This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa File: nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa (raw, json) Hash identifier: wsGgO59uuOrZNxO5czJq2eFvkiFHzzzuspwORnyBouk= Subject key identifier: 9D:3F:E7:AB:6A:99:A6:0F:DE:F0:0F:90:6D:3E:1B:0D:5F:6C:63:57 Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Certificate serial: 019B998A46407BAB14B2B2856F7AED915117 Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa Signing time: Wed 07 Jan 2026 17:38:54 +0000 ROA not before: Wed 07 Jan 2026 17:38:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211381 IP address blocks: 45.88.76.0/24 maxlen: 24 45.88.105.0/24 maxlen: 24 45.91.200.0/24 maxlen: 24 45.91.201.0/24 maxlen: 24 45.91.202.0/24 maxlen: 24 45.132.107.0/24 maxlen: 24 45.147.196.0/24 maxlen: 24 77.83.175.0/24 maxlen: 24 81.91.176.0/24 maxlen: 24 81.91.179.0/24 maxlen: 24 91.211.248.0/24 maxlen: 24 91.211.249.0/24 maxlen: 24 91.211.250.0/24 maxlen: 24 92.119.114.0/24 maxlen: 24 95.215.204.0/24 maxlen: 24 95.215.206.0/24 maxlen: 24 95.215.207.0/24 maxlen: 24 103.246.144.0/24 maxlen: 24 103.246.145.0/24 maxlen: 24 103.246.146.0/24 maxlen: 24 103.246.147.0/24 maxlen: 24 185.203.241.0/24 maxlen: 24 185.209.20.0/24 maxlen: 24 185.209.21.0/24 maxlen: 24 185.219.81.0/24 maxlen: 24 185.219.83.0/24 maxlen: 24 185.231.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:8a:46:40:7b:ab:14:b2:b2:85:6f:7a:ed:91:51:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Validity Not Before: Jan 7 17:38:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d3fe7ab6a99a60fdef00f906d3e1b0d5f6c6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:69:5c:52:40:c8:55:42:8f:71:84:30:0f: a2:7a:8a:6d:18:a0:e8:21:d9:b0:fe:d6:7b:c9:1e: e7:ce:a5:b6:d1:43:e3:6d:58:53:9b:3c:57:1d:79: 7f:ac:a0:4b:a0:bd:42:54:af:47:7f:8d:9f:ea:9b: e7:6e:4c:4e:54:03:f9:6a:0e:e2:16:56:ac:05:24: 4e:13:ad:36:dc:54:ef:ac:27:ff:39:08:d7:84:2a: c4:18:86:13:fa:33:71:3a:26:50:de:9f:57:97:d6: fa:df:97:2e:d4:a8:40:e0:ad:cc:60:33:ff:b1:39: eb:75:c9:67:40:4f:27:b7:fe:90:1c:09:fc:a4:7e: e5:5c:19:e7:56:32:fa:ee:af:2c:01:7b:7d:6f:0c: 05:89:f5:c2:d0:a9:fe:c3:5f:af:15:5a:98:6e:8d: 9c:fe:12:98:7a:63:67:f3:e7:1d:41:dd:a0:c1:24: d9:01:f8:a8:1e:f9:c6:c5:83:e3:4b:2e:5d:a5:b3: a2:76:20:55:98:aa:bc:5f:7e:50:3e:48:47:f1:a2: 4e:f2:15:58:0d:bb:2b:ba:e1:02:74:91:3b:8a:c0: d7:cb:56:9e:a2:fb:51:17:45:ac:fa:a2:11:8b:69: ef:a6:eb:d7:64:62:e4:08:76:65:30:c3:4e:5c:4a: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:E7:AB:6A:99:A6:0F:DE:F0:0F:90:6D:3E:1B:0D:5F:6C:63:57 X509v3 Authority Key Identifier: keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.76.0/24 45.88.105.0/24 45.91.200.0-45.91.202.255 