This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa File: nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa (raw, json) Hash identifier: IUqtPA4/rBBGflH10rVAdWMwA0mA9sN2XLQ3y4ih8sQ= Subject key identifier: 9E:B6:60:A9:DD:3A:B6:AD:FE:4E:49:84:F0:6B:D1:08:3D:02:6F:B2 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019C22A1BAF93A1D8D668BA877C2A08FE36C Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa Signing time: Tue 03 Feb 2026 08:32:30 +0000 ROA not before: Tue 03 Feb 2026 08:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 163.62.72.0/21 maxlen: 21 163.62.80.0/22 maxlen: 22 163.62.92.0/22 maxlen: 22 163.62.96.0/21 maxlen: 21 163.62.112.0/22 maxlen: 22 163.62.116.0/24 maxlen: 24 163.62.118.0/23 maxlen: 23 163.62.120.0/21 maxlen: 21 163.62.128.0/23 maxlen: 23 163.62.132.0/22 maxlen: 22 163.62.240.0/20 maxlen: 20 163.114.20.0/22 maxlen: 22 163.116.0.0/21 maxlen: 21 163.116.8.0/22 maxlen: 22 192.54.192.0/23 maxlen: 23 192.196.12.0/23 maxlen: 23 192.196.36.0/22 maxlen: 22 192.196.40.0/22 maxlen: 22 192.196.70.0/23 maxlen: 23 192.196.72.0/23 maxlen: 23 192.196.90.0/23 maxlen: 23 192.196.92.0/23 maxlen: 23 192.196.98.0/23 maxlen: 23 192.196.114.0/23 maxlen: 23 192.196.118.0/23 maxlen: 23 192.196.120.0/22 maxlen: 22 192.196.124.0/23 maxlen: 23 192.196.140.0/22 maxlen: 22 192.196.148.0/23 maxlen: 23 2a00:7e40::/36 maxlen: 36 2a00:7e40:7000::/64 maxlen: 64 2a00:7e40:9ac1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:a1:ba:f9:3a:1d:8d:66:8b:a8:77:c2:a0:8f:e3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Feb 3 08:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eb660a9dd3ab6adfe4e4984f06bd1083d026fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:d9:86:8b:5e:5a:0f:fb:e5:11:45:08:ff: 06:dd:f8:bc:7d:23:5c:1f:fd:b5:41:2a:c8:9b:ed: 46:ee:d1:0d:7c:e5:e4:d8:96:71:7e:41:79:63:b9: 3b:94:9f:e4:b9:dc:f2:d2:d3:57:5f:97:ba:f3:0d: 98:fe:28:e4:7c:d9:cf:a9:e4:0e:84:29:64:11:f3: 2a:eb:09:d4:e0:f0:5e:be:8e:de:21:01:18:c5:a5: bd:28:1e:c0:e7:e4:93:07:57:9c:2c:cb:89:e0:73: 78:82:b4:29:d5:8a:51:0a:b9:8d:df:9c:e2:d5:00: 1f:b4:f4:16:a4:2a:df:2e:d3:d8:ae:4d:2c:8d:f8: 5f:bd:ed:22:43:e2:18:b6:eb:a7:4a:45:e9:c6:8b: 49:bb:78:64:c1:1a:10:90:d8:fc:33:5e:f8:7d:ea: a3:7e:81:15:ba:fb:35:87:cc:ad:75:7f:0d:f7:18: a5:e3:8b:19:70:7f:36:c2:e6:c4:ff:2f:0d:c2:d6: d3:7c:8b:79:99:76:4b:68:ab:6a:bb:b4:77:22:5d: 4c:ff:45:37:b6:4d:fd:00:d9:a1:59:52:c9:ca:4c: 63:e2:fc:fb:d4:0e:3a:39:0b:51:ad:2d:53:08:d6: 9b:a9:dc:6f:26:c1:54:97:f1:b9:46:33:67:9d:65: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B6:60:A9:DD:3A:B6:AD:FE:4E:49:84:F0:6B:D1:08:3D:02:6F:B2 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.62.72.0-163.62.83.255 163.62.92.0-163.62.103.255 163.62.112.0-163.62.116.255 163.62.118.0-163.62.129.255 163.62.132.0/22 163.62.240.0/20 