This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/NyhSyCMRoKdRBo6gGVT4BydPhUU.roa File: NyhSyCMRoKdRBo6gGVT4BydPhUU.roa (raw, json) Hash identifier: hrd0GvTI0bFLstLvooU+LJ8QrF+EDu6C0hrzcyyARCs= Subject key identifier: 37:28:52:C8:23:11:A0:A7:51:06:8E:A0:19:54:F8:07:27:4F:85:45 Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b Certificate serial: 019B79ED4EE1A597D653DD98E490205473FA Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/NyhSyCMRoKdRBo6gGVT4BydPhUU.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21269 IP address blocks: 92.118.240.0/22 maxlen: 24 195.95.132.0/24 maxlen: 24 2a09:b240::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:e1:a5:97:d6:53:dd:98:e4:90:20:54:73:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372852c82311a0a751068ea01954f807274f8545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:fc:11:50:39:a6:c7:c3:df:3f:76:17:89: b7:41:d2:8c:69:84:b1:17:ed:9e:c5:96:5e:35:06: 46:d8:4e:c0:82:57:32:75:fe:e9:80:51:e6:d0:6d: e8:9f:fc:ce:9f:85:4b:a0:bb:21:81:07:9d:fa:5a: 21:55:ef:18:4c:25:2e:f4:68:9e:a0:bb:d5:53:4b: 96:5b:94:ab:0c:8d:51:5b:55:0c:41:16:88:e6:07: db:4f:45:cf:68:3f:32:ce:8d:9d:9e:e6:43:36:66: c7:66:53:42:b8:98:c4:f6:93:ec:8b:0a:e2:08:08: 2f:b3:bb:50:53:82:50:14:25:08:58:af:58:13:4f: 86:a8:55:fb:90:28:f9:36:9c:00:84:82:d2:08:15: 04:7a:8f:b1:c9:99:32:2a:f0:31:6f:0d:e9:4a:84: 9b:c4:a6:96:54:ac:33:11:5f:90:f4:d1:74:b3:a2: 55:4f:b5:47:45:26:75:9f:22:9b:b1:5f:1b:75:09: 89:57:0b:00:77:b5:5c:1d:bb:2e:7c:8d:fa:a8:ce: 1e:94:59:c5:59:01:d5:2f:d6:76:27:10:b4:95:13: 49:bb:d5:a0:7e:6e:84:f5:30:74:88:77:7a:e8:6f: 7f:2f:aa:97:48:96:bd:2b:39:dc:83:59:3e:c1:09: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:28:52:C8:23:11:A0:A7:51:06:8E:A0:19:54:F8:07:27:4F:85:45 X509v3 Authority Key Identifier: keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/NyhSyCMRoKdRBo6gGVT4BydPhUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.240.0/22 195.95.132.0/24 IPv6: 2a09:b240::/29 Signature Algorithm: sha256WithRSAEncryption 2e:14:53:8d:31:48:64:71:49:f0:10:bf:f1:67:f9:7b:df:9c: ca:da:bd:82:75:16:87:6c:71:8c:75:b3:5e:8d:57:de:40:12: 81:e7:3d:97:58:bd:2d:99:71:a1:de:81:b5:a1:a8:05:8a:96: 1f:a1:fa:29:5f:70:c5:43:9b:75:e1:71:d5:fd:18:a1:d4:41: 0f:bb:4a:b6:29:f7:c7:27:c3:43:f1:d6:c9:75:5a:57:af:7f: 65:c4:84:74:e0:86:8c:3e:bb:fd:02:89:df:2b:72:b8:c7:9e: 05:83:db:dd:3a:97:6e:e5:62:cd:d6:38:1d:82:3e:49:ae:bf: 4d:06:b0:2a:66:8e:0c:25:8b:e7:85:25:54:e1:68:f4:0c:82: fa:d4:52:1d:54:3d:9a:db:6a:e9:e0:a7:6b:67:b9:c2:48:eb: 3f:32:a1:29:95:74:24:43:4d:fc:42:a8:81:41:4f:20:5c:c1: 97:b9:57:15:47:12:e5:be:a7:4b:70:e7:f3:18:69:05:ba:7c: 9b:08:3a:ad:e3:88:0c:c4:a4:fc:46:32:21:e5:63:85:ea:23: 39:64:b4:9b:05:fb:32:be:19:73:93:fb:46:4a:0a:49:14:3a: 3a:50:35:09:4d:3b:dc:53:f0:08:3a:cb:8f:bd:0b:dc:3b:ba: 5a:d9:52:bd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57U7hpZfWU92Y5JAgVHP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi MWQ5MmIwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzI4NTJjODIzMTFhMGE3NTEwNjhlYTAxOTU0ZjgwNzI3NGY4NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/8EVA5psfD3z92F4m3QdKMaYSx F+2exZZeNQZG2E7Aglcydf7pgFHm0G3on/zOn4VLoLshgQed+lohVe8YTCUu9Gie oLvVU0uWW5SrDI1RW1UMQRaI5gfbT0XPaD8yzo2dnuZDNmbHZlNCuJjE9pPsiwri CAgvs7tQU4JQFCUIWK9YE0+GqFX7kCj5NpwAhILSCBUEeo+xyZkyKvAxbw3pSoSb xKaWVKwzEV+Q9NF0s6JVT7VHRSZ1nyKbsV8bdQmJVwsAd7VcHbsufI36qM4elFnF WQHVL9Z2JxC0lRNJu9Wgfm6E9TB0iHd66G9/L6qXSJa9Kzncg1k+wQktdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDcoUsgjEaCnUQaOoBlU+AcnT4VFMB8GA1UdIwQY MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt ZWQxNDJlNDY0MzM1LzEvTnloU3lDTVJvS2RSQm82Z0dWVDRCeWRQaFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1 LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCXHbwAwQA w1+EMA0EAgACMAcDBQMqCbJAMA0GCSqGSIb3DQEBCwUAA4IBAQAuFFONMUhkcUnw EL/xZ/l735zK2r2CdRaHbHGMdbNejVfeQBKB5z2XWL0tmXGh3oG1oagFipYfofop X3DFQ5t14XHV/Rih1EEPu0q2KffHJ8ND8dbJdVpXr39lxIR04IaMPrv9AonfK3K4 x54Fg9vdOpdu5WLN1jgdgj5Jrr9NBrAqZo4MJYvnhSVU4Wj0DIL61FIdVD2a22rp 4KdrZ7nCSOs/MqEplXQkQ038QqiBQU8gXMGXuVcVRxLlvqdLcOfzGGkFunybCDqt 44gMxKT8RjIh5WOF6iM5ZLSbBfsyvhlzk/tGSgpJFDo6UDUJTTvcU/AIOsuPvQvc O7pa2VK9 -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:27 2026 by rpki-client