This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/NBxLrYp1MaNdT6TxvAAYtWfhewg.roa File: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (raw, json) Hash identifier: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo= Subject key identifier: 34:1C:4B:AD:8A:75:31:A3:5D:4F:A4:F1:BC:00:18:B5:67:E1:7B:08 Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B78350979F6CDF4A71164EFA87B6CC149 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/NBxLrYp1MaNdT6TxvAAYtWfhewg.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 89.19.208.0/24 maxlen: 24 89.19.209.0/24 maxlen: 24 89.19.210.0/24 maxlen: 24 89.19.211.0/24 maxlen: 24 89.19.212.0/24 maxlen: 24 89.19.213.0/24 maxlen: 24 89.19.214.0/24 maxlen: 24 89.19.215.0/24 maxlen: 24 89.19.216.0/24 maxlen: 24 89.19.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:09:79:f6:cd:f4:a7:11:64:ef:a8:7b:6c:c1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=341c4bad8a7531a35d4fa4f1bc0018b567e17b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:98:d9:00:4a:60:18:f1:fb:db:a8:21:51: 7b:10:29:d8:4f:68:a1:27:86:b3:14:30:40:63:ac: ce:76:48:b7:e2:d8:c3:9e:c9:23:e6:3c:c2:c5:07: 98:07:e6:ec:07:4b:29:81:d8:55:2c:b9:ee:9c:47: 05:ab:73:e6:4c:88:b8:88:0c:5d:96:7a:a3:ed:36: 47:80:ce:6b:bf:4d:89:76:cc:45:5d:86:a7:22:19: fc:aa:b2:21:01:91:5e:d9:ab:2c:ec:f3:ee:54:a9: c5:d7:67:b1:9a:f4:ba:13:70:43:7e:5a:97:bc:ff: 06:c3:6a:f2:7f:76:94:da:6c:e8:30:be:2e:f5:d8: b4:fb:be:91:9b:9a:b2:02:11:b6:28:e3:96:74:49: 68:87:8a:2a:48:3d:7a:aa:9e:f1:a6:61:3c:11:78: 64:bf:a6:de:bc:49:5b:d0:9c:71:a8:e2:3e:cc:07: f9:f0:d4:e0:de:67:c0:29:84:5a:cc:ee:64:1d:f8: 0b:c7:a8:3a:ca:f8:5d:c9:19:fe:96:d0:2c:61:5f: bc:ae:8a:73:3d:4a:50:70:e3:10:1a:89:31:80:5f: 8b:e0:b0:31:57:1e:3b:ce:cf:0b:f6:8a:61:9d:98: 84:03:0a:70:31:07:7b:19:39:d9:73:08:45:a8:0d: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1C:4B:AD:8A:75:31:A3:5D:4F:A4:F1:BC:00:18:B5:67:E1:7B:08 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/NBxLrYp1MaNdT6TxvAAYtWfhewg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.208.0-89.19.217.255 Signature Algorithm: sha256WithRSAEncryption 64:6e:bf:74:63:a5:7d:ed:8e:85:b9:dd:9e:8b:91:c3:7e:78: e3:7f:07:e1:fb:51:d2:ee:cb:ab:e4:71:ca:1a:c6:af:3d:27: da:b3:79:01:3e:94:b8:92:ce:68:fe:6c:7c:81:2f:f0:80:6c: 3d:a6:33:b4:6b:a0:63:38:1e:5a:9b:ff:90:f4:75:b3:28:5a: 2d:fe:e8:2d:bf:cb:c9:34:13:00:fc:25:49:a1:e3:f8:07:d6: 9b:23:4c:fc:7f:29:f6:bf:73:e3:e2:f8:87:22:91:20:29:ee: f4:78:8b:6d:b7:60:d4:24:95:1f:17:65:44:ba:b5:99:b9:f0: 1f:ee:6c:43:8c:15:e9:7c:74:47:2f:68:2f:03:12:31:53:8b: 1c:28:21:01:1b:38:75:08:2f:1d:bd:9a:c1:61:d2:7a:7b:8a: 2d:db:e5:ac:a3:4d:b5:7b:09:ac:b1:15:cf:55:dd:ca:b4:6a: 07:71:21:15:30:68:5a:46:f4:43:40:b0:2d:58:45:a4:3d:7f: c0:ea:12:4b:dd:32:99:f5:96:6b:cf:ff:08:4b:ce:59:3c:88: 2f:f2:a1:eb:e9:3a:04:d7:20:ec:c8:e4:14:ab:2c:85:33:33: 58:dc:ff:fe:8e:4b:1e:69:b7:28:09:5f:eb:68:e7:7c:03:1d: 9c:15:74:3b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NQl59s30pxFk76h7bMFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDFjNGJhZDhhNzUzMWEzNWQ0ZmE0ZjFiYzAwMThiNTY3ZTE3YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2qY2QBKYBjx+9uoIVF7ECnYT2ih J4azFDBAY6zOdki34tjDnskj5jzCxQeYB+bsB0spgdhVLLnunEcFq3PmTIi4iAxd lnqj7TZHgM5rv02JdsxFXYanIhn8qrIhAZFe2ass7PPuVKnF12exmvS6E3BDflqX vP8Gw2ryf3aU2mzoML4u9di0+76Rm5qyAhG2KOOWdEloh4oqSD16qp7xpmE8EXhk v6bevElb0JxxqOI+zAf58NTg3mfAKYRazO5kHfgLx6g6yvhdyRn+ltAsYV+8ropz PUpQcOMQGokxgF+L4LAxVx47zs8L9ophnZiEAwpwMQd7GTnZcwhFqA1oRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDQcS62KdTGjXU+k8bwAGLVn4XsIMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTkJ4THJZcDFNYU5kVDZUeHZBQVl0V2ZoZXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARZE9AD BAFZE9gwDQYJKoZIhvcNAQELBQADggEBAGRuv3RjpX3tjoW53Z6LkcN+eON/B+H7 UdLuy6vkccoaxq89J9qzeQE+lLiSzmj+bHyBL/CAbD2mM7RroGM4Hlqb/5D0dbMo Wi3+6C2/y8k0EwD8JUmh4/gH1psjTPx/Kfa/c+Pi+IcikSAp7vR4i223YNQklR8X ZUS6tZm58B/ubEOMFel8dEcvaC8DEjFTixwoIQEbOHUILx29msFh0np7ii3b5ayj TbV7CayxFc9V3cq0agdxIRUwaFpG9ENAsC1YRaQ9f8DqEkvdMpn1lmvP/whLzlk8 iC/yoevpOgTXIOzI5BSrLIUzM1jc//6OSx5ptygJX+to53wDHZwVdDs= -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:17 2026 by rpki-client