This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nIlpDdvLq6JWnz81UrEEuf8o7Zo.roa File: nIlpDdvLq6JWnz81UrEEuf8o7Zo.roa (raw, json) Hash identifier: jFZtR1MtKvfBZ5HygsUrpcb4N6B+ImlmxL2q85Anwg4= Subject key identifier: 9C:89:69:0D:DB:CB:AB:A2:56:9F:3F:35:52:B1:04:B9:FF:28:ED:9A Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BD554552CFD56C39D458A8B910B529DE3 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nIlpDdvLq6JWnz81UrEEuf8o7Zo.roa Signing time: Mon 19 Jan 2026 08:17:12 +0000 ROA not before: Mon 19 Jan 2026 08:17:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:54:55:2c:fd:56:c3:9d:45:8a:8b:91:0b:52:9d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 19 08:17:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c89690ddbcbaba2569f3f3552b104b9ff28ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:b4:8c:ab:b5:3d:43:da:46:db:c2:f8:7f: 84:c8:12:a0:e8:34:a2:58:30:ef:3c:3d:77:a0:fb: 90:7e:c6:74:37:ee:bf:c5:bd:f7:42:97:f3:39:d7: a2:16:52:40:d3:78:50:71:8e:c5:ec:0b:d2:c9:7f: fc:4b:4a:a7:b3:2c:ed:ed:68:e3:a0:b9:dc:bc:23: ef:0c:0a:bf:d5:9a:2b:4f:d5:a7:69:bb:e6:1b:8e: 5d:37:f3:a2:b8:7a:65:19:ac:83:c9:fd:4a:58:f9: 84:0e:9f:5b:4a:ff:89:b8:27:94:89:1e:93:f2:b8: 5d:3a:7c:fd:2e:96:f8:c6:db:e2:bf:b9:04:ef:b5: 37:84:01:35:d1:b3:a2:24:ec:6c:a3:38:0b:6e:0d: 4f:f1:2e:07:a4:75:9b:75:56:40:82:0a:34:57:64: 32:bf:fb:8d:cf:fa:a8:ea:a9:4f:ca:92:e4:b0:bb: bf:01:98:b7:86:9c:e3:52:1c:ce:84:b4:ff:64:d5: f2:39:5f:1d:eb:0d:bb:9f:95:de:57:05:35:dd:b5: 37:c3:88:35:66:56:c3:2b:6e:49:30:bb:bb:b8:40: 17:b9:c8:48:26:ae:33:77:a0:73:61:fc:12:dc:c5: 5f:97:6b:c9:35:ee:e0:c0:5b:24:e7:30:8c:fc:b0: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:69:0D:DB:CB:AB:A2:56:9F:3F:35:52:B1:04:B9:FF:28:ED:9A X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nIlpDdvLq6JWnz81UrEEuf8o7Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 109.121.47.0/24 178.219.6.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 Signature Algorithm: sha256WithRSAEncryption a8:4e:0b:c9:23:77:aa:f3:d0:f8:12:b3:e9:00:f7:47:bd:00: d1:28:8e:8d:7d:4f:61:8d:f0:a7:b4:b0:3a:ae:57:58:eb:e0: 30:b5:35:ef:ff:07:0c:0d:3e:f2:d0:d0:88:79:a1:08:9f:90: f7:39:5c:0f:e4:d8:e8:01:2f:9b:73:0a:7b:1b:ea:a8:1c:0b: b1:b8:27:0f:2d:2b:c7:3b:ac:24:3e:c5:11:6b:12:99:78:09: 28:a8:2b:3f:73:60:dd:e6:b3:55:d4:fd:bf:25:d9:5f:3b:4b: 1b:ee:58:05:ef:6f:3f:c1:6b:ea:3b:60:d5:6d:91:b0:3c:3f: a9:cf:5e:b4:ef:e9:81:25:4d:a9:02:7c:97:c7:1e:f5:c2:48: 07:90:61:3e:44:a7:a0:a2:2d:23:2c:c2:9b:2f:57:de:76:de: e0:b2:fe:f8:bc:2e:76:b0:fa:27:7f:c4:b0:6e:4b:89:29:77: 28:e1:62:43:e0:82:15:dc:e9:02:b7:ad:8d:d6:3c:27:ce:6d: ac:4f:7f:d7:c7:83:8e:c6:65:c8:15:36:89:be:fa:cf:34:55: 1f:4f:d9:19:4a:13:a1:e3:22:0d:92:49:0b:bf:1b:1e:f5:8e: 7e:a2:26:c9:41:31:6f:8e:d0:72:89:f6:aa:37:63:65:5f:e0: 10:f1:79:d2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvVVFUs/VbDnUWKi5ELUp3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTE5MDgxNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzg5NjkwZGRiY2JhYmEyNTY5ZjNmMzU1MmIxMDRiOWZmMjhlZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCq0jKu1PUPaRtvC+H+EyBKg6DSi WDDvPD13oPuQfsZ0N+6/xb33QpfzOdeiFlJA03hQcY7F7AvSyX/8S0qnsyzt7Wjj oLncvCPvDAq/1ZorT9WnabvmG45dN/OiuHplGayDyf1KWPmEDp9bSv+JuCeUiR6T 8rhdOnz9Lpb4xtviv7kE77U3hAE10bOiJOxsozgLbg1P8S4HpHWbdVZAggo0V2Qy v/uNz/qo6qlPypLksLu/AZi3hpzjUhzOhLT/ZNXyOV8d6w27n5XeVwU13bU3w4g1 ZlbDK25JMLu7uEAXuchIJq4zd6BzYfwS3MVfl2vJNe7gwFsk5zCM/LAvVQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJyJaQ3by6uiVp8/NVKxBLn/KO2aMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvbklscERkdkxxNkpXbno4MVVyRUV1ZjhvN1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAURIwAwQA bXkvAwQAstsGAwQAuS9bAwQAvP/GAwQA1EULMA0GCSqGSIb3DQEBCwUAA4IBAQCo TgvJI3eq89D4ErPpAPdHvQDRKI6NfU9hjfCntLA6rldY6+AwtTXv/wcMDT7y0NCI eaEIn5D3OVwP5NjoAS+bcwp7G+qoHAuxuCcPLSvHO6wkPsURaxKZeAkoqCs/c2Dd 5rNV1P2/JdlfO0sb7lgF728/wWvqO2DVbZGwPD+pz1607+mBJU2pAnyXxx71wkgH kGE+RKegoi0jLMKbL1fedt7gsv74vC52sPonf8SwbkuJKXco4WJD4IIV3OkCt62N 1jwnzm2sT3/Xx4OOxmXIFTaJvvrPNFUfT9kZShOh4yINkkkLvxse9Y5+oibJQTFv jtByifaqN2NlX+AQ8XnS -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:34 2026 by rpki-client