This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwU7t7GRH7SIi43YikZQ4ARFcA.roa File: nqwU7t7GRH7SIi43YikZQ4ARFcA.roa (raw, json) Hash identifier: YKhLPcPYQ5OIMU2nVG03lW6vhAzxpWYoPgH/4uOGF/A= Subject key identifier: 9E:AC:14:EE:DE:C6:44:7E:D2:22:2E:37:62:29:19:43:80:11:15:C0 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B9E283BF35B00D76DC5271E86657863EA Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwU7t7GRH7SIi43YikZQ4ARFcA.roa Signing time: Thu 08 Jan 2026 15:09:55 +0000 ROA not before: Thu 08 Jan 2026 15:09:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35994 IP address blocks: 80.67.67.0/24 maxlen: 24 80.67.75.0/24 maxlen: 24 80.67.80.0/24 maxlen: 24 95.101.143.0/24 maxlen: 24 193.108.155.0/24 maxlen: 24 195.245.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:28:3b:f3:5b:00:d7:6d:c5:27:1e:86:65:78:63:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 8 15:09:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eac14eedec6447ed2222e3762291943801115c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:35:4d:5d:86:99:10:f8:87:40:d3:81:45: 52:ed:46:d9:ff:04:1e:ef:8d:af:ee:d3:c1:eb:d0: 24:8c:f9:ae:98:13:bb:0d:95:07:95:a8:6d:3a:e9: 4f:8d:df:b0:b9:18:84:3b:54:a6:65:52:2b:3f:cd: ad:2f:5d:ce:02:b3:db:1d:74:e2:43:7d:0f:98:1f: 1c:51:4e:62:0e:3b:35:ad:77:34:22:ce:82:f1:ff: bf:b0:07:cd:f7:80:89:fb:b2:98:01:21:2a:1c:d0: 21:e3:bb:37:ea:ba:77:b7:b3:4b:e0:ef:e3:d3:82: 28:65:d8:92:ca:75:ab:ea:ab:fe:a4:61:9c:8d:50: 3c:d8:17:ab:1e:9f:ba:2d:b3:ed:b6:5a:dd:00:f9: 23:1e:80:59:78:ed:91:90:12:ec:d7:4d:07:4f:54: 1c:0e:c2:ba:28:13:9a:da:32:c0:05:00:fc:f8:4f: a9:27:e4:57:be:59:16:69:d5:a3:b2:8a:ee:ac:db: b7:0d:26:d9:d1:d8:08:83:4d:3e:a2:3c:e2:4a:a8: c4:d4:63:c5:ea:99:af:c7:79:2c:0e:cf:63:40:08: 6b:a0:d3:f3:be:2b:44:cc:e5:93:5a:00:67:b4:74: 84:b8:44:79:1b:37:f3:73:f2:01:a3:16:8b:ed:f1: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AC:14:EE:DE:C6:44:7E:D2:22:2E:37:62:29:19:43:80:11:15:C0 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwU7t7GRH7SIi43YikZQ4ARFcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.67.67.0/24 80.67.75.0/24 80.67.80.0/24 95.101.143.0/24 193.108.155.0/24 195.245.124.0/24 Signature Algorithm: sha256WithRSAEncryption a3:60:6e:ab:69:0c:ce:26:47:12:29:6f:da:a4:cc:a5:90:ef: 4e:e1:4b:99:d4:4d:d0:97:37:15:08:03:9d:03:48:10:07:76: 4b:87:d6:50:58:cd:0e:21:82:cf:60:e6:3d:ee:1e:b1:4a:71: a7:59:c7:7d:bb:4a:33:3c:67:13:fd:6e:fa:61:ef:4c:88:d6: 2f:5b:77:41:b7:37:b5:01:de:a0:8e:ef:ea:e2:3a:f2:49:a2: 94:a9:5a:a9:06:a9:a1:80:67:fd:05:05:ef:74:ea:0b:6d:83: 5a:71:20:fb:c5:d0:ff:e7:f5:e2:b2:ab:e1:fb:b6:80:bc:9b: 2e:50:42:7a:f3:1f:6f:db:c4:49:73:83:e1:3d:79:71:52:5f: 6c:48:e4:3e:fe:eb:4e:21:da:94:f7:5c:1d:be:c9:53:62:d4: 7f:cf:0f:b9:75:a2:73:92:e5:2e:cd:b1:98:95:97:3b:2c:03: 03:d4:41:8b:d2:9f:dc:54:8f:54:9a:18:f1:fa:12:99:75:12: 38:d9:18:8e:7e:66:83:3e:be:e6:22:81:36:41:6a:c2:e2:4c: 9b:13:b7:7c:87:ff:29:2a:68:d2:d7:43:be:7b:e2:3f:58:6a: f4:3a:aa:b9:a8:32:7a:a0:89:65:22:2f:74:b5:cf:ef:82:20: db:75:c8:4f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZueKDvzWwDXbcUnHoZleGPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTA4MTUwOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWFjMTRlZWRlYzY0NDdlZDIyMjJlMzc2MjI5MTk0MzgwMTExNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysE1TV2GmRD4h0DTgUVS7UbZ/wQe 742v7tPB69AkjPmumBO7DZUHlahtOulPjd+wuRiEO1SmZVIrP82tL13OArPbHXTi Q30PmB8cUU5iDjs1rXc0Is6C8f+/sAfN94CJ+7KYASEqHNAh47s36rp3t7NL4O/j 04IoZdiSynWr6qv+pGGcjVA82BerHp+6LbPttlrdAPkjHoBZeO2RkBLs100HT1Qc DsK6KBOa2jLABQD8+E+pJ+RXvlkWadWjsorurNu3DSbZ0dgIg00+ojziSqjE1GPF 6pmvx3ksDs9jQAhroNPzvitEzOWTWgBntHSEuER5Gzfzc/IBoxaL7fGLDQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJ6sFO7exkR+0iIuN2IpGUOAERXAMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvbnF3VTd0N0dSSDdTSWk0M1lpa1pRNEFSRmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUENDAwQA UENLAwQAUENQAwQAX2WPAwQAwWybAwQAw/V8MA0GCSqGSIb3DQEBCwUAA4IBAQCj YG6raQzOJkcSKW/apMylkO9O4UuZ1E3QlzcVCAOdA0gQB3ZLh9ZQWM0OIYLPYOY9 7h6xSnGnWcd9u0ozPGcT/W76Ye9MiNYvW3dBtze1Ad6gju/q4jrySaKUqVqpBqmh gGf9BQXvdOoLbYNacSD7xdD/5/Xisqvh+7aAvJsuUEJ68x9v28RJc4PhPXlxUl9s SOQ+/utOIdqU91wdvslTYtR/zw+5daJzkuUuzbGYlZc7LAMD1EGL0p/cVI9Umhjx +hKZdRI42RiOfmaDPr7mIoE2QWrC4kybE7d8h/8pKmjS10O+e+I/WGr0Oqq5qDJ6 oIllIi90tc/vgiDbdchP -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:41 2026 by rpki-client