45.132.107.0/24 45.147.196.0/24 77.83.175.0/24 81.91.176.0/24 81.91.179.0/24 91.211.248.0-91.211.250.255 92.119.114.0/24 95.215.204.0/24 95.215.206.0/23 103.246.144.0/22 185.203.241.0/24 185.209.20.0/23 185.219.81.0/24 185.219.83.0/24 185.231.69.0/24 Signature Algorithm: sha256WithRSAEncryption 85:3a:b3:2b:be:ba:d6:53:02:12:0a:27:b1:6f:0c:ba:5a:e7: 8a:8f:aa:4d:6f:40:82:bb:4f:44:0b:b8:ee:58:39:03:e4:a7: bc:7d:36:35:71:02:fe:43:65:57:53:07:b9:22:02:cc:91:9d: ab:c7:d3:5f:9c:6a:ad:1f:c3:39:e4:c8:ae:04:39:4a:c5:c1: 9d:64:84:6e:dc:5e:3a:47:91:32:f5:10:30:68:72:e4:35:ae: 18:d7:8e:5d:02:48:b4:0a:09:ef:83:ef:f9:77:65:68:b8:02: c7:89:21:c2:49:73:76:67:55:c7:07:55:20:5b:49:00:e3:37: fd:85:e5:95:53:98:1d:e8:b2:b8:22:cc:f8:4e:ea:71:8e:b0: f0:06:b3:07:87:a3:d1:02:69:c9:f1:e7:1d:81:8c:6e:90:f1: 6f:a2:9f:f9:1f:44:84:28:bb:b5:4a:8d:2d:bb:ad:76:c2:d3: a0:4a:ce:e8:77:33:5f:d8:46:84:95:cb:60:ec:45:e3:7c:f1: 4e:fe:e6:b2:72:c1:5a:f8:35:f8:77:64:46:f7:dd:c0:c0:88: 70:cc:ef:ba:99:98:6b:ee:e7:72:45:d0:c6:90:88:a9:10:1d: 05:53:fb:7f:47:dc:3b:38:29:35:01:91:c2:28:3b:01:a5:eb: 07:fb:3d:55 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZuZikZAe6sUsrKFb3rtkVEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4 ZmRjNWIwHhcNMjYwMTA3MTczODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDNmZTdhYjZhOTlhNjBmZGVmMDBmOTA2ZDNlMWIwZDVmNmM2MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25VpXFJAyFVCj3GEMA+ieoptGKDo Idmw/tZ7yR7nzqW20UPjbVhTmzxXHXl/rKBLoL1CVK9Hf42f6pvnbkxOVAP5ag7i FlasBSROE6023FTvrCf/OQjXhCrEGIYT+jNxOiZQ3p9Xl9b635cu1KhA4K3MYDP/ sTnrdclnQE8nt/6QHAn8pH7lXBnnVjL67q8sAXt9bwwFifXC0Kn+w1+vFVqYbo2c /hKYemNn8+cdQd2gwSTZAfioHvnGxYPjSy5dpbOidiBVmKq8X35QPkhH8aJO8hVY DbsruuECdJE7isDXy1aeovtRF0Ws+qIRi2nvpuvXZGLkCHZlMMNOXEqMtwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFJ0/56tqmaYP3vAPkG0+Gw1fbGNXMB8GA1UdIwQY MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt YTYzNDc5NjEwOTY4LzEvblRfbnEycVpwZ19lOEEtUWJUNGJEVjlzWTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4 LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAC1Y TAMEAC1YaTAMAwQDLVvIAwQALVvKAwQALYRrAwQALZPEAwQATVOvAwQAUVuwAwQA UVuzMAwDBANb0/gDBABb0/oDBABcd3IDBABf18wDBAFf184DBAJn9pADBAC5y/ED BAG50RQDBAC521EDBAC521MDBAC550UwDQYJKoZIhvcNAQELBQADggEBAIU6syu+ utZTAhIKJ7FvDLpa54qPqk1vQIK7T0QLuO5YOQPkp7x9NjVxAv5DZVdTB7kiAsyR navH01+caq0fwznkyK4EOUrFwZ1khG7cXjpHkTL1EDBocuQ1rhjXjl0CSLQKCe+D 7/l3ZWi4AseJIcJJc3ZnVccHVSBbSQDjN/2F5ZVTmB3osrgizPhO6nGOsPAGsweH o9ECacnx5x2BjG6Q8W+in/kfRIQou7VKjS27rXbC06BKzuh3M1/YRoSVy2DsReN8 8U7+5rJywVr4Nfh3ZEb33cDAiHDM77qZmGvu53JF0MaQiKkQHQVT+39H3Ds4KTUB kcIoOwGl6wf7PVU= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:21 2026 by rpki-client