This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NIWJ9b544URGWTLtmkZjvf2kxIA.roa File: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (raw, json) Hash identifier: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U= Subject key identifier: 34:85:89:F5:BE:78:E1:44:46:59:32:ED:9A:46:63:BD:FD:A4:C4:80 Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac Certificate serial: 019B7BA444F09388D43C10E0B4701E87AD3D Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NIWJ9b544URGWTLtmkZjvf2kxIA.roa Signing time: Thu 01 Jan 2026 22:18:41 +0000 ROA not before: Thu 01 Jan 2026 22:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58325 IP address blocks: 212.68.172.0/22 maxlen: 22 212.68.172.0/24 maxlen: 24 212.68.173.0/24 maxlen: 24 212.68.174.0/24 maxlen: 24 212.68.175.0/24 maxlen: 24 212.68.176.0/22 maxlen: 22 212.68.176.0/24 maxlen: 24 212.68.177.0/24 maxlen: 24 212.68.178.0/24 maxlen: 24 212.68.179.0/24 maxlen: 24 212.68.184.0/22 maxlen: 22 212.68.184.0/24 maxlen: 24 212.68.185.0/24 maxlen: 24 212.68.186.0/24 maxlen: 24 212.68.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:44:f0:93:88:d4:3c:10:e0:b4:70:1e:87:ad:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=348589f5be78e144465932ed9a4663bdfda4c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:4d:89:54:55:57:60:83:ce:fe:e2:4e:2b: 70:58:91:4b:b3:8d:98:f1:f2:64:d4:63:43:e8:53: 7c:1f:f0:a3:40:2d:08:ce:ca:7a:82:ec:03:ce:ac: 54:28:57:a7:52:68:c6:c6:16:c5:c5:a5:e3:09:a6: c1:cf:75:d6:1d:be:7a:9b:ad:e7:88:39:d0:7d:fb: b0:21:b8:9b:c6:2c:20:78:a3:4e:92:8a:e7:6f:25: 2a:8b:28:11:94:4b:ef:70:7d:20:ca:74:3b:c3:bc: 1b:4d:88:ef:74:0f:7e:8a:e0:2c:ce:50:d5:0a:e3: d1:c8:e5:45:f9:8f:1e:98:24:7a:8b:a9:e5:77:d4: 42:36:95:e9:c9:46:57:57:a2:03:8b:f9:31:da:69: 41:a0:3d:d1:9a:4b:f8:ef:37:a8:c5:0e:5e:0c:c8: 29:b5:bb:51:79:0f:1c:03:cc:db:fe:b1:37:9c:fc: 5f:b1:4f:bc:ae:f4:cc:3d:ae:8e:a7:09:36:02:a0: 38:b6:8c:67:a6:cd:94:3c:4e:ba:f1:e6:4a:3e:fe: 61:ec:bb:6d:66:5d:b5:f2:43:8b:aa:b9:08:eb:cd: 93:22:de:b2:18:22:c4:6e:82:21:a0:42:15:ef:8b: 6e:38:ed:bb:9b:97:12:38:91:fb:ab:e3:1a:d8:42: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:89:F5:BE:78:E1:44:46:59:32:ED:9A:46:63:BD:FD:A4:C4:80 X509v3 Authority Key Identifier: keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NIWJ9b544URGWTLtmkZjvf2kxIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.172.0-212.68.179.255 212.68.184.0/22 Signature Algorithm: sha256WithRSAEncryption 75:df:ce:59:99:23:9b:42:68:0e:8d:c9:fb:34:51:a8:65:9c: 58:75:df:b8:6c:95:9d:57:f0:45:6d:90:79:2a:b3:d1:9e:61: d5:ed:57:41:23:77:e7:2e:12:2a:29:92:22:56:0b:da:46:26: c8:e0:24:1e:54:8a:c6:6f:42:5d:d1:27:61:eb:34:19:57:bf: d4:b7:a7:86:7d:04:80:13:2a:92:c3:e4:a2:d6:04:d6:a5:89: b1:f7:48:63:88:d9:9d:92:40:6e:55:ae:6b:29:81:ca:44:3c: ca:f1:d3:a9:14:e3:40:39:e7:12:7d:92:ea:11:8d:85:18:01: 0c:f6:99:86:3e:2f:d4:99:60:58:8b:c3:05:7c:4a:7c:6c:95: ca:72:23:1e:85:f0:54:3f:1b:b6:6c:69:e8:df:d0:4a:8e:6a: 84:bf:b1:4a:da:43:75:55:2e:22:90:ee:8b:84:4f:3f:55:fc: 1f:5e:8d:ca:be:6a:a6:93:54:b3:4c:60:7b:e4:b3:d3:61:8a: cf:94:39:9e:0e:ec:29:df:ec:3c:a4:c6:ae:49:81:cd:c7:68: 5f:88:a8:73:e3:ed:62:1d:bb:15:4c:3d:ac:31:50:1b:b3:8c: 69:27:aa:69:d7:1c:02:02:34:39:8b:26:9c:75:68:43:07:54: 03:ce:80:7f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pETwk4jUPBDgtHAeh609MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3 Njg5YWMwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg1ODlmNWJlNzhlMTQ0NDY1OTMyZWQ5YTQ2NjNiZGZkYTRjNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsRNiVRVV2CDzv7iTitwWJFLs42Y 8fJk1GND6FN8H/CjQC0Izsp6guwDzqxUKFenUmjGxhbFxaXjCabBz3XWHb56m63n iDnQffuwIbibxiwgeKNOkornbyUqiygRlEvvcH0gynQ7w7wbTYjvdA9+iuAszlDV CuPRyOVF+Y8emCR6i6nld9RCNpXpyUZXV6IDi/kx2mlBoD3Rmkv47zeoxQ5eDMgp tbtReQ8cA8zb/rE3nPxfsU+8rvTMPa6Opwk2AqA4toxnps2UPE668eZKPv5h7Ltt Zl218kOLqrkI682TIt6yGCLEboIhoEIV74tuOO27m5cSOJH7q+Ma2EJZXQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDSFifW+eOFERlky7ZpGY739pMSAMB8GA1UdIwQY MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct NTVjNDM0ZWVjOTZjLzEvTklXSjliNTQ0VVJHV1RMdG1rWmp2ZjJreElBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALURKwD BALURLADBALURLgwDQYJKoZIhvcNAQELBQADggEBAHXfzlmZI5tCaA6Nyfs0Uahl nFh137hslZ1X8EVtkHkqs9GeYdXtV0Ejd+cuEiopkiJWC9pGJsjgJB5UisZvQl3R J2HrNBlXv9S3p4Z9BIATKpLD5KLWBNalibH3SGOI2Z2SQG5VrmspgcpEPMrx06kU 40A55xJ9kuoRjYUYAQz2mYY+L9SZYFiLwwV8SnxslcpyIx6F8FQ/G7Zsaejf0EqO aoS/sUraQ3VVLiKQ7ouETz9V/B9ejcq+aqaTVLNMYHvks9Nhis+UOZ4O7Cnf7Dyk xq5Jgc3HaF+IqHPj7WIduxVMPawxUBuzjGknqmnXHAICNDmLJpx1aEMHVAPOgH8= -----END CERTIFICATE-----Generated at Wed Jan 21 18:21:48 2026 by rpki-client