This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/nwkylzsl9GQOKn32orn5yakjbK0.roa File: nwkylzsl9GQOKn32orn5yakjbK0.roa (raw, json) Hash identifier: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I= Subject key identifier: 9F:09:32:97:3B:25:F4:64:0E:2A:7D:F6:A2:B9:F9:C9:A9:23:6C:AD Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd Certificate serial: 019B76EB7C1E94D03CACE9B4C8C29FD25E8A Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/nwkylzsl9GQOKn32orn5yakjbK0.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201330 IP address blocks: 185.78.96.0/22 maxlen: 22 2a03:58a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7c:1e:94:d0:3c:ac:e9:b4:c8:c2:9f:d2:5e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0932973b25f4640e2a7df6a2b9f9c9a9236cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:07:e3:a3:6e:3a:39:36:9d:c2:e2:6e:dd: 68:c4:22:cc:49:d1:36:81:60:19:e9:bd:d8:07:72: 2c:aa:3f:57:43:9c:b6:16:ad:c1:64:08:87:dc:91: 30:cc:0b:ee:47:b5:dc:be:2b:68:1f:28:5f:ad:83: 0c:a4:83:5d:7a:61:3b:b7:c7:ca:2f:dc:b6:b0:42: e7:88:ca:3b:5b:e0:eb:b1:0a:6b:b5:0f:11:5d:63: 34:6b:ba:ef:4f:9d:b7:e4:b9:43:e4:3c:46:95:e9: 7d:cb:f9:3b:85:46:9b:4e:86:d0:86:03:4b:a5:5d: a6:8f:89:f0:e7:ab:6d:ca:ba:90:b9:d8:ad:82:66: 19:43:0f:6f:0e:34:94:cb:73:56:13:b2:f8:cf:66: 6a:73:20:2c:3e:49:ee:15:69:38:27:e4:9d:88:67: 29:3b:2c:7c:68:30:eb:11:55:a5:da:33:ba:2c:5a: 62:9f:4c:cd:99:ec:d9:84:93:3a:47:16:7f:8d:70: 10:54:d0:f3:66:ff:3c:85:b1:2b:4c:cf:75:a9:38: ef:b5:16:93:d3:51:97:7f:61:ff:24:01:c2:62:4d: 2e:99:a1:c5:19:34:38:1e:ca:22:99:a6:ed:b8:f0: 23:1d:ec:1a:ec:15:3b:95:f2:9c:bd:b4:cc:05:cc: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:09:32:97:3B:25:F4:64:0E:2A:7D:F6:A2:B9:F9:C9:A9:23:6C:AD X509v3 Authority Key Identifier: keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/nwkylzsl9GQOKn32orn5yakjbK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.96.0/22 IPv6: 2a03:58a0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:f2:0c:63:e2:d7:3b:d0:4c:05:41:a5:ba:8f:92:50:85:1b: bc:26:d8:f4:9c:2f:78:67:e8:7c:de:51:e4:a0:38:6d:fa:33: 87:d3:12:3a:e2:48:78:c6:9a:ef:52:a6:53:99:4c:1a:3d:79: 3a:b6:95:e6:f3:4a:e6:91:4c:a3:52:4f:e4:1e:5f:4f:dc:9f: e9:fe:a3:af:48:f4:5f:86:22:82:02:07:7c:45:c2:6c:a6:35: 39:08:b4:7e:17:e6:b7:53:0a:e8:88:f9:9e:8f:9b:44:71:0a: 35:91:6d:db:35:6c:5f:1c:f5:c5:8f:60:45:7e:a1:fa:09:ee: 5c:2f:55:6c:f2:ad:b4:f6:69:f8:4e:e3:f9:75:23:eb:20:c5: ab:0b:5b:1c:6f:82:6b:bc:53:4f:e6:bc:fc:0f:77:6d:27:cd: bc:7b:31:6c:8d:04:9d:ba:41:50:b1:81:42:d1:a3:15:41:22: 2d:02:10:01:56:97:be:94:99:69:0f:8c:d7:5f:78:27:6d:99: 79:3a:61:0e:a1:ad:82:b8:c4:90:1c:57:f3:f2:74:64:88:4d: d1:42:cc:47:9a:1e:4f:21:13:66:cc:3a:6c:52:f7:de:2b:c3: 10:d6:e1:e1:72:ed:4b:e5:ea:bb:82:9b:98:47:42:99:c2:ff: e0:7b:6b:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt263welNA8rOm0yMKf0l6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2MwZDQ3MWRjM2U0NzkwNGM5MzU3ZDQwZjk3N2EzZTA4 MWI0YmQwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjA5MzI5NzNiMjVmNDY0MGUyYTdkZjZhMmI5ZjljOWE5MjM2Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbAH46NuOjk2ncLibt1oxCLMSdE2 gWAZ6b3YB3Isqj9XQ5y2Fq3BZAiH3JEwzAvuR7XcvitoHyhfrYMMpINdemE7t8fK L9y2sELniMo7W+DrsQprtQ8RXWM0a7rvT5235LlD5DxGlel9y/k7hUabTobQhgNL pV2mj4nw56ttyrqQuditgmYZQw9vDjSUy3NWE7L4z2ZqcyAsPknuFWk4J+SdiGcp Oyx8aDDrEVWl2jO6LFpin0zNmezZhJM6RxZ/jXAQVNDzZv88hbErTM91qTjvtRaT 01GXf2H/JAHCYk0umaHFGTQ4HsoimabtuPAjHewa7BU7lfKcvbTMBcybxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ8JMpc7JfRkDip99qK5+cmpI2ytMB8GA1UdIwQY MBaAFOZ8DUcdw+R5BMk1fUD5d6PggbS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW53TlJ4M0Q1SGtFeVRWOVFQbDNvLUNCdEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YTU2MzgtNDU1YS00MjUwLTk0ZjAt MDU2MWJkZTBiZmE4LzEvbndreWx6c2w5R1FPS24zMm9ybjV5YWtqYkswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81YTU2MzgtNDU1YS00MjUwLTk0ZjAtMDU2MWJkZTBiZmE4 LzEvNW53TlJ4M0Q1SGtFeVRWOVFQbDNvLUNCdEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU5gMA0E AgACMAcDBQAqA1igMA0GCSqGSIb3DQEBCwUAA4IBAQCP8gxj4tc70EwFQaW6j5JQ hRu8Jtj0nC94Z+h83lHkoDht+jOH0xI64kh4xprvUqZTmUwaPXk6tpXm80rmkUyj Uk/kHl9P3J/p/qOvSPRfhiKCAgd8RcJspjU5CLR+F+a3UwroiPmej5tEcQo1kW3b NWxfHPXFj2BFfqH6Ce5cL1Vs8q209mn4TuP5dSPrIMWrC1scb4JrvFNP5rz8D3dt J828ezFsjQSdukFQsYFC0aMVQSItAhABVpe+lJlpD4zXX3gnbZl5OmEOoa2CuMSQ HFfz8nRkiE3RQsxHmh5PIRNmzDpsUvfeK8MQ1uHhcu1L5eq7gpuYR0KZwv/ge2vc -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:58 2026 by rpki-client