This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/nGiD_VuUEB-534WjNRVtjKrImS4.roa File: nGiD_VuUEB-534WjNRVtjKrImS4.roa (raw, json) Hash identifier: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio= Subject key identifier: 9C:68:83:FD:5B:94:10:1F:B9:DF:85:A3:35:15:6D:8C:AA:C8:99:2E Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Certificate serial: 019B76EB6D1C1C870D540FCB21E9F43D2D5B Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/nGiD_VuUEB-534WjNRVtjKrImS4.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42611 IP address blocks: 84.18.224.0/19 maxlen: 19 85.208.12.0/22 maxlen: 22 91.193.8.0/22 maxlen: 22 91.193.8.0/24 maxlen: 24 2a09:8040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:1c:1c:87:0d:54:0f:cb:21:e9:f4:3d:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c6883fd5b94101fb9df85a335156d8caac8992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:90:82:a9:b5:55:0a:6a:c8:16:5f:fe:7e: df:b1:53:de:36:ca:70:a6:dd:91:16:89:8a:de:15: 26:5d:02:cb:d0:2b:ae:10:aa:f3:56:82:40:94:01: dd:20:8c:e4:a7:a0:77:d4:d0:d7:c7:cb:08:15:83: 0d:19:98:0f:e3:cc:e4:44:ae:f4:f5:c7:ae:42:4c: 58:a8:af:cd:fb:2a:b4:32:76:09:4b:4e:01:9a:39: cb:0a:a7:66:e9:4d:ac:36:85:fa:dc:67:21:fe:44: c9:c0:f9:38:29:3e:e8:c9:4a:f8:67:ef:86:3a:8d: 05:6a:73:d2:a4:38:60:5e:85:5d:8d:ac:63:ca:11: 10:66:2b:bc:c5:d1:86:80:c9:53:27:aa:30:b1:df: 75:4b:34:be:71:fb:45:32:a0:9b:77:88:51:e2:58: 61:fd:84:10:26:ec:89:c5:35:03:48:d9:81:c3:38: 62:1b:44:43:fc:82:5a:3c:61:86:57:0c:e4:a6:08: 35:e1:c3:4b:c1:38:32:1c:2f:b0:37:ce:18:b9:2a: ce:3f:ef:7a:11:54:c1:e8:70:3d:b8:89:3a:20:35: 2b:e6:f4:7a:a8:21:bb:9a:09:27:cb:17:9b:b7:74: c4:d5:9e:25:16:69:e7:41:aa:84:c1:36:a3:e4:bd: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:83:FD:5B:94:10:1F:B9:DF:85:A3:35:15:6D:8C:AA:C8:99:2E X509v3 Authority Key Identifier: keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/nGiD_VuUEB-534WjNRVtjKrImS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.18.224.0/19 85.208.12.0/22 91.193.8.0/22 IPv6: 2a09:8040::/29 Signature Algorithm: sha256WithRSAEncryption 40:49:96:b9:65:d6:07:3b:e3:5f:1d:a8:cb:44:17:f6:63:45: 10:09:8e:9e:4d:1d:24:ad:d3:e2:34:af:0f:40:c5:43:cf:a3: 58:6b:21:b3:15:7b:f1:45:ab:5b:55:ee:41:cc:6a:c3:42:ad: f3:0b:5f:40:bb:25:de:45:99:25:d1:48:aa:44:c0:0c:68:e3: 5a:57:0f:42:01:1e:1c:24:6d:12:2c:bc:85:30:82:87:b3:e0: 65:a9:09:4a:60:4f:32:b9:bd:b6:0e:75:e8:d9:fa:16:de:7c: 58:03:f4:6c:99:3e:55:c9:4e:7c:0e:4a:cc:dd:0d:97:71:a3: 6a:6b:72:8c:69:61:7e:5f:54:b5:e4:5c:69:63:56:ac:1b:b1: 93:70:78:f8:94:28:45:1f:d4:37:74:a8:eb:28:d8:25:df:b0: 87:b0:a7:94:24:a6:23:85:f4:aa:26:d6:a5:a6:ca:0b:f9:b2: 84:9d:41:b8:17:e2:64:fd:1c:cf:b8:37:7c:90:d0:11:d8:e1: 74:d0:45:8a:e8:ff:5e:31:1f:a3:65:a4:d7:f3:5d:7b:eb:38: 17:ca:39:b1:db:3d:d7:86:6c:96:d0:76:00:f8:8f:94:bc:bc: a4:5b:8b:bb:ed:c7:97:fd:ea:bf:db:82:71:42:16:42:0f:43: 43:de:a7:ec -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt2620cHIcNVA/LIen0PS1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4 ZjM1ZDMwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzY4ODNmZDViOTQxMDFmYjlkZjg1YTMzNTE1NmQ4Y2FhYzg5OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPmQgqm1VQpqyBZf/n7fsVPeNspw pt2RFomK3hUmXQLL0CuuEKrzVoJAlAHdIIzkp6B31NDXx8sIFYMNGZgP48zkRK70 9ceuQkxYqK/N+yq0MnYJS04BmjnLCqdm6U2sNoX63Gch/kTJwPk4KT7oyUr4Z++G Oo0FanPSpDhgXoVdjaxjyhEQZiu8xdGGgMlTJ6owsd91SzS+cftFMqCbd4hR4lhh /YQQJuyJxTUDSNmBwzhiG0RD/IJaPGGGVwzkpgg14cNLwTgyHC+wN84YuSrOP+96 EVTB6HA9uIk6IDUr5vR6qCG7mgknyxebt3TE1Z4lFmnnQaqEwTaj5L2HbQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJxog/1blBAfud+FozUVbYyqyJkuMB8GA1UdIwQY MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt NDNhNDNkYTkyODlhLzEvbkdpRF9WdVVFQi01MzRXak5SVnRqS3JJbVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFVBLgAwQC VdAMAwQCW8EIMA0EAgACMAcDBQMqCYBAMA0GCSqGSIb3DQEBCwUAA4IBAQBASZa5 ZdYHO+NfHajLRBf2Y0UQCY6eTR0krdPiNK8PQMVDz6NYayGzFXvxRatbVe5BzGrD Qq3zC19AuyXeRZkl0UiqRMAMaONaVw9CAR4cJG0SLLyFMIKHs+BlqQlKYE8yub22 DnXo2foW3nxYA/RsmT5VyU58DkrM3Q2XcaNqa3KMaWF+X1S15FxpY1asG7GTcHj4 lChFH9Q3dKjrKNgl37CHsKeUJKYjhfSqJtalpsoL+bKEnUG4F+Jk/RzPuDd8kNAR 2OF00EWK6P9eMR+jZaTX81176zgXyjmx2z3XhmyW0HYA+I+UvLykW4u77ceX/eq/ 24JxQhZCD0ND3qfs -----END CERTIFICATE-----Generated at Tue Jan 27 11:48:37 2026 by rpki-client