This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa File: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (raw, json) Hash identifier: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74= Subject key identifier: D0:A5:DC:AD:90:9F:41:00:8C:50:9F:8E:87:A4:8A:21:A6:01:3B:14 Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080 Certificate serial: 019B7F8424EC53F3D8F647A2E1C803E395E5 Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 91.213.160.0/24 maxlen: 24 2001:67c:68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:24:ec:53:f3:d8:f6:47:a2:e1:c8:03:e3:95:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080 Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a5dcad909f41008c509f8e87a48a21a6013b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:62:40:e0:ae:e9:87:50:e7:b1:e5:ce:e5: 89:7a:1a:03:2b:44:46:6e:65:ba:a6:a5:85:b6:d3: 6d:3b:9b:2d:43:74:58:da:e7:75:07:90:76:d0:8e: d0:c9:29:1a:b4:f0:97:15:e6:80:1c:67:0a:eb:e6: 61:b4:2b:f8:7e:47:3f:86:46:f5:cc:42:dc:76:4b: 83:0f:ea:11:3a:fd:aa:15:8b:bb:9b:be:65:56:d1: 38:30:3b:02:17:04:e7:ee:3b:99:9b:d3:20:0a:04: 3c:d6:37:a6:aa:42:5b:a1:d0:5d:df:3a:31:6c:91: a2:37:dd:30:1b:4a:ee:4b:3c:f1:37:6d:5c:3c:f7: d2:e5:43:40:7e:2b:5c:0a:14:c4:09:b4:94:73:81: 72:66:39:c6:36:9f:89:51:8d:13:77:89:c5:d3:ce: 07:cb:f4:1a:f4:44:fe:b5:a8:1b:f1:cc:35:9f:98: 56:11:31:d9:a4:90:6a:a3:fd:51:96:ba:63:06:92: d4:12:6d:8c:98:42:8f:99:ae:95:ff:a3:30:56:4e: 26:6b:97:28:ee:3b:71:ac:5d:de:ed:69:0c:b7:8c: 7e:bc:b5:49:b1:7d:ae:03:b8:bd:55:25:88:d0:67: 9f:d6:27:1a:2b:05:07:58:52:ef:67:88:f3:28:60: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A5:DC:AD:90:9F:41:00:8C:50:9F:8E:87:A4:8A:21:A6:01:3B:14 X509v3 Authority Key Identifier: keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.160.0/24 IPv6: 2001:67c:68::/48 Signature Algorithm: sha256WithRSAEncryption c4:02:11:33:55:31:17:6a:8d:1d:17:a6:9e:ee:23:22:05:f0: 11:45:93:b2:eb:06:2d:11:cc:40:ef:d4:92:98:b0:36:36:50: 5d:e7:38:b7:e6:61:68:6e:34:8d:1e:d7:8d:87:e4:fb:60:fe: 80:00:98:6a:c4:29:33:4a:58:ac:9a:cb:19:6c:39:88:9b:f8: 0e:31:7b:93:8a:6b:f1:e4:c4:18:d3:cc:6f:45:df:e6:b5:9c: 00:db:96:60:1d:79:de:09:25:24:31:c0:84:15:2d:7a:6d:85: c4:67:c6:a9:ce:4d:a3:cc:9b:bf:55:c2:94:88:10:a3:4d:d7: 4f:2c:bd:6e:d0:15:42:e6:46:6f:d0:a1:a3:5f:84:e5:58:61: f0:ac:f3:4c:39:08:81:6e:42:80:9b:d8:36:a9:98:0a:b4:0f: 0d:d3:ca:b4:0c:87:c9:54:81:aa:ff:37:41:97:0c:6a:a6:fe: 81:c2:a4:f0:15:4b:7f:25:47:6e:8c:a4:ef:1b:a8:6c:63:76: 47:54:89:56:40:e5:bc:fa:43:8d:98:4a:8c:3a:75:6d:eb:72: 30:95:c8:a2:49:bf:49:9e:5c:1f:96:e7:01:ac:d9:c3:1e:37: 8c:96:32:dd:f7:74:af:44:7c:bf:82:ea:e5:73:5d:6a:82:d5: 1d:cd:ad:f6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hCTsU/PY9kei4cgD45XlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTRmZjY3ZjNiOGQ0ZjZmNmJkYTIzZWNiYmM3YjBmMDlm ZTYwODAwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGE1ZGNhZDkwOWY0MTAwOGM1MDlmOGU4N2E0OGEyMWE2MDEzYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJiQOCu6YdQ57HlzuWJehoDK0RG bmW6pqWFttNtO5stQ3RY2ud1B5B20I7QySkatPCXFeaAHGcK6+ZhtCv4fkc/hkb1 zELcdkuDD+oROv2qFYu7m75lVtE4MDsCFwTn7juZm9MgCgQ81jemqkJbodBd3zox bJGiN90wG0ruSzzxN21cPPfS5UNAfitcChTECbSUc4FyZjnGNp+JUY0Td4nF084H y/Qa9ET+tagb8cw1n5hWETHZpJBqo/1RlrpjBpLUEm2MmEKPma6V/6MwVk4ma5co 7jtxrF3e7WkMt4x+vLVJsX2uA7i9VSWI0Gef1icaKwUHWFLvZ4jzKGB/CQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNCl3K2Qn0EAjFCfjoekiiGmATsUMB8GA1UdIwQY MBaAFDUU/2fzuNT29r2iPsu8ew8J/mCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQt ODg1NGM5MmQ0N2IxLzEvMEtYY3JaQ2ZRUUNNVUotT2g2U0tJYVlCT3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQtODg1NGM5MmQ0N2Ix LzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9WgMA8E AgACMAkDBwAgAQZ8AGgwDQYJKoZIhvcNAQELBQADggEBAMQCETNVMRdqjR0Xpp7u IyIF8BFFk7LrBi0RzEDv1JKYsDY2UF3nOLfmYWhuNI0e142H5Ptg/oAAmGrEKTNK WKyayxlsOYib+A4xe5OKa/HkxBjTzG9F3+a1nADblmAded4JJSQxwIQVLXpthcRn xqnOTaPMm79VwpSIEKNN108svW7QFULmRm/QoaNfhOVYYfCs80w5CIFuQoCb2Dap mAq0Dw3TyrQMh8lUgar/N0GXDGqm/oHCpPAVS38lR26MpO8bqGxjdkdUiVZA5bz6 Q42YSow6dW3rcjCVyKJJv0meXB+W5wGs2cMeN4yWMt33dK9EfL+C6uVzXWqC1R3N rfY= -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:17 2026 by rpki-client