This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/nnLnTcVXO544vHFcYVwBAQxMeQo.roa File: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (raw, json) Hash identifier: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY= Subject key identifier: 9E:72:E7:4D:C5:57:3B:9E:38:BC:71:5C:61:5C:01:01:0C:4C:79:0A Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Certificate serial: 019B7A5B61C46A4ECC382409AD3E3A33AC42 Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/nnLnTcVXO544vHFcYVwBAQxMeQo.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57811 IP address blocks: 185.73.210.0/24 maxlen: 24 185.73.211.0/24 maxlen: 24 188.64.80.0/23 maxlen: 23 188.64.82.0/24 maxlen: 24 188.64.83.0/24 maxlen: 24 188.64.84.0/24 maxlen: 24 188.64.85.0/24 maxlen: 24 188.64.86.0/24 maxlen: 24 188.64.87.0/24 maxlen: 24 2a00:8dc0::/32 maxlen: 48 2a00:8dc0::/40 maxlen: 40 2a00:8dc0:1000::/40 maxlen: 40 2a00:8dc0:1100::/40 maxlen: 40 2a00:8dc0:1200::/40 maxlen: 40 2a00:8dc0:1300::/40 maxlen: 40 2a00:8dc0:1400::/40 maxlen: 40 2a00:8dc0:1600::/40 maxlen: 40 2a00:8dc0:1700::/40 maxlen: 40 2a00:8dc0:1a00::/40 maxlen: 40 2a00:8dc0:1b00::/40 maxlen: 40 2a00:8dc0:aa00::/48 maxlen: 48 2a00:8dc0:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:61:c4:6a:4e:cc:38:24:09:ad:3e:3a:33:ac:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e72e74dc5573b9e38bc715c615c01010c4c790a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:80:64:d6:fa:7a:53:d9:97:a9:89:5e:64: d3:73:9d:34:32:47:b1:4b:a6:64:ca:56:1b:75:ab: 2f:86:70:cb:82:b6:fd:5b:3e:71:23:fd:01:95:e6: 4c:f5:6d:51:e7:6f:10:7f:61:08:2b:15:7c:82:24: 51:3c:9c:cb:31:f5:1a:f1:46:06:7a:b5:f6:f5:64: c1:9b:d9:ce:1c:69:64:5c:f5:44:60:fb:83:fe:d8: da:87:34:2f:dc:7f:9b:9f:d4:10:9b:0c:b1:f5:51: da:13:a4:1b:35:70:ae:f2:bd:37:56:b2:da:aa:70: 4d:72:6d:1b:70:53:a1:cb:c5:1f:61:2e:db:b4:ed: 30:37:2b:ec:90:59:8d:ad:7f:85:e5:ae:39:cd:f4: e5:b2:48:7d:96:1b:59:b2:7f:ea:ab:3b:88:49:91: 82:84:21:e9:fb:ab:5e:7e:e8:c3:1e:a5:75:37:62: 70:2d:4c:1d:d7:40:01:dd:da:59:8c:4c:49:a0:06: 77:06:14:9f:0e:b2:6e:59:89:da:46:d7:47:86:40: cf:d0:6c:66:0e:6a:71:52:db:a2:c4:e1:32:2f:67: 02:da:61:86:04:2f:1e:e1:16:3f:5c:2e:03:48:06: 6f:32:47:38:21:57:e2:cb:dc:1d:ab:aa:39:05:ac: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:E7:4D:C5:57:3B:9E:38:BC:71:5C:61:5C:01:01:0C:4C:79:0A X509v3 Authority Key Identifier: keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/nnLnTcVXO544vHFcYVwBAQxMeQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.210.0/23 188.64.80.0/21 IPv6: 2a00:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 72:b8:93:d9:7b:fd:63:24:11:33:39:bf:2c:39:62:cc:88:bd: 1f:e5:6f:de:88:ec:d5:c9:6b:ed:29:27:68:9d:03:30:70:4f: 32:d1:a6:4b:bf:5e:3f:96:bd:5b:b7:9d:83:dd:02:74:07:29: 1f:ad:b7:9a:8c:2b:ec:5a:56:af:78:93:a9:15:8a:60:b8:90: bc:94:01:d6:cf:01:d2:78:37:3e:8f:5d:c1:e7:16:c3:8d:9b: 22:4c:74:ae:3f:ec:65:b6:eb:e1:a7:23:71:a3:84:e8:7d:24: 8e:8c:45:d0:94:db:d9:7b:e0:78:71:fb:75:67:77:a3:67:ba: d6:78:87:1a:38:25:dc:01:cc:ac:01:34:d2:86:44:25:b9:5d: 72:d5:af:34:f5:94:64:1a:72:ad:71:95:f2:f8:16:eb:ff:d2: 2b:f7:38:3e:34:d1:55:f8:b9:55:0c:11:48:fb:2c:61:f8:08: 9f:e9:93:5e:7c:55:c4:96:8f:ec:a4:0a:b6:0f:64:80:fa:04: 48:4f:4d:f2:4e:7f:41:4f:55:21:2e:ed:4c:ad:79:c9:63:23: 88:e8:a5:78:94:d2:fe:50:22:99:68:db:03:37:35:cb:0d:58: 47:6b:f7:d7:c7:2e:34:ec:37:b1:bb:f7:bf:8f:3f:1a:d3:46: e3:0e:5c:1b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W2HEak7MOCQJrT46M6xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm NThiZTUwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTcyZTc0ZGM1NTczYjllMzhiYzcxNWM2MTVjMDEwMTBjNGM3OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwumAZNb6elPZl6mJXmTTc500Mkex S6ZkylYbdasvhnDLgrb9Wz5xI/0BleZM9W1R528Qf2EIKxV8giRRPJzLMfUa8UYG erX29WTBm9nOHGlkXPVEYPuD/tjahzQv3H+bn9QQmwyx9VHaE6QbNXCu8r03VrLa qnBNcm0bcFOhy8UfYS7btO0wNyvskFmNrX+F5a45zfTlskh9lhtZsn/qqzuISZGC hCHp+6tefujDHqV1N2JwLUwd10AB3dpZjExJoAZ3BhSfDrJuWYnaRtdHhkDP0Gxm DmpxUtuixOEyL2cC2mGGBC8e4RY/XC4DSAZvMkc4IVfiy9wdq6o5Baw4nwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ5y503FVzueOLxxXGFcAQEMTHkKMB8GA1UdIwQY MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt YWIxYTg3ZWNkZjFiLzEvbm5MblRjVlhPNTQ0dkhGY1lWd0JBUXhNZVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuUnSAwQD vEBQMA0EAgACMAcDBQAqAI3AMA0GCSqGSIb3DQEBCwUAA4IBAQByuJPZe/1jJBEz Ob8sOWLMiL0f5W/eiOzVyWvtKSdonQMwcE8y0aZLv14/lr1bt52D3QJ0Bykfrbea jCvsWlaveJOpFYpguJC8lAHWzwHSeDc+j13B5xbDjZsiTHSuP+xltuvhpyNxo4To fSSOjEXQlNvZe+B4cft1Z3ejZ7rWeIcaOCXcAcysATTShkQluV1y1a809ZRkGnKt cZXy+Bbr/9Ir9zg+NNFV+LlVDBFI+yxh+Aif6ZNefFXElo/spAq2D2SA+gRIT03y Tn9BT1UhLu1MrXnJYyOI6KV4lNL+UCKZaNsDNzXLDVhHa/fXxy407Dexu/e/jz8a 00bjDlwb -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:14 2026 by rpki-client