This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa File: nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa (raw, json) Hash identifier: x3mP5EeqVaKIolXtodkSvvchfGdilfiKxpYM+QBGVxs= Subject key identifier: 9C:F9:BE:2E:3F:D4:13:4A:D2:19:3B:C5:07:1E:1D:95:B3:25:4E:CF Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019BDBAFAD20B4F712B37980AE2BE0D16A9F Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa Signing time: Tue 20 Jan 2026 13:54:41 +0000 ROA not before: Tue 20 Jan 2026 13:54:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199967 IP address blocks: 5.181.6.0/24 maxlen: 24 5.181.7.0/24 maxlen: 24 5.183.178.0/24 maxlen: 24 45.12.204.0/24 maxlen: 24 45.66.132.0/24 maxlen: 24 45.66.133.0/24 maxlen: 24 45.82.166.0/24 maxlen: 24 45.128.154.0/24 maxlen: 24 45.134.19.0/24 maxlen: 24 81.90.191.0/24 maxlen: 24 91.217.120.0/24 maxlen: 24 91.217.121.0/24 maxlen: 24 147.78.15.0/24 maxlen: 24 152.89.208.0/24 maxlen: 24 152.89.209.0/24 maxlen: 24 185.105.189.0/24 maxlen: 24 185.105.190.0/24 maxlen: 24 185.120.18.0/24 maxlen: 24 185.126.69.0/24 maxlen: 24 185.126.70.0/24 maxlen: 24 185.126.71.0/24 maxlen: 24 185.126.118.0/24 maxlen: 24 185.126.138.0/24 maxlen: 24 185.159.68.0/24 maxlen: 24 185.159.69.0/24 maxlen: 24 185.159.70.0/24 maxlen: 24 185.160.27.0/24 maxlen: 24 185.168.21.0/24 maxlen: 24 185.168.22.0/24 maxlen: 24 185.168.23.0/24 maxlen: 24 185.171.121.0/24 maxlen: 24 185.175.140.0/24 maxlen: 24 185.175.141.0/24 maxlen: 24 185.187.237.0/24 maxlen: 24 185.187.238.0/24 maxlen: 24 185.187.239.0/24 maxlen: 24 188.119.100.0/24 maxlen: 24 188.119.101.0/24 maxlen: 24 194.156.228.0/24 maxlen: 24 217.197.163.0/24 maxlen: 24 2a0c:8a40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:af:ad:20:b4:f7:12:b3:79:80:ae:2b:e0:d1:6a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Jan 20 13:54:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf9be2e3fd4134ad2193bc5071e1d95b3254ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c1:66:50:5b:9d:3c:ba:4d:ab:3b:2e:5b:7b: 3e:83:31:f8:52:89:75:40:a2:12:6a:5b:0a:4c:0d: 72:08:b1:23:97:66:14:14:21:4e:8f:e2:7a:b1:75: f2:0f:16:1e:b0:a0:a2:44:49:d7:2b:ed:f1:32:bc: 42:48:ce:ef:0b:01:a6:f5:fe:64:36:a3:ef:b5:6b: 64:4a:72:3c:0b:0b:03:2b:78:b8:10:d9:27:6d:4b: 14:69:78:b2:6c:c1:30:dd:3b:d3:85:97:7b:9d:43: b5:40:a2:82:cf:d2:62:d4:0e:c9:df:c3:47:ca:f0: 7f:0b:45:69:6e:fe:68:3f:b3:e3:b5:d3:94:49:b2: 02:d4:dc:2f:b1:85:0f:ce:eb:fd:d8:24:11:a4:d6: ca:ea:67:4b:1e:61:ff:ee:9e:43:b0:e8:51:75:fd: 42:02:57:e6:b6:77:a7:98:c2:1f:be:1e:35:8a:74: 8d:ee:21:2e:f0:22:89:5b:0b:32:df:de:3d:66:7b: 12:3e:9e:b6:b0:5d:a1:64:9d:5f:45:52:76:ad:bf: b8:7f:bf:61:7c:eb:0c:b2:c8:45:c4:83:fd:f1:f0: a4:88:07:5e:85:df:7c:ea:b9:01:54:22:9f:6f:d9: 99:ab:26:4f:31:7f:07:2e:73:54:d5:65:a0:b1:81: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F9:BE:2E:3F:D4:13:4A:D2:19:3B:C5:07:1E:1D:95:B3:25:4E:CF X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.6.0/23 