This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NaBUGfPE6ZpQqgNe0fVHXX2ttFU.roa File: NaBUGfPE6ZpQqgNe0fVHXX2ttFU.roa (raw, json) Hash identifier: QOgoYeeecJtQIX3F2kdiQ/oejeqbLfA86BJ9ifa3zK4= Subject key identifier: 35:A0:54:19:F3:C4:E9:9A:50:AA:03:5E:D1:F5:47:5D:7D:AD:B4:55 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1337ABA477E2C26E3A1DED39E34816 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NaBUGfPE6ZpQqgNe0fVHXX2ttFU.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 185.71.146.0/24 maxlen: 24 185.71.147.0/24 maxlen: 24 185.73.216.0/24 maxlen: 24 185.73.217.0/24 maxlen: 24 213.170.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:37:ab:a4:77:e2:c2:6e:3a:1d:ed:39:e3:48:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35a05419f3c4e99a50aa035ed1f5475d7dadb455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:f6:22:bb:3b:99:c2:6f:cd:13:94:6e:14: 23:72:3e:bb:79:f5:6b:61:89:4a:4b:39:f8:93:51: 6d:d7:c0:9b:3a:92:09:2f:4b:98:cf:6d:63:2d:7c: f3:07:32:90:31:30:45:1f:90:f8:f1:ee:b7:0f:24: 06:ea:a5:e6:4b:bb:9e:8b:27:c3:cf:6c:27:c5:33: ea:15:0f:5f:5b:76:42:24:2d:73:fa:34:cc:80:ac: 67:b3:93:ee:70:87:8b:fb:cb:d7:73:fc:af:51:d2: 4e:1a:8d:f5:7f:fa:e4:4b:31:49:fd:f8:72:60:12: 01:53:cc:ee:19:08:a0:ad:d6:10:d8:0c:8b:4e:f6: bc:b9:7e:b2:9b:7e:d3:c4:4e:21:5d:46:cf:94:44: 47:ef:03:84:fa:6a:19:3a:ec:f2:c3:d6:57:ce:1f: 48:ab:f3:d3:a1:9f:0c:75:aa:7a:80:48:95:b3:38: 31:cb:0e:7d:14:60:8e:03:10:76:05:73:5f:fb:d5: f7:81:f6:54:42:cc:57:e1:10:f1:b2:22:9e:b5:e9: f3:de:bb:9d:8e:90:81:af:46:b4:3e:27:3f:25:88: d4:d3:ab:7b:6a:ae:86:f7:34:f8:93:1b:79:ad:4e: db:5d:47:c7:ec:b7:7e:11:2d:d5:ea:14:ec:c0:9f: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:54:19:F3:C4:E9:9A:50:AA:03:5E:D1:F5:47:5D:7D:AD:B4:55 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NaBUGfPE6ZpQqgNe0fVHXX2ttFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.146.0/23 185.73.216.0/23 213.170.222.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bd:21:1b:20:fb:90:0f:2e:db:14:6e:6a:72:0c:00:64:9c: 4c:96:d2:59:ff:70:12:23:5d:7e:29:16:d2:49:b3:1c:5f:fa: f5:06:fc:9a:72:05:37:b5:c5:a8:7c:ee:bb:51:96:94:6e:b2: 66:cf:39:52:b7:c3:89:db:38:8e:34:dd:28:f8:26:00:ee:97: bb:e5:8b:51:89:df:1e:6f:5a:80:a7:b3:a0:84:36:d0:31:57: d0:be:7d:94:15:c0:94:e9:68:2b:e8:20:c3:fc:1d:9e:23:93: ee:07:67:2d:a7:3c:5b:b6:10:88:a4:58:67:26:11:6d:3a:ea: aa:e2:6e:e3:89:aa:b0:1a:05:46:d4:66:9d:89:80:bd:89:fb: 9c:7d:8f:ac:eb:b3:a2:9d:b1:92:5e:e1:52:95:c1:7d:ec:13: 08:1e:a3:28:da:8d:ff:7a:54:6f:3a:88:7b:bf:64:bc:7a:c4: e6:a0:b4:64:ba:9b:77:12:49:13:cd:97:a3:a2:09:38:df:f0: 42:4e:9a:19:e8:e3:51:9d:81:99:ea:1a:9b:04:b4:67:e0:31: 44:fc:f8:03:8f:76:1c:49:45:da:08:0a:e0:27:6e:d0:fa:1b: 04:30:3b:de:8c:a6:ca:ae:33:b6:99:09:d4:04:1b:ae:5e:fe: cc:38:d3:02 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EzerpHfiwm46He0540gWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWEwNTQxOWYzYzRlOTlhNTBhYTAzNWVkMWY1NDc1ZDdkYWRiNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qf2Irs7mcJvzROUbhQjcj67efVr YYlKSzn4k1Ft18CbOpIJL0uYz21jLXzzBzKQMTBFH5D48e63DyQG6qXmS7ueiyfD z2wnxTPqFQ9fW3ZCJC1z+jTMgKxns5PucIeL+8vXc/yvUdJOGo31f/rkSzFJ/fhy YBIBU8zuGQigrdYQ2AyLTva8uX6ym37TxE4hXUbPlERH7wOE+moZOuzyw9ZXzh9I q/PToZ8Mdap6gEiVszgxyw59FGCOAxB2BXNf+9X3gfZUQsxX4RDxsiKetenz3rud jpCBr0a0Pic/JYjU06t7aq6G9zT4kxt5rU7bXUfH7Ld+ES3V6hTswJ8m7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDWgVBnzxOmaUKoDXtH1R119rbRVMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvTmFCVUdmUEU2WnBRcWdOZTBmVkhYWDJ0dEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuUeSAwQB uUnYAwQA1areMA0GCSqGSIb3DQEBCwUAA4IBAQCZvSEbIPuQDy7bFG5qcgwAZJxM ltJZ/3ASI11+KRbSSbMcX/r1BvyacgU3tcWofO67UZaUbrJmzzlSt8OJ2ziONN0o +CYA7pe75YtRid8eb1qAp7OghDbQMVfQvn2UFcCU6Wgr6CDD/B2eI5PuB2ctpzxb thCIpFhnJhFtOuqq4m7jiaqwGgVG1GadiYC9ifucfY+s67OinbGSXuFSlcF97BMI HqMo2o3/elRvOoh7v2S8esTmoLRkupt3EkkTzZejogk43/BCTpoZ6ONRnYGZ6hqb BLRn4DFE/PgDj3YcSUXaCArgJ27Q+hsEMDvejKbKrjO2mQnUBBuuXv7MONMC -----END CERTIFICATE-----Generated at Mon Jan 19 23:58:39 2026 by rpki-client