This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/nZWVrpkktVLvbn1tQxNa0DXWXX8.roa File: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (raw, json) Hash identifier: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ= Subject key identifier: 9D:95:95:AE:99:24:B5:52:EF:6E:7D:6D:43:13:5A:D0:35:D6:5D:7F Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Certificate serial: 019B7C1230DD66A15DEFD5D6F800DD32895A Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/nZWVrpkktVLvbn1tQxNa0DXWXX8.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213121 IP address blocks: 31.7.92.0/22 maxlen: 22 93.157.184.0/24 maxlen: 24 2a0a:cf80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:30:dd:66:a1:5d:ef:d5:d6:f8:00:dd:32:89:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d9595ae9924b552ef6e7d6d43135ad035d65d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:d9:e6:f1:e8:1c:0c:e6:14:41:9e:e7:0e: bd:c6:08:5d:93:e8:0b:f4:fa:4d:01:6e:cd:b6:14: c9:a5:d0:4c:ee:e0:45:29:b3:60:34:73:93:91:a1: 3a:9d:3b:29:f8:16:1d:e5:3e:b5:07:1b:6f:d5:33: 1f:51:8b:9e:06:1f:b4:dc:47:9f:da:0f:4d:6d:5f: 04:4e:4b:7a:89:0c:83:89:c7:30:cf:71:d8:06:99: 85:3c:6a:45:b3:72:57:89:5b:97:70:0c:f5:58:41: 68:38:e1:5c:92:b9:67:c4:76:90:64:f5:36:c1:dc: 54:00:20:53:77:d0:cc:59:c7:71:98:07:23:c1:e0: ed:9e:d4:72:fe:4f:07:15:c2:da:f5:7a:88:6e:3d: 8f:ea:31:ad:a1:03:37:d5:b8:02:a1:6d:27:36:15: 4b:ff:e4:7f:04:4a:78:78:44:b4:c9:53:ba:47:bb: e8:80:bc:20:15:75:e9:72:b3:e3:4c:63:fc:ed:16: 9c:15:a0:3f:5b:e1:60:d6:8f:57:be:6a:3b:73:6a: 46:9f:65:f3:e0:36:70:9e:e7:cc:2d:fc:bd:e9:3f: 05:e6:69:96:ff:4d:b1:58:e2:cc:5f:fb:ad:45:c1: c6:96:04:3e:95:76:33:2b:c7:67:61:cb:e0:0a:43: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:95:AE:99:24:B5:52:EF:6E:7D:6D:43:13:5A:D0:35:D6:5D:7F X509v3 Authority Key Identifier: keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/nZWVrpkktVLvbn1tQxNa0DXWXX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.92.0/22 93.157.184.0/24 IPv6: 2a0a:cf80::/29 Signature Algorithm: sha256WithRSAEncryption 13:94:48:6c:3e:e1:b7:22:4d:ed:a0:f6:e3:2a:67:7a:5b:33: 2d:86:51:e0:86:d4:9e:d7:20:cb:11:a2:03:d9:ec:b0:8f:2b: 17:7c:fd:7d:6c:3b:08:d1:e4:0f:8c:cd:d7:8a:82:da:84:84: 3b:d6:ee:f3:6c:01:e4:4f:5d:3d:c9:cf:bc:ff:ff:49:2d:f7: ab:f7:55:d5:40:5a:c5:16:f8:4a:4d:3e:85:a8:fb:12:29:45: 82:4a:4c:57:c8:eb:da:c0:4c:06:1c:46:28:37:fe:80:18:1f: fb:ba:16:37:5f:77:36:f2:dd:73:19:6a:f1:ce:46:90:e2:9a: a5:85:57:6e:20:ba:7b:85:ae:7f:e5:02:4a:50:ef:ed:00:57: 5f:a7:3b:e9:36:d8:09:6f:ea:24:5c:96:63:f3:46:20:bb:45: 50:26:6a:20:d5:4a:75:5c:1a:6e:f1:c0:a0:f4:4c:17:ab:2c: b1:cf:0c:ac:fd:e6:69:cf:1e:bf:c4:a4:f0:ce:de:05:48:1b: 96:58:d4:bf:5f:7e:86:5f:6b:99:1d:dc:2c:67:fb:e3:68:01: a0:b2:4b:f1:b1:43:38:40:85:6b:6b:9a:74:b2:b7:66:cb:73: 9a:ad:6c:90:a0:2c:84:88:30:34:03:64:7e:76:da:2e:08:fc: b2:52:17:c1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EjDdZqFd79XW+ADdMolaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3 ZjZlMmIwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDk1OTVhZTk5MjRiNTUyZWY2ZTdkNmQ0MzEzNWFkMDM1ZDY1ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBnZ5vHoHAzmFEGe5w69xghdk+gL 9PpNAW7NthTJpdBM7uBFKbNgNHOTkaE6nTsp+BYd5T61Bxtv1TMfUYueBh+03Eef 2g9NbV8ETkt6iQyDiccwz3HYBpmFPGpFs3JXiVuXcAz1WEFoOOFckrlnxHaQZPU2 wdxUACBTd9DMWcdxmAcjweDtntRy/k8HFcLa9XqIbj2P6jGtoQM31bgCoW0nNhVL /+R/BEp4eES0yVO6R7vogLwgFXXpcrPjTGP87RacFaA/W+Fg1o9Xvmo7c2pGn2Xz 4DZwnufMLfy96T8F5mmW/02xWOLMX/utRcHGlgQ+lXYzK8dnYcvgCkMnCQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ2Vla6ZJLVS7259bUMTWtA11l1/MB8GA1UdIwQY MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt YjQxOTJhYzYzOGM5LzEvblpXVnJwa2t0Vkx2Ym4xdFF4TmEwRFhXWFg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5 LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCHwdcAwQA XZ24MA0EAgACMAcDBQMqCs+AMA0GCSqGSIb3DQEBCwUAA4IBAQATlEhsPuG3Ik3t oPbjKmd6WzMthlHghtSe1yDLEaID2eywjysXfP19bDsI0eQPjM3XioLahIQ71u7z bAHkT109yc+8//9JLfer91XVQFrFFvhKTT6FqPsSKUWCSkxXyOvawEwGHEYoN/6A GB/7uhY3X3c28t1zGWrxzkaQ4pqlhVduILp7ha5/5QJKUO/tAFdfpzvpNtgJb+ok XJZj80Ygu0VQJmog1Up1XBpu8cCg9EwXqyyxzwys/eZpzx6/xKTwzt4FSBuWWNS/ X36GX2uZHdwsZ/vjaAGgskvxsUM4QIVra5p0srdmy3OarWyQoCyEiDA0A2R+dtou CPyyUhfB -----END CERTIFICATE-----Generated at Tue Feb 10 02:24:17 2026 by rpki-client