This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa File: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (raw, json) Hash identifier: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw= Subject key identifier: 36:FD:18:93:A1:75:3F:A1:26:BA:50:D5:D8:09:EF:28:3A:65:C4:2B Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F2FB77C50B43F79FD7AFED39DB50C Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36743 IP address blocks: 2a05:b0c7:1803::/48 maxlen: 48 2a05:b0c7:1820::/44 maxlen: 44 2a05:b0c7:19c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2f:b7:7c:50:b4:3f:79:fd:7a:fe:d3:9d:b5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36fd1893a1753fa126ba50d5d809ef283a65c42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:3b:a0:ec:cf:c4:84:bc:32:63:a1:9f:40: 1d:97:8d:f7:34:8d:a2:91:f9:c8:b3:6e:b8:47:31: a0:8c:a5:07:08:b4:7b:c7:cd:47:62:5e:54:16:c5: 58:b8:b0:dd:b4:73:7f:d0:f3:10:44:3b:ab:e3:96: e2:47:63:90:9f:f7:38:f9:a1:3c:3a:48:08:26:ad: 99:c3:fa:66:1f:0b:b7:85:db:86:7e:de:49:76:4e: 5b:13:67:50:91:81:c1:7b:83:17:98:55:4f:c6:f2: 4b:81:49:12:98:c8:04:2e:97:84:77:2a:8c:8a:eb: bc:a1:b7:7b:5d:59:09:5e:b5:1b:e3:17:a4:3d:f6: 6a:96:aa:bf:13:d3:62:6d:c7:c0:f0:0e:11:1c:ae: 58:91:6b:7a:bf:ab:ec:c1:1b:d3:3d:39:c3:55:ac: 76:af:16:03:1d:14:8b:0c:c6:10:0f:3f:5c:1a:62: cc:c8:d5:04:21:71:a3:08:8d:c9:16:13:ae:52:4e: 68:88:e1:a7:f6:f3:d7:23:25:85:08:00:f3:60:9a: 51:50:6a:a9:f6:2c:ae:1d:d6:c1:7f:3e:3a:34:98: 98:0b:e2:eb:97:d7:9e:64:5a:0c:84:3c:55:9d:77: 5a:37:54:f4:ed:38:d5:0c:fe:1f:9e:09:e8:91:0d: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:18:93:A1:75:3F:A1:26:BA:50:D5:D8:09:EF:28:3A:65:C4:2B X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c7:1803::/48 2a05:b0c7:1820::/44 2a05:b0c7:19c0::/48 Signature Algorithm: sha256WithRSAEncryption 22:fa:ff:1f:6c:0d:f0:18:7b:fd:d0:21:70:55:1e:06:e9:d0: 7d:10:94:5f:1f:a2:a0:c3:f9:5a:8c:b8:9f:87:5a:76:67:ae: 32:05:98:25:b0:71:e7:5c:43:c9:8d:98:0f:f5:8d:b8:23:fe: c3:ed:4b:20:d1:75:78:4c:f6:03:38:4f:74:99:60:62:f3:41: 18:b7:f8:e7:70:02:0b:64:ec:6d:71:50:4a:1c:72:23:c0:de: 23:6f:b3:14:4c:e1:de:eb:ff:e8:33:89:16:7f:7f:77:bc:a6: aa:85:72:05:60:d4:0b:55:e5:e3:ad:85:0c:56:d3:e7:2c:ab: 6a:cf:1e:9f:b1:b5:ce:76:36:a7:01:48:e7:9c:0b:17:4d:18: c2:c1:21:29:fc:df:bf:99:f3:5d:9c:2a:05:e7:57:e6:a2:ae: eb:81:b3:44:58:94:b7:05:e8:bb:eb:ab:ff:b2:3a:fd:ae:eb: c8:35:eb:bf:ac:70:b1:95:02:76:b6:fb:b8:70:0c:c0:bf:91: 97:4a:64:d7:e9:a1:92:66:93:87:8d:7b:32:a9:35:89:e5:5b: 4d:0d:8f:3b:bd:5d:d0:09:06:56:6e:85:85:97:46:5b:c5:6c: d8:c8:7a:e9:ce:2d:2f:08:ad:37:b0:15:b1:0c:5c:91:f6:bb: 1c:78:b0:e2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fy+3fFC0P3n9ev7TnbUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmZkMTg5M2ExNzUzZmExMjZiYTUwZDVkODA5ZWYyODNhNjVjNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5s7oOzPxIS8MmOhn0Adl433NI2i kfnIs264RzGgjKUHCLR7x81HYl5UFsVYuLDdtHN/0PMQRDur45biR2OQn/c4+aE8 OkgIJq2Zw/pmHwu3hduGft5Jdk5bE2dQkYHBe4MXmFVPxvJLgUkSmMgELpeEdyqM iuu8obd7XVkJXrUb4xekPfZqlqq/E9NibcfA8A4RHK5YkWt6v6vswRvTPTnDVax2 rxYDHRSLDMYQDz9cGmLMyNUEIXGjCI3JFhOuUk5oiOGn9vPXIyWFCADzYJpRUGqp 9iyuHdbBfz46NJiYC+Lrl9eeZFoMhDxVnXdaN1T07TjVDP4fngnokQ2Y9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDb9GJOhdT+hJrpQ1dgJ7yg6ZcQrMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvTnYwWWs2RjFQNkVtdWxEVjJBbnZLRHBseENzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgWwxxgD AwcEKgWwxxggAwcAKgWwxxnAMA0GCSqGSIb3DQEBCwUAA4IBAQAi+v8fbA3wGHv9 0CFwVR4G6dB9EJRfH6Kgw/lajLifh1p2Z64yBZglsHHnXEPJjZgP9Y24I/7D7Usg 0XV4TPYDOE90mWBi80EYt/jncAILZOxtcVBKHHIjwN4jb7MUTOHe6//oM4kWf393 vKaqhXIFYNQLVeXjrYUMVtPnLKtqzx6fsbXOdjanAUjnnAsXTRjCwSEp/N+/mfNd nCoF51fmoq7rgbNEWJS3Bei766v/sjr9ruvINeu/rHCxlQJ2tvu4cAzAv5GXSmTX 6aGSZpOHjXsyqTWJ5VtNDY87vV3QCQZWboWFl0ZbxWzYyHrpzi0vCK03sBWxDFyR 9rsceLDi -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:46 2026 by rpki-client