This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/nulCvf1ZDiLHKGwlRCqX-xf-u8U.roa File: nulCvf1ZDiLHKGwlRCqX-xf-u8U.roa (raw, json) Hash identifier: JQ69vYDlz6xz7MB3BkzIIeYrLldb5G4IS4udc2gBcFQ= Subject key identifier: 9E:E9:42:BD:FD:59:0E:22:C7:28:6C:25:44:2A:97:FB:17:FE:BB:C5 Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca Certificate serial: 019B7C1363484D04D2B2E3639835D91A26A4 Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/nulCvf1ZDiLHKGwlRCqX-xf-u8U.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 23.252.72.0/24 maxlen: 24 185.179.245.0/24 maxlen: 24 2a10:4cc0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:63:48:4d:04:d2:b2:e3:63:98:35:d9:1a:26:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ee942bdfd590e22c7286c25442a97fb17febbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e9:f7:27:d6:99:f4:31:ef:45:d5:46:57:25: 2b:8b:8a:5e:e0:43:fd:79:91:4d:da:87:44:6d:bd: 9c:7d:f0:64:e5:2e:f4:04:0d:2c:31:0a:98:68:f1: 07:55:1a:7a:1a:ab:55:9d:7b:bc:e3:53:df:51:b1: 11:c4:2c:61:5c:94:fa:6f:a9:e6:84:34:12:23:7a: 31:2e:06:74:db:71:9a:b0:10:fd:d0:67:42:86:d6: ed:8e:b0:6a:db:c5:fa:3e:57:ad:06:a4:10:fb:cf: 75:6a:56:66:97:1d:cd:86:2c:8e:85:0c:fe:de:e9: e7:e3:2c:2e:d2:65:d4:c1:25:9e:ab:02:e0:3b:31: 92:d0:9f:00:a6:41:a1:35:1e:a5:48:18:21:10:bf: 18:57:ad:c8:7a:dc:33:69:db:99:9f:3c:f5:88:b0: 63:13:73:ea:8b:23:ba:52:d3:9b:68:a3:d2:b0:19: f7:be:77:31:75:4e:92:18:65:5a:e5:47:4c:a3:1d: a5:54:77:51:a0:f0:21:01:86:b2:e9:2f:ed:f0:a4: e3:e7:1a:1f:ca:c1:7a:a6:a2:8e:06:67:35:d5:6b: cd:d9:0f:d4:ec:dc:02:29:fd:05:16:99:6d:3f:bd: 80:31:02:76:d0:c5:4a:5f:b8:58:70:6b:75:24:da: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:42:BD:FD:59:0E:22:C7:28:6C:25:44:2A:97:FB:17:FE:BB:C5 X509v3 Authority Key Identifier: keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/nulCvf1ZDiLHKGwlRCqX-xf-u8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.252.72.0/24 185.179.245.0/24 IPv6: 2a10:4cc0::/40 Signature Algorithm: sha256WithRSAEncryption 23:23:4a:49:05:25:52:9e:00:cf:bf:5e:c3:c0:53:fa:1d:36: 90:d6:0e:7e:40:c5:bb:4f:bd:de:5e:a6:cb:01:5d:6e:c9:2a: 9e:44:ac:65:08:ac:f4:0d:77:d7:45:69:11:e7:ed:e7:87:f4: 10:58:b2:ac:97:df:10:c5:64:80:71:57:d8:3b:6a:c6:bb:4c: a0:82:54:31:fa:2c:36:1b:33:69:54:67:d0:da:8b:36:81:a9: c5:df:5b:a5:94:16:d8:18:54:0f:74:f7:2b:4d:1e:60:64:33: b0:87:13:25:c9:4e:0f:8c:fa:dd:06:cc:8c:a3:48:9e:f1:06: 0a:93:ac:bc:bd:eb:b1:1a:13:51:37:c7:10:34:13:ce:34:a2: 30:b2:42:64:5b:12:fc:fa:5e:61:98:d3:09:5e:57:b2:d5:17: ac:ca:c8:9a:a2:3d:ed:01:79:5e:21:d1:57:cb:b5:62:1f:8c: be:8b:93:39:63:cb:9d:ed:0e:0b:65:b6:15:37:8e:4b:e8:32: 22:19:f8:e4:e5:07:9b:4c:b5:e0:95:48:63:91:0b:2c:fc:e7: 43:0d:36:20:d1:e2:bd:e7:49:30:13:30:e3:0d:c4:e5:14:6c: a5:95:c7:11:57:98:c3:2a:22:62:5d:d3:e6:97:de:36:34:bc: 5f:34:cb:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8E2NITQTSsuNjmDXZGiakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYWQxMGY5NzJlNjc4OWUyYTQzNzdhMmMyOWVlMDhiYzNh MzY3Y2EwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWU5NDJiZGZkNTkwZTIyYzcyODZjMjU0NDJhOTdmYjE3ZmViYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/en3J9aZ9DHvRdVGVyUri4pe4EP9 eZFN2odEbb2cffBk5S70BA0sMQqYaPEHVRp6GqtVnXu841PfUbERxCxhXJT6b6nm hDQSI3oxLgZ023GasBD90GdChtbtjrBq28X6PletBqQQ+891alZmlx3NhiyOhQz+ 3unn4ywu0mXUwSWeqwLgOzGS0J8ApkGhNR6lSBghEL8YV63IetwzaduZnzz1iLBj E3PqiyO6UtObaKPSsBn3vncxdU6SGGVa5UdMox2lVHdRoPAhAYay6S/t8KTj5xof ysF6pqKOBmc11WvN2Q/U7NwCKf0FFpltP72AMQJ20MVKX7hYcGt1JNpp1wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJ7pQr39WQ4ixyhsJUQql/sX/rvFMB8GA1UdIwQY MBaAFJutEPly5nieKkN3osKe4IvDo2fKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTYwUS1YTG1lSjRxUTNlaXdwN2dpOE9qWjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGY2ZDMtYTRjMC00MzdjLWI0YzYt MGQzODE0ZWE3M2M3LzEvbnVsQ3ZmMVpEaUxIS0d3bFJDcVgteGYtdThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNGY2ZDMtYTRjMC00MzdjLWI0YzYtMGQzODE0ZWE3M2M3 LzEvbTYwUS1YTG1lSjRxUTNlaXdwN2dpOE9qWjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF/xIAwQA ubP1MA4EAgACMAgDBgAqEEzAADANBgkqhkiG9w0BAQsFAAOCAQEAIyNKSQUlUp4A z79ew8BT+h02kNYOfkDFu0+93l6mywFdbskqnkSsZQis9A1310VpEeft54f0EFiy rJffEMVkgHFX2DtqxrtMoIJUMfosNhszaVRn0NqLNoGpxd9bpZQW2BhUD3T3K00e YGQzsIcTJclOD4z63QbMjKNInvEGCpOsvL3rsRoTUTfHEDQTzjSiMLJCZFsS/Ppe YZjTCV5XstUXrMrImqI97QF5XiHRV8u1Yh+MvouTOWPLne0OC2W2FTeOS+gyIhn4 5OUHm0y14JVIY5ELLPznQw02INHivedJMBMw4w3E5RRspZXHEVeYwyoiYl3T5pfe NjS8XzTLCA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:14 2026 by rpki-client