This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/NPJVEIrY3UfeES9Xcv6P7fFmbGY.roa File: NPJVEIrY3UfeES9Xcv6P7fFmbGY.roa (raw, json) Hash identifier: sXL5hFWG58/WhkvpN2R+epAeLkNFcgaDk8B5QE+MuJI= Subject key identifier: 34:F2:55:10:8A:D8:DD:47:DE:11:2F:57:72:FE:8F:ED:F1:66:6C:66 Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Certificate serial: 019B7A5B3EFD012AB24A75E3AE1D6DEA17A5 Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/NPJVEIrY3UfeES9Xcv6P7fFmbGY.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5394 IP address blocks: 77.39.160.0/19 maxlen: 19 77.39.160.0/20 maxlen: 20 77.39.176.0/20 maxlen: 20 77.39.224.0/19 maxlen: 19 77.39.224.0/20 maxlen: 20 77.39.240.0/20 maxlen: 20 81.29.180.0/22 maxlen: 22 81.29.184.0/21 maxlen: 21 82.145.96.0/23 maxlen: 24 82.145.102.0/23 maxlen: 24 82.145.104.0/21 maxlen: 24 82.145.112.0/20 maxlen: 24 194.79.192.0/19 maxlen: 19 194.79.192.0/20 maxlen: 20 194.79.207.0/24 maxlen: 24 194.79.208.0/20 maxlen: 20 194.183.0.0/19 maxlen: 19 194.183.16.0/24 maxlen: 24 195.94.128.0/18 maxlen: 18 195.94.152.0/24 maxlen: 24 195.94.160.0/24 maxlen: 24 195.250.224.0/19 maxlen: 19 195.250.224.0/24 maxlen: 24 195.250.232.0/24 maxlen: 24 213.233.0.0/18 maxlen: 18 213.233.0.0/19 maxlen: 19 213.233.27.0/24 maxlen: 24 213.233.32.0/19 maxlen: 19 213.233.36.0/24 maxlen: 24 217.72.96.0/20 maxlen: 20 2a02:688::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3e:fd:01:2a:b2:4a:75:e3:ae:1d:6d:ea:17:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f255108ad8dd47de112f5772fe8fedf1666c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:8a:cd:77:cf:64:b7:1a:31:ae:1e:65:57: 09:16:09:b2:6d:a4:cc:1f:fe:57:a0:f0:53:52:2b: ff:9c:5d:a7:05:4a:6f:a1:1e:75:99:e4:e1:c1:dc: 66:8a:a3:37:67:67:29:1a:e1:b1:f4:a5:f0:8e:4d: 7d:ce:c2:c3:31:87:50:c2:df:3d:89:d6:93:db:7c: 2c:90:4d:5e:2d:96:ef:d1:af:93:4e:ed:9e:71:51: c2:3b:e8:60:47:24:1a:53:e0:1b:98:96:b3:68:25: ee:83:8b:2a:61:d5:10:de:66:8e:a0:12:25:d9:2e: 2f:bf:d5:de:17:7f:3d:61:b0:ef:d7:ef:77:55:cb: fa:80:92:36:6c:a0:4a:b1:48:e3:a1:62:fd:96:47: 22:23:52:55:d6:73:15:30:d0:01:88:d3:e7:41:ee: 7b:f8:60:3a:78:61:5b:3f:17:fa:69:8b:ba:d2:06: df:53:86:7f:7f:9c:ed:3b:6e:40:d5:0c:81:c1:77: bd:3e:97:03:21:61:ab:b8:3e:8c:39:b3:79:51:80: 07:c6:3e:af:60:1d:5f:c1:3d:f6:b5:67:3a:ec:6e: ed:b3:ea:fb:76:1e:78:e8:7f:07:ea:b1:a9:e3:8f: 0f:19:cd:0d:1f:91:79:5e:68:8b:99:8d:5c:1f:e2: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:55:10:8A:D8:DD:47:DE:11:2F:57:72:FE:8F:ED:F1:66:6C:66 X509v3 Authority Key Identifier: keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/NPJVEIrY3UfeES9Xcv6P7fFmbGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.39.160.0/19 