This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NuRKyjXJt0_x6IeQR2HMNIx99q4.roa File: NuRKyjXJt0_x6IeQR2HMNIx99q4.roa (raw, json) Hash identifier: YWU+2EtyJQjALVhSjG3XdS96k3EH0sxFdW6aW6FgXWc= Subject key identifier: 36:E4:4A:CA:35:C9:B7:4F:F1:E8:87:90:47:61:CC:34:8C:7D:F6:AE Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF19EF3BEBD5212F66E81A69059B718 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NuRKyjXJt0_x6IeQR2HMNIx99q4.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 2a05:b300::/29 maxlen: 32 2a06:1184:11::/48 maxlen: 48 2a06:35c3:100::/48 maxlen: 48 2a09:17c1:4a::/48 maxlen: 48 2a0a:2d06:66::/48 maxlen: 48 2a0c:7882:2::/48 maxlen: 48 2a0e:15c7:101::/48 maxlen: 48 2a0e:1a83:99::/48 maxlen: 48 2a0e:c786:122::/48 maxlen: 48 2a0e:c787:1000::/48 maxlen: 48 2a0e:f600:2a::/48 maxlen: 48 2a0f:1200:10::/48 maxlen: 48 2a0f:1206:66::/48 maxlen: 48 2a0f:1584:6::/48 maxlen: 48 2a0f:18c0::/29 maxlen: 32 2a0f:1e80:1986::/48 maxlen: 48 2a0f:1fc0::/29 maxlen: 32 2a0f:3046:85::/48 maxlen: 48 2a0f:3047:fe48::/48 maxlen: 48 2a0f:3d80:1312::/48 maxlen: 48 2a0f:7d00:100::/48 maxlen: 48 2a0f:bc04:1004::/48 maxlen: 48 2a0f:da40::/29 maxlen: 32 2a0f:de40::/29 maxlen: 32 2a0f:e1c0:1312::/48 maxlen: 48 2a0f:e1c7:77::/48 maxlen: 48 2a0f:e202:33::/48 maxlen: 48 2a0f:e207:fd38::/48 maxlen: 48 2a0f:e740::/29 maxlen: 32 2a0f:e7c7:b4::/48 maxlen: 48 2a0f:ea44:55::/48 maxlen: 48 2a0f:ea44:acab::/48 maxlen: 48 2a0f:ec00::/29 maxlen: 29 2a10:4e00::/29 maxlen: 32 2a10:67c2:d6::/48 maxlen: 48 2a10:67c5:2::/48 maxlen: 48 2a10:6f00::/29 maxlen: 32 2a10:7700::/29 maxlen: 32 2a12:ac46:77::/48 maxlen: 48 2a12:ac46:99::/48 maxlen: 48 2a12:ecc0:11::/48 maxlen: 48 2a12:ecc0:3e2::/48 maxlen: 48 2a13:18c5:11::/48 maxlen: 48 2a13:18c6:101::/48 maxlen: 48 2a13:18c6:8512::/48 maxlen: 48 2a13:2c40::/29 maxlen: 32 2a13:8100::/29 maxlen: 32 2a13:8c86:88::/48 maxlen: 48 2a13:8c86:10a::/48 maxlen: 48 2a13:9180::/29 maxlen: 32 2a13:9285:100::/48 maxlen: 48 2a13:c900:120::/48 maxlen: 48 2a13:e100:323::/48 maxlen: 48 2a13:e102:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9e:f3:be:bd:52:12:f6:6e:81:a6:90:59:b7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36e44aca35c9b74ff1e887904761cc348c7df6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:4f:28:4b:4c:be:a4:3a:e2:6f:66:7a:24: 