This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/ny4NdP1dzVwPNWBOTK06eWCj9ac.roa File: ny4NdP1dzVwPNWBOTK06eWCj9ac.roa (raw, json) Hash identifier: kKntqqKczGjvuxQUkXngXz6ktNgL1Vp59wjcfYKrynM= Subject key identifier: 9F:2E:0D:74:FD:5D:CD:5C:0F:35:60:4E:4C:AD:3A:79:60:A3:F5:A7 Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Certificate serial: 019B797E99DF7B71C7D320B0DBBC0A640420 Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/ny4NdP1dzVwPNWBOTK06eWCj9ac.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34500 IP address blocks: 80.73.16.0/20 maxlen: 20 80.73.16.0/21 maxlen: 21 80.73.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:99:df:7b:71:c7:d3:20:b0:db:bc:0a:64:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2e0d74fd5dcd5c0f35604e4cad3a7960a3f5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:67:7a:53:cb:da:1a:48:dc:ea:03:03:b8: 00:5c:08:e1:99:3b:67:86:82:c9:c2:44:37:7a:3a: 5b:6a:83:13:8c:29:94:d8:a8:b1:fd:ab:b1:59:9e: 18:fa:77:67:61:6a:b2:1f:9b:eb:a7:11:8a:4f:9e: 53:ae:0d:2b:7f:f4:57:45:74:76:fe:3d:71:1d:56: ec:7e:0b:d2:a2:6c:3b:a7:8e:65:25:7b:1b:db:0c: 2d:3a:ab:ef:fe:7d:ce:0b:40:71:0a:58:91:37:4b: a3:8e:3a:28:28:95:f9:f3:0b:5a:c3:f2:58:c1:36: 4e:57:ee:e2:22:66:d7:ef:22:9b:94:5a:8c:41:af: 9f:fc:15:0a:bc:f0:2d:4f:5d:62:43:a2:b5:e1:9e: d4:33:ff:84:4b:2d:7b:38:b0:79:e5:be:86:20:8a: 67:ee:2c:d3:8c:90:b1:8a:cb:9f:00:f8:39:97:9d: 6e:8f:7f:64:9b:fe:30:c0:98:a8:de:6b:d8:41:88: 00:08:f7:36:19:c4:4a:d6:20:0a:84:bd:8d:84:d9: df:2c:90:6f:34:bf:00:c4:13:00:17:f9:41:54:1e: 02:49:08:dc:01:6a:ee:03:3a:e6:71:f7:5d:7c:7d: 48:f2:aa:78:13:b8:31:4c:57:54:b6:9c:c3:61:c0: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2E:0D:74:FD:5D:CD:5C:0F:35:60:4E:4C:AD:3A:79:60:A3:F5:A7 X509v3 Authority Key Identifier: keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/ny4NdP1dzVwPNWBOTK06eWCj9ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.16.0/20 Signature Algorithm: sha256WithRSAEncryption 65:90:91:53:f5:68:9c:66:c1:81:3d:5b:78:17:5a:e7:2a:cc: 59:7a:99:80:0f:2a:f4:9b:a3:22:37:05:13:7d:a3:f4:c1:12: 57:a9:9d:b1:6a:e2:a6:ef:c9:b1:14:c8:fb:ca:fb:71:d6:fd: f7:a5:38:cc:39:16:55:ec:bc:62:fc:f4:ba:4a:38:1e:f5:dd: 95:a7:10:39:83:2b:d2:13:5d:7c:4d:14:6e:f4:2c:bf:9e:9d: 09:34:0a:ab:0d:9e:f3:b5:cd:15:1c:bd:14:f6:40:c1:e6:33: a2:04:b2:c5:71:e7:49:48:66:66:e5:ff:52:c9:fa:e6:b0:68: 3a:a4:21:40:81:25:4a:82:92:0c:2c:4a:98:89:b8:91:da:08: 2b:72:4c:5e:04:29:62:fa:30:08:f6:9d:f8:b3:de:b0:35:f3: 78:36:43:22:d5:4c:cf:97:9e:7d:35:9a:2a:86:cd:ce:e2:da: 9c:51:89:1e:e7:be:f7:bc:1d:15:91:21:9c:b1:93:30:29:89: 8a:3e:f5:59:8e:94:f9:06:d4:04:0b:b4:0d:3e:40:b4:e6:cf: 66:28:e2:cf:8b:39:e6:37:f5:a9:48:02:a7:cb:ec:1e:b6:b6: 98:5e:bf:53:23:86:c3:2d:46:fe:fe:31:02:e9:be:37:19:b4: bd:8c:88:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpnfe3HH0yCw27wKZAQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0 NTRhMTkwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJlMGQ3NGZkNWRjZDVjMGYzNTYwNGU0Y2FkM2E3OTYwYTNmNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpnelPL2hpI3OoDA7gAXAjhmTtn hoLJwkQ3ejpbaoMTjCmU2Kix/auxWZ4Y+ndnYWqyH5vrpxGKT55Trg0rf/RXRXR2 /j1xHVbsfgvSomw7p45lJXsb2wwtOqvv/n3OC0BxCliRN0ujjjooKJX58wtaw/JY wTZOV+7iImbX7yKblFqMQa+f/BUKvPAtT11iQ6K14Z7UM/+ESy17OLB55b6GIIpn 7izTjJCxisufAPg5l51uj39km/4wwJio3mvYQYgACPc2GcRK1iAKhL2NhNnfLJBv NL8AxBMAF/lBVB4CSQjcAWruAzrmcfddfH1I8qp4E7gxTFdUtpzDYcCwkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8uDXT9Xc1cDzVgTkytOnlgo/WnMB8GA1UdIwQY MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt ZDI0NDFlOGY2YzdhLzEvbnk0TmRQMWR6VndQTldCT1RLMDZlV0NqOWFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEkQMA0G CSqGSIb3DQEBCwUAA4IBAQBlkJFT9WicZsGBPVt4F1rnKsxZepmADyr0m6MiNwUT faP0wRJXqZ2xauKm78mxFMj7yvtx1v33pTjMORZV7Lxi/PS6Sjge9d2VpxA5gyvS E118TRRu9Cy/np0JNAqrDZ7ztc0VHL0U9kDB5jOiBLLFcedJSGZm5f9SyfrmsGg6 pCFAgSVKgpIMLEqYibiR2ggrckxeBCli+jAI9p34s96wNfN4NkMi1UzPl559NZoq hs3O4tqcUYke5773vB0VkSGcsZMwKYmKPvVZjpT5BtQEC7QNPkC05s9mKOLPiznm N/WpSAKny+wetraYXr9TI4bDLUb+/jEC6b43GbS9jIiA -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:33 2026 by rpki-client