5ZTExMzVjOWZjMzAzNzZhNjQ3 NGNiZjQwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzEzNGEwZmZmY2M3YzJkZWQ1ZWI5NjMwOTk1MGNhZDQ3YTc4MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKVSC0I4POIO/kpmnc7z6SGt4Zbf 1To53olRUA9fg0P7Z74PhgPb2Tbm58bfjnYFfTW+jtI0ze1DoDUafzzp2tAGDkUY ouKe7pngw9mzADzJqepG8S4pvUBIf5Hv89LstmkDAfWooo90/DleBE0HsPodSavs BjiQKnnQmsGWmGh3oxldbPGVFJQv9AuvKTUF/rob6oHP4hZNTWXVvxzWJy1AGpMg 0SwywuHHYADMUrWBS34K+P0eJ3Oh7wrp7oSEuX75xfXAFYZtIFBU9ZYyLYwtHC9T HHxZU0BZEuCbLbks/f6iCdTkAdjLG+36StDjKV0V7OL2OmPa41Ykmy8iYwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMcTSg//zHwt7V65YwmVDK1Hp4NHMB8GA1UdIwQY MBaAFDBoPP+gYfKKnhE1yfwwN2pkdMv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYt NGUxOTIzOWYwYzM1LzEveHhOS0RfX01mQzN0WHJsakNaVU1yVWVuZzBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYtNGUxOTIzOWYwYzM1 LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1FLpMA8E AgACMAkDBwAqABeYAAYwDQYJKoZIhvcNAQELBQADggEBAAi3abcgMXOOqzt59wIT TMj6kz3iMZ15mPgQDgCyhxy8l9s5v131N+fthtjmLKcekvUbz/oICyw0IAwf6jfO BgqxXrIVlI9HKXpKpX/IK/kgVz6sHAYkJlqD801kdZLi4QkP766J37fqCMyQanmv 8fzux3wWSD/8L6ldZP65pxMV5a2ZV4t/05qx9N23yz6W6t/QXvIf1qh+6UfjbXPI OIANQPZrtsiYfdJkGp5agzL798VB+SDGOyOpwCIGr49w1z2WhCR8Rgm1zb06J4OC GXnURjuEofAUbL6XYtpx3k0UpPGMCSQSrkzG4ZC+Cp1kHqZ6qgNh2Z4Qe3uhqnVq Ih0= -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:50 2026 by rpki-client