This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/nPQEua1epz0cHI9DgWit1pT4HvM.roa File: nPQEua1epz0cHI9DgWit1pT4HvM.roa (raw, json) Hash identifier: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig= Subject key identifier: 9C:F4:04:B9:AD:5E:A7:3D:1C:1C:8F:43:81:68:AD:D6:94:F8:1E:F3 Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c Certificate serial: 019B7C802341226CCA096ABFA199AD6244A8 Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/nPQEua1epz0cHI9DgWit1pT4HvM.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48937 IP address blocks: 213.5.170.0/23 maxlen: 23 213.5.170.0/24 maxlen: 24 213.5.171.0/24 maxlen: 24 213.5.172.0/22 maxlen: 22 213.5.172.0/23 maxlen: 23 213.5.172.0/24 maxlen: 24 213.5.173.0/24 maxlen: 24 213.5.174.0/23 maxlen: 23 213.5.174.0/24 maxlen: 24 213.5.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:41:22:6c:ca:09:6a:bf:a1:99:ad:62:44:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf404b9ad5ea73d1c1c8f438168add694f81ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:52:8b:b5:c7:cd:dd:2e:1f:f5:6c:f1:e7: 91:de:97:4e:fd:b4:90:f6:13:d6:69:a6:9c:a4:76: 3c:54:e4:74:80:15:a9:a4:91:23:e1:26:a9:ec:88: 5a:0f:d8:c9:05:27:68:27:09:d3:fa:a8:6f:ec:4e: 4a:1b:d7:f9:22:ae:30:a4:4d:1b:06:48:b1:9b:4e: ea:c2:1c:cc:10:24:68:56:2b:55:e9:27:c5:6c:c3: b0:c4:83:b8:11:8e:6b:b1:c5:ae:06:60:0f:22:1e: bc:2f:17:3b:ac:88:23:b8:8a:75:bb:47:8c:10:c1: 26:0a:67:26:c0:c7:91:82:c3:52:da:c7:59:71:43: 0d:a3:b5:42:6a:5a:6d:85:3c:4c:69:71:c9:4e:c2: ac:a8:a1:95:0e:3f:94:04:41:9e:43:ae:8d:5e:c7: 20:a3:7b:e6:f3:05:3a:b6:e8:7d:43:2f:a6:20:65: 34:86:2b:0f:e2:f0:a4:ae:35:84:3d:19:a9:40:c2: 66:5f:01:61:3c:2b:5e:9a:21:f8:38:91:fd:06:3b: 2c:05:88:ce:2c:e4:32:e1:fc:a8:aa:a9:c9:91:71: 17:05:8b:53:26:0e:19:67:f0:16:d4:53:ea:5d:17: 61:ca:14:53:16:66:83:eb:38:67:a9:0a:ac:c3:62: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:04:B9:AD:5E:A7:3D:1C:1C:8F:43:81:68:AD:D6:94:F8:1E:F3 X509v3 Authority Key Identifier: keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/nPQEua1epz0cHI9DgWit1pT4HvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.5.170.0-213.5.175.255 Signature Algorithm: sha256WithRSAEncryption 84:46:4b:fd:9a:77:da:a2:fa:4c:48:10:55:0e:03:8d:8b:f0: 01:ca:9d:05:0d:39:75:72:14:ee:c0:f7:f3:de:d0:db:b4:13: b5:70:d2:0f:4a:d1:2d:b6:48:c2:b3:e1:73:7a:3b:86:21:10: 35:9d:33:96:3c:b0:6f:bf:30:f6:87:3a:07:ef:7d:fc:c5:08: 14:8b:f4:fe:dd:c0:e7:5c:5b:5a:4b:b4:cb:76:12:f2:89:55: df:ae:cc:69:3d:49:76:d6:19:74:9d:05:c7:7d:0f:a7:c1:68: 54:9c:0a:7d:da:3c:ee:99:fe:b8:69:11:65:18:ec:44:9d:44: 07:11:7c:d8:e4:38:48:be:59:4c:9b:43:4f:6b:53:f9:2b:76: cb:1b:d9:79:e8:b3:de:9e:9d:59:68:af:37:10:01:ce:9c:aa: a1:b8:a1:ca:26:3a:8c:5c:05:87:c1:a4:8e:57:15:19:48:b4: 82:48:cf:78:0d:fc:cd:6e:f5:db:32:18:3c:3b:e2:d3:6b:19: 42:9d:2f:82:fc:f5:b9:8e:ad:db:b8:ef:68:a2:76:ec:65:f0: 9a:06:e6:a9:30:67:90:b0:a4:0f:8a:d9:91:92:c1:07:4e:67: d8:2a:43:1c:bb:4a:d3:38:f6:7a:d3:4a:4d:ab:d3:7f:8b:45: 13:59:53:cb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gCNBImzKCWq/oZmtYkSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy YzIzNGMwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Y0MDRiOWFkNWVhNzNkMWMxYzhmNDM4MTY4YWRkNjk0ZjgxZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN9Si7XHzd0uH/Vs8eeR3pdO/bSQ 9hPWaaacpHY8VOR0gBWppJEj4Sap7IhaD9jJBSdoJwnT+qhv7E5KG9f5Iq4wpE0b Bkixm07qwhzMECRoVitV6SfFbMOwxIO4EY5rscWuBmAPIh68Lxc7rIgjuIp1u0eM EMEmCmcmwMeRgsNS2sdZcUMNo7VCalpthTxMaXHJTsKsqKGVDj+UBEGeQ66NXscg o3vm8wU6tuh9Qy+mIGU0hisP4vCkrjWEPRmpQMJmXwFhPCtemiH4OJH9BjssBYjO LOQy4fyoqqnJkXEXBYtTJg4ZZ/AW1FPqXRdhyhRTFmaD6zhnqQqsw2IN6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJz0BLmtXqc9HByPQ4FordaU+B7zMB8GA1UdIwQY MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt MTQzZmY2MGQ5OTkxLzEvblBRRXVhMWVwejBjSEk5RGdXaXQxcFQ0SHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHVBaoD BATVBaAwDQYJKoZIhvcNAQELBQADggEBAIRGS/2ad9qi+kxIEFUOA42L8AHKnQUN OXVyFO7A9/Pe0Nu0E7Vw0g9K0S22SMKz4XN6O4YhEDWdM5Y8sG+/MPaHOgfvffzF CBSL9P7dwOdcW1pLtMt2EvKJVd+uzGk9SXbWGXSdBcd9D6fBaFScCn3aPO6Z/rhp EWUY7ESdRAcRfNjkOEi+WUybQ09rU/krdssb2Xnos96enVlorzcQAc6cqqG4ocom OoxcBYfBpI5XFRlItIJIz3gN/M1u9dsyGDw74tNrGUKdL4L89bmOrdu472iiduxl 8JoG5qkwZ5CwpA+K2ZGSwQdOZ9gqQxy7StM49nrTSk2r03+LRRNZU8s= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:43 2026 by rpki-client