This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/NRznvrL2YoG-cf38M2vLuaml8bA.roa File: NRznvrL2YoG-cf38M2vLuaml8bA.roa (raw, json) Hash identifier: YLx0qtcJ0lvI55iXCy8XgdkJQcz4Gczwi13PC6t9rHM= Subject key identifier: 35:1C:E7:BE:B2:F6:62:81:BE:71:FD:FC:33:6B:CB:B9:A9:A5:F1:B0 Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611 Certificate serial: 019B7A5AF05D82D8E4A8856FAC0025AB426F Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/NRznvrL2YoG-cf38M2vLuaml8bA.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34442 IP address blocks: 46.232.192.0/21 maxlen: 24 77.246.16.0/20 maxlen: 24 80.77.240.0/20 maxlen: 24 88.83.96.0/19 maxlen: 24 185.89.120.0/22 maxlen: 24 185.93.5.0/24 maxlen: 24 195.8.116.0/24 maxlen: 24 195.80.0.0/19 maxlen: 24 2a00:1990::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f0:5d:82:d8:e4:a8:85:6f:ac:00:25:ab:42:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=351ce7beb2f66281be71fdfc336bcbb9a9a5f1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:e8:41:dc:96:f5:c0:03:ae:dd:19:fd:d4: 83:8a:67:34:e5:89:a5:f5:33:aa:45:1f:b8:b9:4f: d5:83:97:ad:ca:3d:85:aa:16:d8:2c:85:d3:bc:ac: 47:c0:e8:dd:c6:26:7b:e7:11:cd:74:b8:85:93:b2: ce:3e:73:91:a7:c4:51:4e:ed:58:62:5d:2d:a3:67: 25:e1:2c:f7:b1:06:2b:95:3d:ca:d9:b0:89:4a:16: cc:0b:bc:33:6d:bd:bc:3e:e6:78:ac:3f:ed:f2:10: d5:04:94:a5:9a:12:49:6c:69:f3:62:a5:a3:d5:84: aa:ab:4e:bb:5e:a9:09:66:25:4e:a9:be:28:5f:33: 44:b4:f3:43:2c:e9:a7:9e:a2:f1:f4:70:bd:00:4e: b4:3e:8d:ba:bf:c8:82:1c:ee:7d:c0:c5:6d:b1:64: 0e:9d:d8:e0:fa:f7:6c:64:f1:da:2d:80:4a:2b:f5: 92:83:35:51:70:fe:5c:b9:98:75:0e:dd:d6:c0:a6: c7:f6:e0:1f:e5:8d:99:f3:c1:19:8f:21:99:c0:25: b3:1d:06:08:4c:b0:62:7b:ae:a5:56:9f:7b:14:85: 91:6d:9f:71:7e:8b:48:45:4d:cd:ad:dd:ad:a2:33: 37:ab:1b:fd:f5:7a:13:5a:02:4c:46:b0:f6:5b:26: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:E7:BE:B2:F6:62:81:BE:71:FD:FC:33:6B:CB:B9:A9:A5:F1:B0 X509v3 Authority Key Identifier: keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/NRznvrL2YoG-cf38M2vLuaml8bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.192.0/21 77.246.16.0/20 80.77.240.0/20 88.83.96.0/19 185.89.120.0/22 185.93.5.0/24 195.8.116.0/24 195.80.0.0/19 IPv6: 2a00:1990::/32 Signature Algorithm: sha256WithRSAEncryption c6:5b:1d:69:ff:6c:b9:43:47:4e:37:df:94:03:f3:92:d7:1c: 