This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/NmILLaZO13ylxBiJtXCUuUjLxwc.roa File: NmILLaZO13ylxBiJtXCUuUjLxwc.roa (raw, json) Hash identifier: ouwe61Qw3KErUT8wYroof+WiBVltIWBJpKDg8a/XyWg= Subject key identifier: 36:62:0B:2D:A6:4E:D7:7C:A5:C4:18:89:B5:70:94:B9:48:CB:C7:07 Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Certificate serial: 019B7834D5E13E7B0872466F3B8A9C5B3DF7 Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/NmILLaZO13ylxBiJtXCUuUjLxwc.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41307 IP address blocks: 88.133.192.0/19 maxlen: 19 89.28.136.0/21 maxlen: 21 109.69.96.0/21 maxlen: 21 185.39.64.0/22 maxlen: 22 2a02:ca00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d5:e1:3e:7b:08:72:46:6f:3b:8a:9c:5b:3d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36620b2da64ed77ca5c41889b57094b948cbc707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:a5:1b:10:47:fe:d5:8e:8a:0b:0c:55:f7: cc:fc:cf:d3:88:b7:02:b4:8f:b9:31:6a:67:a3:fa: d1:2a:92:5b:dc:d9:e1:9c:d3:b4:45:69:c7:b8:5f: 51:4c:b4:f4:0f:67:fd:42:99:ac:5b:33:e4:fe:6c: 28:aa:68:87:83:86:9b:c1:c1:da:fe:e2:91:e7:6a: f5:3c:74:c0:56:88:ab:3b:32:97:60:b8:1a:2d:08: 8f:e7:21:97:24:30:38:2d:49:00:8c:24:ca:ff:30: 33:41:10:20:33:ae:bd:d9:c4:08:81:d7:ae:5a:0e: d2:8f:d4:c0:60:09:33:2c:73:dc:e1:79:cc:98:58: 26:b7:9b:6a:ef:90:35:fb:14:91:c3:28:38:07:cb: 03:8c:6d:78:8e:12:08:26:73:77:9a:a6:82:17:a3: 45:bc:6f:26:b8:22:9d:3c:00:8f:20:88:d8:4c:2b: 87:12:39:4c:ec:35:f5:db:d2:ab:1b:04:0b:ca:09: 53:e5:0f:2b:f3:20:37:92:6f:69:05:82:b1:6e:dd: b5:d7:c3:af:80:fe:46:d0:68:bc:74:4a:65:36:3d: 16:55:b5:41:55:58:d2:c6:98:31:e5:49:49:b2:cf: 8b:a8:0d:a9:fc:92:fa:42:75:7b:50:11:d5:61:12: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:0B:2D:A6:4E:D7:7C:A5:C4:18:89:B5:70:94:B9:48:CB:C7:07 X509v3 Authority Key Identifier: keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/NmILLaZO13ylxBiJtXCUuUjLxwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.133.192.0/19 89.28.136.0/21 109.69.96.0/21 185.39.64.0/22 IPv6: 2a02:ca00::/29 Signature Algorithm: sha256WithRSAEncryption 5d:57:c3:b1:be:bd:ce:02:8e:01:78:3f:92:cb:f4:90:89:44: 37:2a:de:b3:4a:e6:c0:6a:6a:26:41:bf:a2:6e:c2:98:27:d6: f3:03:7a:cc:d0:a9:3b:a8:e9:7f:75:19:36:5f:6e:52:ca:fa: 17:81:b7:58:7c:8f:68:2e:bd:bc:91:dc:e2:2a:06:37:72:51: de:a7:f5:2b:ef:31:c9:8f:11:a0:e5:74:47:29:56:6c:de:75: 1a:71:fb:2e:5b:72:69:b4:2f:6a:a8:ee:19:8c:ab:79:95:e0: 42:ed:29:ea:a5:05:4c:b8:a8:68:62:e9:68:0a:b7:f3:0f:2a: 69:88:bb:e9:2c:32:31:e6:75:44:b6:5c:a3:7a:10:39:26:dc: de:2c:15:19:ff:93:61:19:51:f5:44:d9:f2:dd:cb:25:79:93: ff:29:07:59:22:86:d9:5c:16:f5:59:7d:d1:26:fb:ae:62:48: 11:92:25:cb:a1:28:76:81:cc:82:96:e2:11:98:38:d1:8d:d7: dd:ed:b9:3d:38:f3:9d:70:ae:2b:02:61:5c:11:c2:bc:58:7f: 1e:f1:80:28:06:76:3d:7e:13:96:49:d7:81:c7:fc:5f:90:a1: 15:ee:f7:18:95:07:56:ea:9f:8b:8f:f7:86:3f:96:6d:fd:42: e0:e6:69:cb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NNXhPnsIckZvO4qcWz33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzhhYTdlMzE2YjIxZjg0M2NmYjk1ODEwYzY4MGNkZGJm YTZlNmYwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjYyMGIyZGE2NGVkNzdjYTVjNDE4ODliNTcwOTRiOTQ4Y2JjNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0KlGxBH/tWOigsMVffM/M/TiLcC tI+5MWpno/rRKpJb3NnhnNO0RWnHuF9RTLT0D2f9QpmsWzPk/mwoqmiHg4abwcHa /uKR52r1PHTAVoirOzKXYLgaLQiP5yGXJDA4LUkAjCTK/zAzQRAgM6692cQIgdeu Wg7Sj9TAYAkzLHPc4XnMmFgmt5tq75A1+xSRwyg4B8sDjG14jhIIJnN3mqaCF6NF vG8muCKdPACPIIjYTCuHEjlM7DX129KrGwQLyglT5Q8r8yA3km9pBYKxbt2118Ov gP5G0Gi8dEplNj0WVbVBVVjSxpgx5UlJss+LqA2p/JL6QnV7UBHVYRIQcwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDZiCy2mTtd8pcQYibVwlLlIy8cHMB8GA1UdIwQY MBaAFMp4qn4xayH4Q8+5WBDGgM3b+m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYt ZTMxMzhmZjFlODk5LzEvTm1JTExhWk8xM3lseEJpSnRYQ1V1VWpMeHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYtZTMxMzhmZjFlODk5 LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFWIXAAwQD WRyIAwQDbUVgAwQCuSdAMA0EAgACMAcDBQMqAsoAMA0GCSqGSIb3DQEBCwUAA4IB AQBdV8Oxvr3OAo4BeD+Sy/SQiUQ3Kt6zSubAamomQb+ibsKYJ9bzA3rM0Kk7qOl/ dRk2X25SyvoXgbdYfI9oLr28kdziKgY3clHep/Ur7zHJjxGg5XRHKVZs3nUacfsu W3JptC9qqO4ZjKt5leBC7SnqpQVMuKhoYuloCrfzDyppiLvpLDIx5nVEtlyjehA5 JtzeLBUZ/5NhGVH1RNny3csleZP/KQdZIobZXBb1WX3RJvuuYkgRkiXLoSh2gcyC luIRmDjRjdfd7bk9OPOdcK4rAmFcEcK8WH8e8YAoBnY9fhOWSdeBx/xfkKEV7vcY lQdW6p+Lj/eGP5Zt/ULg5mnL -----END CERTIFICATE-----Generated at Tue Feb 10 01:03:13 2026 by rpki-client