This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/_nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa File: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (raw, json) Hash identifier: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0= Subject key identifier: FE:7B:07:0C:6B:31:49:6D:B1:31:35:C9:71:2C:22:0F:E2:77:26:5E Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba Certificate serial: 019B7CEDD512CF3F0F94DCF14DF693FAEC92 Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/_nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60446 IP address blocks: 5.252.206.0/24 maxlen: 24 45.67.232.0/24 maxlen: 24 45.67.233.0/24 maxlen: 24 45.67.234.0/24 maxlen: 24 91.230.149.0/24 maxlen: 24 185.130.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d5:12:cf:3f:0f:94:dc:f1:4d:f6:93:fa:ec:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7b070c6b31496db13135c9712c220fe277265e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9c:65:ec:6f:de:23:75:fb:9b:23:87:7d:45: 72:a1:3a:7c:9e:ad:69:a0:6c:b4:88:4f:72:bc:28: ec:23:fe:d5:2e:b3:79:98:a1:09:e4:2b:cc:2c:c7: 3d:43:6f:53:cc:04:d0:f5:ca:1f:38:ba:e7:3d:b1: 0f:ec:e3:c1:96:ca:e9:41:d8:5c:0d:ec:1c:07:82: 1f:98:7f:7b:88:3e:96:05:0b:43:52:7c:59:c9:b4: 80:54:f4:bd:6c:89:3f:2c:76:9e:f4:c5:8b:93:da: 10:63:fb:e5:12:dc:89:60:53:9f:a0:7e:13:db:d5: b7:b1:1b:02:2d:5c:e6:d6:c9:40:34:66:88:d5:2f: 48:c0:34:00:39:3e:76:bd:6d:7f:b7:9f:55:46:78: 55:0b:8b:e4:1a:bd:88:51:bb:be:6f:90:76:5f:49: 38:45:dc:8d:0b:69:55:7f:fa:12:9b:4d:c4:d1:e5: 98:92:dc:66:1e:4d:24:38:2a:1c:8c:ff:d1:a5:f6: d8:a2:21:6e:ba:ec:df:a6:c8:d3:f5:b5:73:a1:40: 06:b0:11:a1:5a:e8:64:fc:0a:36:d2:a3:32:8e:fc: bf:ab:a2:80:39:06:3e:5a:07:a9:2d:b5:e5:db:2e: 3c:9a:59:47:0f:c1:a5:6f:fc:1c:7a:18:a7:ca:2d: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:07:0C:6B:31:49:6D:B1:31:35:C9:71:2C:22:0F:E2:77:26:5E X509v3 Authority Key Identifier: keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/_nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.206.0/24 45.67.232.0-45.67.234.255 91.230.149.0/24 185.130.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c6:38:f3:7e:48:1d:cf:46:13:cf:1f:b5:ad:20:fa:5a:d0: 23:70:32:c1:d5:c9:03:d2:f6:78:1f:77:c1:75:33:bc:fd:48: 16:f6:f4:42:e1:e1:c9:52:d1:96:e3:7d:df:7b:7c:e0:b9:ab: c3:4c:10:b7:a8:0a:5e:ae:e9:99:cd:2a:56:84:db:38:18:0a: 89:9e:32:a8:af:bc:10:7f:a3:71:12:65:0f:51:92:c2:85:96: 6d:db:00:ef:5b:7c:3a:e0:ef:72:b5:ea:72:c9:79:d2:da:d6: 25:f2:6a:b7:b3:8c:33:82:ce:b8:ce:1f:16:d2:a7:8a:29:ba: 6e:8f:c0:49:97:d2:db:fb:70:bc:94:a7:09:b7:ec:42:17:e0: 3a:5b:b0:4f:b7:4c:aa:68:2e:de:b2:87:1c:e6:3c:73:90:09: c1:b5:c8:36:f4:53:fa:2a:c2:0a:61:70:a1:c1:04:22:d7:54: 8b:48:06:f0:7c:8d:d5:77:33:64:38:5a:e5:ab:e1:42:47:1e: df:81:39:48:a2:96:02:5c:2a:5b:5e:df:2a:36:d6:d3:44:b3: 1e:6f:12:1a:39:68:71:4b:97:3f:6a:00:70:25:df:2e:af:ff: 25:6f:8f:bd:dd:15:05:af:10:9d:81:16:73:2c:33:03:b3:57: 40:a0:d6:d6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87dUSzz8PlNzxTfaT+uySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm NDRmYmEwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdiMDcwYzZiMzE0OTZkYjEzMTM1Yzk3MTJjMjIwZmUyNzcyNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95xl7G/eI3X7myOHfUVyoTp8nq1p oGy0iE9yvCjsI/7VLrN5mKEJ5CvMLMc9Q29TzATQ9cofOLrnPbEP7OPBlsrpQdhc DewcB4IfmH97iD6WBQtDUnxZybSAVPS9bIk/LHae9MWLk9oQY/vlEtyJYFOfoH4T 29W3sRsCLVzm1slANGaI1S9IwDQAOT52vW1/t59VRnhVC4vkGr2IUbu+b5B2X0k4 RdyNC2lVf/oSm03E0eWYktxmHk0kOCocjP/RpfbYoiFuuuzfpsjT9bVzoUAGsBGh Wuhk/Ao20qMyjvy/q6KAOQY+WgepLbXl2y48mllHD8Glb/wcehinyi2F9QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFP57BwxrMUltsTE1yXEsIg/idyZeMB8GA1UdIwQY MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt YWVhYzE2MjI3YzI1LzEvX25zSERHc3hTVzJ4TVRYSmNTd2lELUozSmw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1 LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQABfzOMAwD BAMtQ+gDBAAtQ+oDBABb5pUDBAC5gjgwDQYJKoZIhvcNAQELBQADggEBAHrGOPN+ SB3PRhPPH7WtIPpa0CNwMsHVyQPS9ngfd8F1M7z9SBb29ELh4clS0Zbjfd97fOC5 q8NMELeoCl6u6ZnNKlaE2zgYComeMqivvBB/o3ESZQ9RksKFlm3bAO9bfDrg73K1 6nLJedLa1iXyarezjDOCzrjOHxbSp4opum6PwEmX0tv7cLyUpwm37EIX4DpbsE+3 TKpoLt6yhxzmPHOQCcG1yDb0U/oqwgphcKHBBCLXVItIBvB8jdV3M2Q4WuWr4UJH Ht+BOUiilgJcKlte3yo21tNEsx5vEho5aHFLlz9qAHAl3y6v/yVvj73dFQWvEJ2B FnMsMwOzV0Cg1tY= -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:40 2026 by rpki-client