3e:6a:f1:99:f1:69:01:36:f5:05:d7:b0:8d:75:1e:67:38:2b: f1:d0:65:14:e7:ab:92:a6:8e:d0:83:d6:0a:ac:b9:ee:10:08: b9:12:c9:ac:10:77:d9:c5:f5:29:cc:1d:9b:6d:8a:7f:ec:cd: 11:cd:a0:d7:e5:ae:48:bf:d4:42:4e:71:0f:d7:9a:c4:ca:34: a8:e7:9e:69:6f:4a:5a:98:32:31:7c:31:61:e2:42:02:78:66: 43:71:f5:7a:b7:73:9a:3e:05:76:3b:d5:e8:5c:ec:04:36:4f: 1f:a0:e9:f8:30:74:b7:12:9a:08:86:86:d6:37:8f:cd:ce:33: d2:76:cf:ba:a9:66:05:b9:0b:61:d1:57:de:33:45:42:eb:c2: fb:d3:07:1b:08:b0:a7:f4:e8:ae:8e:ed:bc:8c:2e:1e:41:7d: c7:0e:b1:84:0b:1a:13:40:cf:72:81:e8:18:21:ed:70:1d:a6: f1:d5:50:e8:64:f7:32:77:a7:ba:4c:b2:6e:ea:19:66:c8:3f: 75:c5:96:fd:48:23:ab:11:df:2b:7c:57:e8:90:c8:a3:07:75: 35:4e:94:bc:85:f0:c3:86:b8:27:48:0e:40:a8:45:c1:af:4d: 08:08:62:6a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt6WvBdgtjkqIVvrAAlq0JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTM3M2ZlZTc4MGVlYWIyYTkwNDIyZDBhZDUxNGUwODRh OGQ2MTEwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTFjZTdiZWIyZjY2MjgxYmU3MWZkZmMzMzZiY2JiOWE5YTVmMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA147oQdyW9cADrt0Z/dSDimc05Yml 9TOqRR+4uU/Vg5etyj2FqhbYLIXTvKxHwOjdxiZ75xHNdLiFk7LOPnORp8RRTu1Y Yl0to2cl4Sz3sQYrlT3K2bCJShbMC7wzbb28PuZ4rD/t8hDVBJSlmhJJbGnzYqWj 1YSqq067XqkJZiVOqb4oXzNEtPNDLOmnnqLx9HC9AE60Po26v8iCHO59wMVtsWQO ndjg+vdsZPHaLYBKK/WSgzVRcP5cuZh1Dt3WwKbH9uAf5Y2Z88EZjyGZwCWzHQYI TLBie66lVp97FIWRbZ9xfotIRU3Nrd2tojM3qxv99XoTWgJMRrD2WyaVvwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFDUc576y9mKBvnH9/DNry7mppfGwMB8GA1UdIwQY MBaAFHPjc/7ngO6rKpBCLQrVFOCEqNYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTIt MDQxZmQ0YzZmZmQ0LzEvTlJ6bnZyTDJZb0ctY2YzOE0ydkx1YW1sOGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTItMDQxZmQ0YzZmZmQ0 LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDLujAAwQE TfYQAwQEUE3wAwQFWFNgAwQCuVl4AwQAuV0FAwQAwwh0AwQFw1AAMA0EAgACMAcD BQAqABmQMA0GCSqGSIb3DQEBCwUAA4IBAQDGWx1p/2y5Q0dON9+UA/OS1xw+avGZ 8WkBNvUF17CNdR5nOCvx0GUU56uSpo7Qg9YKrLnuEAi5EsmsEHfZxfUpzB2bbYp/ 7M0RzaDX5a5Iv9RCTnEP15rEyjSo555pb0pamDIxfDFh4kICeGZDcfV6t3OaPgV2 O9XoXOwENk8foOn4MHS3EpoIhobWN4/NzjPSds+6qWYFuQth0VfeM0VC68L70wcb CLCn9Oiuju28jC4eQX3HDrGECxoTQM9ygegYIe1wHabx1VDoZPcyd6e6TLJu6hlm yD91xZb9SCOrEd8rfFfokMijB3U1TpS8hfDDhrgnSA5AqEXBr00ICGJq -----END CERTIFICATE-----Generated at Tue Jan 27 04:57:58 2026 by rpki-client