This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nyn8nP7M60E_Gz5chelL2mp7sBg.roa File: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (raw, json) Hash identifier: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew= Subject key identifier: 9F:29:FC:9C:FE:CC:EB:41:3F:1B:3E:5C:85:E9:4B:DA:6A:7B:B0:18 Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Certificate serial: 019B7F157D8FFEAAA6C7499F4F8A5DC5EC0B Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nyn8nP7M60E_Gz5chelL2mp7sBg.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61421 IP address blocks: 45.150.43.0/24 maxlen: 24 2a0f:9207:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7d:8f:fe:aa:a6:c7:49:9f:4f:8a:5d:c5:ec:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f29fc9cfecceb413f1b3e5c85e94bda6a7bb018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:42:53:b9:a2:87:a4:8d:da:6a:e7:38:3b: 43:0d:67:4a:bf:fb:a2:5b:97:ea:72:c5:dc:2d:86: 66:34:9e:08:00:63:a5:5d:4b:97:9e:4b:c1:b1:0b: 2b:64:5c:20:52:08:0e:7d:45:e6:b8:f7:7b:22:73: 04:16:bc:3a:cf:29:3a:be:22:a6:55:54:90:f0:0d: 9c:84:28:ee:10:30:4d:a7:b9:c6:88:b7:54:e9:8a: a6:b8:6f:c2:2d:20:a7:95:1a:c4:c6:9d:c5:a4:57: d4:0a:9c:e8:46:50:29:c0:5d:92:d3:51:d2:73:9d: a2:30:d3:99:6b:05:c6:4d:1f:9b:1d:34:a9:39:c1: 97:6a:12:df:7c:eb:c9:d1:73:e9:b4:ab:2c:f8:b0: 03:5e:57:6a:44:7c:5c:b8:d0:72:2f:44:98:55:bc: 93:1f:71:44:c9:17:f6:27:2e:7e:ab:9b:06:f0:31: 62:45:d9:df:01:6e:c3:7f:63:d9:8e:f8:d1:5a:1a: 39:29:88:df:48:23:a6:99:45:c8:c7:55:dd:16:3b: 64:de:fe:00:68:04:03:48:11:4e:8b:40:ba:15:07: 69:73:6a:09:91:da:a0:16:93:5d:26:d2:00:e6:73: 3c:73:0f:c1:2b:8a:98:ff:cc:c1:3d:bc:d8:5d:7a: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:29:FC:9C:FE:CC:EB:41:3F:1B:3E:5C:85:E9:4B:DA:6A:7B:B0:18 X509v3 Authority Key Identifier: keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nyn8nP7M60E_Gz5chelL2mp7sBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.43.0/24 IPv6: 2a0f:9207:24::/48 Signature Algorithm: sha256WithRSAEncryption 69:70:0e:ab:63:dc:05:5a:d6:13:7a:60:fa:7f:49:84:d0:d0: 16:6b:bb:d4:d1:b6:a3:35:54:3e:36:1a:2d:7e:09:d7:a5:52: 1e:fa:2a:b4:3b:24:a4:29:95:71:9a:17:24:e1:83:e3:e8:94: 43:e7:22:1a:75:7d:30:6a:2f:99:5b:5c:34:27:e9:af:a4:ff: ff:71:90:89:ec:61:e3:62:11:0e:d3:6f:c4:0f:31:cc:0d:7a: 73:36:ac:a3:aa:1e:f9:4a:52:93:18:7c:5d:da:0e:ce:13:73: ca:75:7c:dc:7d:04:08:25:ba:e9:a4:31:b9:78:fe:d9:58:66: 32:f8:73:58:67:71:cc:d0:6c:51:7d:3e:40:c9:8c:6c:08:a9: 79:c6:b0:f0:48:42:58:26:34:56:9c:fb:ca:1f:c0:08:26:1a: a4:29:8f:4c:e3:a6:80:87:91:77:84:b6:2d:31:54:4e:20:cf: 81:3a:31:fe:86:ed:d7:27:64:19:4e:0c:29:29:86:f1:34:27: 24:02:e4:c9:f0:15:34:af:de:db:97:12:eb:8c:93:3c:db:ee: 9a:a8:03:70:5b:63:70:c0:7f:37:ee:77:ef:10:8a:c8:45:1b: 5d:b8:a8:7c:1c:a0:e5:7e:dd:da:ac:22:16:c2:a5:25:a8:ef: b8:70:3a:ba -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FX2P/qqmx0mfT4pdxewLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1 ZjE2MTYwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI5ZmM5Y2ZlY2NlYjQxM2YxYjNlNWM4NWU5NGJkYTZhN2JiMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprtCU7mih6SN2mrnODtDDWdKv/ui W5fqcsXcLYZmNJ4IAGOlXUuXnkvBsQsrZFwgUggOfUXmuPd7InMEFrw6zyk6viKm VVSQ8A2chCjuEDBNp7nGiLdU6YqmuG/CLSCnlRrExp3FpFfUCpzoRlApwF2S01HS c52iMNOZawXGTR+bHTSpOcGXahLffOvJ0XPptKss+LADXldqRHxcuNByL0SYVbyT H3FEyRf2Jy5+q5sG8DFiRdnfAW7Df2PZjvjRWho5KYjfSCOmmUXIx1XdFjtk3v4A aAQDSBFOi0C6FQdpc2oJkdqgFpNdJtIA5nM8cw/BK4qY/8zBPbzYXXpkyQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ8p/Jz+zOtBPxs+XIXpS9pqe7AYMB8GA1UdIwQY MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt ZTA4NTA1YzkxMDY2LzEvbnluOG5QN002MEVfR3o1Y2hlbEwybXA3c0JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2 LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZYrMA8E AgACMAkDBwAqD5IHACQwDQYJKoZIhvcNAQELBQADggEBAGlwDqtj3AVa1hN6YPp/ SYTQ0BZru9TRtqM1VD42Gi1+CdelUh76KrQ7JKQplXGaFyThg+PolEPnIhp1fTBq L5lbXDQn6a+k//9xkInsYeNiEQ7Tb8QPMcwNenM2rKOqHvlKUpMYfF3aDs4Tc8p1 fNx9BAgluumkMbl4/tlYZjL4c1hncczQbFF9PkDJjGwIqXnGsPBIQlgmNFac+8of wAgmGqQpj0zjpoCHkXeEti0xVE4gz4E6Mf6G7dcnZBlODCkphvE0JyQC5MnwFTSv 3tuXEuuMkzzb7pqoA3BbY3DAfzfud+8QishFG124qHwcoOV+3dqsIhbCpSWo77hw Oro= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:45 2026 by rpki-client