5.183.178.0/24 45.12.204.0/24 45.66.132.0/23 45.82.166.0/24 45.128.154.0/24 45.134.19.0/24 81.90.191.0/24 91.217.120.0/23 147.78.15.0/24 152.89.208.0/23 185.105.189.0-185.105.190.255 185.120.18.0/24 185.126.69.0-185.126.71.255 185.126.118.0/24 185.126.138.0/24 185.159.68.0-185.159.70.255 185.160.27.0/24 185.168.21.0-185.168.23.255 185.171.121.0/24 185.175.140.0/23 185.187.237.0-185.187.239.255 188.119.100.0/23 194.156.228.0/24 217.197.163.0/24 IPv6: 2a0c:8a40:1::/48 Signature Algorithm: sha256WithRSAEncryption d2:cf:ef:54:27:d6:77:90:1f:29:37:c7:88:22:c7:cc:9b:c9: 10:67:0c:41:84:fc:8c:49:5c:aa:1d:0d:05:c3:6f:8b:e5:3f: be:5d:d8:2a:53:ab:3a:c4:01:44:8b:1e:70:18:00:a6:63:c8: f9:18:77:e3:ee:7e:94:81:26:4a:f0:8e:8f:92:ff:6c:02:76: cc:c6:7a:88:f9:af:47:da:58:2b:64:b4:75:04:ba:33:54:60: de:01:82:8e:54:da:91:2b:c7:ae:94:22:6f:9d:ee:d0:55:d3: 13:3b:06:b7:06:5c:85:16:2d:65:fc:68:4a:88:fb:17:bd:bb: c0:38:15:f0:ad:d7:5f:b8:d1:77:04:34:90:62:c2:00:ab:9a: 5c:f2:08:1d:ac:92:47:7b:e0:58:72:68:6d:d0:d2:d7:e0:6b: 0c:45:51:95:f6:ce:89:ea:26:10:d1:cd:22:52:fa:de:20:7b: 2e:15:6d:43:fb:73:3b:1e:c0:bd:32:45:ae:69:99:3d:2f:30: 4b:18:3d:6c:c3:c9:c4:07:a4:e4:9e:6b:75:21:76:36:89:10: f9:ef:37:d9:a7:f1:39:47:bc:f1:3d:78:62:07:f4:9f:7a:f5: b9:fa:49:82:48:5c:21:c6:d2:ad:8e:f3:1b:f1:9b:3a:bf:56: 49:ab:dd:85 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZvbr60gtPcSs3mArivg0WqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjYwMTIwMTM1NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Y5YmUyZTNmZDQxMzRhZDIxOTNiYzUwNzFlMWQ5NWIzMjU0ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sFmUFudPLpNqzsuW3s+gzH4Uol1 QKISalsKTA1yCLEjl2YUFCFOj+J6sXXyDxYesKCiREnXK+3xMrxCSM7vCwGm9f5k NqPvtWtkSnI8CwsDK3i4ENknbUsUaXiybMEw3TvThZd7nUO1QKKCz9Ji1A7J38NH yvB/C0Vpbv5oP7PjtdOUSbIC1NwvsYUPzuv92CQRpNbK6mdLHmH/7p5DsOhRdf1C AlfmtnenmMIfvh41inSN7iEu8CKJWwsy3949ZnsSPp62sF2hZJ1fRVJ2rb+4f79h fOsMsshFxIP98fCkiAdehd986rkBVCKfb9mZqyZPMX8HLnNU1WWgsYHS4QIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFJz5vi4/1BNK0hk7xQceHZWzJU7PMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvblBtLUxqX1VFMHJTR1R2RkJ4NGRsYk1sVHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCBxQQCAAEwgb4DBAEF tQYDBAAFt7IDBAAtDMwDBAEtQoQDBAAtUqYDBAAtgJoDBAAthhMDBABRWr8DBAFb 2XgDBACTTg8DBAGYWdAwDAMEALlpvQMEALlpvgMEALl4EjAMAwQAuX5FAwQDuX5A AwQAuX52AwQAuX6KMAwDBAK5n0QDBAC5n0YDBAC5oBswDAMEALmoFQMEA7moEAME ALmreQMEAbmvjDAMAwQAubvtAwQEubvgAwQBvHdkAwQAwpzkAwQA2cWjMA8EAgAC MAkDBwAqDIpAAAEwDQYJKoZIhvcNAQELBQADggEBANLP71Qn1neQHyk3x4gix8yb yRBnDEGE/IxJXKodDQXDb4vlP75d2CpTqzrEAUSLHnAYAKZjyPkYd+PufpSBJkrw jo+S/2wCdszGeoj5r0faWCtktHUEujNUYN4Bgo5U2pErx66UIm+d7tBV0xM7BrcG XIUWLWX8aEqI+xe9u8A4FfCt11+40XcENJBiwgCrmlzyCB2skkd74FhyaG3Q0tfg awxFUZX2zonqJhDRzSJS+t4gey4VbUP7czsewL0yRa5pmT0vMEsYPWzDycQHpOSe a3UhdjaJEPnvN9mn8TlHvPE9eGIH9J969bn6SYJIXCHG0q2O8xvxmzq/Vkmr3YU= -----END CERTIFICATE-----Generated at Fri Jan 23 02:19:23 2026 by rpki-client