This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/nXA9V6KcuTrb8c4a13aM3c-s94A.roa File: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (raw, json) Hash identifier: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo= Subject key identifier: 9D:70:3D:57:A2:9C:B9:3A:DB:F1:CE:1A:D7:76:8C:DD:CF:AC:F7:80 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019B7C12911BD38DAAE49C60525384FAE629 Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/nXA9V6KcuTrb8c4a13aM3c-s94A.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.238.154.0/24 maxlen: 24 217.117.65.0/24 maxlen: 24 217.117.71.0/24 maxlen: 24 217.117.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:91:1b:d3:8d:aa:e4:9c:60:52:53:84:fa:e6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d703d57a29cb93adbf1ce1ad7768cddcfacf780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:7a:1e:82:62:6c:4c:8c:30:ad:1c:d1:83: 5d:89:ef:7c:03:d1:4d:41:6d:2f:d2:b1:41:7d:04: 41:76:e0:56:ee:ac:e0:09:59:34:e2:17:d1:ad:e0: 40:7f:4c:6f:38:12:fc:30:cd:65:8a:f6:dc:53:33: c8:11:67:af:80:d6:a5:77:8b:8c:08:74:9b:1b:c5: dc:4e:89:0e:47:0c:8e:04:3e:15:d6:40:08:8b:dc: 54:bc:15:a2:64:c4:f9:67:59:c7:1f:7e:f0:c6:dd: 1a:6d:55:c9:20:8d:cc:5e:66:3a:96:42:f9:64:45: a0:3c:bf:cc:48:f2:f4:ab:8c:72:30:82:c7:fe:56: 17:87:21:9a:fb:95:d0:88:43:b3:55:70:e1:19:42: 4c:78:b5:59:19:f4:7a:b6:bb:5e:ba:c1:3f:96:ec: f0:aa:e1:69:00:e9:6f:f2:c6:1c:a9:30:7f:0f:fe: 28:2d:12:07:28:fc:9d:fd:97:bf:7f:18:a5:fc:a2: 5e:8e:0b:38:b3:f6:3c:5a:b6:1d:51:0c:43:0e:eb: 65:72:70:29:8c:a6:a6:47:35:ff:76:ea:8e:a2:d3: d1:8d:09:a9:34:eb:19:c4:04:b1:21:53:00:a9:8b: 02:e0:6c:8e:56:a7:f9:ba:06:92:4b:51:b6:b8:dc: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:70:3D:57:A2:9C:B9:3A:DB:F1:CE:1A:D7:76:8C:DD:CF:AC:F7:80 X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/nXA9V6KcuTrb8c4a13aM3c-s94A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.154.0/24 217.117.65.0/24 217.117.71.0/24 217.117.76.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:35:4f:79:c5:b4:20:8c:9c:82:ce:b0:90:94:c6:50:f8:c9: 3c:f2:11:de:db:b6:84:8e:dc:ad:02:df:ad:25:10:53:cc:36: 71:27:9f:61:91:4d:68:0f:d5:ed:b4:d8:73:c6:4a:84:47:7f: d5:db:7a:7c:d4:44:5c:b8:12:a3:64:08:33:1c:e9:55:0f:3f: 28:6a:c3:bc:e7:22:6f:6d:d1:ad:b4:14:fa:3a:c8:fb:31:8b: a3:a8:be:e9:5a:01:05:4b:3f:0e:72:bc:04:d0:13:d5:ff:1c: f0:7b:f2:8d:34:e4:e8:99:c9:74:e7:db:9d:15:63:0c:54:cd: 22:2b:cf:ac:5c:4b:77:47:82:cb:a4:41:b0:2c:0f:92:20:73: df:2d:a7:ce:66:8e:3b:3f:37:08:53:f8:a9:d2:0f:14:55:d1: d0:09:9a:60:53:2a:08:be:42:76:93:44:d3:61:a6:34:2f:f7: 82:ca:57:f4:6d:c8:1e:d9:3f:88:d9:48:51:5b:0a:6c:ff:ff: fd:58:ce:f0:48:90:af:35:5b:ea:72:de:1a:6d:b2:ba:61:e1: cc:ec:83:1e:2f:32:1b:04:cd:96:06:de:64:77:20:09:3e:26: f0:b5:e6:5d:bb:37:a3:db:95:c1:22:be:dd:07:23:44:50:4e: 85:77:99:4e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EpEb042q5JxgUlOE+uYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDcwM2Q1N2EyOWNiOTNhZGJmMWNlMWFkNzc2OGNkZGNmYWNmNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApid6HoJibEyMMK0c0YNdie98A9FN QW0v0rFBfQRBduBW7qzgCVk04hfRreBAf0xvOBL8MM1livbcUzPIEWevgNald4uM CHSbG8XcTokORwyOBD4V1kAIi9xUvBWiZMT5Z1nHH37wxt0abVXJII3MXmY6lkL5 ZEWgPL/MSPL0q4xyMILH/lYXhyGa+5XQiEOzVXDhGUJMeLVZGfR6trteusE/luzw quFpAOlv8sYcqTB/D/4oLRIHKPyd/Ze/fxil/KJejgs4s/Y8WrYdUQxDDutlcnAp jKamRzX/duqOotPRjQmpNOsZxASxIVMAqYsC4GyOVqf5ugaSS1G2uNzRDQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ1wPVeinLk62/HOGtd2jN3PrPeAMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvblhBOVY2S2N1VHJiOGM0YTEzYU0zYy1zOTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+6aAwQA 2XVBAwQA2XVHAwQA2XVMMA0GCSqGSIb3DQEBCwUAA4IBAQA+NU95xbQgjJyCzrCQ lMZQ+Mk88hHe27aEjtytAt+tJRBTzDZxJ59hkU1oD9XttNhzxkqER3/V23p81ERc uBKjZAgzHOlVDz8oasO85yJvbdGttBT6Osj7MYujqL7pWgEFSz8OcrwE0BPV/xzw e/KNNOTomcl059udFWMMVM0iK8+sXEt3R4LLpEGwLA+SIHPfLafOZo47PzcIU/ip 0g8UVdHQCZpgUyoIvkJ2k0TTYaY0L/eCylf0bcge2T+I2UhRWwps///9WM7wSJCv NVvqct4abbK6YeHM7IMeLzIbBM2WBt5kdyAJPibwteZduzej25XBIr7dByNEUE6F d5lO -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client