This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/NmgUP7e3LyCZ01solEPz1wLS4js.roa File: NmgUP7e3LyCZ01solEPz1wLS4js.roa (raw, json) Hash identifier: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw= Subject key identifier: 36:68:14:3F:B7:B7:2F:20:99:D3:5B:28:94:43:F3:D7:02:D2:E2:3B Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Certificate serial: 019B7BA4E7FF34A4AEA683410E9220E9F92D Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/NmgUP7e3LyCZ01solEPz1wLS4js.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62167 IP address blocks: 89.107.28.0/22 maxlen: 22 89.107.28.0/24 maxlen: 24 89.107.29.0/24 maxlen: 24 89.107.30.0/24 maxlen: 24 185.44.160.0/22 maxlen: 22 185.44.160.0/24 maxlen: 24 185.44.161.0/24 maxlen: 24 185.44.162.0/24 maxlen: 24 185.44.163.0/24 maxlen: 24 185.163.80.0/22 maxlen: 22 185.163.80.0/24 maxlen: 24 185.163.81.0/24 maxlen: 24 185.163.82.0/23 maxlen: 23 185.163.83.0/24 maxlen: 24 2a01:7520::/32 maxlen: 32 2a01:7520::/48 maxlen: 48 2a01:7520:1::/48 maxlen: 48 2a01:7520:2::/48 maxlen: 48 2a01:7520:3::/48 maxlen: 48 2a01:7520:4::/48 maxlen: 48 2a01:7520:5::/48 maxlen: 48 2a01:7520:6::/48 maxlen: 48 2a01:7520:7::/48 maxlen: 48 2a01:7520:8::/48 maxlen: 48 2a0b:5800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e7:ff:34:a4:ae:a6:83:41:0e:92:20:e9:f9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3668143fb7b72f2099d35b289443f3d702d2e23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:2f:da:4e:f9:0e:c0:90:5e:25:e7:a1:d8: 92:8d:b7:80:7c:57:69:92:41:73:e6:c6:9e:cc:33: 10:45:66:7c:7f:0b:7e:e3:ab:2b:7d:20:41:27:e0: 83:7d:1f:a0:30:f0:b9:90:44:55:31:e1:35:33:c8: d8:c1:26:2f:3b:cd:8b:3c:51:49:b7:f4:85:3b:f1: 66:88:65:43:9c:ba:b0:1e:76:98:8b:86:b6:38:e3: e0:1a:10:f4:4b:f1:b0:ea:cb:0f:05:97:5c:92:a4: 90:99:41:66:33:0d:03:73:f6:67:f7:ad:1f:cd:71: 64:90:d3:42:3e:c9:51:85:b0:45:b6:f0:1a:1e:ce: 84:f5:f1:7c:46:12:d9:d2:91:05:34:15:fc:d7:1d: c3:64:fb:25:9e:74:a2:d5:64:09:cb:a1:a9:78:a6: b3:a1:3d:46:3a:d4:c3:38:d3:da:33:5f:e7:62:d5: 22:7d:e9:41:57:74:e6:46:7e:8d:0a:71:59:0c:99: 51:fa:77:79:51:1c:8d:6a:40:fb:bf:4d:91:53:37: 6a:ca:b1:5b:56:52:d7:df:b0:41:31:46:bb:26:29: 7e:f7:23:bd:0b:57:64:98:e9:a4:55:05:e3:e0:c5: c8:7c:5a:04:f4:34:8f:98:5a:0e:9b:c3:16:a6:6b: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:68:14:3F:B7:B7:2F:20:99:D3:5B:28:94:43:F3:D7:02:D2:E2:3B X509v3 Authority Key Identifier: keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/NmgUP7e3LyCZ01solEPz1wLS4js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.28.0/22 185.44.160.0/22 185.163.80.0/22 IPv6: 2a01:7520::/32 2a0b:5800::/32 Signature Algorithm: sha256WithRSAEncryption 16:58:eb:21:bc:4a:19:e2:d1:fa:ee:aa:2a:cb:b4:a6:8b:2a: 20:31:b4:ec:c4:02:d1:f0:3b:1e:11:b5:03:7e:dd:f4:13:9a: e3:f1:94:e6:09:64:79:1d:48:1e:45:e4:81:ca:4a:e8:15:8b: c0:fa:51:6f:b2:80:8d:72:9f:08:4f:6a:6c:50:95:17:ed:18: 54:8d:07:71:49:98:99:9b:1b:55:75:be:4d:f5:d4:2c:65:32: a7:e5:cb:dc:1f:f8:0e:2a:27:17:a5:30:b1:54:c4:ac:78:4f: d8:87:0e:56:49:d3:5e:49:5b:77:9b:a6:a2:f6:c6:56:b8:82: 87:ec:e6:a7:ad:26:69:b6:2c:91:a2:ec:a3:98:8f:99:60:1e: be:17:a1:b3:ca:24:b4:b0:38:69:86:69:75:da:c9:00:98:36: 1c:9a:5a:ec:89:76:ae:dc:bc:1c:1f:70:08:11:0a:2e:a0:3f: b9:ae:2b:02:68:ec:eb:1a:42:fb:c6:39:14:66:50:81:c3:ea: 2f:29:0b:0a:30:72:02:21:c3:06:83:b9:cb:00:9d:31:1d:6d: 3a:3d:e0:d9:6b:f9:26:e2:ff:03:a9:49:ae:54:f1:eb:da:4e: e8:fb:08:a2:ca:f8:c5:17:30:d6:ee:c0:c5:ff:aa:76:78:21: 02:e3:0a:ac -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pOf/NKSupoNBDpIg6fktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh NGE5OGMwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjY4MTQzZmI3YjcyZjIwOTlkMzViMjg5NDQzZjNkNzAyZDJlMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EYv2k75DsCQXiXnodiSjbeAfFdp kkFz5saezDMQRWZ8fwt+46srfSBBJ+CDfR+gMPC5kERVMeE1M8jYwSYvO82LPFFJ t/SFO/FmiGVDnLqwHnaYi4a2OOPgGhD0S/Gw6ssPBZdckqSQmUFmMw0Dc/Zn960f zXFkkNNCPslRhbBFtvAaHs6E9fF8RhLZ0pEFNBX81x3DZPslnnSi1WQJy6GpeKaz oT1GOtTDONPaM1/nYtUifelBV3TmRn6NCnFZDJlR+nd5URyNakD7v02RUzdqyrFb VlLX37BBMUa7Jil+9yO9C1dkmOmkVQXj4MXIfFoE9DSPmFoOm8MWpmu4WQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDZoFD+3ty8gmdNbKJRD89cC0uI7MB8GA1UdIwQY MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt OTBlMjFkZjAxZTkxLzEvTm1nVVA3ZTNMeUNaMDFzb2xFUHoxd0xTNGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCWWscAwQC uSygAwQCuaNQMBQEAgACMA4DBQAqAXUgAwUAKgtYADANBgkqhkiG9w0BAQsFAAOC AQEAFljrIbxKGeLR+u6qKsu0posqIDG07MQC0fA7HhG1A37d9BOa4/GU5glkeR1I HkXkgcpK6BWLwPpRb7KAjXKfCE9qbFCVF+0YVI0HcUmYmZsbVXW+TfXULGUyp+XL 3B/4DionF6UwsVTErHhP2IcOVknTXklbd5umovbGVriCh+zmp60mabYskaLso5iP mWAevhehs8oktLA4aYZpddrJAJg2HJpa7Il2rty8HB9wCBEKLqA/ua4rAmjs6xpC +8Y5FGZQgcPqLykLCjByAiHDBoO5ywCdMR1tOj3g2Wv5JuL/A6lJrlTx69pO6PsI osr4xRcw1u7Axf+qdnghAuMKrA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:49 2026 by rpki-client