This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/NAWLn2JmIDnFs18yJqr1oS3wGGI.roa File: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (raw, json) Hash identifier: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM= Subject key identifier: 34:05:8B:9F:62:66:20:39:C5:B3:5F:32:26:AA:F5:A1:2D:F0:18:62 Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334 Certificate serial: 019B7CECC29C9A8C2C0F45F96117FD1C7B99 Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/NAWLn2JmIDnFs18yJqr1oS3wGGI.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 77.247.196.0/24 maxlen: 24 185.31.70.0/23 maxlen: 23 2a12:b440:1::/48 maxlen: 48 2a12:b440:100::/47 maxlen: 47 2a12:b440:100::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c2:9c:9a:8c:2c:0f:45:f9:61:17:fd:1c:7b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334 Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34058b9f62662039c5b35f3226aaf5a12df01862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:2c:5d:5c:3d:30:9e:a5:fd:00:e6:f3:7c: ea:28:df:fe:03:23:5e:19:a4:2d:80:7a:88:fa:dd: 57:03:4c:cd:72:f7:cb:4c:c5:4d:fd:5b:37:2e:79: 63:cd:b4:be:1c:60:0d:59:d8:84:f7:3b:47:21:ff: f1:40:8b:f0:38:e3:b2:ad:a3:fd:b2:1d:98:88:8a: 5b:e6:53:4b:ac:ea:ca:f6:75:e6:8a:d4:9f:59:12: c5:87:9f:46:5c:0c:df:bc:f0:fd:5c:df:96:da:4e: 31:28:44:92:4f:8a:24:a0:a3:d9:ea:41:02:c2:6a: 79:9d:ee:75:80:f6:37:87:89:87:91:f8:66:3f:2b: 30:89:03:b1:85:fe:ad:7a:ed:a6:fb:9d:f9:0c:46: 6c:f6:2a:8e:a6:89:06:ac:71:e3:85:2c:72:e7:c7: 1c:4e:97:cb:ad:4e:fd:db:7e:4e:03:03:bb:9f:96: b2:11:1c:0e:b9:b0:5b:a9:d3:4b:3b:0f:69:57:95: 51:fb:e9:66:ae:97:9b:1d:76:2c:9f:8e:55:19:16: 22:b7:dc:85:42:9b:e3:46:30:60:1a:3d:b7:92:23: 62:20:15:db:b5:88:ac:0d:bd:fb:08:1e:26:bb:68: 1d:29:3a:c1:c5:13:8e:7c:09:53:8c:b9:0c:9f:5e: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:05:8B:9F:62:66:20:39:C5:B3:5F:32:26:AA:F5:A1:2D:F0:18:62 X509v3 Authority Key Identifier: keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/NAWLn2JmIDnFs18yJqr1oS3wGGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.196.0/24 185.31.70.0/23 IPv6: 2a12:b440:1::/48 2a12:b440:100::/47 Signature Algorithm: sha256WithRSAEncryption 28:62:37:a9:c6:d3:e6:1a:af:36:22:7d:41:34:14:21:50:28: 2b:92:7b:47:b0:40:63:68:1c:6e:38:7b:73:a1:49:b4:d6:db: 0d:92:7f:1e:95:65:39:ec:c0:7f:0e:7f:86:99:22:0f:1f:0d: ff:75:36:94:c1:ed:17:54:46:1c:0d:f7:9e:56:de:a5:aa:10: de:ac:97:d0:67:b0:64:ad:fd:23:ac:66:23:36:3f:33:15:06: df:a4:55:25:cc:19:1a:b6:cf:c0:4d:c0:4d:d2:66:51:6a:84: 37:ba:cd:c7:46:f6:7f:5d:0f:da:a4:9f:23:b4:1a:67:12:d2: 34:8a:94:6c:ae:86:db:1d:0a:33:d1:f0:5b:82:30:58:44:97: f1:06:f5:4d:e8:c6:29:11:14:39:44:a5:2e:a9:83:5c:5c:54: 50:08:d8:ab:06:ec:48:ac:4d:8c:47:22:4f:21:aa:79:97:6a: 76:f8:18:49:e6:23:20:fa:1e:d4:69:21:e0:04:14:57:ef:2a: d8:08:fe:0b:9a:b0:61:28:0a:57:30:75:ea:a3:81:2e:75:93: 3b:7a:1b:a0:44:34:db:e2:e9:f4:65:e5:1d:a7:c1:36:d9:03: dd:13:33:57:d3:b4:27:97:c2:bc:44:ba:2e:bd:34:5a:fd:09: f0:b7:38:40 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87MKcmowsD0X5YRf9HHuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiODBlZGQ0MjUwNTA4NjVlYWZiYTgwODlkYjlkYTNmMzUx OWIzMzQwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDA1OGI5ZjYyNjYyMDM5YzViMzVmMzIyNmFhZjVhMTJkZjAxODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FQsXVw9MJ6l/QDm83zqKN/+AyNe GaQtgHqI+t1XA0zNcvfLTMVN/Vs3LnljzbS+HGANWdiE9ztHIf/xQIvwOOOyraP9 sh2YiIpb5lNLrOrK9nXmitSfWRLFh59GXAzfvPD9XN+W2k4xKESST4okoKPZ6kEC wmp5ne51gPY3h4mHkfhmPyswiQOxhf6teu2m+535DEZs9iqOpokGrHHjhSxy58cc TpfLrU79235OAwO7n5ayERwOubBbqdNLOw9pV5VR++lmrpebHXYsn45VGRYit9yF QpvjRjBgGj23kiNiIBXbtYisDb37CB4mu2gdKTrBxROOfAlTjLkMn147cQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDQFi59iZiA5xbNfMiaq9aEt8BhiMB8GA1UdIwQY MBaAFDuA7dQlBQhl6vuoCJ252j81GbM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMt YzcxNjFkYzVjMDg3LzEvTkFXTG4ySm1JRG5GczE4eUpxcjFvUzN3R0dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMtYzcxNjFkYzVjMDg3 LzEvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQATffEAwQB uR9GMBgEAgACMBIDBwAqErRAAAEDBwEqErRAAQAwDQYJKoZIhvcNAQELBQADggEB AChiN6nG0+YarzYifUE0FCFQKCuSe0ewQGNoHG44e3OhSbTW2w2Sfx6VZTnswH8O f4aZIg8fDf91NpTB7RdURhwN955W3qWqEN6sl9BnsGSt/SOsZiM2PzMVBt+kVSXM GRq2z8BNwE3SZlFqhDe6zcdG9n9dD9qknyO0GmcS0jSKlGyuhtsdCjPR8FuCMFhE l/EG9U3oxikRFDlEpS6pg1xcVFAI2KsG7EisTYxHIk8hqnmXanb4GEnmIyD6HtRp IeAEFFfvKtgI/guasGEoClcwdeqjgS51kzt6G6BENNvi6fRl5R2nwTbZA90TM1fT tCeXwrxEui69NFr9CfC3OEA= -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:28 2026 by rpki-client