77.39.224.0/19 81.29.180.0-81.29.191.255 82.145.96.0/23 82.145.102.0-82.145.127.255 194.79.192.0/19 194.183.0.0/19 195.94.128.0/18 195.250.224.0/19 213.233.0.0/18 217.72.96.0/20 IPv6: 2a02:688::/32 Signature Algorithm: sha256WithRSAEncryption 84:1b:40:99:e0:8d:99:fb:72:84:e9:f0:d4:d5:f6:b7:e4:df: 93:85:73:e4:c0:22:9c:74:2b:38:be:06:44:8b:72:eb:e9:f6: 27:7c:f4:61:38:9d:2d:4f:f9:d4:a4:9c:85:6a:aa:55:27:0e: a0:6c:8e:a9:38:21:1d:80:9f:cb:2d:8c:d9:27:d5:e7:cd:83: ea:58:b9:53:a4:39:c5:3a:6c:df:88:62:c1:1d:16:38:d0:a6: f2:a8:ee:52:65:83:dd:b9:80:e8:aa:d2:73:a1:6b:2e:32:82: d6:55:27:10:17:98:9e:aa:2d:f6:e9:94:b6:c8:22:dc:5b:74: da:28:72:94:81:93:7c:f6:6a:77:27:0a:13:88:07:27:3a:ee: e3:83:cb:0f:d1:7c:a1:15:26:ec:c7:e6:2d:ab:70:e9:99:35: a0:d0:cd:8c:76:f9:9d:4b:ac:59:fc:86:99:e9:48:25:2f:7b: 68:7c:c8:20:d7:1a:dd:2b:46:b7:f6:bb:6d:e1:01:af:0b:74: 71:00:80:ee:83:cf:7a:d2:6b:95:d3:52:e8:76:23:ee:76:3a: 00:78:01:f9:b1:87:f1:6c:55:b1:98:eb:e9:7f:a1:b3:0c:8f: da:06:37:18:5f:7f:c8:5b:da:e6:45:2e:92:27:fb:ec:86:cd: ce:21:05:b7 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt6Wz79ASqySnXjrh1t6helMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2I1MGU3OGEzYTMxZTMzNzVjZjJhYWI4NjVlODQ1ZmYy ZTk5YzEwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGYyNTUxMDhhZDhkZDQ3ZGUxMTJmNTc3MmZlOGZlZGYxNjY2YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qKzXfPZLcaMa4eZVcJFgmybaTM H/5XoPBTUiv/nF2nBUpvoR51meThwdxmiqM3Z2cpGuGx9KXwjk19zsLDMYdQwt89 idaT23wskE1eLZbv0a+TTu2ecVHCO+hgRyQaU+AbmJazaCXug4sqYdUQ3maOoBIl 2S4vv9XeF389YbDv1+93Vcv6gJI2bKBKsUjjoWL9lkciI1JV1nMVMNABiNPnQe57 +GA6eGFbPxf6aYu60gbfU4Z/f5ztO25A1QyBwXe9PpcDIWGruD6MObN5UYAHxj6v YB1fwT32tWc67G7ts+r7dh546H8H6rGp448PGc0NH5F5XmiLmY1cH+KBZQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFDTyVRCK2N1H3hEvV3L+j+3xZmxmMB8GA1UdIwQY MBaAFKTLUOeKOjHjN1zyqrhl6EX/LpnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMt NGJlNzk0ZDY0MDZkLzEvTlBKVkVJclkzVWZlRVM5WGN2NlA3ZkZtYkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMtNGJlNzk0ZDY0MDZk LzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQFTSegAwQF TSfgMAwDBAJRHbQDBAZRHYADBAFSkWAwDAMEAVKRZgMEB1KRAAMEBcJPwAMEBcK3 AAMEBsNegAMEBcP64AMEBtXpAAMEBNlIYDANBAIAAjAHAwUAKgIGiDANBgkqhkiG 9w0BAQsFAAOCAQEAhBtAmeCNmftyhOnw1NX2t+Tfk4Vz5MAinHQrOL4GRIty6+n2 J3z0YTidLU/51KSchWqqVScOoGyOqTghHYCfyy2M2SfV582D6li5U6Q5xTps34hi wR0WONCm8qjuUmWD3bmA6KrSc6FrLjKC1lUnEBeYnqot9umUtsgi3Ft02ihylIGT fPZqdycKE4gHJzru44PLD9F8oRUm7MfmLatw6Zk1oNDNjHb5nUusWfyGmelIJS97 aHzIINca3StGt/a7beEBrwt0cQCA7oPPetJrldNS6HYj7nY6AHgB+bGH8WxVsZjr 6X+hswyP2gY3GF9/yFva5kUukif77IbNziEFtw== -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:22 2026 by rpki-client