This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/9NrJq1PjqTf1LnPwQedEpXRnEk4.roa File: 9NrJq1PjqTf1LnPwQedEpXRnEk4.roa (raw, json) Hash identifier: fr/nWxinOZldfn60cYUZlZDHivbCDizqDitVeOZXjns= Subject key identifier: F4:DA:C9:AB:53:E3:A9:37:F5:2E:73:F0:41:E7:44:A5:74:67:12:4E Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7 Certificate serial: 019B77C7081517550F7B243EA3D129B6DA63 Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/9NrJq1PjqTf1LnPwQedEpXRnEk4.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31529 IP address blocks: 185.151.141.0/24 maxlen: 24 185.151.142.0/24 maxlen: 24 185.151.143.0/24 maxlen: 24 194.0.0.0/24 maxlen: 24 194.0.11.0/24 maxlen: 24 194.246.96.0/24 maxlen: 24 2001:678:2::/48 maxlen: 48 2001:678:e::/48 maxlen: 48 2a02:568:fe00::/48 maxlen: 48 2a02:568:fe01::/48 maxlen: 48 2a02:568:fe02::/48 maxlen: 48 2a02:56f::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:08:15:17:55:0f:7b:24:3e:a3:d1:29:b6:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4dac9ab53e3a937f52e73f041e744a57467124e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:40:a8:c3:af:84:57:85:43:2d:56:8a:6d: c2:c7:cf:cc:c2:8c:83:00:e3:7a:38:ca:b7:a0:17: 70:d7:74:d6:18:b0:28:d4:06:7e:1e:ed:3d:7a:43: 9e:15:86:bc:ec:79:4d:81:dc:0c:7e:56:c4:92:27: be:b0:69:df:bf:70:6f:93:ab:07:aa:9c:b0:dd:03: 5f:fc:bf:96:ad:aa:e9:dd:46:0b:0e:9a:d8:cf:13: 24:46:bd:b7:a3:ac:28:98:1c:4c:55:39:e6:d2:f0: 37:0f:7e:d7:38:57:00:90:87:73:6b:b2:b8:3d:5e: fd:bf:96:50:e3:19:6c:89:60:f4:32:98:25:70:88: 23:62:f3:63:b4:f8:a2:50:28:62:fb:4d:fd:9d:9f: 49:4b:c5:e5:c6:6f:f0:d2:88:5e:91:d3:20:33:1e: 0e:77:bf:5b:58:f2:c2:a2:2c:06:8c:b1:ff:e1:67: c1:82:4e:2c:af:28:a1:86:93:32:25:10:6a:df:86: e9:50:96:6d:20:8d:ad:31:3a:dc:1f:c4:d9:5b:1f: 7a:85:a2:c7:a4:ba:09:ff:a0:fc:29:74:eb:c6:36: f1:74:6e:cc:4e:fd:c2:79:be:10:44:42:6f:99:a1: ec:c3:bf:33:d0:77:7d:b0:3c:25:bb:2b:d9:fe:07: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DA:C9:AB:53:E3:A9:37:F5:2E:73:F0:41:E7:44:A5:74:67:12:4E X509v3 Authority Key Identifier: keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/9NrJq1PjqTf1LnPwQedEpXRnEk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.141.0-185.151.143.255 194.0.0.0/24 194.0.11.0/24 194.246.96.0/24 IPv6: 2001:678:2::/48 2001:678:e::/48 2a02:568:fe00::-2a02:568:fe02:ffff:ffff:ffff:ffff:ffff 2a02:56f::/32 Signature Algorithm: sha256WithRSAEncryption 