This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NymqfbIXZaNWeF5wDscpwMPNG4A.roa File: NymqfbIXZaNWeF5wDscpwMPNG4A.roa (raw, json) Hash identifier: dWCKIIdQ5Phe7iGPmtPN4/MkNJCkcgrH6zQe7I2XG70= Subject key identifier: 37:29:AA:7D:B2:17:65:A3:56:78:5E:70:0E:C7:29:C0:C3:CD:1B:80 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758AA88D6CE4106FCFDB75B2F2B44BD Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NymqfbIXZaNWeF5wDscpwMPNG4A.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29262 IP address blocks: 93.190.13.0/24 maxlen: 24 185.85.189.0/24 maxlen: 24 185.85.190.0/24 maxlen: 24 185.85.191.0/24 maxlen: 24 185.85.237.0/24 maxlen: 24 185.85.238.0/24 maxlen: 24 185.85.239.0/24 maxlen: 24 185.86.5.0/24 maxlen: 24 185.86.13.0/24 maxlen: 24 185.86.153.0/24 maxlen: 24 185.86.154.0/24 maxlen: 24 185.86.164.0/24 maxlen: 24 185.86.165.0/24 maxlen: 24 185.86.166.0/24 maxlen: 24 185.86.167.0/24 maxlen: 24 185.87.24.0/24 maxlen: 24 185.87.26.0/24 maxlen: 24 185.87.27.0/24 maxlen: 24 185.87.121.0/24 maxlen: 24 185.87.122.0/24 maxlen: 24 185.87.123.0/24 maxlen: 24 185.98.60.0/24 maxlen: 24 185.119.80.0/24 maxlen: 24 185.119.81.0/24 maxlen: 24 185.119.82.0/24 maxlen: 24 185.119.83.0/24 maxlen: 24 185.141.32.0/24 maxlen: 24 2a0b:6780::/29 maxlen: 29 2a0c:46c0::/29 maxlen: 29 2a0c:67c0::/29 maxlen: 29 2a10:8b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:aa:88:d6:ce:41:06:fc:fd:b7:5b:2f:2b:44:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3729aa7db21765a356785e700ec729c0c3cd1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:79:d2:2b:f9:8b:6c:41:26:8f:49:ac:7f: c1:ae:03:30:bb:41:a6:63:30:06:e3:a4:63:0a:83: 3d:e9:18:d5:8f:d8:a0:af:5f:6b:e6:fa:de:31:5e: 91:19:98:95:f9:ef:e6:fd:7f:d9:fc:ab:a4:95:07: 25:29:51:79:dc:52:ec:92:88:72:af:0f:68:d3:8b: 6e:29:00:33:44:aa:c9:a6:b9:a4:89:a8:ef:b9:71: e3:f5:45:b6:7f:be:b5:91:35:56:42:de:a4:12:56: 33:a4:29:07:1c:44:7f:77:c2:df:0e:e8:6e:35:95: 06:97:9f:97:cd:b4:8b:c6:02:b0:fd:02:0c:43:cc: 3d:32:cc:6a:ad:5a:19:0a:b5:f4:e4:10:ef:2c:a1: 4a:61:7d:36:8e:12:11:35:6c:3e:34:af:00:fe:b7: 2f:45:f6:39:37:b0:c9:13:0d:d0:cb:9f:63:53:dd: 2a:62:6a:5a:46:6f:d1:74:b7:26:17:8f:c0:eb:b3: 4b:4b:e8:7c:1c:c0:a1:d8:1f:cd:e9:a3:d1:a1:50: ca:dd:20:ff:45:cf:ab:6f:c7:e0:61:6f:14:8b:f8: 51:8d:29:9e:87:69:9c:2c:ff:84:f6:fb:b9:6c:cc: 85:37:51:b2:7d:cc:c4:d2:62:83:62:6f:eb:21:47: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:29:AA:7D:B2:17:65:A3:56:78:5E:70:0E:C7:29:C0:C3:CD:1B:80 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/NymqfbIXZaNWeF5wDscpwMPNG4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.13.0/24 