163.114.20.0/22 163.116.0.0-163.116.11.255 192.54.192.0/23 192.196.12.0/23 192.196.36.0-192.196.43.255 192.196.70.0-192.196.73.255 192.196.90.0-192.196.93.255 192.196.98.0/23 192.196.114.0/23 192.196.118.0-192.196.125.255 192.196.140.0/22 192.196.148.0/23 IPv6: 2a00:7e40::/36 2a00:7e40:7000::/64 2a00:7e40:9ac1::/48 Signature Algorithm: sha256WithRSAEncryption 7f:c6:19:9f:bd:72:b2:45:b7:bd:51:0a:f6:48:a3:ec:bd:28: 6d:a1:5a:2b:87:5d:06:4b:a7:da:6a:eb:a2:dd:38:61:4c:c7: 9a:63:ba:21:de:15:ba:90:f3:5d:4d:36:22:66:22:02:cb:3a: ee:1a:14:a0:ca:ab:62:e8:bf:99:24:7c:4c:e1:d8:19:5a:df: 48:b5:1a:91:f0:57:a5:d4:01:65:ed:bf:e2:ab:7f:a8:89:ba: 79:65:9c:ef:46:8c:51:9c:17:a4:34:7d:6c:8f:87:a0:0c:ab: 03:08:95:ae:08:4d:4c:b2:71:0f:47:24:4a:8e:c7:41:f1:76: bb:5e:e4:6e:83:48:67:b7:b8:02:29:59:de:a8:b2:55:fd:ee: 2b:40:db:84:ae:f8:81:d2:7e:ec:71:98:5f:71:a4:1d:2a:2b: fd:b2:1b:00:9c:31:f0:bb:b1:17:a6:8c:2c:4a:72:8a:5a:a5: d3:26:f4:8a:5f:0b:b9:31:44:99:4b:9a:0d:eb:35:ec:d6:17: 8f:07:3b:f6:14:8d:9e:2a:f8:c1:8b:27:6a:a4:2c:5b:93:c6: 85:b0:be:05:41:08:20:63:4f:de:69:a9:e2:3d:9e:a6:d9:d4: ea:9d:fe:da:ed:58:3b:ab:f8:66:5a:53:4b:dd:ed:82:29:5b: 1f:bf:7b:92 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZwiobr5Oh2NZouod8Kgj+NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjYwMjAzMDgzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWI2NjBhOWRkM2FiNmFkZmU0ZTQ5ODRmMDZiZDEwODNkMDI2ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2nZhoteWg/75RFFCP8G3fi8fSNc H/21QSrIm+1G7tENfOXk2JZxfkF5Y7k7lJ/kudzy0tNXX5e68w2Y/ijkfNnPqeQO hClkEfMq6wnU4PBevo7eIQEYxaW9KB7A5+STB1ecLMuJ4HN4grQp1YpRCrmN35zi 1QAftPQWpCrfLtPYrk0sjfhfve0iQ+IYtuunSkXpxotJu3hkwRoQkNj8M174feqj foEVuvs1h8ytdX8N9xil44sZcH82wubE/y8NwtbTfIt5mXZLaKtqu7R3Il1M/0U3 tk39ANmhWVLJykxj4vz71A46OQtRrS1TCNabqdxvJsFUl/G5RjNnnWU97wIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFJ62YKndOrat/k5JhPBr0Qg9Am+yMB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvbnJaZ3FkMDZ0cTMtVGttRThHdlJDRDBDYjdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH0BggrBgEFBQcBBwEB/wSB5DCB4TCBugQCAAEwgbMwDAME A6M+SAMEAqM+UDAMAwQCoz5cAwQDoz5gMAwDBASjPnADBACjPnQwDAMEAaM+dgME AaM+gAMEAqM+hAMEBKM+8AMEAqNyFDALAwMCo3QDBAKjdAgDBAHANsADBAHAxAww DAMEAsDEJAMEAsDEKDAMAwQBwMRGAwQBwMRIMAwDBAHAxFoDBAHAxFwDBAHAxGID BAHAxHIwDAMEAcDEdgMEAcDEfAMEAsDEjAMEAcDElDAiBAIAAjAcAwYEKgB+QAAD CQAqAH5AcAAAAAMHACoAfkCawTANBgkqhkiG9w0BAQsFAAOCAQEAf8YZn71yskW3 vVEK9kij7L0obaFaK4ddBkun2mrrot04YUzHmmO6Id4VupDzXU02ImYiAss67hoU oMqrYui/mSR8TOHYGVrfSLUakfBXpdQBZe2/4qt/qIm6eWWc70aMUZwXpDR9bI+H oAyrAwiVrghNTLJxD0ckSo7HQfF2u17kboNIZ7e4AilZ3qiyVf3uK0DbhK74gdJ+ 7HGYX3GkHSor/bIbAJwx8LuxF6aMLEpyilql0yb0il8LuTFEmUuaDes17NYXjwc7 9hSNnir4wYsnaqQsW5PGhbC+BUEIIGNP3mmp4j2eptnU6p3+2u1YO6v4ZlpTS93t gilbH797kg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:27 2026 by rpki-client