This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/nL83DswPZjOseSZh-M_SsVEMmMI.roa File: nL83DswPZjOseSZh-M_SsVEMmMI.roa (raw, json) Hash identifier: +wx/HPeXcm/ZjhRslTkWTgSvYpXyWghawfhk/xaSRoc= Subject key identifier: 9C:BF:37:0E:CC:0F:66:33:AC:79:26:61:F8:CF:D2:B1:51:0C:98:C2 Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931 Certificate serial: 019B7BA38799FE54FC745158E4210B509A96 Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/nL83DswPZjOseSZh-M_SsVEMmMI.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 146.109.0.0/16 maxlen: 24 185.210.32.0/22 maxlen: 24 193.5.66.0/24 maxlen: 24 193.5.76.0/22 maxlen: 24 193.247.180.0/24 maxlen: 24 2a01:4640:100::/40 maxlen: 48 2a01:4640:200::/40 maxlen: 48 2a01:4640:c800::/40 maxlen: 48 2a01:4642:100::/40 maxlen: 48 2a01:4642:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:87:99:fe:54:fc:74:51:58:e4:21:0b:50:9a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cbf370ecc0f6633ac792661f8cfd2b1510c98c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:ca:9c:b9:ac:45:79:32:7f:3f:5f:3d:4b: 88:b0:ca:b4:d4:97:e3:7f:f0:8c:eb:03:ee:a8:8d: 3a:69:5b:5f:2b:59:4c:d6:78:e4:e5:d1:3d:d6:7d: 56:df:93:28:9e:75:e8:69:be:71:7b:5b:fa:1f:86: 25:ad:d4:8f:c7:f8:97:5b:d9:6a:f0:d8:f9:f0:3a: c4:d2:54:11:b5:e4:3c:19:b0:02:75:6b:31:75:56: 96:4d:f8:12:be:66:3a:ee:4a:d6:4c:67:0c:48:54: 89:76:b5:c7:d9:e5:2a:c2:8b:c1:87:72:83:12:d5: 5b:45:ac:2f:c2:f5:de:dc:3b:82:b4:38:b8:eb:33: 2b:61:20:c8:c9:8a:9c:4a:9d:c0:5f:b8:89:7e:a6: 4e:55:f1:e4:5a:25:73:d6:b4:c5:dd:68:cf:f3:55: 01:e7:1a:3d:f3:41:14:d1:0b:b5:9f:be:a7:3e:e7: ed:d3:eb:33:fa:6f:d9:65:d7:20:14:5c:f5:e1:ab: 37:07:34:30:f2:f5:58:c8:e7:a4:46:b4:35:0a:9f: 90:8e:f2:49:09:93:77:97:4e:fa:51:bb:aa:f8:37: 09:13:34:16:64:a8:cc:80:84:4e:8d:4c:97:09:df: 98:38:9b:3e:12:a9:63:98:17:8c:73:e6:df:6b:ca: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BF:37:0E:CC:0F:66:33:AC:79:26:61:F8:CF:D2:B1:51:0C:98:C2 X509v3 Authority Key Identifier: keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/nL83DswPZjOseSZh-M_SsVEMmMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.109.0.0/16 185.210.32.0/22 193.5.66.0/24 193.5.76.0/22 193.247.180.0/24 IPv6: 2a01:4640:100::-2a01:4640:2ff:ffff:ffff:ffff:ffff:ffff 2a01:4640:c800::/40 2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:fb:68:4a:2d:73:70:f6:0e:de:f4:10:be:79:32:98:ab:3d: 94:0a:65:f2:3e:94:c1:40:25:d7:72:de:b1:11:59:18:70:d8: e8:11:ec:0e:87:97:bb:ea:0c:ad:b7:73:90:46:57:ce:b7:18: 84:f9:24:2f:55:c5:e7:b7:ce:38:88:61:78:7c:49:be:d0:78: c7:53:f0:9c:a7:f1:69:d8:2d:07:5d:f6:e3:49:9e:1a:fb:a0: c5:19:b0:aa:d1:74:0f:10:e3:77:58:c7:ae:4a:b9:41:31:6b: ba:ba:f3:6d:b7:78:36:f7:30:89:be:f2:01:a4:b2:ea:22:2d: 24:69:4e:4f:e3:5a:e2:ac:a7:6a:21:db:d0:16:c7:e5:27:0c: a7:9c:48:ba:13:6a:48:01:bf:f4:25:f7:ae:56:59:14:44:5c: a0:0d:66:50:96:67:7c:39:23:51:e2:26:8c:a5:7f:4f:2e:a4: 6e:44:58:e8:77:d4:48:80:49:6e:2a:f5:34:c6:06:55:a1:8c: 87:63:55:b5:01:99:97:0c:aa:40:9c:8a:b5:3f:4e:53:6f:8e: 53:98:4a:bb:ce:28:34:a5:43:aa:27:08:9e:e5:94:8f:34:30: 47:b1:b3:df:46:fd:33:c6:52:4c:87:0b:fe:52:c6:38:ec:7e: b1:f4:f5:e6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt7o4eZ/lT8dFFY5CELUJqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy ZWQ5MzEwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JmMzcwZWNjMGY2NjMzYWM3OTI2NjFmOGNmZDJiMTUxMGM5OGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryHKnLmsRXkyfz9fPUuIsMq01Jfj f/CM6wPuqI06aVtfK1lM1njk5dE91n1W35MonnXoab5xe1v6H4YlrdSPx/iXW9lq 8Nj58DrE0lQRteQ8GbACdWsxdVaWTfgSvmY67krWTGcMSFSJdrXH2eUqwovBh3KD EtVbRawvwvXe3DuCtDi46zMrYSDIyYqcSp3AX7iJfqZOVfHkWiVz1rTF3WjP81UB 5xo980EU0Qu1n76nPuft0+sz+m/ZZdcgFFz14as3BzQw8vVYyOekRrQ1Cp+QjvJJ CZN3l076Ubuq+DcJEzQWZKjMgIROjUyXCd+YOJs+EqljmBeMc+bfa8qwKQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFJy/Nw7MD2YzrHkmYfjP0rFRDJjCMB8GA1UdIwQY MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt NWU1M2MyM2I1NWIwLzEvbkw4M0Rzd1Baak9zZVNaaC1NX1NzVkVNbU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTAjBAIAATAdAwMAkm0DBAK5 0iADBADBBUIDBALBBUwDBADB97QwMgQCAAIwLDAQAwYAKgFGQAEDBgAqAUZAAgMG ACoBRkDIMBADBgAqAUZCAQMGACoBRkICMA0GCSqGSIb3DQEBCwUAA4IBAQAs+2hK LXNw9g7e9BC+eTKYqz2UCmXyPpTBQCXXct6xEVkYcNjoEewOh5e76gytt3OQRlfO txiE+SQvVcXnt844iGF4fEm+0HjHU/Ccp/Fp2C0HXfbjSZ4a+6DFGbCq0XQPEON3 WMeuSrlBMWu6uvNtt3g29zCJvvIBpLLqIi0kaU5P41rirKdqIdvQFsflJwynnEi6 E2pIAb/0JfeuVlkURFygDWZQlmd8OSNR4iaMpX9PLqRuRFjod9RIgEluKvU0xgZV oYyHY1W1AZmXDKpAnIq1P05Tb45TmEq7zig0pUOqJwie5ZSPNDBHsbPfRv0zxlJM hwv+UsY47H6x9PXm -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:15 2026 by rpki-client