This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa File: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (raw, json) Hash identifier: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg= Subject key identifier: 34:00:7B:8D:E4:60:F3:1B:3E:3C:EE:9A:AB:E9:95:D0:92:7C:2A:DF Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B78345474C189478C44B5CB0D277BCA4A Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 62.3.192.0/18 maxlen: 24 81.6.192.0/18 maxlen: 24 81.170.0.0/17 maxlen: 24 82.133.0.0/17 maxlen: 24 91.146.112.0/21 maxlen: 24 92.10.0.0/15 maxlen: 24 92.12.0.0/14 maxlen: 24 185.112.212.0/22 maxlen: 24 185.173.116.0/22 maxlen: 24 213.208.64.0/18 maxlen: 24 217.8.0.0/19 maxlen: 24 217.68.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:74:c1:89:47:8c:44:b5:cb:0d:27:7b:ca:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34007b8de460f31b3e3cee9aabe995d0927c2adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:f9:82:0b:00:0b:a8:68:7b:0a:ca:e6:04: 7c:70:24:15:6b:d1:68:f8:5b:8c:56:6e:21:bb:a1: 50:aa:1d:f9:aa:e8:9a:85:e1:17:4a:ba:08:4b:7f: 98:b4:9a:30:b0:78:e9:f8:a9:c7:fc:0a:cf:70:5d: 10:a8:f0:19:92:ea:77:3d:6b:75:3b:9e:b2:cd:b3: 88:76:49:8b:fd:5a:e4:ad:90:9e:3c:6d:c5:ef:f7: 7a:8a:25:b2:57:fd:db:9e:7d:e9:f3:46:e6:0b:9c: 47:05:e0:d6:00:05:da:84:2a:6f:8d:cc:36:c2:2c: 0b:68:fb:ff:36:1b:24:53:f2:40:92:0c:7f:b8:ae: 63:d0:fb:19:cd:b2:ef:b3:e0:44:77:98:c1:fd:da: e0:66:32:d6:92:01:bf:fc:02:62:70:39:a2:c2:83: 11:27:87:b3:ed:0b:8e:58:63:00:01:b4:ff:42:52: 8c:7c:ba:d0:92:c4:6b:7a:b8:9c:82:34:8d:13:53: 08:e1:ba:79:e2:cd:c8:c5:8b:4d:16:7b:30:a0:ea: 38:42:4d:2f:02:19:50:1b:3e:53:81:43:13:2a:32: 21:9f:cf:52:e3:71:ab:54:48:61:87:9f:ba:c4:cc: 97:12:43:6f:c5:1c:03:e3:a8:d0:0f:24:1a:1d:8a: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:7B:8D:E4:60:F3:1B:3E:3C:EE:9A:AB:E9:95:D0:92:7C:2A:DF X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.192.0/18 81.6.192.0/18 81.170.0.0/17 82.133.0.0/17 91.146.112.0/21 92.10.0.0-92.15.255.255 185.112.212.0/22 185.173.116.0/22 213.208.64.0/18 217.8.0.0/19 217.68.128.0/20 Signature Algorithm: sha256WithRSAEncryption c8:10:88:d0:75:fe:88:34:28:ee:25:91:8f:c7:52:5e:37:68: 2f:db:da:2c:ba:b7:6d:3a:41:44:89:f3:84:e5:d3:32:2b:d0: 2d:88:da:d5:cb:fa:3d:13:9d:97:02:5c:5f:fd:53:29:38:22: 43:ff:cd:a3:c9:24:16:73:f6:78:ee:c8:cb:3e:1d:f2:6b:d6: f6:bd:5b:84:e9:12:7b:fc:8a:96:c1:c4:94:66:91:cb:d8:1d: 3c:f9:ab:cf:bd:86:c1:9a:10:5c:f4:89:d5:46:3b:40:93:a7: 0d:f2:74:ad:d3:fb:a1:f1:40:28:a4:dc:c8:c5:8d:ec:0d:e7: ee:94:c5:80:3c:d2:8b:a4:27:fd:db:f7:57:bb:4b:af:a9:a1: e9:7a:0d:df:b0:5e:85:93:14:8d:db:32:bf:11:98:2c:ba:e3: c4:59:68:3b:e9:44:27:b0:4d:93:f0:6e:96:01:38:91:f6:24: b1:3c:88:ea:37:3b:ef:6c:7d:74:b4:49:47:89:a4:b1:6f:8f: db:86:33:23:b5:75:a2:ae:f2:b4:fb:ec:14:30:9d:15:4d:40: ec:b0:4c:29:21:84:71:de:83:5e:19:67:af:97:a4:8b:ba:67: fa:a1:73:37:19:04:df:b4:b1:6e:50:37:f4:32:a8:c5:75:30: ba:9a:16:f9 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4NFR0wYlHjES1yw0ne8pKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDAwN2I4ZGU0NjBmMzFiM2UzY2VlOWFhYmU5OTVkMDkyN2MyYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyz5ggsAC6hoewrK5gR8cCQVa9Fo +FuMVm4hu6FQqh35quiaheEXSroIS3+YtJowsHjp+KnH/ArPcF0QqPAZkup3PWt1 O56yzbOIdkmL/VrkrZCePG3F7/d6iiWyV/3bnn3p80bmC5xHBeDWAAXahCpvjcw2 wiwLaPv/NhskU/JAkgx/uK5j0PsZzbLvs+BEd5jB/drgZjLWkgG//AJicDmiwoMR J4ez7QuOWGMAAbT/QlKMfLrQksRrericgjSNE1MI4bp54s3IxYtNFnswoOo4Qk0v AhlQGz5TgUMTKjIhn89S43GrVEhhh5+6xMyXEkNvxRwD46jQDyQaHYrL0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDQAe43kYPMbPjzumqvpldCSfCrfMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvTkFCN2plUmc4eHMtUE82YXEtbVYwSko4S3Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGPgPAAwQG UQbAAwQHUaoAAwQHUoUAAwQDW5JwMAoDAwFcCgMDBFwAAwQCuXDUAwQCua10AwQG 1dBAAwQF2QgAAwQE2USAMA0GCSqGSIb3DQEBCwUAA4IBAQDIEIjQdf6INCjuJZGP x1JeN2gv29osurdtOkFEifOE5dMyK9AtiNrVy/o9E52XAlxf/VMpOCJD/82jySQW c/Z47sjLPh3ya9b2vVuE6RJ7/IqWwcSUZpHL2B08+avPvYbBmhBc9InVRjtAk6cN 8nSt0/uh8UAopNzIxY3sDefulMWAPNKLpCf92/dXu0uvqaHpeg3fsF6FkxSN2zK/ EZgsuuPEWWg76UQnsE2T8G6WATiR9iSxPIjqNzvvbH10tElHiaSxb4/bhjMjtXWi rvK0++wUMJ0VTUDssEwpIYRx3oNeGWevl6SLumf6oXM3GQTftLFuUDf0MqjFdTC6 mhb5 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:14 2026 by rpki-client