93:ca:c1:91:82:4b:74:fe:63:bd:79:07:07:76:55: f6:dd:67:69:11:f4:8c:59:e3:2d:d8:79:87:2b:a8: 22:a9:3f:5b:81:94:51:a2:b8:52:dc:46:ba:cb:ba: d3:d9:f3:75:54:c3:a8:78:71:b5:bc:d5:0f:05:cf: e9:8b:49:54:b4:42:af:7e:71:a9:1e:13:bf:7b:05: 80:ae:a8:75:81:f2:d4:ae:ee:dc:9a:6a:7a:02:55: 3a:ed:81:b0:1e:d1:0d:40:e0:c7:41:a4:f1:68:2f: 0b:85:62:c0:fa:d3:97:f9:cf:6b:f4:ef:1e:36:42: 9d:d5:5c:71:9e:95:b2:f7:7a:e6:eb:0f:cf:a3:22: 47:9f:13:3b:cc:91:4c:b0:67:84:ca:df:df:93:81: 5e:e4:ff:7f:df:6a:5e:14:52:bf:37:b9:1a:85:7a: ce:cd:b8:0e:13:69:dc:f8:80:1c:b0:95:ee:b3:70: 80:1f:fc:c5:03:7d:20:e1:d5:08:6e:67:2f:7e:34: 1d:0c:1f:1a:a8:d5:2d:7f:72:0f:88:aa:9d:0d:45: ba:82:a1:05:52:c2:77:16:9f:33:a6:5c:e4:9d:78: 65:3e:f5:e6:86:a9:a8:1e:4e:68:43:60:1a:8b:78: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:4A:CA:35:C9:B7:4F:F1:E8:87:90:47:61:CC:34:8C:7D:F6:AE X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NuRKyjXJt0_x6IeQR2HMNIx99q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b300::/29 2a06:1184:11::/48 2a06:35c3:100::/48 2a09:17c1:4a::/48 2a0a:2d06:66::/48 2a0c:7882:2::/48 2a0e:15c7:101::/48 2a0e:1a83:99::/48 2a0e:c786:122::/48 2a0e:c787:1000::/48 2a0e:f600:2a::/48 2a0f:1200:10::/48 2a0f:1206:66::/48 2a0f:1584:6::/48 2a0f:18c0::/29 2a0f:1e80:1986::/48 2a0f:1fc0::/29 2a0f:3046:85::/48 2a0f:3047:fe48::/48 2a0f:3d80:1312::/48 2a0f:7d00:100::/48 2a0f:bc04:1004::/48 2a0f:da40::/29 2a0f:de40::/29 2a0f:e1c0:1312::/48 2a0f:e1c7:77::/48 2a0f:e202:33::/48 2a0f:e207:fd38::/48 2a0f:e740::/29 2a0f:e7c7:b4::/48 2a0f:ea44:55::/48 2a0f:ea44:acab::/48 2a0f:ec00::/29 2a10:4e00::/29 2a10:67c2:d6::/48 2a10:67c5:2::/48 2a10:6f00::/29 2a10:7700::/29 2a12:ac46:77::/48 2a12:ac46:99::/48 2a12:ecc0:11::/48 2a12:ecc0:3e2::/48 2a13:18c5:11::/48 2a13:18c6:101::/48 2a13:18c6:8512::/48 2a13:2c40::/29 2a13:8100::/29 2a13:8c86:88::/48 2a13:8c86:10a::/48 2a13:9180::/29 2a13:9285:100::/48 2a13:c900:120::/48 2a13:e100:323::/48 2a13:e102:1::/48 Signature Algorithm: sha256WithRSAEncryption c8:fd:63:5d:3d:dc:0c:e6:e8:ab:a4:89:87:2a:cf:6c:1d:af: dc:41:e9:0a:87:b5:ed:74:a1:be:51:07:8d:ee:42:61:07:09: fa:36:a8:3f:9e:f6:97:33:f7:0b:8f:ca:74:a6:3c:89:a8:80: 9e:ff:8b:15:07:ad:fb:ec:6a:96:19:b0:17:0c:e0:83:e9:7c: 2c:ba:76:95:11:c4:3b:d1:4d:f2:c9:bb:39:4e:ce:ab:67:43: 8f:a4:89:5f:33:3c:ca:4b:64:93:e2:4c:c4:17:7c:27:a0:83: 1a:ed:ed:6f:d1:a9:73:c3:88:e0:fb:55:6f:c9:d8:77:46:05: 