This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NNB2avyCldcIMCL0f0MRWjsmPGg.roa File: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (raw, json) Hash identifier: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0= Subject key identifier: 34:D0:76:6A:FC:82:95:D7:08:30:22:F4:7F:43:11:5A:3B:26:3C:68 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC5C13557CBFB7749FD42EFE511A2 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NNB2avyCldcIMCL0f0MRWjsmPGg.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20657 IP address blocks: 88.80.131.0/24 maxlen: 24 88.80.132.0/24 maxlen: 24 88.80.133.0/24 maxlen: 24 88.80.152.0/21 maxlen: 21 193.108.24.0/24 maxlen: 24 194.79.12.0/23 maxlen: 24 194.79.12.0/24 maxlen: 24 194.79.13.0/24 maxlen: 24 195.68.214.0/23 maxlen: 24 195.68.214.0/24 maxlen: 24 195.68.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c5:c1:35:57:cb:fb:77:49:fd:42:ef:e5:11:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34d0766afc8295d7083022f47f43115a3b263c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:0a:88:8c:45:22:fb:40:b2:c3:1b:d1:d3: 67:6a:f0:0a:01:87:d6:a2:4d:49:c7:d9:2d:e7:9d: ba:84:fa:34:59:7c:d7:07:f2:af:a0:4a:06:5f:a4: a6:50:74:e8:c7:b1:c8:9d:cb:62:5a:e5:13:92:f5: fe:be:30:0b:9b:0c:57:78:08:c0:c4:82:54:29:62: da:c3:14:74:4f:83:ec:96:ba:55:a9:a2:8a:88:74: a7:8d:0e:50:ae:ff:9c:34:58:d1:b2:14:2f:06:98: d5:d2:ab:58:cc:b9:f2:84:b5:e9:20:da:99:db:19: 87:6d:64:3c:84:65:18:77:32:b9:ee:2c:e0:fa:b1: 8e:98:59:6c:c3:a2:71:57:28:bd:ca:cb:6e:8b:a2: cd:fa:d8:f3:ac:35:4a:b3:f5:28:3c:f7:15:f5:60: 98:d1:e5:d0:0b:d3:15:dd:d4:29:42:9f:08:9a:c8: 8f:85:f8:40:01:e5:b5:12:63:c2:b2:8f:2c:31:85: b2:de:df:b4:79:20:f5:82:df:7d:2d:35:83:88:ef: 04:df:07:93:d4:03:d3:00:9f:24:5d:fb:d0:63:ca: 90:d8:73:7e:69:5d:a3:f5:75:2c:3c:d3:c2:1f:65: d2:d9:eb:41:b4:c5:48:e0:52:80:09:2d:96:f3:07: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D0:76:6A:FC:82:95:D7:08:30:22:F4:7F:43:11:5A:3B:26:3C:68 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/NNB2avyCldcIMCL0f0MRWjsmPGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.131.0-88.80.133.255 88.80.152.0/21 193.108.24.0/24 194.79.12.0/23 195.68.214.0/23 Signature Algorithm: sha256WithRSAEncryption 26:96:8f:4e:3a:24:f1:82:a6:7d:c3:0b:cd:67:13:7f:e6:37: 97:64:79:24:0b:4d:70:9d:11:08:e4:f9:ae:3e:5d:4e:52:4b: 0b:3b:84:0f:10:55:36:19:d5:44:5e:2b:47:1b:92:e7:f0:3b: 9c:34:39:05:37:0a:f6:d5:fa:bf:61:b7:10:f5:04:1e:cb:d0: fc:52:7d:89:a7:64:9d:46:6a:42:8e:b4:dd:c3:ce:26:7f:70: bb:62:a8:b4:55:03:f4:f3:d2:d6:f7:c0:a3:58:6b:6f:b3:10: df:4c:bd:d1:b8:5b:ab:c4:b5:3a:c5:33:67:fc:ae:4b:51:f8: 50:42:cc:83:c0:de:7b:bf:38:6c:54:e6:fd:a4:dc:f4:ea:8d: 87:1f:1b:94:cc:8a:47:e1:50:91:94:c5:38:fa:52:d9:d2:2d: 40:9a:f8:8f:c4:fb:a2:46:8d:63:10:79:33:2d:79:ae:81:bc: cc:a2:71:89:b7:55:b6:82:81:77:97:65:c1:04:0a:a8:3d:f0: 2d:f3:b7:40:f6:2a:9c:cb:84:32:32:69:3d:3d:72:1b:b8:c5: 7a:8f:bf:2a:f9:d0:e0:8d:66:90:45:6d:37:8a:a1:20:9f:ac: 93:cb:ad:cd:c1:2e:d8:7a:77:79:53:1a:66:f1:b6:e4:34:94: 8b:13:7b:b1 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87cXBNVfL+3dJ/ULv5RGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQwNzY2YWZjODI5NWQ3MDgzMDIyZjQ3ZjQzMTE1YTNiMjYzYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAcKiIxFIvtAssMb0dNnavAKAYfW ok1Jx9kt5526hPo0WXzXB/KvoEoGX6SmUHTox7HInctiWuUTkvX+vjALmwxXeAjA xIJUKWLawxR0T4PslrpVqaKKiHSnjQ5Qrv+cNFjRshQvBpjV0qtYzLnyhLXpINqZ 2xmHbWQ8hGUYdzK57izg+rGOmFlsw6JxVyi9ystui6LN+tjzrDVKs/UoPPcV9WCY 0eXQC9MV3dQpQp8ImsiPhfhAAeW1EmPCso8sMYWy3t+0eSD1gt99LTWDiO8E3weT 1APTAJ8kXfvQY8qQ2HN+aV2j9XUsPNPCH2XS2etBtMVI4FKACS2W8wer7QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDTQdmr8gpXXCDAi9H9DEVo7JjxoMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvTk5CMmF2eUNsZGNJTUNMMGYwTVJXanNtUEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABYUIMD BAFYUIQDBANYUJgDBADBbBgDBAHCTwwDBAHDRNYwDQYJKoZIhvcNAQELBQADggEB ACaWj046JPGCpn3DC81nE3/mN5dkeSQLTXCdEQjk+a4+XU5SSws7hA8QVTYZ1URe K0cbkufwO5w0OQU3CvbV+r9htxD1BB7L0PxSfYmnZJ1GakKOtN3DziZ/cLtiqLRV A/Tz0tb3wKNYa2+zEN9MvdG4W6vEtTrFM2f8rktR+FBCzIPA3nu/OGxU5v2k3PTq jYcfG5TMikfhUJGUxTj6UtnSLUCa+I/E+6JGjWMQeTMtea6BvMyicYm3VbaCgXeX ZcEECqg98C3zt0D2KpzLhDIyaT09chu4xXqPvyr50OCNZpBFbTeKoSCfrJPLrc3B Lth6d3lTGmbxtuQ0lIsTe7E= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:38 2026 by rpki-client