This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/9mAFKAFsUumaxtmwKspIguWpn-U.roa File: 9mAFKAFsUumaxtmwKspIguWpn-U.roa (raw, json) Hash identifier: nsAVacl7HwId/rvDGUKYBOPV9fj57SBoEJyC2HRo14U= Subject key identifier: F6:60:05:28:01:6C:52:E9:9A:C6:D9:B0:2A:CA:48:82:E5:A9:9F:E5 Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Certificate serial: 019B791070A5C90900A4253B0F82529D368A Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/9mAFKAFsUumaxtmwKspIguWpn-U.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20650 IP address blocks: 77.72.232.0/21 maxlen: 24 77.72.237.0/24 maxlen: 24 77.72.238.0/24 maxlen: 24 217.145.32.0/20 maxlen: 24 217.145.32.0/23 maxlen: 23 217.145.34.0/24 maxlen: 24 217.145.35.0/24 maxlen: 24 217.145.36.0/24 maxlen: 24 217.145.37.0/24 maxlen: 24 217.145.38.0/24 maxlen: 24 217.145.39.0/24 maxlen: 24 217.145.40.0/23 maxlen: 23 217.145.43.0/24 maxlen: 24 217.145.44.0/24 maxlen: 24 217.145.45.0/24 maxlen: 24 2a01:38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:a5:c9:09:00:a4:25:3b:0f:82:52:9d:36:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6600528016c52e99ac6d9b02aca4882e5a99fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:ef:eb:de:b4:b6:fc:8d:45:cb:6f:bf:5b: e9:10:74:2b:2a:00:c9:b8:b8:aa:27:cd:b4:20:6a: 71:aa:1f:d2:0f:62:11:95:b1:23:cb:74:17:7e:22: 59:cb:28:75:63:fb:f9:1e:09:af:e3:94:fb:27:5b: 17:82:c1:9c:f8:45:14:00:bc:ba:a9:c8:ab:35:c0: 6f:f2:2f:8f:2b:2c:27:93:6e:68:eb:d9:af:0b:3d: 2c:09:30:07:1e:50:4e:03:5d:4b:6e:c9:dd:82:15: 07:5f:cc:ab:5c:fd:b2:82:80:01:e7:47:74:90:7e: a8:39:73:26:41:7d:a0:2d:e5:9d:f7:20:4e:01:1a: bc:d0:47:0c:be:43:1b:d0:7e:5c:e6:c1:83:b1:72: 68:21:c0:9d:d0:53:8a:c9:f3:51:40:45:16:07:ef: 54:15:0f:06:68:f0:2d:28:e5:b5:c0:6d:77:d4:08: 97:8d:56:63:b5:f7:2e:c9:7e:99:17:45:f4:33:2a: 49:f0:8d:c3:b3:3a:92:b2:53:53:1b:25:ea:da:03: 82:55:c0:83:8e:f2:dc:42:50:d2:90:45:32:68:2f: 6c:93:ec:23:a9:04:4b:bb:4f:a5:26:0f:e2:94:db: 74:77:f7:f9:39:4b:be:05:72:82:db:e0:f5:32:00: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:05:28:01:6C:52:E9:9A:C6:D9:B0:2A:CA:48:82:E5:A9:9F:E5 X509v3 Authority Key Identifier: keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/9mAFKAFsUumaxtmwKspIguWpn-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.232.0/21 217.145.32.0/20 IPv6: 2a01:38::/32 Signature Algorithm: sha256WithRSAEncryption b3:43:48:c8:0b:c9:53:48:50:3e:9f:16:7b:02:00:a9:5e:3f: 08:e6:39:e3:6c:f4:9d:43:f2:26:ca:6d:ad:30:a2:f1:c0:28: 3a:52:1a:e4:cc:46:06:0f:7d:39:bb:98:5f:e1:38:0a:86:06: de:fe:5e:be:bf:53:78:f3:b1:c6:0b:4c:4e:a2:0c:78:a8:9a: fc:e1:13:cc:d7:97:04:43:aa:41:e2:e1:d1:4e:e1:f0:3c:3a: 13:8c:17:39:7f:09:07:22:ad:79:69:42:50:7e:be:03:73:c8: f7:ea:62:33:f5:c2:06:5e:60:a4:99:0c:60:37:fd:73:0d:c9: 34:3b:d4:b2:a9:bd:f9:5d:b2:72:e3:b6:ec:d1:62:3f:bd:b2: 1c:e3:0b:85:1c:a8:14:c0:37:aa:8b:87:52:ad:a4:d4:64:e9: 1f:37:01:8e:19:a4:39:83:80:39:53:03:22:7f:5b:dc:45:c8: 9e:91:47:d1:a6:f4:4f:0c:d9:aa:99:b4:7d:2c:32:ef:4a:bd: a9:34:2c:24:9f:21:27:83:44:3e:38:34:33:ba:13:5b:fe:64: a9:03:92:13:33:14:cc:06:f3:1d:2c:ca:3e:0a:ef:b9:a9:a4: 3d:05:e3:9c:ba:c5:dd:2b:d7:f1:2f:bb:8d:c1:1d:8b:12:12: 67:8c:79:9a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EHClyQkApCU7D4JSnTaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy YWFiZjkwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjYwMDUyODAxNmM1MmU5OWFjNmQ5YjAyYWNhNDg4MmU1YTk5ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzv6960tvyNRctvv1vpEHQrKgDJ uLiqJ820IGpxqh/SD2IRlbEjy3QXfiJZyyh1Y/v5Hgmv45T7J1sXgsGc+EUUALy6 qcirNcBv8i+PKywnk25o69mvCz0sCTAHHlBOA11LbsndghUHX8yrXP2ygoAB50d0 kH6oOXMmQX2gLeWd9yBOARq80EcMvkMb0H5c5sGDsXJoIcCd0FOKyfNRQEUWB+9U FQ8GaPAtKOW1wG131AiXjVZjtfcuyX6ZF0X0MypJ8I3DszqSslNTGyXq2gOCVcCD jvLcQlDSkEUyaC9sk+wjqQRLu0+lJg/ilNt0d/f5OUu+BXKC2+D1MgB91wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPZgBSgBbFLpmsbZsCrKSILlqZ/lMB8GA1UdIwQY MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt OWNkMGNhZTA2MjkyLzEvOW1BRktBRnNVdW1heHRtd0tzcElndVdwbi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUjoAwQE 2ZEgMA0EAgACMAcDBQAqAQA4MA0GCSqGSIb3DQEBCwUAA4IBAQCzQ0jIC8lTSFA+ nxZ7AgCpXj8I5jnjbPSdQ/Imym2tMKLxwCg6UhrkzEYGD305u5hf4TgKhgbe/l6+ v1N487HGC0xOogx4qJr84RPM15cEQ6pB4uHRTuHwPDoTjBc5fwkHIq15aUJQfr4D c8j36mIz9cIGXmCkmQxgN/1zDck0O9Syqb35XbJy47bs0WI/vbIc4wuFHKgUwDeq i4dSraTUZOkfNwGOGaQ5g4A5UwMif1vcRciekUfRpvRPDNmqmbR9LDLvSr2pNCwk nyEng0Q+ODQzuhNb/mSpA5ITMxTMBvMdLMo+Cu+5qaQ9BeOcusXdK9fxL7uNwR2L EhJnjHma -----END CERTIFICATE-----Generated at Tue Jan 27 04:58:31 2026 by rpki-client