1e:11:a9:b4:a6:a6:22:d8:07:ec:48:23:f9:7a:09:4c:55:46: 32:be:12:eb:e2:71:1c:d3:18:85:c1:c3:dd:61:e5:52:a1:d6: 05:7b:79:6c:d0:d4:32:62:76:85:5e:dd:e7:75:62:28:fc:bd: dd:ea:54:95:14:25:da:09:d2:1b:56:e7:8d:36:e7:bd:8b:c8: bc:0f:1b:c2:7c:1b:28:84:b0:79:e7:c1:75:6b:16:7b:8d:d1: 82:c6:49:ee:31:ff:06:03:c5:d2:34:7e:3a:17:c1:64:7e:a5: 6f:99:62:7a:ef:fb:09:7e:c8:9d:b1:e1:c9:e4:8b:2a:78:f6: f8:0d:57:7c -----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgISAZt/8Z7zvr1SEvZugaaQWbcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmU0NGFjYTM1YzliNzRmZjFlODg3OTA0NzYxY2MzNDhjN2RmNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoVPKEtMvqQ64m9meiSTysGRgkt0 /mO9eQcHdlX23WdpEfSMWeMt2HmHK6giqT9bgZRRorhS3Ea6y7rT2fN1VMOoeHG1 vNUPBc/pi0lUtEKvfnGpHhO/ewWArqh1gfLUru7cmmp6AlU67YGwHtENQODHQaTx aC8LhWLA+tOX+c9r9O8eNkKd1VxxnpWy93rm6w/PoyJHnxM7zJFMsGeEyt/fk4Fe 5P9/32peFFK/N7kahXrOzbgOE2nc+IAcsJXus3CAH/zFA30g4dUIbmcvfjQdDB8a qNUtf3IPiKqdDUW6gqEFUsJ3Fp8zplzknXhlPvXmhqmoHk5oQ2Aai3iV7QIDAQAB o4ID2TCCA9UwHQYDVR0OBBYEFDbkSso1ybdP8eiHkEdhzDSMffauMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvTnVSS3lqWEp0MF94NkllUVIySE1OSXg5OXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB7QYIKwYBBQUHAQcBAf8EggHcMIIB2DCCAdQEAgACMIIB zAMFAyoFswADBwAqBhGEABEDBwAqBjXDAQADBwAqCRfBAEoDBwAqCi0GAGYDBwAq DHiCAAIDBwAqDhXHAQEDBwAqDhqDAJkDBwAqDseGASIDBwAqDseHEAADBwAqDvYA ACoDBwAqDxIAABADBwAqDxIGAGYDBwAqDxWEAAYDBQMqDxjAAwcAKg8egBmGAwUD Kg8fwAMHACoPMEYAhQMHACoPMEf+SAMHACoPPYATEgMHACoPfQABAAMHACoPvAQQ BAMFAyoP2kADBQMqD95AAwcAKg/hwBMSAwcAKg/hxwB3AwcAKg/iAgAzAwcAKg/i B/04AwUDKg/nQAMHACoP58cAtAMHACoP6kQAVQMHACoP6kSsqwMFAyoP7AADBQMq EE4AAwcAKhBnwgDWAwcAKhBnxQACAwUDKhBvAAMFAyoQdwADBwAqEqxGAHcDBwAq EqxGAJkDBwAqEuzAABEDBwAqEuzAA+IDBwAqExjFABEDBwAqExjGAQEDBwAqExjG hRIDBQMqEyxAAwUDKhOBAAMHACoTjIYAiAMHACoTjIYBCgMFAyoTkYADBwAqE5KF AQADBwAqE8kAASADBwAqE+EAAyMDBwAqE+ECAAEwDQYJKoZIhvcNAQELBQADggEB AMj9Y1093Azm6KukiYcqz2wdr9xB6QqHte10ob5RB43uQmEHCfo2qD+e9pcz9wuP ynSmPImogJ7/ixUHrfvsapYZsBcM4IPpfCy6dpURxDvRTfLJuzlOzqtnQ4+kiV8z PMpLZJPiTMQXfCeggxrt7W/RqXPDiOD7VW/J2HdGBR4RqbSmpiLYB+xII/l6CUxV RjK+EuvicRzTGIXBw91h5VKh1gV7eWzQ1DJidoVe3ed1Yij8vd3qVJUUJdoJ0htW 5402572LyLwPG8J8GyiEsHnnwXVrFnuN0YLGSe4x/wYDxdI0fjoXwWR+pW+ZYnrv +wl+yJ2x4cnkiyp49vgNV3w= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:23 2026 by rpki-client