This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB9MKL85zzs6Iqbm6IdyIOxjZ2A.roa File: NB9MKL85zzs6Iqbm6IdyIOxjZ2A.roa (raw, json) Hash identifier: m3fb5NYqhGHKjS/IMe+0ieeiyVkfnbFMaUTANwlLwDg= Subject key identifier: 34:1F:4C:28:BF:39:CF:3B:3A:22:A6:E6:E8:87:72:20:EC:63:67:60 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD0211BD8CDFF47A0BDAD7F5C6F5F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB9MKL85zzs6Iqbm6IdyIOxjZ2A.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142588 IP address blocks: 2a0e:b107:1991::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d0:21:1b:d8:cd:ff:47:a0:bd:ad:7f:5c:6f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=341f4c28bf39cf3b3a22a6e6e8877220ec636760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:ac:fb:eb:81:93:de:b8:15:8f:6d:ef:2e: d0:73:bb:da:e4:9e:6a:d7:1c:2b:a1:9b:87:79:e3: 0c:f2:c7:03:8b:43:9e:5b:cc:bd:43:31:fb:a4:21: 85:d9:8a:73:48:a0:ed:17:41:ea:5e:0e:42:3f:32: 98:42:57:fe:42:a4:01:da:23:57:b7:59:8d:be:c1: 64:92:4b:b8:d7:ac:c8:57:6b:fe:4a:43:16:b3:94: 93:f1:a9:15:f7:ed:39:4b:05:23:52:1b:40:d2:17: 69:9e:b3:58:7a:e2:05:60:98:53:5f:26:06:20:ea: 53:11:75:a3:d5:20:af:bd:28:45:03:27:11:11:27: 88:93:25:7a:88:fa:18:00:ab:40:40:84:f7:c9:79: 16:81:e1:f7:e4:c9:04:af:5e:a8:c2:95:0c:f5:29: 40:eb:03:d6:af:b2:96:61:d6:b3:81:ca:10:12:78: 0f:bc:80:ab:67:ce:10:40:82:83:13:84:16:f2:25: 8d:e5:2a:7c:fd:51:b8:f5:3e:d6:af:a6:d6:fa:e1: 20:9c:b3:e6:1b:1b:e1:75:8b:92:3f:7f:96:d7:93: 54:b5:81:a0:99:99:ef:4a:6f:73:f4:b2:b3:60:9e: 09:77:b0:b6:a9:17:88:03:2d:cb:60:6f:f5:e5:e9: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:4C:28:BF:39:CF:3B:3A:22:A6:E6:E8:87:72:20:EC:63:67:60 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB9MKL85zzs6Iqbm6IdyIOxjZ2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1991::/48 Signature Algorithm: sha256WithRSAEncryption 86:27:aa:c0:a7:95:c1:8b:a7:02:ed:0c:c1:2e:9c:17:1a:29: 4b:94:bd:2c:99:87:ef:a2:97:99:32:f8:e3:ff:43:60:59:35: 05:c2:09:c0:a2:75:25:f9:06:8a:80:48:8a:82:78:53:50:4e: 96:de:02:3a:4e:dc:3c:02:01:4c:dd:2d:eb:4e:3d:95:79:a1: d5:37:a9:cc:27:a7:b1:4e:5b:6a:6d:04:23:63:fc:08:39:f4: 78:c1:34:86:8a:14:ad:d3:7d:52:5e:73:da:3e:2b:0d:2f:55: 96:ab:d1:fe:a3:81:76:1a:ef:88:67:25:cc:fd:37:31:e8:fe: cd:2a:31:dd:e1:ee:aa:86:54:90:10:71:b2:12:64:e1:55:62: 2d:78:71:9c:59:72:69:82:2c:6b:a2:01:2c:99:68:85:d3:1b: ea:f1:f6:ff:71:7b:68:a7:be:73:b9:79:68:3a:06:ce:ce:b1: e0:1f:7a:b4:8b:c7:ec:86:a8:7c:22:40:27:bb:52:7f:1d:d9: 27:4f:9d:80:a7:20:80:d0:b1:73:b9:6b:90:27:5a:6d:7a:d0: 10:99:bf:bd:58:87:c1:b1:4e:3f:25:2f:06:53:5c:f6:a0:f9: 71:2b:34:2e:60:2e:1d:c1:9a:00:6d:2f:3a:cd:cf:88:bf:96: ec:b9:0d:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNAhG9jN/0egva1/XG9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDFmNGMyOGJmMzljZjNiM2EyMmE2ZTZlODg3NzIyMGVjNjM2NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Ws++uBk964FY9t7y7Qc7va5J5q 1xwroZuHeeMM8scDi0OeW8y9QzH7pCGF2YpzSKDtF0HqXg5CPzKYQlf+QqQB2iNX t1mNvsFkkku416zIV2v+SkMWs5ST8akV9+05SwUjUhtA0hdpnrNYeuIFYJhTXyYG IOpTEXWj1SCvvShFAycRESeIkyV6iPoYAKtAQIT3yXkWgeH35MkEr16owpUM9SlA 6wPWr7KWYdazgcoQEngPvICrZ84QQIKDE4QW8iWN5Sp8/VG49T7Wr6bW+uEgnLPm GxvhdYuSP3+W15NUtYGgmZnvSm9z9LKzYJ4Jd7C2qReIAy3LYG/15ekSGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDQfTCi/Oc87OiKm5uiHciDsY2dgMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTkI5TUtMODV6enM2SXFibTZJZHlJT3hqWjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxmR MA0GCSqGSIb3DQEBCwUAA4IBAQCGJ6rAp5XBi6cC7QzBLpwXGilLlL0smYfvopeZ Mvjj/0NgWTUFwgnAonUl+QaKgEiKgnhTUE6W3gI6Ttw8AgFM3S3rTj2VeaHVN6nM J6exTltqbQQjY/wIOfR4wTSGihSt031SXnPaPisNL1WWq9H+o4F2Gu+IZyXM/Tcx 6P7NKjHd4e6qhlSQEHGyEmThVWIteHGcWXJpgixrogEsmWiF0xvq8fb/cXtop75z uXloOgbOzrHgH3q0i8fshqh8IkAnu1J/HdknT52ApyCA0LFzuWuQJ1ptetAQmb+9 WIfBsU4/JS8GU1z2oPlxKzQuYC4dwZoAbS86zc+Iv5bsuQ1P -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:57 2026 by rpki-client