06:8c:ee:6f:e1:99:49:5f:d8:ca:fa:f1:b8:c8:2e:03:6a:08: f8:1d:b1:b6:cf:eb:3f:5d:c1:2e:ad:21:68:4a:a8:c0:9e:f3: 93:d7:76:66:c8:a8:4d:65:52:51:15:32:7d:70:8c:67:19:97: d8:c1:da:99:f7:49:d5:9f:cb:b3:31:ac:39:cd:2a:5e:5a:25: 07:f5:82:8e:ce:98:49:34:2c:2f:74:76:b9:07:42:69:d7:4d: 45:24:59:da:04:23:ee:10:d7:c0:bb:a4:c2:a4:9d:89:74:9e: bd:bb:be:e7:3f:1d:c9:4d:ca:14:33:15:2a:d2:83:ee:9b:b3: bb:98:99:6f:e8:86:24:21:b7:b9:f3:da:87:14:e4:e6:b5:f1: 86:3d:19:7a:69:15:5d:db:fb:13:71:3b:e2:9c:cb:28:2b:b9: ee:6b:13:7c:82:bc:81:a7:95:51:4d:de:62:a5:20:c5:50:a4: 96:6e:37:ab:b7:19:dd:3e:82:b7:a2:51:61:57:4f:a8:8e:b1: 1a:22:60:df:2a:27:6f:1a:1b:ca:d3:10:24:e1:f7:1d:c7:f4: 00:64:16:44:41:72:f9:66:ea:02:d0:fa:75:86:ad:df:c5:bf: a4:a7:bb:58:4a:a2:27:da:40:9d:4b:25:6a:85:26:24:82:bb: 82:74:5c:76 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt3xwgVF1UPeyQ+o9EpttpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjI5NmQ2YjUzNGZlM2EzMmNjMWMzYTRlODEzNThmMjE2 YzkzYzcwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGRhYzlhYjUzZTNhOTM3ZjUyZTczZjA0MWU3NDRhNTc0NjcxMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkutAqMOvhFeFQy1Wim3Cx8/MwoyD AON6OMq3oBdw13TWGLAo1AZ+Hu09ekOeFYa87HlNgdwMflbEkie+sGnfv3Bvk6sH qpyw3QNf/L+Wrarp3UYLDprYzxMkRr23o6womBxMVTnm0vA3D37XOFcAkIdza7K4 PV79v5ZQ4xlsiWD0MpglcIgjYvNjtPiiUChi+039nZ9JS8Xlxm/w0ohekdMgMx4O d79bWPLCoiwGjLH/4WfBgk4sryihhpMyJRBq34bpUJZtII2tMTrcH8TZWx96haLH pLoJ/6D8KXTrxjbxdG7MTv3Ceb4QREJvmaHsw78z0Hd9sDwluyvZ/gcj9QIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFPTayatT46k39S5z8EHnRKV0ZxJOMB8GA1UdIwQY MBaAFFWylta1NP46MswcOk6BNY8hbJPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEt ZGQ2Y2M5N2M5YmRkLzEvOU5ySnExUGpxVGYxTG5Qd1FlZEVwWFJuRWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEtZGQ2Y2M5N2M5YmRk LzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAmBAIAATAgMAwDBAC5l40D BAS5l4ADBADCAAADBADCAAsDBADC9mAwMgQCAAIwLAMHACABBngAAgMHACABBngA DjARAwYBKgIFaP4DBwAqAgVo/gIDBQAqAgVvMA0GCSqGSIb3DQEBCwUAA4IBAQAG jO5v4ZlJX9jK+vG4yC4Dagj4HbG2z+s/XcEurSFoSqjAnvOT13ZmyKhNZVJRFTJ9 cIxnGZfYwdqZ90nVn8uzMaw5zSpeWiUH9YKOzphJNCwvdHa5B0Jp101FJFnaBCPu ENfAu6TCpJ2JdJ69u77nPx3JTcoUMxUq0oPum7O7mJlv6IYkIbe589qHFOTmtfGG PRl6aRVd2/sTcTvinMsoK7nuaxN8gryBp5VRTd5ipSDFUKSWbjertxndPoK3olFh V0+ojrEaImDfKidvGhvK0xAk4fcdx/QAZBZEQXL5ZuoC0Pp1hq3fxb+kp7tYSqIn 2kCdSyVqhSYkgruCdFx2 -----END CERTIFICATE-----Generated at Sat Jan 10 04:32:16 2026 by rpki-client