This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nbBe0xqI0O2sF-oMeME8h4Iq3LY.roa File: nbBe0xqI0O2sF-oMeME8h4Iq3LY.roa (raw, json) Hash identifier: 9omuT/VOzwEJfp0RwDw6cDCTO3o2BeXp3De+xeoc8RY= Subject key identifier: 9D:B0:5E:D3:1A:88:D0:ED:AC:17:EA:0C:78:C1:3C:87:82:2A:DC:B6 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D68DC966950A83B32ECDDDE4484A Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nbBe0xqI0O2sF-oMeME8h4Iq3LY.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62387 IP address blocks: 79.132.64.0/22 maxlen: 22 79.132.68.0/22 maxlen: 22 79.132.92.0/22 maxlen: 22 79.135.136.0/22 maxlen: 22 85.234.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:8d:c9:66:95:0a:83:b3:2e:cd:dd:e4:48:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db05ed31a88d0edac17ea0c78c13c87822adcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:b2:1c:e4:ea:c6:0a:51:33:5a:6b:17:bb: 43:8c:f5:d7:8c:9e:f9:33:1c:71:71:d5:01:9e:46: a9:96:5b:0d:1c:55:2c:68:12:69:be:8f:d5:89:78: 75:f6:ea:a3:cb:d8:8d:ee:ba:b0:d0:0a:51:6f:73: cc:a0:1d:33:24:3a:48:2e:d1:79:ba:8f:5c:8e:8f: 59:6b:2d:6e:ae:e4:8c:82:64:d7:13:97:f4:a5:11: 17:2e:99:f8:b2:77:b3:52:2d:e3:2f:c8:c3:d3:e1: 31:60:c9:ef:d5:d7:81:9c:77:b3:cf:0a:d5:0f:3d: b3:81:e9:88:4b:01:ca:cf:45:87:43:d9:17:05:e6: b3:ba:13:78:44:55:e5:d2:c8:a5:e5:a1:bd:a4:a1: 63:34:b4:1d:86:d9:71:14:8c:a7:00:ee:84:63:7b: 64:46:e3:6f:87:2d:34:4b:78:10:4d:2b:e2:48:35: 07:1c:78:b0:7d:f7:28:90:43:50:22:e0:7b:cf:41: 1a:3f:57:83:6b:4a:2e:ce:71:f6:9f:9d:c9:d4:dd: 11:b0:c5:62:05:a0:d7:7a:42:3f:6b:9b:ff:a5:f2: 5b:af:a7:4d:a2:74:da:7d:d1:1e:6d:7b:46:cb:50: c0:ed:45:fa:ea:7c:ff:51:51:0e:ae:86:d7:65:92: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:5E:D3:1A:88:D0:ED:AC:17:EA:0C:78:C1:3C:87:82:2A:DC:B6 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nbBe0xqI0O2sF-oMeME8h4Iq3LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.64.0/21 79.132.92.0/22 79.135.136.0/22 85.234.160.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:ee:45:80:91:60:f9:07:b4:50:5c:bf:96:0b:f7:dc:ae:ed: 14:41:e0:00:cb:4f:74:9e:c3:c7:3c:df:f7:ff:9e:c0:34:e7: f1:2c:f6:ad:18:62:f5:21:1f:dc:41:25:af:60:14:d5:4a:4a: d4:9e:27:1a:7f:7a:75:27:e3:52:f0:89:a6:1d:1d:e5:ea:64: df:10:14:e9:b2:20:f6:a8:34:6b:5e:80:71:df:6a:63:d2:06: 67:6a:04:44:05:4e:ea:10:91:f9:66:30:81:3b:a7:4e:6d:d4: e4:63:85:7e:ae:cc:c9:e7:ab:be:14:89:57:22:81:02:a1:23: 17:61:c3:16:63:01:91:15:8b:60:34:2e:ea:1f:ee:ff:f0:17: 52:97:9e:63:8c:fc:09:b6:0d:8e:4b:32:36:14:ee:eb:bf:e6: fa:05:ce:fb:a8:8e:8f:27:b1:a7:7e:17:50:1c:b4:0d:ef:e7: c6:07:8a:aa:e0:d1:1b:04:dd:fb:9a:ab:be:0d:2f:14:a3:e2: 72:6e:b7:f9:bb:fb:16:f5:19:a1:a5:bd:11:d8:e7:ac:05:28: 9a:69:80:82:89:d1:a6:10:47:d0:c9:36:1b:59:1c:7f:ae:82: 08:73:df:34:7b:bf:de:43:c5:01:94:e2:ad:95:58:cf:f4:4b: dc:01:64:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x9aNyWaVCoOzLs3d5EhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGIwNWVkMzFhODhkMGVkYWMxN2VhMGM3OGMxM2M4NzgyMmFkY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnqyHOTqxgpRM1prF7tDjPXXjJ75 MxxxcdUBnkapllsNHFUsaBJpvo/ViXh19uqjy9iN7rqw0ApRb3PMoB0zJDpILtF5 uo9cjo9Zay1uruSMgmTXE5f0pREXLpn4snezUi3jL8jD0+ExYMnv1deBnHezzwrV Dz2zgemISwHKz0WHQ9kXBeazuhN4RFXl0sil5aG9pKFjNLQdhtlxFIynAO6EY3tk RuNvhy00S3gQTSviSDUHHHiwffcokENQIuB7z0EaP1eDa0ouznH2n53J1N0RsMVi BaDXekI/a5v/pfJbr6dNonTafdEebXtGy1DA7UX66nz/UVEOrobXZZIwRwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ2wXtMaiNDtrBfqDHjBPIeCKty2MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvbmJCZTB4cUkwTzJzRi1vTWVNRThoNElxM0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDT4RAAwQC T4RcAwQCT4eIAwQFVeqgMA0GCSqGSIb3DQEBCwUAA4IBAQBd7kWAkWD5B7RQXL+W C/fcru0UQeAAy090nsPHPN/3/57ANOfxLPatGGL1IR/cQSWvYBTVSkrUnicaf3p1 J+NS8ImmHR3l6mTfEBTpsiD2qDRrXoBx32pj0gZnagREBU7qEJH5ZjCBO6dObdTk Y4V+rszJ56u+FIlXIoECoSMXYcMWYwGRFYtgNC7qH+7/8BdSl55jjPwJtg2OSzI2 FO7rv+b6Bc77qI6PJ7GnfhdQHLQN7+fGB4qq4NEbBN37mqu+DS8Uo+Jybrf5u/sW 9Rmhpb0R2OesBSiaaYCCidGmEEfQyTYbWRx/roIIc980e7/eQ8UBlOKtlVjP9Evc AWQB -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:30 2026 by rpki-client