This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/nqFedlELDT6btqVr2PyQaNO_Pfw.roa File: nqFedlELDT6btqVr2PyQaNO_Pfw.roa (raw, json) Hash identifier: 8tqaPkj8LtydCchM9fMrH7we2nm/JziMXiNEi0lLF+M= Subject key identifier: 9E:A1:5E:76:51:0B:0D:3E:9B:B6:A5:6B:D8:FC:90:68:D3:BF:3D:FC Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4 Certificate serial: 019B7C80D161522FDFB4D38B97B26C0331F3 Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/nqFedlELDT6btqVr2PyQaNO_Pfw.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210139 IP address blocks: 89.190.32.0/21 maxlen: 21 89.190.39.0/24 maxlen: 24 185.73.160.0/22 maxlen: 22 2a05:43c0::/29 maxlen: 29 2a05:43c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d1:61:52:2f:df:b4:d3:8b:97:b2:6c:03:31:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea15e76510b0d3e9bb6a56bd8fc9068d3bf3dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:84:c3:1b:90:e7:fb:49:a1:61:49:69:21: 12:e5:d4:63:40:28:ba:e1:1f:bf:58:98:81:57:ec: e5:7a:c7:28:11:9f:07:65:d2:9a:b7:50:69:a8:95: 2f:0f:81:1b:19:af:ef:2e:ed:c6:4b:d9:cc:17:6f: c3:db:0d:dc:c1:3c:2f:5c:89:13:55:35:d3:ce:0c: 84:aa:e3:ee:f0:55:71:50:52:e6:9b:1f:1e:e2:7e: 4f:e7:83:3e:0a:54:2a:f3:31:f7:e9:f7:b4:ae:4c: ee:45:c2:b7:ad:29:48:96:bb:29:f8:25:5f:84:b5: 8a:b8:fe:cd:e1:ff:7e:e9:5d:eb:95:ac:15:9c:b1: 85:07:34:5e:e4:ae:8d:e3:72:40:cf:26:00:67:f3: 92:ca:d5:ee:03:ba:5e:d1:ea:2b:61:a0:58:7f:64: a3:c7:96:9c:a0:57:ca:a7:d5:56:89:8a:26:0e:63: 58:2a:9b:01:f4:cd:36:be:a7:8f:2d:3f:24:49:2a: a1:23:a3:b6:29:06:03:e1:6e:3b:7e:7e:45:64:59: 0f:27:29:8b:5a:a6:24:85:de:8f:c4:72:16:54:1b: ac:a9:4d:cf:c8:cc:a2:9d:fc:6e:00:35:d8:79:cb: db:9e:b1:1d:1c:3c:64:f1:08:67:eb:0f:b2:ca:b3: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:5E:76:51:0B:0D:3E:9B:B6:A5:6B:D8:FC:90:68:D3:BF:3D:FC X509v3 Authority Key Identifier: keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/nqFedlELDT6btqVr2PyQaNO_Pfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.32.0/21 185.73.160.0/22 IPv6: 2a05:43c0::/29 Signature Algorithm: sha256WithRSAEncryption 28:c7:90:5a:d3:5f:47:4b:f5:c9:d2:6f:eb:fb:e8:4d:b6:c4: 16:6b:ea:16:d2:22:e2:b7:2b:5d:3f:60:e8:7f:dd:72:90:43: 7e:cb:c0:d5:ed:33:0b:39:1a:b0:e4:6a:ff:48:17:81:85:5f: c9:1c:0c:91:d7:fe:89:05:d3:e6:9a:c8:f0:58:79:01:52:6b: 78:c9:e5:8c:fd:f8:e4:4c:a0:2d:e6:9e:9f:f8:d9:3b:9f:80: 0c:0b:d8:72:93:0a:f1:07:eb:10:4f:c4:5e:d3:2e:25:13:15: b3:e8:45:23:6b:c2:0a:69:68:57:d6:03:26:30:b0:95:6e:f0: 3a:b0:ff:c5:d6:41:5a:a3:97:66:c8:be:8f:a0:08:76:56:fe: 76:69:36:82:bf:b3:32:d9:dc:ca:c9:30:93:28:09:f2:7e:fe: 88:65:c7:a7:fa:ce:5b:04:85:f6:c6:d8:de:a1:29:5c:ba:ea: c6:4e:9a:9c:69:81:d7:cc:f0:67:48:67:29:1b:75:e4:aa:6e: de:17:14:c0:27:26:64:94:4f:b1:48:47:b3:77:75:c0:97:8c: fd:50:ce:58:17:6f:6c:b6:39:ba:bd:52:dc:d9:ab:a8:74:3c: 45:70:55:ec:e1:12:25:25:05:e0:fc:f7:78:d0:f8:39:71:a8: 7b:10:e4:08 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gNFhUi/ftNOLl7JsAzHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0 M2QzYTQwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWExNWU3NjUxMGIwZDNlOWJiNmE1NmJkOGZjOTA2OGQzYmYzZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lSEwxuQ5/tJoWFJaSES5dRjQCi6 4R+/WJiBV+zlescoEZ8HZdKat1BpqJUvD4EbGa/vLu3GS9nMF2/D2w3cwTwvXIkT VTXTzgyEquPu8FVxUFLmmx8e4n5P54M+ClQq8zH36fe0rkzuRcK3rSlIlrsp+CVf hLWKuP7N4f9+6V3rlawVnLGFBzRe5K6N43JAzyYAZ/OSytXuA7pe0eorYaBYf2Sj x5acoFfKp9VWiYomDmNYKpsB9M02vqePLT8kSSqhI6O2KQYD4W47fn5FZFkPJymL WqYkhd6PxHIWVBusqU3PyMyinfxuADXYecvbnrEdHDxk8Qhn6w+yyrOVRQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ6hXnZRCw0+m7ala9j8kGjTvz38MB8GA1UdIwQY MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt NDFhODRmNDE5YWM1LzEvbnFGZWRsRUxEVDZidHFWcjJQeVFhTk9fUGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1 LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDWb4gAwQC uUmgMA0EAgACMAcDBQMqBUPAMA0GCSqGSIb3DQEBCwUAA4IBAQAox5Ba019HS/XJ 0m/r++hNtsQWa+oW0iLitytdP2Dof91ykEN+y8DV7TMLORqw5Gr/SBeBhV/JHAyR 1/6JBdPmmsjwWHkBUmt4yeWM/fjkTKAt5p6f+Nk7n4AMC9hykwrxB+sQT8Re0y4l ExWz6EUja8IKaWhX1gMmMLCVbvA6sP/F1kFao5dmyL6PoAh2Vv52aTaCv7My2dzK yTCTKAnyfv6IZcen+s5bBIX2xtjeoSlcuurGTpqcaYHXzPBnSGcpG3Xkqm7eFxTA JyZklE+xSEezd3XAl4z9UM5YF29stjm6vVLc2auodDxFcFXs4RIlJQXg/Pd40Pg5 cah7EOQI -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:37 2026 by rpki-client