This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/nMxyFTkhcgdua8Reb7Q6l90PApI.roa File: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (raw, json) Hash identifier: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8= Subject key identifier: 9C:CC:72:15:39:21:72:07:6E:6B:C4:5E:6F:B4:3A:97:DD:0F:02:92 Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Certificate serial: 019B7DCA88574DC95AAE204A4D73A8FA5658 Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/nMxyFTkhcgdua8Reb7Q6l90PApI.roa Signing time: Fri 02 Jan 2026 08:19:43 +0000 ROA not before: Fri 02 Jan 2026 08:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51235 IP address blocks: 185.107.244.0/23 maxlen: 23 185.107.244.0/24 maxlen: 24 185.107.246.0/23 maxlen: 23 185.107.246.0/24 maxlen: 24 185.107.247.0/24 maxlen: 24 185.136.180.0/23 maxlen: 23 185.136.180.0/24 maxlen: 24 185.136.181.0/24 maxlen: 24 185.136.182.0/23 maxlen: 23 185.136.182.0/24 maxlen: 24 185.136.183.0/24 maxlen: 24 195.2.234.0/24 maxlen: 24 2a12:5440::/45 maxlen: 45 2a12:5440::/48 maxlen: 48 2a12:5440:1::/48 maxlen: 48 2a12:5440:2::/48 maxlen: 48 2a12:5440:8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:88:57:4d:c9:5a:ae:20:4a:4d:73:a8:fa:56:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ccc7215392172076e6bc45e6fb43a97dd0f0292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:ac:44:28:fb:70:b8:16:89:5f:9e:02:e7: 90:74:46:ec:a0:4b:c6:07:4a:f6:95:e1:e5:51:0a: 50:b5:05:f1:ea:82:c6:1d:e7:bc:d3:93:8b:3b:1f: b2:3d:20:27:19:e3:a5:fe:f3:4a:31:73:dd:7a:71: 8b:02:e2:dd:c2:8c:8a:40:1d:9b:1b:80:7d:17:43: 56:6a:00:cf:7c:0e:ec:7d:31:bf:12:e2:da:ed:2c: 71:6e:84:ad:ca:f8:ab:cd:7b:c4:96:73:d3:95:42: 6c:1b:5f:b3:4b:04:be:19:31:67:1f:bb:aa:bd:b3: 24:0f:8c:fa:16:d3:c6:b0:21:30:b8:24:47:2f:c8: c2:e7:f1:52:3a:29:97:dc:02:93:41:33:35:5d:97: b0:e0:2a:c9:3d:d4:84:08:04:5f:e7:83:f5:12:60: 00:6e:15:8f:9a:8c:cb:db:fd:c8:aa:48:23:a9:d3: 35:60:38:52:c3:04:c8:08:16:92:80:1a:d6:3b:0c: 3a:46:a4:96:df:39:fc:1c:b8:63:e7:9a:f8:bf:90: b9:ea:ba:6a:ff:c8:26:98:ca:bd:e8:4b:fd:ba:c1: fa:ad:43:6b:3c:09:18:ed:c2:95:5b:b3:3a:e1:2e: b0:3e:c5:4b:fc:b7:67:e4:f1:b5:39:f6:ef:fe:18: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:72:15:39:21:72:07:6E:6B:C4:5E:6F:B4:3A:97:DD:0F:02:92 X509v3 Authority Key Identifier: keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/nMxyFTkhcgdua8Reb7Q6l90PApI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.244.0/22 185.136.180.0/22 195.2.234.0/24 IPv6: 2a12:5440::/44 Signature Algorithm: sha256WithRSAEncryption 54:43:31:1c:81:fc:31:07:29:f5:51:95:93:1e:dc:e4:0d:9e: 11:b6:df:6d:3b:ad:e6:f5:3f:3a:38:9f:49:85:6c:07:16:c2: e9:9f:d4:ce:3d:15:29:b7:96:61:fe:f0:6f:65:d0:68:31:e0: 00:1b:1b:54:7b:3e:97:5a:7c:30:59:c4:44:ef:e5:e2:3e:87: 6c:f1:89:34:70:3f:03:f7:fe:cd:cf:73:7a:84:d8:fc:eb:5d: 02:2d:0e:81:13:b3:11:75:86:e0:c0:40:bb:ea:39:0a:b4:6e: f3:bf:d1:4c:79:c3:b7:53:5d:61:41:c0:7e:63:8d:75:76:6c: f2:c2:02:1c:8f:74:5f:f4:a6:81:2c:8b:a9:0d:5c:22:bf:e1: 2d:a0:14:18:e0:bf:23:e6:11:a3:57:84:8a:e2:28:af:ac:f9: 42:79:ac:6f:fb:7c:6e:15:ef:c9:b4:9c:b1:98:b5:a0:f6:4a: e5:c1:8c:c3:d4:a1:d4:dd:78:2d:7a:86:ea:23:84:1a:77:fc: 66:66:95:76:dd:bf:d0:4c:0f:b3:01:db:c9:34:c4:f3:da:58: 4a:08:0e:b2:5b:99:7a:c1:12:93:fd:6c:7e:e1:68:b1:4d:02: c1:81:2a:a1:39:dc:4a:79:41:fe:40:93:89:50:73:96:e7:56: e0:c2:5d:9c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9yohXTclariBKTXOo+lZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh Mjc1MTgwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2NjNzIxNTM5MjE3MjA3NmU2YmM0NWU2ZmI0M2E5N2RkMGYwMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+sRCj7cLgWiV+eAueQdEbsoEvG B0r2leHlUQpQtQXx6oLGHee805OLOx+yPSAnGeOl/vNKMXPdenGLAuLdwoyKQB2b G4B9F0NWagDPfA7sfTG/EuLa7SxxboStyvirzXvElnPTlUJsG1+zSwS+GTFnH7uq vbMkD4z6FtPGsCEwuCRHL8jC5/FSOimX3AKTQTM1XZew4CrJPdSECARf54P1EmAA bhWPmozL2/3IqkgjqdM1YDhSwwTICBaSgBrWOww6RqSW3zn8HLhj55r4v5C56rpq /8gmmMq96Ev9usH6rUNrPAkY7cKVW7M64S6wPsVL/Ldn5PG1Ofbv/hh2hQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJzMchU5IXIHbmvEXm+0OpfdDwKSMB8GA1UdIwQY MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt NDkwNjEwM2RiZDE2LzEvbk14eUZUa2hjZ2R1YThSZWI3UTZsOTBQQXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2 LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCuWv0AwQC uYi0AwQAwwLqMA8EAgACMAkDBwQqElRAAAAwDQYJKoZIhvcNAQELBQADggEBAFRD MRyB/DEHKfVRlZMe3OQNnhG23207reb1Pzo4n0mFbAcWwumf1M49FSm3lmH+8G9l 0Ggx4AAbG1R7PpdafDBZxETv5eI+h2zxiTRwPwP3/s3Pc3qE2PzrXQItDoETsxF1 huDAQLvqOQq0bvO/0Ux5w7dTXWFBwH5jjXV2bPLCAhyPdF/0poEsi6kNXCK/4S2g FBjgvyPmEaNXhIriKK+s+UJ5rG/7fG4V78m0nLGYtaD2SuXBjMPUodTdeC16huoj hBp3/GZmlXbdv9BMD7MB28k0xPPaWEoIDrJbmXrBEpP9bH7haLFNAsGBKqE53Ep5 Qf5Ak4lQc5bnVuDCXZw= -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:32 2026 by rpki-client