This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/NIC6FPNA-Rut56ZtIFRnSurvICQ.roa File: NIC6FPNA-Rut56ZtIFRnSurvICQ.roa (raw, json) Hash identifier: 5L/3wMgmUEy2dfrMAgnd99xnHhW/Bj+jZ1MWwhBuJc8= Subject key identifier: 34:80:BA:14:F3:40:F9:1B:AD:E7:A6:6D:20:54:67:4A:EA:EF:20:24 Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f Certificate serial: 019B79ED49D31DAA2E051CBEFB42A1D272B5 Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/NIC6FPNA-Rut56ZtIFRnSurvICQ.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57332 IP address blocks: 5.206.240.0/20 maxlen: 20 45.85.8.0/22 maxlen: 22 159.255.176.0/20 maxlen: 20 159.255.180.0/23 maxlen: 23 159.255.186.0/24 maxlen: 24 159.255.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:49:d3:1d:aa:2e:05:1c:be:fb:42:a1:d2:72:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3480ba14f340f91bade7a66d2054674aeaef2024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:e3:fc:3b:e5:03:df:fa:39:9b:6c:14:5b: a0:8b:43:6f:e8:ce:f8:ae:6d:21:5f:46:8d:6d:6b: cc:54:b2:40:33:06:2e:32:83:6b:be:cf:d4:ae:45: 3a:5c:fb:57:34:fb:fa:46:dc:da:03:bd:e4:21:84: 0a:77:3f:89:d1:81:db:49:e7:f6:0b:08:52:46:24: 5c:6d:8f:27:ef:6a:47:15:6e:8d:6c:0c:f3:c3:bd: 4e:2f:d1:8f:3c:3c:74:b3:7a:98:7f:05:63:13:ee: 5d:1e:bf:f4:ed:03:8e:b3:25:3d:f4:8a:32:8d:9c: aa:a1:cc:20:73:8b:3d:d7:5a:08:e3:7b:37:b9:27: eb:9a:6e:0f:36:f8:68:1f:b3:0d:b2:3c:55:36:63: db:88:7f:06:e0:36:b2:a4:f4:3f:0a:cc:0c:6d:e3: ed:ac:00:1e:78:96:cb:e1:5e:bf:22:e9:c2:5a:bc: 9f:ba:5e:8e:60:c5:e0:52:56:5e:02:43:77:e1:96: 76:2e:ff:24:27:08:06:40:03:fd:52:57:10:17:6a: 69:82:e5:a7:3e:ac:6d:0b:d5:10:60:4f:a4:a1:c9: 9d:fb:5d:39:03:6d:83:55:85:37:d7:4a:86:ca:2b: 06:52:7b:35:43:f7:00:51:e9:6a:f6:17:a6:97:aa: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:80:BA:14:F3:40:F9:1B:AD:E7:A6:6D:20:54:67:4A:EA:EF:20:24 X509v3 Authority Key Identifier: keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/NIC6FPNA-Rut56ZtIFRnSurvICQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.240.0/20 45.85.8.0/22 159.255.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:b5:8e:af:51:1b:c6:8f:f8:84:fb:68:03:f0:c1:1d:7b:16: 8a:35:9d:52:ff:6e:6a:92:ae:54:82:5d:c1:02:24:22:0e:39: 94:10:16:ea:db:5e:33:17:58:68:85:26:4b:fb:f8:df:53:b2: 51:77:50:48:fd:c2:ce:24:3e:24:80:2e:e4:be:9e:6f:74:e2: 28:e9:29:13:63:00:ce:60:f4:03:84:43:61:98:7c:6c:b3:c3: a0:2f:47:e1:2b:37:0c:6e:10:22:cd:a8:f7:d8:21:8d:fa:b2: 5b:29:8f:ef:6c:2c:b3:e6:22:fa:bf:c2:7d:af:db:ad:9d:a8: a1:f2:6b:47:c2:65:f6:da:62:11:67:ff:15:8b:65:91:95:ff: cf:d6:db:1b:0d:04:72:cf:e8:39:e8:56:e9:01:11:76:1f:ee: c4:04:46:83:f8:80:ec:05:b9:47:3e:55:d3:30:ff:fc:bf:f2: 64:40:a3:2d:b5:df:7f:03:7d:25:c7:0f:af:ea:ed:6f:ef:21: 4e:ad:f7:e4:4a:ac:f2:64:9b:ef:1b:19:7a:10:6d:f3:54:05: b5:d7:92:bc:59:38:3e:04:c6:81:7b:d2:81:3b:75:54:c7:78: d3:b0:cc:d2:b3:b8:29:c9:b9:56:05:22:8d:3e:16:a3:79:65: 52:59:e6:6c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57UnTHaouBRy++0Kh0nK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZWVhZWUwODYzZDFkY2E2MjRmNjFmMzliMjE4MWM3ZGI2 Y2JhM2YwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgwYmExNGYzNDBmOTFiYWRlN2E2NmQyMDU0Njc0YWVhZWYyMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Hj/DvlA9/6OZtsFFugi0Nv6M74 rm0hX0aNbWvMVLJAMwYuMoNrvs/UrkU6XPtXNPv6RtzaA73kIYQKdz+J0YHbSef2 CwhSRiRcbY8n72pHFW6NbAzzw71OL9GPPDx0s3qYfwVjE+5dHr/07QOOsyU99Ioy jZyqocwgc4s911oI43s3uSfrmm4PNvhoH7MNsjxVNmPbiH8G4DaypPQ/CswMbePt rAAeeJbL4V6/IunCWryful6OYMXgUlZeAkN34ZZ2Lv8kJwgGQAP9UlcQF2ppguWn PqxtC9UQYE+kocmd+105A22DVYU310qGyisGUns1Q/cAUelq9heml6oVzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDSAuhTzQPkbreembSBUZ0rq7yAkMB8GA1UdIwQY MBaAFAruruCGPR3KYk9h85shgcfbbLo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAt N2ExMDRiODBjZDcxLzEvTklDNkZQTkEtUnV0NTZadElGUm5TdXJ2SUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iNjI4NzgtY2NjOC00ZDU3LTlmZTAtN2ExMDRiODBjZDcx LzEvQ3U2dTRJWTlIY3BpVDJIem15R0J4OXRzdWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBc7wAwQC LVUIAwQEn/+wMA0GCSqGSIb3DQEBCwUAA4IBAQBttY6vURvGj/iE+2gD8MEdexaK NZ1S/25qkq5Ugl3BAiQiDjmUEBbq214zF1hohSZL+/jfU7JRd1BI/cLOJD4kgC7k vp5vdOIo6SkTYwDOYPQDhENhmHxss8OgL0fhKzcMbhAizaj32CGN+rJbKY/vbCyz 5iL6v8J9r9utnaih8mtHwmX22mIRZ/8Vi2WRlf/P1tsbDQRyz+g56FbpARF2H+7E BEaD+IDsBblHPlXTMP/8v/JkQKMttd9/A30lxw+v6u1v7yFOrffkSqzyZJvvGxl6 EG3zVAW115K8WTg+BMaBe9KBO3VUx3jTsMzSs7gpyblWBSKNPhajeWVSWeZs -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:59 2026 by rpki-client