This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/NKEvDzhxDBmLfFoED7YoUdXjLow.roa File: NKEvDzhxDBmLfFoED7YoUdXjLow.roa (raw, json) Hash identifier: 29vPP7S5TvS0wSCUMz6/EH7GaUe47diCIdiBQvatduI= Subject key identifier: 34:A1:2F:0F:38:71:0C:19:8B:7C:5A:04:0F:B6:28:51:D5:E3:2E:8C Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0 Certificate serial: 019B78A37232E5D2AEFF3BED5A628CC0666B Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/NKEvDzhxDBmLfFoED7YoUdXjLow.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 89.31.192.0/21 maxlen: 21 89.31.192.0/24 maxlen: 24 89.31.193.0/24 maxlen: 24 89.31.194.0/24 maxlen: 24 89.31.195.0/24 maxlen: 24 89.31.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:32:e5:d2:ae:ff:3b:ed:5a:62:8c:c0:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34a12f0f38710c198b7c5a040fb62851d5e32e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:6e:86:1d:00:e6:8c:1e:62:24:c9:e4:fd: 78:f2:2d:27:79:78:2c:da:5a:20:51:85:9a:dc:b4: b8:b3:68:24:f7:ac:44:4d:e8:c7:0e:ef:c9:31:8c: c8:ee:1f:b2:f7:22:cc:bf:5c:4d:a4:ae:2c:94:4b: ba:bb:85:21:44:16:27:a0:14:22:8a:27:1c:eb:04: 16:80:e7:2b:94:fc:ad:02:ae:bc:e1:77:31:61:ad: e5:ad:ee:2e:ec:b6:39:9d:4e:9d:9d:ea:23:8f:41: 90:94:9c:55:e0:3d:9b:c3:89:d4:a8:b2:6e:6d:67: 58:0f:3d:d4:f5:b5:b0:e9:f2:c1:3b:b9:46:87:e5: 72:d2:9f:16:ad:dc:ce:cc:64:db:0d:b4:a1:ee:d7: 00:6f:6e:1e:65:10:82:ea:d5:32:b6:80:52:74:0c: e4:95:2e:8f:c3:eb:2f:3e:0a:45:93:27:cb:16:43: 01:54:f0:00:3b:e3:98:11:ec:2b:cf:31:44:2c:bb: 5b:2c:fd:45:7c:7a:1f:bc:79:3b:68:c3:e7:12:59: fc:a5:29:21:51:22:d4:22:2e:a2:55:27:a7:59:c8: 54:89:60:5e:d3:33:da:17:a1:a3:41:f6:3c:f8:96: 5d:54:a7:0a:1c:28:7e:99:2e:9c:e8:1e:ba:ee:4b: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A1:2F:0F:38:71:0C:19:8B:7C:5A:04:0F:B6:28:51:D5:E3:2E:8C X509v3 Authority Key Identifier: keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/NKEvDzhxDBmLfFoED7YoUdXjLow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.192.0/21 Signature Algorithm: sha256WithRSAEncryption 64:6e:24:42:61:2e:51:df:3f:be:05:7a:23:11:82:d1:bb:5a: 0b:a8:ac:f7:00:75:19:b1:8b:f6:2d:bc:da:dd:d2:ef:95:0e: 49:18:df:32:50:19:fa:0f:6a:ff:12:6a:f3:4d:64:05:0d:90: fc:72:d5:68:ac:c8:f6:81:9a:07:ef:bc:86:fd:bf:0c:7d:7d: 95:ec:9d:49:34:1a:3e:df:2d:b9:91:38:31:a2:10:bb:0d:d2: d7:fc:01:54:50:a5:65:35:1f:62:50:45:a6:0c:de:6a:b4:b9: cc:b4:42:ef:22:9f:f1:76:fe:0f:32:7a:ad:ad:67:65:c8:4a: 62:58:21:84:44:cb:3d:9d:ac:d3:33:7b:65:87:b8:61:ac:43: 7f:a7:ad:2a:c5:59:27:7f:e1:9d:e8:61:45:9a:a6:a1:1e:b1: 18:60:02:b1:b0:76:81:43:62:c2:ed:f0:b5:03:63:be:23:5b: a0:01:6c:1a:e3:c2:45:bd:45:1d:4c:d9:50:f9:21:df:2f:c3: 4d:04:88:c3:bd:a6:79:ad:25:9e:fd:1f:a1:15:0e:49:99:a3: 8d:dd:f5:b9:cf:af:59:be:ea:43:8b:d8:20:9d:48:e9:95:44: 63:08:b6:2c:0d:f0:89:41:d3:60:bc:5e:91:47:ec:62:48:21: dd:a7:ba:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3Iy5dKu/zvtWmKMwGZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUw OGI5YjAwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGExMmYwZjM4NzEwYzE5OGI3YzVhMDQwZmI2Mjg1MWQ1ZTMyZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZpuhh0A5oweYiTJ5P148i0neXgs 2logUYWa3LS4s2gk96xETejHDu/JMYzI7h+y9yLMv1xNpK4slEu6u4UhRBYnoBQi iicc6wQWgOcrlPytAq684XcxYa3lre4u7LY5nU6dneojj0GQlJxV4D2bw4nUqLJu bWdYDz3U9bWw6fLBO7lGh+Vy0p8WrdzOzGTbDbSh7tcAb24eZRCC6tUytoBSdAzk lS6Pw+svPgpFkyfLFkMBVPAAO+OYEewrzzFELLtbLP1FfHofvHk7aMPnEln8pSkh USLUIi6iVSenWchUiWBe0zPaF6GjQfY8+JZdVKcKHCh+mS6c6B667ksPtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDShLw84cQwZi3xaBA+2KFHV4y6MMB8GA1UdIwQY MBaAFBNEA2YAfrVvEOn5npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYt NDRjMWE0ZWI5NjljLzEvTktFdkR6aHhEQm1MZkZvRUQ3WW9VZFhqTG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5Njlj LzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWR/AMA0G CSqGSIb3DQEBCwUAA4IBAQBkbiRCYS5R3z++BXojEYLRu1oLqKz3AHUZsYv2Lbza 3dLvlQ5JGN8yUBn6D2r/EmrzTWQFDZD8ctVorMj2gZoH77yG/b8MfX2V7J1JNBo+ 3y25kTgxohC7DdLX/AFUUKVlNR9iUEWmDN5qtLnMtELvIp/xdv4PMnqtrWdlyEpi WCGERMs9nazTM3tlh7hhrEN/p60qxVknf+Gd6GFFmqahHrEYYAKxsHaBQ2LC7fC1 A2O+I1ugAWwa48JFvUUdTNlQ+SHfL8NNBIjDvaZ5rSWe/R+hFQ5JmaON3fW5z69Z vupDi9ggnUjplURjCLYsDfCJQdNgvF6RR+xiSCHdp7p5 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:12 2026 by rpki-client