This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nfiTo4QevUPGdzaI7fi_jgLbp6g.roa File: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (raw, json) Hash identifier: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4= Subject key identifier: 9D:F8:93:A3:84:1E:BD:43:C6:77:36:88:ED:F8:BF:8E:02:DB:A7:A8 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19690E1EA596F3FE106FFA28AD9A8 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nfiTo4QevUPGdzaI7fi_jgLbp6g.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201871 IP address blocks: 212.80.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:96:90:e1:ea:59:6f:3f:e1:06:ff:a2:8a:d9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9df893a3841ebd43c6773688edf8bf8e02dba7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:15:eb:1e:bc:8d:24:41:5e:f8:6e:03:27: c9:52:50:f4:64:3d:f6:12:03:ed:14:29:b3:56:54: c5:26:e3:23:17:2e:00:7a:3e:4d:1e:d9:5a:78:e6: f3:96:f4:e9:82:e8:75:3e:13:67:75:7a:bb:d1:a3: b5:59:b5:b5:cc:28:6f:d9:79:d6:03:4c:90:f7:cf: 60:c8:27:f0:86:67:a0:a2:6c:03:62:ba:4d:ad:97: e7:f4:78:5c:4d:18:ca:2f:ab:1b:7d:75:8c:24:ba: 75:9f:9c:06:fa:8f:40:95:5d:df:58:1b:66:78:d3: 18:a5:58:15:b9:e1:c6:66:0e:05:cc:83:65:ed:2a: 63:e1:ef:22:2d:61:49:4c:56:fd:cc:39:6b:90:e9: 3b:10:4a:11:53:e3:0e:f2:ba:6a:a2:f4:22:00:e1: 70:f5:4f:2c:37:8d:c7:25:01:c1:cb:f0:a3:e2:fb: d1:17:6b:05:07:0f:f5:44:d9:8b:a7:5b:c8:ab:ba: 5e:2f:2b:97:00:c7:b7:65:7d:4a:2a:4f:50:2f:c8: b1:b3:8e:29:25:6d:1b:7d:2c:81:34:62:bd:87:ec: f1:7e:38:9b:2a:af:0b:9f:d1:83:23:7f:78:79:67: fb:7d:e5:11:7c:34:c6:95:f9:58:a8:d0:e2:ad:05: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F8:93:A3:84:1E:BD:43:C6:77:36:88:ED:F8:BF:8E:02:DB:A7:A8 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nfiTo4QevUPGdzaI7fi_jgLbp6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.80.4.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:19:7b:b6:3f:e7:69:c7:2f:c6:f0:6e:d3:49:af:c2:1b:84: 73:e0:16:a5:70:43:e7:69:be:b7:d4:5a:d8:e1:6c:a9:c0:5f: 96:8d:1d:2f:e8:03:2f:fe:77:4e:64:69:39:49:80:e1:5f:8b: c3:58:f7:96:9f:6d:38:9b:11:6a:57:d5:5e:2c:75:e9:66:60: a8:7c:5f:30:fc:b2:5c:aa:21:d4:b2:0b:8c:04:3c:0f:4f:91: f7:93:18:d7:ba:0a:e9:75:5d:63:a7:04:59:4b:cf:f3:06:18: 99:d0:a1:7b:f8:24:bc:b9:0a:46:dc:47:b0:a3:98:51:29:51: f4:93:b6:4c:94:4d:af:84:e5:15:f8:f8:68:af:c3:77:68:ff: 4c:d0:ca:ef:4a:a3:42:88:43:4f:bd:b2:1d:eb:a9:54:8d:ca: dc:0e:05:f3:48:32:23:e3:30:11:57:eb:5c:33:90:25:46:e9: bb:4a:f3:05:59:46:33:94:ad:90:56:2a:60:01:59:ed:a0:1a: 7e:8e:e7:31:ce:1c:6d:15:dc:f6:2f:88:0f:53:15:56:46:65: 73:e8:33:7c:76:9d:4a:f6:c5:94:e7:2f:1a:25:53:97:62:cc: 24:b5:ff:e2:c0:74:e6:28:6a:0d:fd:f4:0a:d7:09:a8:7f:dc: 11:5f:85:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ZaQ4epZbz/hBv+iitmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGY4OTNhMzg0MWViZDQzYzY3NzM2ODhlZGY4YmY4ZTAyZGJhN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+gV6x68jSRBXvhuAyfJUlD0ZD32 EgPtFCmzVlTFJuMjFy4Aej5NHtlaeObzlvTpguh1PhNndXq70aO1WbW1zChv2XnW A0yQ989gyCfwhmegomwDYrpNrZfn9HhcTRjKL6sbfXWMJLp1n5wG+o9AlV3fWBtm eNMYpVgVueHGZg4FzINl7Spj4e8iLWFJTFb9zDlrkOk7EEoRU+MO8rpqovQiAOFw 9U8sN43HJQHBy/Cj4vvRF2sFBw/1RNmLp1vIq7peLyuXAMe3ZX1KKk9QL8ixs44p JW0bfSyBNGK9h+zxfjibKq8Ln9GDI394eWf7feURfDTGlflYqNDirQUt+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ34k6OEHr1Dxnc2iO34v44C26eoMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvbmZpVG80UWV2VVBHZHphSTdmaV9qZ0xicDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAEMA0G CSqGSIb3DQEBCwUAA4IBAQCMGXu2P+dpxy/G8G7TSa/CG4Rz4BalcEPnab631FrY 4WypwF+WjR0v6AMv/ndOZGk5SYDhX4vDWPeWn204mxFqV9VeLHXpZmCofF8w/LJc qiHUsguMBDwPT5H3kxjXugrpdV1jpwRZS8/zBhiZ0KF7+CS8uQpG3Eewo5hRKVH0 k7ZMlE2vhOUV+Phor8N3aP9M0MrvSqNCiENPvbId66lUjcrcDgXzSDIj4zARV+tc M5AlRum7SvMFWUYzlK2QVipgAVntoBp+jucxzhxtFdz2L4gPUxVWRmVz6DN8dp1K 9sWU5y8aJVOXYswktf/iwHTmKGoN/fQK1wmof9wRX4WH -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:37 2026 by rpki-client