This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1NvxVfbgzX3B2umfhkugjM1Ndt8.roa File: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (raw, json) Hash identifier: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g= Subject key identifier: D4:DB:F1:55:F6:E0:CD:7D:C1:DA:E9:9F:86:4B:A0:8C:CD:4D:76:DF Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B7F8348063E4652F676B9EEBBB5D89082 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1NvxVfbgzX3B2umfhkugjM1Ndt8.roa Signing time: Fri 02 Jan 2026 16:21:08 +0000 ROA not before: Fri 02 Jan 2026 16:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51191 IP address blocks: 91.232.96.0/23 maxlen: 23 130.185.104.0/21 maxlen: 21 185.24.68.0/22 maxlen: 22 185.108.216.0/22 maxlen: 22 195.138.240.0/21 maxlen: 21 195.138.241.0/24 maxlen: 24 195.138.244.0/24 maxlen: 24 2a01:4a0:2000::/48 maxlen: 48 2a01:4a0:2001::/48 maxlen: 48 2a01:4a0:2002::/48 maxlen: 48 2a06:4b00::/29 maxlen: 29 2a06:4b01:3300::/40 maxlen: 48 2a06:4b01:3400::/40 maxlen: 48 2a06:4b01:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:48:06:3e:46:52:f6:76:b9:ee:bb:b5:d8:90:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4dbf155f6e0cd7dc1dae99f864ba08ccd4d76df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:32:86:2b:21:ef:76:c1:d9:14:49:ae:2e: a9:6e:60:66:5a:69:b2:d7:26:7c:45:8a:2d:be:2e: fc:32:c4:3e:4a:cd:f6:b9:3d:0c:0f:cb:cf:6c:f9: 64:22:f1:c0:fc:8c:72:31:03:9e:00:20:ce:ce:e0: 51:fd:1a:98:c8:5a:be:92:57:10:38:89:a7:a2:63: 94:ba:84:62:a1:45:17:48:d3:66:e2:91:39:2b:8e: 67:3e:47:85:f5:ce:6d:83:6e:41:88:b3:b2:1e:45: 92:3d:f7:4f:7d:1a:a0:be:e7:66:ab:29:59:ef:29: 4b:ba:da:a5:40:e9:45:86:8a:bc:ae:d6:a4:38:cc: 0c:18:37:ab:6b:64:50:8e:66:5a:bb:a4:0b:b3:05: 89:50:d5:4b:2f:72:22:dd:09:f7:d1:8e:9a:89:dc: a7:83:3b:17:c3:69:d8:38:bf:84:01:6b:f8:65:0b: b2:5b:4b:86:f9:06:ca:05:af:bc:80:55:f6:6b:61: ff:b9:08:ea:76:a6:c5:52:c7:4e:0d:2d:7e:5b:c6: f6:32:aa:a9:a4:64:4e:a7:50:aa:bf:bb:27:88:90: 61:4c:1d:dd:f8:70:8a:0f:d8:37:45:de:ca:51:55: 6a:fc:5e:0c:a7:80:56:43:d2:42:13:5b:21:62:d3: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:F1:55:F6:E0:CD:7D:C1:DA:E9:9F:86:4B:A0:8C:CD:4D:76:DF X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/1NvxVfbgzX3B2umfhkugjM1Ndt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.96.0/23 130.185.104.0/21 185.24.68.0/22 185.108.216.0/22 195.138.240.0/21 IPv6: 2a01:4a0:2000::-2a01:4a0:2002:ffff:ffff:ffff:ffff:ffff 2a06:4b00::/29 Signature Algorithm: sha256WithRSAEncryption 7d:2e:02:9b:12:79:9b:40:bb:b0:f5:4d:10:21:77:9a:27:2d: 1c:80:77:8c:fc:18:4a:85:80:8f:c0:5d:a7:05:65:e5:74:a1: 70:6f:25:9d:d5:2a:f1:7d:21:6c:1d:58:95:9b:41:5e:ee:7f: a5:bf:e6:e9:54:b9:50:7a:21:d8:e8:e8:8e:86:2c:4d:90:2a: 57:09:b2:55:71:ac:4c:48:50:ea:32:73:12:e3:3a:ce:af:93: 23:76:f1:ef:a0:ab:82:2c:27:4d:a8:cc:63:9b:86:55:c8:db: 00:ac:57:2f:08:7a:8a:5f:d0:2f:22:49:40:ad:05:64:bf:f3: ce:f9:85:39:34:86:8b:b7:8c:49:ec:99:99:18:db:e6:21:0b: 2a:3d:8a:49:92:47:c8:bf:f3:85:43:32:cb:ab:da:13:c8:39: 61:a6:53:80:b5:76:61:87:c2:91:b8:3a:24:28:d7:08:31:86: 0a:5c:16:bb:24:d2:bd:05:d5:cd:9c:7c:3f:93:7f:94:19:25: 8c:8e:c9:4d:e2:ed:30:7b:a5:2c:4c:be:68:3f:1a:a3:3b:93: 82:2d:b6:e0:14:5e:43:2e:48:12:2b:36:de:4e:6c:ba:89:3f: a0:aa:8c:f3:2b:51:ae:84:84:ab:0e:19:c7:d8:8a:9e:9b:c8: a8:cb:82:21 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/g0gGPkZS9na57ru12JCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGRiZjE1NWY2ZTBjZDdkYzFkYWU5OWY4NjRiYTA4Y2NkNGQ3NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XQyhish73bB2RRJri6pbmBmWmmy 1yZ8RYotvi78MsQ+Ss32uT0MD8vPbPlkIvHA/IxyMQOeACDOzuBR/RqYyFq+klcQ OImnomOUuoRioUUXSNNm4pE5K45nPkeF9c5tg25BiLOyHkWSPfdPfRqgvudmqylZ 7ylLutqlQOlFhoq8rtakOMwMGDera2RQjmZau6QLswWJUNVLL3Ii3Qn30Y6aidyn gzsXw2nYOL+EAWv4ZQuyW0uG+QbKBa+8gFX2a2H/uQjqdqbFUsdODS1+W8b2Mqqp pGROp1Cqv7sniJBhTB3d+HCKD9g3Rd7KUVVq/F4Mp4BWQ9JCE1shYtOeBwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFNTb8VX24M19wdrpn4ZLoIzNTXbfMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvMU52eFZmYmd6WDNCMnVtZmhrdWdqTTFOZHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAkBAIAATAeAwQBW+hgAwQD grloAwQCuRhEAwQCuWzYAwQDw4rwMCAEAgACMBowEQMGBSoBBKAgAwcAKgEEoCAC AwUDKgZLADANBgkqhkiG9w0BAQsFAAOCAQEAfS4CmxJ5m0C7sPVNECF3mictHIB3 jPwYSoWAj8BdpwVl5XShcG8lndUq8X0hbB1YlZtBXu5/pb/m6VS5UHoh2OjojoYs TZAqVwmyVXGsTEhQ6jJzEuM6zq+TI3bx76CrgiwnTajMY5uGVcjbAKxXLwh6il/Q LyJJQK0FZL/zzvmFOTSGi7eMSeyZmRjb5iELKj2KSZJHyL/zhUMyy6vaE8g5YaZT gLV2YYfCkbg6JCjXCDGGClwWuyTSvQXVzZx8P5N/lBkljI7JTeLtMHulLEy+aD8a ozuTgi224BReQy5IEis23k5suok/oKqM8ytRroSEqw4Zx9iKnpvIqMuCIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:34 2026 by rpki-client