This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/nFQlym1aMKDG1iZXPXNlMoKyhB0.roa File: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (raw, json) Hash identifier: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI= Subject key identifier: 9C:54:25:CA:6D:5A:30:A0:C6:D6:26:57:3D:73:65:32:82:B2:84:1D Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Certificate serial: 019B79ED66A3877DA1124D13EFDF0D8DD66A Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/nFQlym1aMKDG1iZXPXNlMoKyhB0.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43070 IP address blocks: 77.95.40.0/21 maxlen: 21 89.187.192.0/22 maxlen: 22 89.187.196.0/23 maxlen: 23 185.45.136.0/22 maxlen: 22 2a02:910::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:66:a3:87:7d:a1:12:4d:13:ef:df:0d:8d:d6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c5425ca6d5a30a0c6d626573d73653282b2841d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:37:4b:51:01:86:a4:8b:fa:08:7c:67:27: b7:4f:8d:8e:9a:1d:26:54:66:db:40:df:74:7b:2e: 65:b3:bf:d9:a9:a6:77:a0:0f:94:3b:5d:da:dd:d8: f0:f0:d1:48:d1:d8:44:04:d6:6f:17:69:8e:e7:e4: 95:ab:2d:bc:0f:6c:d2:5e:8c:dc:1e:3e:6c:ab:7d: bd:3a:d6:88:9a:8c:fa:64:aa:ed:36:c7:fc:fc:61: ce:cb:bd:6c:38:d0:1a:14:35:ee:36:4b:16:3e:8a: 70:ab:ac:ca:2e:35:6e:95:6e:e0:f8:5e:82:30:fa: bf:93:ec:53:45:a5:c5:e6:4d:48:f7:3a:16:86:e0: d4:19:86:c6:5e:32:30:10:b7:cf:5f:8b:cd:61:31: b1:74:c3:b1:16:cc:4b:04:60:28:67:e2:99:73:69: 8a:a3:c9:ef:42:b8:c9:32:78:69:04:99:d1:6e:60: 7b:ee:c1:6e:d5:a2:00:6e:77:08:8b:31:cb:d7:8c: 78:fa:fc:46:d2:9f:7b:0e:be:89:0b:4b:f6:bc:b8: 85:81:9d:75:26:82:f6:a6:d7:aa:4a:e3:8d:79:27: 70:58:37:4f:c6:ef:62:3b:41:a8:f4:d4:e2:77:16: 61:7a:cb:9b:d7:16:d0:79:4c:71:0b:06:6b:88:c0: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:25:CA:6D:5A:30:A0:C6:D6:26:57:3D:73:65:32:82:B2:84:1D X509v3 Authority Key Identifier: keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/nFQlym1aMKDG1iZXPXNlMoKyhB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.40.0/21 89.187.192.0-89.187.197.255 185.45.136.0/22 IPv6: 2a02:910::/32 Signature Algorithm: sha256WithRSAEncryption 93:4d:d6:e3:e3:c6:03:70:72:5e:42:34:5c:b0:8a:65:9d:17: 87:b1:f7:62:0c:e1:a7:e3:91:4f:7e:03:3f:3b:b0:e4:b5:23: 2a:e8:12:92:b0:90:0c:d6:13:1d:ef:f5:56:69:4a:fe:a1:45: d4:c6:e4:fa:8d:21:b8:29:ee:1a:7e:9a:af:1b:5d:dd:48:9a: 91:76:15:36:bc:20:aa:03:37:d6:03:0a:18:7b:c6:95:f4:c3: a4:17:b4:e5:ca:9d:09:41:85:41:2a:42:a0:1a:34:fe:38:8f: 28:e4:c2:52:42:05:e3:76:53:ec:60:0c:6a:0b:d3:2e:93:2c: eb:95:d6:0d:44:d2:70:7b:42:31:05:23:57:3f:ec:7c:ec:24: ce:65:d4:69:01:65:54:83:03:0e:61:93:68:01:eb:46:07:83: 09:bb:59:d1:5f:24:03:f8:45:e4:b1:45:b0:01:21:c2:1c:ec: 19:27:ae:b8:7e:84:3f:cc:20:55:3d:34:f5:3e:f0:7d:b8:86: af:dd:ab:5c:87:f9:f8:72:44:7a:42:66:27:93:7a:2b:83:67: 9e:fe:f4:be:d6:3b:37:7f:56:6f:cc:25:7c:f7:16:39:52:d9: 9f:b4:a9:da:13:55:14:d0:39:a0:78:50:b7:15:ab:10:11:ba: 01:f7:81:99 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt57Wajh32hEk0T798NjdZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi ZWM4OTQwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzU0MjVjYTZkNWEzMGEwYzZkNjI2NTczZDczNjUzMjgyYjI4NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT03S1EBhqSL+gh8Zye3T42Omh0m VGbbQN90ey5ls7/ZqaZ3oA+UO13a3djw8NFI0dhEBNZvF2mO5+SVqy28D2zSXozc Hj5sq329OtaImoz6ZKrtNsf8/GHOy71sONAaFDXuNksWPopwq6zKLjVulW7g+F6C MPq/k+xTRaXF5k1I9zoWhuDUGYbGXjIwELfPX4vNYTGxdMOxFsxLBGAoZ+KZc2mK o8nvQrjJMnhpBJnRbmB77sFu1aIAbncIizHL14x4+vxG0p97Dr6JC0v2vLiFgZ11 JoL2pteqSuONeSdwWDdPxu9iO0Go9NTidxZhesub1xbQeUxxCwZriMAwAwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJxUJcptWjCgxtYmVz1zZTKCsoQdMB8GA1UdIwQY MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct YTkyOTM0Y2IxZGU4LzEvbkZRbHltMWFNS0RHMWlaWFBYTmxNb0t5aEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4 LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDTV8oMAwD BAZZu8ADBAFZu8QDBAK5LYgwDQQCAAIwBwMFACoCCRAwDQYJKoZIhvcNAQELBQAD ggEBAJNN1uPjxgNwcl5CNFywimWdF4ex92IM4afjkU9+Az87sOS1IyroEpKwkAzW Ex3v9VZpSv6hRdTG5PqNIbgp7hp+mq8bXd1ImpF2FTa8IKoDN9YDChh7xpX0w6QX tOXKnQlBhUEqQqAaNP44jyjkwlJCBeN2U+xgDGoL0y6TLOuV1g1E0nB7QjEFI1c/ 7HzsJM5l1GkBZVSDAw5hk2gB60YHgwm7WdFfJAP4ReSxRbABIcIc7Bknrrh+hD/M IFU9NPU+8H24hq/dq1yH+fhyRHpCZieTeiuDZ57+9L7WOzd/Vm/MJXz3FjlS2Z+0 qdoTVRTQOaB4ULcVqxARugH3gZk= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client