This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa File: nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa (raw, json) Hash identifier: BSCbUo+BwOOhYIZHjykMAuVC2rv0/uSGrGXGa+iP2Us= Subject key identifier: 9D:BC:62:6F:D7:BC:55:B2:7C:77:E9:FD:55:78:14:39:2A:01:ED:EC Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6 Certificate serial: 019B77C696A6400E0FFF3F096D5C3B530818 Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24889 IP address blocks: 46.253.176.0/20 maxlen: 20 80.254.64.0/20 maxlen: 20 93.94.240.0/21 maxlen: 21 109.205.168.0/21 maxlen: 21 185.196.120.0/22 maxlen: 22 2a02:200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:a6:40:0e:0f:ff:3f:09:6d:5c:3b:53:08:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dbc626fd7bc55b27c77e9fd557814392a01edec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:f8:7e:bf:57:ec:ef:30:05:bc:22:23:94: ad:d3:ac:43:bc:df:9f:19:38:ac:c4:37:da:ba:17: 1a:9b:ef:aa:11:4b:bd:9c:af:d9:51:35:97:8f:54: 62:53:19:6b:3b:71:7b:23:8f:4f:53:e1:91:29:e0: 3e:cf:69:7f:8f:29:97:cf:a3:9e:e2:c9:f1:58:b3: 8c:b5:c0:ed:36:e9:14:c7:5e:12:3f:dc:a4:ea:b0: 38:99:de:a8:5c:8b:46:48:9f:2f:d3:0d:71:9d:16: 2b:12:ba:11:7b:ab:08:1a:42:a9:e4:80:ea:af:b9: a1:80:32:22:26:06:a8:5e:0b:f7:99:69:bc:aa:48: 50:e4:81:b7:18:1d:e5:fb:ce:cc:d0:5b:b8:f6:e0: f1:dc:39:c8:89:4f:d1:f8:b7:f3:21:ee:c8:0b:c7: ef:0b:60:f6:bd:3d:a8:ef:19:80:74:8d:54:c0:b0: a0:b4:0a:bf:66:73:f6:18:ac:15:5a:3d:f8:55:79: 01:31:77:9d:88:2d:fa:7a:5f:05:0a:8f:db:f2:e8: 61:9c:bb:f1:d7:53:a4:8c:b7:82:3f:8f:a7:9a:fc: 19:f9:41:17:88:7f:b3:87:4c:8b:93:fb:8b:e9:25: 6f:39:e4:f3:66:71:8f:04:52:52:b4:19:ea:a3:b8: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:62:6F:D7:BC:55:B2:7C:77:E9:FD:55:78:14:39:2A:01:ED:EC X509v3 Authority Key Identifier: keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/nbxib9e8VbJ8d-n9VXgUOSoB7ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.176.0/20 80.254.64.0/20 93.94.240.0/21 109.205.168.0/21 185.196.120.0/22 IPv6: 2a02:200::/32 Signature Algorithm: sha256WithRSAEncryption 79:73:70:29:4e:68:ce:78:32:26:88:aa:c9:46:55:61:ea:ba: 06:4b:3c:a0:9e:41:d8:bd:e8:a9:18:72:c2:54:64:eb:3b:d6: a8:46:c7:48:a9:16:b7:2e:3b:6c:1d:02:e9:ff:2e:8b:2b:ef: e2:f7:6f:13:7e:a8:1c:e7:e4:67:89:38:60:3e:a3:d2:78:66: 19:0a:56:f0:51:12:46:37:54:e8:46:55:cf:71:f4:c4:a8:5a: b8:91:87:e5:1f:4f:b8:05:51:40:e5:8d:1f:42:4c:e3:b7:91: 68:14:07:2b:c7:e8:26:db:84:96:dd:21:3f:71:69:fd:ac:da: dd:4e:06:c9:43:45:71:b5:85:81:db:ff:5b:d4:bb:7e:a2:21: 25:d7:92:ec:ef:8c:16:f0:c1:20:89:77:61:ec:9f:52:d0:30: a1:81:38:d1:85:e2:e4:00:d4:2e:a2:b9:ab:95:83:ea:1c:1b: 1c:6a:c3:33:73:26:9e:82:a0:ba:3c:15:5f:f4:8a:af:2b:0e: 62:f1:40:23:51:9d:d3:e4:27:3f:75:2a:e3:0e:cc:3d:c0:41: 10:51:7b:9e:50:3f:1a:cd:8b:e8:23:5f:1c:0f:48:38:e9:e0: 03:c1:ae:b4:41:cc:49:6b:c0:70:6a:0f:40:f9:24:f0:5a:c2: 9a:3c:91:7b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3xpamQA4P/z8JbVw7UwgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzZkYmI3Njk5NWI0OTUwYTg2YzVmMDdjYThkYjNlYjQ5 Njc4ZjYwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGJjNjI2ZmQ3YmM1NWIyN2M3N2U5ZmQ1NTc4MTQzOTJhMDFlZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/H4fr9X7O8wBbwiI5St06xDvN+f GTisxDfauhcam++qEUu9nK/ZUTWXj1RiUxlrO3F7I49PU+GRKeA+z2l/jymXz6Oe 4snxWLOMtcDtNukUx14SP9yk6rA4md6oXItGSJ8v0w1xnRYrEroRe6sIGkKp5IDq r7mhgDIiJgaoXgv3mWm8qkhQ5IG3GB3l+87M0Fu49uDx3DnIiU/R+LfzIe7IC8fv C2D2vT2o7xmAdI1UwLCgtAq/ZnP2GKwVWj34VXkBMXediC36el8FCo/b8uhhnLvx 11OkjLeCP4+nmvwZ+UEXiH+zh0yLk/uL6SVvOeTzZnGPBFJStBnqo7gx9QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJ28Ym/XvFWyfHfp/VV4FDkqAe3sMB8GA1UdIwQY MBaAFJV227dplbSVCobF8Hyo2z60lnj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQt NjE4MDJkOWM5MzQ0LzEvbmJ4aWI5ZThWYko4ZC1uOVZYZ1VPU29CN2V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQtNjE4MDJkOWM5MzQ0 LzEvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQELv2wAwQE UP5AAwQDXV7wAwQDbc2oAwQCucR4MA0EAgACMAcDBQAqAgIAMA0GCSqGSIb3DQEB CwUAA4IBAQB5c3ApTmjOeDImiKrJRlVh6roGSzygnkHYveipGHLCVGTrO9aoRsdI qRa3LjtsHQLp/y6LK+/i928Tfqgc5+RniThgPqPSeGYZClbwURJGN1ToRlXPcfTE qFq4kYflH0+4BVFA5Y0fQkzjt5FoFAcrx+gm24SW3SE/cWn9rNrdTgbJQ0VxtYWB 2/9b1Lt+oiEl15Ls74wW8MEgiXdh7J9S0DChgTjRheLkANQuormrlYPqHBscasMz cyaegqC6PBVf9IqvKw5i8UAjUZ3T5Cc/dSrjDsw9wEEQUXueUD8azYvoI18cD0g4 6eADwa60QcxJa8Bwag9A+STwWsKaPJF7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:47 2026 by rpki-client