This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa File: nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa (raw, json) Hash identifier: iorIqxAuAmSRl6sCok02BcX/HwiRBqyHoRRMc0hDdTA= Subject key identifier: 9E:BE:B2:1C:BB:B0:1C:9E:A5:C3:92:40:C1:6E:6A:0E:5B:0E:7E:90 Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019B7BA34E934B63E0BF24249E9DCA7646C3 Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 80.254.228.0/24 maxlen: 24 185.92.168.0/24 maxlen: 24 185.92.169.0/24 maxlen: 24 185.92.171.0/24 maxlen: 24 2a13:5241::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:93:4b:63:e0:bf:24:24:9e:9d:ca:76:46:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ebeb21cbbb01c9ea5c39240c16e6a0e5b0e7e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:e7:61:6a:aa:fb:03:0f:15:0f:41:1b:48: c5:cd:09:1d:6e:bd:e6:48:3b:81:6f:3b:b0:1b:0e: 0b:3e:91:4e:b5:64:67:65:96:45:c5:bd:eb:df:9f: 52:44:a9:21:a0:dd:68:6a:50:d3:95:48:f0:45:59: 5d:40:d6:79:6e:02:55:6c:8b:0a:7e:15:00:58:54: 6a:a9:a1:15:b3:88:33:57:a1:28:96:6f:b7:5b:6b: 3c:04:2d:d1:e0:e7:85:21:ef:79:8d:88:93:e7:2d: 31:36:71:11:2f:80:6f:cb:d2:89:58:13:86:d4:da: 46:51:8f:4a:99:63:fb:dc:1a:09:6a:24:cf:17:36: cf:3b:bb:64:bc:1e:72:6e:93:ce:6a:53:a6:e0:ea: 53:c2:3d:09:25:3f:8f:71:c5:7d:68:68:91:a9:99: 20:8e:30:69:11:4a:7a:07:84:e2:a7:6d:7f:0b:79: d2:ac:1b:6f:b8:02:75:12:41:78:37:9f:30:c1:fd: 43:4d:dd:e8:3d:36:2d:5c:92:fa:6d:9a:6f:c5:bd: f1:68:d1:d9:03:fc:6b:44:f6:9d:02:36:60:3b:c2: 4b:d5:27:7d:c3:bb:10:e1:22:34:56:96:4d:7f:10: 83:8e:94:e7:12:9d:19:5a:0a:9b:16:90:0b:2f:05: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:B2:1C:BB:B0:1C:9E:A5:C3:92:40:C1:6E:6A:0E:5B:0E:7E:90 X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.228.0/24 185.92.168.0/23 185.92.171.0/24 IPv6: 2a13:5241::/32 Signature Algorithm: sha256WithRSAEncryption 70:a2:f3:6f:d1:65:64:82:b4:18:c6:10:66:45:7c:41:46:7b: ef:ff:e4:3d:0b:1c:07:96:a4:bd:70:73:e1:38:2f:c1:95:4b: d4:2a:cc:b0:b9:53:9b:4e:4b:fd:60:f7:84:34:6d:50:d5:29: 70:d4:ea:72:2b:b7:82:47:d8:d4:74:e4:d8:88:68:01:ef:c7: a4:e9:ce:bc:a1:33:39:8a:fd:8c:31:ef:a8:73:2b:74:d0:29: 0d:2b:a1:6a:a8:0a:52:d9:17:ef:c3:27:0b:a7:55:19:e2:c8: 6b:2f:a9:d3:a6:d5:33:d7:2d:2c:57:67:55:9a:3c:fc:d5:41: fa:6b:36:f5:99:db:cc:0d:57:cc:99:31:d2:53:62:eb:05:93: 8f:ba:f5:1e:3e:65:8f:d3:3f:a9:56:a4:bc:e6:f3:25:2c:b9: f6:f4:eb:b0:80:65:53:01:3a:3b:d9:f2:ac:65:fc:b1:b8:4f: cc:73:33:1c:ff:10:ab:f3:9d:c9:bb:32:82:88:12:3f:52:b8: c1:8c:f4:15:ff:3e:11:88:7e:90:d4:ee:18:e6:73:6a:d0:a5: fd:77:27:0e:cb:66:59:19:a7:51:61:34:26:7f:6e:f1:d0:7e: 93:77:2d:12:c4:59:35:1c:fa:cf:cd:65:b7:98:7b:26:f1:73: cc:49:99:27 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o06TS2PgvyQknp3KdkbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWJlYjIxY2JiYjAxYzllYTVjMzkyNDBjMTZlNmEwZTViMGU3ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK3nYWqq+wMPFQ9BG0jFzQkdbr3m SDuBbzuwGw4LPpFOtWRnZZZFxb3r359SRKkhoN1oalDTlUjwRVldQNZ5bgJVbIsK fhUAWFRqqaEVs4gzV6Eolm+3W2s8BC3R4OeFIe95jYiT5y0xNnERL4Bvy9KJWBOG 1NpGUY9KmWP73BoJaiTPFzbPO7tkvB5ybpPOalOm4OpTwj0JJT+PccV9aGiRqZkg jjBpEUp6B4Tip21/C3nSrBtvuAJ1EkF4N58wwf1DTd3oPTYtXJL6bZpvxb3xaNHZ A/xrRPadAjZgO8JL1Sd9w7sQ4SI0VpZNfxCDjpTnEp0ZWgqbFpALLwV6fwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJ6+shy7sByepcOSQMFuag5bDn6QMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEvbnI2eUhMdXdISjZsdzVKQXdXNXFEbHNPZnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUP7kAwQB uVyoAwQAuVyrMA0EAgACMAcDBQAqE1JBMA0GCSqGSIb3DQEBCwUAA4IBAQBwovNv 0WVkgrQYxhBmRXxBRnvv/+Q9CxwHlqS9cHPhOC/BlUvUKsywuVObTkv9YPeENG1Q 1Slw1OpyK7eCR9jUdOTYiGgB78ek6c68oTM5iv2MMe+ocyt00CkNK6FqqApS2Rfv wycLp1UZ4shrL6nTptUz1y0sV2dVmjz81UH6azb1mdvMDVfMmTHSU2LrBZOPuvUe PmWP0z+pVqS85vMlLLn29OuwgGVTATo72fKsZfyxuE/MczMc/xCr853JuzKCiBI/ UrjBjPQV/z4RiH6Q1O4Y5nNq0KX9dycOy2ZZGadRYTQmf27x0H6Tdy0SxFk1HPrP zWW3mHsm8XPMSZkn -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:07 2026 by rpki-client