This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/nTZXu0mW7EUaqutcmXoltJnKDug.roa File: nTZXu0mW7EUaqutcmXoltJnKDug.roa (raw, json) Hash identifier: nd1ICL4de7eMzQxRdduWRZ7KUAUPy/KehZsx9ppZFRw= Subject key identifier: 9D:36:57:BB:49:96:EC:45:1A:AA:EB:5C:99:7A:25:B4:99:CA:0E:E8 Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb Certificate serial: 019B783552129F010F108C0F8DF660E79984 Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/nTZXu0mW7EUaqutcmXoltJnKDug.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40995 IP address blocks: 5.44.172.0/23 maxlen: 24 109.111.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:12:9f:01:0f:10:8c:0f:8d:f6:60:e7:99:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d3657bb4996ec451aaaeb5c997a25b499ca0ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:94:a5:58:4c:ab:5b:3a:e9:c8:a3:4b:a6: f3:64:32:ad:70:db:0d:0e:d7:93:03:95:f7:2c:1e: c0:c5:84:dc:dc:f5:32:b0:ce:45:ea:a3:10:4f:89: 87:f6:f6:f1:0c:6a:6d:42:36:49:9e:d8:4f:1e:93: eb:e4:2f:be:85:89:5a:2d:04:0c:5d:73:2e:d7:56: 5b:4f:7b:03:ec:8a:d0:a9:c2:76:24:21:73:b9:2e: ac:88:2a:5b:08:91:e7:1c:df:c7:6f:a3:43:a5:a2: 58:73:83:74:46:37:96:33:cf:8f:59:28:cb:e6:bd: 47:dc:3d:b2:5f:0f:eb:40:63:96:46:bd:93:3b:0c: 31:ab:43:94:5c:00:0d:3b:a7:cd:65:ca:a7:d8:2d: bb:8d:21:cc:ef:e1:a4:37:b5:bc:f0:22:f6:ff:7c: eb:1f:80:d6:a1:d8:21:a0:75:8b:3e:55:a6:75:59: 59:59:06:8c:7d:25:72:41:d5:d0:a5:e4:3c:a9:4d: 77:c6:01:ef:8d:88:22:06:58:4f:e5:82:37:7c:bb: 07:fb:7c:cf:f0:71:9a:5b:8f:3d:26:49:96:a8:02: 58:81:78:f7:6c:2f:b0:7b:ca:08:b6:5a:cd:75:88: a4:85:2a:d7:ae:ca:18:61:8c:f6:d1:a7:46:06:a9: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:57:BB:49:96:EC:45:1A:AA:EB:5C:99:7A:25:B4:99:CA:0E:E8 X509v3 Authority Key Identifier: keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/nTZXu0mW7EUaqutcmXoltJnKDug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.172.0/23 109.111.160.0/20 Signature Algorithm: sha256WithRSAEncryption 42:03:37:96:9f:dd:ad:3d:72:f1:60:90:3b:1c:18:17:33:08: 94:68:23:58:1e:6d:bd:0c:35:d2:ed:fa:5f:f6:77:e7:ee:66: 31:44:c7:97:07:b2:90:a1:21:20:06:dc:eb:64:ae:7b:6f:82: d6:2d:be:66:5f:71:f8:a1:34:86:b8:56:a1:82:0d:63:6e:b3: bd:ab:69:9a:26:87:5d:38:ba:0a:37:45:2d:eb:58:d0:81:10: 39:39:ae:cd:e4:91:4c:2f:d3:37:00:ec:27:2a:b9:c9:02:80: d8:05:b1:c0:94:76:41:05:14:d7:d7:51:1f:8a:4e:8d:49:01: 8e:df:b6:13:01:96:5d:ef:a4:0c:d2:99:b3:94:2d:e8:de:98: 21:d1:60:d2:6f:cc:89:f4:f2:52:0f:cc:0f:bf:25:b9:f9:c1: 71:c2:fa:8a:92:9d:b5:e8:47:84:d5:66:e0:68:3c:4a:b7:85: fb:36:78:5e:08:15:4b:98:9d:ee:37:6c:71:01:d0:68:0d:a0: 85:ea:54:d5:7e:4a:d9:0c:01:20:45:a8:05:0c:8d:c8:df:7d: 7b:e7:87:21:e0:fb:34:ea:f4:ae:aa:fe:e4:12:54:7c:e9:c0: 9d:c0:ff:f6:54:c3:6d:cd:33:31:3c:c9:57:28:ac:e8:67:48: 3f:83:e6:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVISnwEPEIwPjfZg55mEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz MGJkZGIwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDM2NTdiYjQ5OTZlYzQ1MWFhYWViNWM5OTdhMjViNDk5Y2EwZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklCUpVhMq1s66cijS6bzZDKtcNsN DteTA5X3LB7AxYTc3PUysM5F6qMQT4mH9vbxDGptQjZJnthPHpPr5C++hYlaLQQM XXMu11ZbT3sD7IrQqcJ2JCFzuS6siCpbCJHnHN/Hb6NDpaJYc4N0RjeWM8+PWSjL 5r1H3D2yXw/rQGOWRr2TOwwxq0OUXAANO6fNZcqn2C27jSHM7+GkN7W88CL2/3zr H4DWodghoHWLPlWmdVlZWQaMfSVyQdXQpeQ8qU13xgHvjYgiBlhP5YI3fLsH+3zP 8HGaW489JkmWqAJYgXj3bC+we8oItlrNdYikhSrXrsoYYYz20adGBqlQyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ02V7tJluxFGqrrXJl6JbSZyg7oMB8GA1UdIwQY MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt ZTUyZGEzYjg2NzU0LzEvblRaWHUwbVc3RVVhcXV0Y21Yb2x0Sm5LRHVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0 LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBSysAwQE bW+gMA0GCSqGSIb3DQEBCwUAA4IBAQBCAzeWn92tPXLxYJA7HBgXMwiUaCNYHm29 DDXS7fpf9nfn7mYxRMeXB7KQoSEgBtzrZK57b4LWLb5mX3H4oTSGuFahgg1jbrO9 q2maJoddOLoKN0Ut61jQgRA5Oa7N5JFML9M3AOwnKrnJAoDYBbHAlHZBBRTX11Ef ik6NSQGO37YTAZZd76QM0pmzlC3o3pgh0WDSb8yJ9PJSD8wPvyW5+cFxwvqKkp21 6EeE1WbgaDxKt4X7NnheCBVLmJ3uN2xxAdBoDaCF6lTVfkrZDAEgRagFDI3I3317 54ch4Ps06vSuqv7kElR86cCdwP/2VMNtzTMxPMlXKKzoZ0g/g+bK -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:49 2026 by rpki-client