This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/NF_ZJXamVG-MCa_q4NzRMxK6B08.roa File: NF_ZJXamVG-MCa_q4NzRMxK6B08.roa (raw, json) Hash identifier: BEU1FyfqqI6VaL+KOpo/X80Gj2W8UWl6HtfuD6fI7nE= Subject key identifier: 34:5F:D9:25:76:A6:54:6F:8C:09:AF:EA:E0:DC:D1:33:12:BA:07:4F Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b Certificate serial: 019B7DCA55031E9C47858B0B86321517BCE8 Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/NF_ZJXamVG-MCa_q4NzRMxK6B08.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 88.214.4.0/22 maxlen: 22 217.197.128.0/21 maxlen: 21 2a03:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:55:03:1e:9c:47:85:8b:0b:86:32:15:17:bc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=345fd92576a6546f8c09afeae0dcd13312ba074f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:ab:aa:12:a4:fe:da:28:ed:64:a5:bb:d7: 15:d1:34:37:66:e7:06:94:12:bb:14:a1:8e:d2:ea: af:11:39:7c:93:88:ef:68:17:ee:23:cd:4e:d1:1a: 73:c7:2b:4b:c7:5a:6f:c5:60:5e:c7:44:80:a9:9e: 4a:f3:77:2d:78:57:60:f0:32:23:c2:8b:36:a5:5d: 3b:82:a2:91:db:6a:2a:c8:ca:bb:ee:c1:cc:b8:71: 6a:d6:c8:19:7a:7d:19:4e:21:e5:9b:c7:05:c5:b6: 5a:3c:b8:63:8e:16:f2:3d:8f:37:e7:ab:68:8d:44: 8f:0f:e5:f9:05:ce:4c:c1:3b:f2:06:b1:79:f1:10: 24:e3:2d:fc:0e:a5:89:29:d6:82:1d:0e:06:85:72: 3f:e7:91:8b:e4:c9:85:98:71:0e:62:c6:7b:ad:91: 5f:93:49:76:e9:cc:8e:9a:db:da:84:5d:54:9e:16: 5f:5f:88:10:0e:6e:10:50:a9:c2:75:fc:b6:d4:75: b7:14:7f:d7:84:ec:30:af:e4:ed:a7:d1:f1:83:50: 92:0f:34:48:c7:31:4c:9a:08:0e:08:f4:03:94:cd: f2:8f:83:9e:7b:d8:ef:4b:6b:75:c5:68:9e:a5:a6: 28:93:6d:e8:02:9a:c2:d6:14:fc:4e:3c:e6:ca:46: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:D9:25:76:A6:54:6F:8C:09:AF:EA:E0:DC:D1:33:12:BA:07:4F X509v3 Authority Key Identifier: keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/NF_ZJXamVG-MCa_q4NzRMxK6B08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.4.0/22 217.197.128.0/21 IPv6: 2a03:580::/32 Signature Algorithm: sha256WithRSAEncryption 51:b6:f0:1c:d7:27:62:b2:d4:ad:b5:10:8b:5f:4d:b1:7e:87: ee:3c:ed:00:72:2c:0e:20:46:f7:eb:d7:ef:6b:f7:f8:70:5c: c0:05:eb:f8:e7:de:4c:b1:23:01:be:09:29:4e:1e:76:bf:41: 08:cc:03:bd:29:b5:3e:be:76:8f:27:93:39:7c:65:cf:d5:d7: 8d:ec:b5:73:c7:d8:d8:19:26:7a:42:6f:3c:a6:6c:ab:ac:fa: 80:b3:84:ba:cd:b3:58:d8:5b:4d:9d:3e:c5:96:d9:31:b1:08: 96:5f:8d:16:4a:8f:1a:ac:2a:80:3a:6e:14:f7:10:4f:91:a1: 88:da:f2:96:a5:5a:03:f0:a0:63:e4:88:6c:dc:85:68:ae:c7: df:fa:d2:fa:f3:68:13:c9:98:3e:e0:1d:b5:bd:17:71:20:a0: 82:98:13:fe:17:fd:fb:e0:5c:f3:03:37:a2:a8:0c:7a:71:71: 6b:a9:2b:04:f9:fc:41:2e:76:c4:9a:f9:40:84:8b:6b:fa:09: 16:5f:e6:d0:83:d3:99:5e:45:22:1a:64:b8:14:34:05:49:f2: d7:0a:fc:45:d4:b3:92:ac:9c:c4:f1:15:e5:9e:16:8a:98:b3: a7:c8:fb:76:2a:fc:d4:a8:6c:89:7b:55:1f:50:64:ca:f2:b0: 0d:7c:51:5e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ylUDHpxHhYsLhjIVF7zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw MjQzMmIwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDVmZDkyNTc2YTY1NDZmOGMwOWFmZWFlMGRjZDEzMzEyYmEwNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WrqhKk/too7WSlu9cV0TQ3ZucG lBK7FKGO0uqvETl8k4jvaBfuI81O0RpzxytLx1pvxWBex0SAqZ5K83cteFdg8DIj wos2pV07gqKR22oqyMq77sHMuHFq1sgZen0ZTiHlm8cFxbZaPLhjjhbyPY8356to jUSPD+X5Bc5MwTvyBrF58RAk4y38DqWJKdaCHQ4GhXI/55GL5MmFmHEOYsZ7rZFf k0l26cyOmtvahF1UnhZfX4gQDm4QUKnCdfy21HW3FH/XhOwwr+Ttp9Hxg1CSDzRI xzFMmggOCPQDlM3yj4Oee9jvS2t1xWiepaYok23oAprC1hT8TjzmykbJ8wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDRf2SV2plRvjAmv6uDc0TMSugdPMB8GA1UdIwQY MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt YzhjZWFiOGJjMDUwLzEvTkZfWkpYYW1WRy1NQ2FfcTROelJNeEs2QjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWNYEAwQD 2cWAMA0EAgACMAcDBQAqAwWAMA0GCSqGSIb3DQEBCwUAA4IBAQBRtvAc1ydistSt tRCLX02xfofuPO0AciwOIEb369fva/f4cFzABev4595MsSMBvgkpTh52v0EIzAO9 KbU+vnaPJ5M5fGXP1deN7LVzx9jYGSZ6Qm88pmyrrPqAs4S6zbNY2FtNnT7Fltkx sQiWX40WSo8arCqAOm4U9xBPkaGI2vKWpVoD8KBj5Ihs3IVorsff+tL682gTyZg+ 4B21vRdxIKCCmBP+F/374FzzAzeiqAx6cXFrqSsE+fxBLnbEmvlAhItr+gkWX+bQ g9OZXkUiGmS4FDQFSfLXCvxF1LOSrJzE8RXlnhaKmLOnyPt2KvzUqGyJe1UfUGTK 8rANfFFe -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client