185.85.189.0-185.85.191.255 185.85.237.0-185.85.239.255 185.86.5.0/24 185.86.13.0/24 185.86.153.0-185.86.154.255 185.86.164.0/22 185.87.24.0/24 185.87.26.0/23 185.87.121.0-185.87.123.255 185.98.60.0/24 185.119.80.0/22 185.141.32.0/24 IPv6: 2a0b:6780::/29 2a0c:46c0::/29 2a0c:67c0::/29 2a10:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 3e:f6:a4:eb:9f:31:2b:bc:1d:11:17:a4:e2:e2:d9:ef:cf:98: 6d:4b:6c:a7:ab:a7:4c:c4:80:72:0e:54:0b:72:ad:f9:d0:71: e8:ae:d5:46:27:0a:3a:20:9e:7b:8b:09:b8:1e:4d:3c:86:0b: d5:76:77:94:fa:be:6a:c3:d6:ca:2a:78:fe:c3:6b:b6:e1:01: 40:0a:13:ab:52:aa:dc:12:ad:fc:0f:99:61:29:a0:25:02:3b: 5b:56:f4:d9:a1:5a:35:09:7d:28:14:ad:bd:b5:28:4d:5e:a2: 3e:ba:4b:30:54:fb:f0:96:41:d4:f3:57:e9:9a:6d:5e:a8:8c: 33:10:09:70:e7:4a:a4:c1:d3:6c:e1:6f:22:a5:98:62:d1:a0: 9c:1c:8c:90:84:31:91:3f:89:44:bd:dd:78:ea:5b:ce:a6:35: 93:1b:0b:c3:20:e5:1f:90:8c:2c:68:e4:b7:e1:ce:db:a3:41: fa:8c:21:be:6c:ce:0d:b8:aa:b2:e6:6d:f3:1e:24:26:93:56: 63:a8:86:c9:df:30:97:98:c7:d5:98:32:41:ec:e9:1d:82:b1: ad:4e:d1:5c:a4:8f:fe:55:6d:46:88:6e:8c:2e:5c:d5:c4:ae: 81:d5:0f:5b:c0:39:a5:71:e0:26:ea:02:eb:6c:de:87:02:69: 29:5f:10:cf -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt3WKqI1s5BBvz9t1svK0S9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzI5YWE3ZGIyMTc2NWEzNTY3ODVlNzAwZWM3MjljMGMzY2QxYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis150iv5i2xBJo9JrH/BrgMwu0Gm YzAG46RjCoM96RjVj9igr19r5vreMV6RGZiV+e/m/X/Z/KuklQclKVF53FLskohy rw9o04tuKQAzRKrJprmkiajvuXHj9UW2f761kTVWQt6kElYzpCkHHER/d8LfDuhu NZUGl5+XzbSLxgKw/QIMQ8w9MsxqrVoZCrX05BDvLKFKYX02jhIRNWw+NK8A/rcv RfY5N7DJEw3Qy59jU90qYmpaRm/RdLcmF4/A67NLS+h8HMCh2B/N6aPRoVDK3SD/ Rc+rb8fgYW8Ui/hRjSmeh2mcLP+E9vu5bMyFN1GyfczE0mKDYm/rIUe3tQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFDcpqn2yF2WjVnhecA7HKcDDzRuAMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvTnltcWZiSVhaYU5XZUY1d0RzY3B3TVBORzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjB0BAIAATBuAwQAXb4N MAwDBAC5Vb0DBAa5VYAwDAMEALlV7QMEBLlV4AMEALlWBQMEALlWDTAMAwQAuVaZ AwQAuVaaAwQCuVakAwQAuVcYAwQBuVcaMAwDBAC5V3kDBAK5V3gDBAC5YjwDBAK5 d1ADBAC5jSAwIgQCAAIwHAMFAyoLZ4ADBQMqDEbAAwUDKgxnwAMFAyoQiwAwDQYJ KoZIhvcNAQELBQADggEBAD72pOufMSu8HREXpOLi2e/PmG1LbKerp0zEgHIOVAty rfnQceiu1UYnCjognnuLCbgeTTyGC9V2d5T6vmrD1soqeP7Da7bhAUAKE6tSqtwS rfwPmWEpoCUCO1tW9NmhWjUJfSgUrb21KE1eoj66SzBU+/CWQdTzV+mabV6ojDMQ CXDnSqTB02zhbyKlmGLRoJwcjJCEMZE/iUS93XjqW86mNZMbC8Mg5R+QjCxo5Lfh ztujQfqMIb5szg24qrLmbfMeJCaTVmOohsnfMJeYx9WYMkHs6R2Csa1O0Vykj/5V bUaIbowuXNXEroHVD1vAOaVx4CbqAuts3ocCaSlfEM8= -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:56 2026 by rpki-client