This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/nr8lW7LJeu80m0E_S0gpv-BN-l4.roa File: nr8lW7LJeu80m0E_S0gpv-BN-l4.roa (raw, json) Hash identifier: 8epX4kAHm6J13cTQ31wHWPw9GCAUA92WpDr4PDJ5bLo= Subject key identifier: 9E:BF:25:5B:B2:C9:7A:EF:34:9B:41:3F:4B:48:29:BF:E0:4D:FA:5E Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111643920C44C1A7B7B7966E5326D6 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/nr8lW7LJeu80m0E_S0gpv-BN-l4.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 107.161.163.0/24 maxlen: 24 107.161.164.0/24 maxlen: 24 107.161.165.0/24 maxlen: 24 107.161.166.0/24 maxlen: 24 107.161.167.0/24 maxlen: 24 107.161.172.0/24 maxlen: 24 107.161.173.0/24 maxlen: 24 155.254.63.0/24 maxlen: 24 2a07:9942:39d6::/48 maxlen: 48 2a07:9944:40::/48 maxlen: 48 2a07:9945:45::/48 maxlen: 48 2a07:9946::/32 maxlen: 48 2a07:9947::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:16:43:92:0c:44:c1:a7:b7:b7:96:6e:53:26:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ebf255bb2c97aef349b413f4b4829bfe04dfa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:c6:31:47:66:17:f4:6b:f2:60:0b:42:2b: 3d:4f:2f:b7:c2:07:a8:6b:c5:d5:d4:a2:46:aa:21: 4d:9b:48:57:60:d6:c8:19:45:af:6c:76:cf:6a:d9: 9e:04:35:1e:34:d5:9a:56:48:85:a0:c4:a7:c2:d6: 60:69:d9:c9:24:a4:c9:ba:79:5b:91:7e:88:85:60: ae:c2:7f:b4:8e:22:8f:26:ac:62:bd:82:19:dd:cf: 7c:e4:8f:7b:dc:e7:fa:20:52:3e:e9:25:31:ab:7c: ec:3a:d7:f6:16:1b:a6:54:95:07:15:90:11:fd:b1: 83:ac:51:08:c9:33:cc:52:0a:db:b1:66:3f:60:66: 4a:73:da:15:1d:af:71:06:62:1c:2a:13:46:f2:dc: 89:6b:3b:2c:b3:37:eb:76:2a:35:39:01:b6:65:ba: 08:a6:06:b5:bd:4c:87:95:e3:ec:84:4f:0a:86:7d: 1d:db:81:ad:a7:d4:4a:48:32:50:94:6c:23:0d:d7: b9:48:aa:85:06:82:81:61:12:a3:44:52:e0:65:26: 2a:71:0d:dd:d1:e9:62:5d:a2:d5:47:d2:96:a2:95: a1:51:19:ff:b8:40:4a:7a:74:b1:1f:f6:83:45:34: b9:a7:58:2d:84:d8:a0:52:5f:5b:26:25:82:54:97: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:25:5B:B2:C9:7A:EF:34:9B:41:3F:4B:48:29:BF:E0:4D:FA:5E X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/nr8lW7LJeu80m0E_S0gpv-BN-l4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.161.163.0-107.161.167.255 107.161.172.0/23 155.254.63.0/24 IPv6: 2a07:9942:39d6::/48 2a07:9944:40::/48 2a07:9945:45::/48 2a07:9946::/31 Signature Algorithm: sha256WithRSAEncryption 8b:fb:fe:1a:d5:c1:c6:42:e2:32:b4:58:ad:67:b9:ca:c4:88: 36:01:b3:ad:14:61:5a:1e:ff:18:a3:12:73:5b:48:da:69:a7: 00:7c:dd:7f:19:da:37:ff:9e:4a:fd:a6:3e:2f:7b:ec:51:83: 37:06:b2:4c:b6:1c:7e:e3:f2:13:3d:57:f0:6a:b0:45:83:9d: f7:e0:22:f3:f7:36:3b:92:c1:54:9c:a4:42:2f:b6:dc:b7:58: 2f:72:b1:24:88:d7:07:54:7e:6e:bc:1a:1b:51:e3:6f:5e:4c: f0:31:d8:e2:4f:89:b0:66:9b:d9:e4:a4:73:00:e9:20:bc:03: 05:a9:a7:30:6a:8e:04:a1:a7:d2:51:eb:02:11:d7:bb:f7:0b: 33:29:14:f2:2b:0d:b2:84:98:4e:94:e8:f6:ae:25:83:2f:d6: 92:70:ae:d6:9e:f5:27:27:be:e3:46:5d:ef:23:8c:78:34:cb: 33:b4:71:93:84:1f:e9:a8:31:63:91:d7:81:5d:60:91:9a:54: d5:c6:b9:ce:dc:88:87:20:6e:c0:56:dc:5c:bd:8e:64:4a:b0: 0e:5f:06:98:0d:f2:a0:0f:83:47:f7:62:91:5d:74:74:46:85: 20:cf:51:bf:30:68:db:35:e4:b7:1b:99:2c:d2:e2:01:39:de: cf:dc:0b:0b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt5ERZDkgxEwae3t5ZuUybWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWJmMjU1YmIyYzk3YWVmMzQ5YjQxM2Y0YjQ4MjliZmUwNGRmYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5rGMUdmF/Rr8mALQis9Ty+3wgeo a8XV1KJGqiFNm0hXYNbIGUWvbHbPatmeBDUeNNWaVkiFoMSnwtZgadnJJKTJunlb kX6IhWCuwn+0jiKPJqxivYIZ3c985I973Of6IFI+6SUxq3zsOtf2FhumVJUHFZAR /bGDrFEIyTPMUgrbsWY/YGZKc9oVHa9xBmIcKhNG8tyJazssszfrdio1OQG2ZboI pga1vUyHlePshE8Khn0d24Gtp9RKSDJQlGwjDde5SKqFBoKBYRKjRFLgZSYqcQ3d 0eliXaLVR9KWopWhURn/uEBKenSxH/aDRTS5p1gthNigUl9bJiWCVJfBxwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFJ6/JVuyyXrvNJtBP0tIKb/gTfpeMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvbnI4bFc3TEpldTgwbTBFX1MwZ3B2LUJOLWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAgBAIAATAaMAwDBABroaMD BANroaADBAFroawDBACb/j8wKAQCAAIwIgMHACoHmUI51gMHACoHmUQAQAMHACoH mUUARQMFASoHmUYwDQYJKoZIhvcNAQELBQADggEBAIv7/hrVwcZC4jK0WK1nucrE iDYBs60UYVoe/xijEnNbSNpppwB83X8Z2jf/nkr9pj4ve+xRgzcGsky2HH7j8hM9 V/BqsEWDnffgIvP3NjuSwVScpEIvtty3WC9ysSSI1wdUfm68GhtR429eTPAx2OJP ibBmm9nkpHMA6SC8AwWppzBqjgShp9JR6wIR17v3CzMpFPIrDbKEmE6U6PauJYMv 1pJwrtae9ScnvuNGXe8jjHg0yzO0cZOEH+moMWOR14FdYJGaVNXGuc7ciIcgbsBW 3Fy9jmRKsA5fBpgN8qAPg0f3YpFddHRGhSDPUb8waNs15LcbmSzS4gE53s/cCws= -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:01 2026 by rpki-client