This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa File: nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa (raw, json) Hash identifier: Masava5utcSxI/yaL9ocWnZHgg2ad5NPlBu90wVNB2c= Subject key identifier: 9E:BF:DA:4D:CC:B3:94:18:DB:43:52:00:17:00:D2:0E:7B:7B:D9:DC Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd Certificate serial: 019B7F835B627491AA4BC3C4619FB800A14F Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa Signing time: Fri 02 Jan 2026 16:21:13 +0000 ROA not before: Fri 02 Jan 2026 16:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207903 IP address blocks: 45.81.168.0/24 maxlen: 24 185.88.64.0/24 maxlen: 24 185.88.65.0/24 maxlen: 24 185.88.66.0/24 maxlen: 24 185.88.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5b:62:74:91:aa:4b:c3:c4:61:9f:b8:00:a1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ebfda4dccb39418db4352001700d20e7b7bd9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:0a:85:c4:d3:42:f5:77:83:b0:0f:fd:21: 70:eb:a6:6d:3c:a5:4d:d6:db:64:86:ec:29:eb:5e: db:54:d7:b3:5c:77:94:ca:3d:72:eb:fe:77:44:f5: f4:0c:b9:a4:8c:7c:79:29:ea:04:78:43:7c:61:5d: c2:99:e3:63:ef:73:a5:11:c6:0e:fa:e8:f2:84:8e: 48:54:33:e7:73:b5:a2:2e:ab:05:eb:81:cf:bb:cc: bc:6c:90:f0:b1:82:d6:8a:bc:40:46:27:ad:3a:d5: 9c:e3:4d:71:31:c8:74:be:a1:f5:0e:83:40:38:c2: cd:9c:df:b2:75:72:23:93:c2:35:63:a3:41:a1:16: 45:01:70:83:cc:01:03:77:b8:f3:b6:33:67:95:49: 17:e9:3c:94:d3:07:60:da:af:20:b0:95:22:84:b9: 53:f0:d7:09:f8:9b:73:95:14:e6:25:91:90:61:09: fa:4c:9c:7a:cf:b8:cc:b9:64:0f:01:65:ce:e1:ae: 7a:bd:db:d5:61:c6:50:db:c3:7e:ac:ae:bc:9b:04: e7:c5:f3:ec:7d:32:fd:5e:1f:ec:86:1e:23:fb:ed: 44:36:9a:8a:15:a4:b6:25:3a:b7:68:2d:17:52:ee: 73:95:c8:4e:10:cc:44:e3:bf:ec:f9:59:05:6b:4a: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:DA:4D:CC:B3:94:18:DB:43:52:00:17:00:D2:0E:7B:7B:D9:DC X509v3 Authority Key Identifier: keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/nr_aTcyzlBjbQ1IAFwDSDnt72dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.168.0/24 185.88.64.0/22 Signature Algorithm: sha256WithRSAEncryption 07:72:7a:e4:d4:3c:da:f9:6a:d7:d5:32:fe:37:a6:69:ba:ca: 8e:19:5a:61:d4:0b:bc:df:36:a1:6d:2f:0a:66:c1:45:1d:3c: dd:b7:76:0f:18:d9:ff:73:e9:53:e6:7f:28:4c:d3:d7:02:e0: de:5a:98:fc:d8:0c:30:1c:61:6b:26:ef:d6:dd:31:94:f8:59: 9c:11:cc:19:89:a4:ef:67:53:80:71:16:b0:18:e1:89:a1:3a: 12:f7:6f:63:e9:30:67:98:db:a6:f3:b2:75:91:33:ff:b2:a5: f0:15:ba:54:1a:18:bf:3d:d4:f1:2c:fd:e4:4a:f5:29:e1:5d: e8:a6:b1:89:e4:85:24:b2:7f:f7:7b:99:fa:50:d6:cb:db:bf: ad:72:19:f9:f3:15:0c:ef:c8:1c:ca:7a:c6:0b:c2:ae:36:0c: 24:b7:b4:45:d3:72:21:35:ec:85:1d:06:cd:8f:a7:c2:89:28: 4d:45:02:31:cb:d4:f9:2b:53:70:0a:80:f8:da:38:3d:cd:5f: 6d:1a:c0:3a:49:a4:17:d8:7c:7b:ea:f5:97:ce:58:a4:96:3b: 8a:15:fa:f5:66:da:43:2d:ce:93:bc:45:03:4d:91:8f:a5:21: 79:6d:b1:dc:ce:bd:fc:6b:c5:58:80:c8:84:17:17:88:9c:b6: 96:bb:fb:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g1tidJGqS8PEYZ+4AKFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz M2EyYmQwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWJmZGE0ZGNjYjM5NDE4ZGI0MzUyMDAxNzAwZDIwZTdiN2JkOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhcKhcTTQvV3g7AP/SFw66ZtPKVN 1ttkhuwp617bVNezXHeUyj1y6/53RPX0DLmkjHx5KeoEeEN8YV3CmeNj73OlEcYO +ujyhI5IVDPnc7WiLqsF64HPu8y8bJDwsYLWirxARietOtWc401xMch0vqH1DoNA OMLNnN+ydXIjk8I1Y6NBoRZFAXCDzAEDd7jztjNnlUkX6TyU0wdg2q8gsJUihLlT 8NcJ+JtzlRTmJZGQYQn6TJx6z7jMuWQPAWXO4a56vdvVYcZQ28N+rK68mwTnxfPs fTL9Xh/shh4j++1ENpqKFaS2JTq3aC0XUu5zlchOEMxE47/s+VkFa0rY3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ6/2k3Ms5QY20NSABcA0g57e9ncMB8GA1UdIwQY MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt Mjg1ZWM4ZmU4ZWM2LzEvbnJfYVRjeXpsQmpiUTFJQUZ3RFNEbnQ3MmR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2 LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGoAwQC uVhAMA0GCSqGSIb3DQEBCwUAA4IBAQAHcnrk1Dza+WrX1TL+N6ZpusqOGVph1Au8 3zahbS8KZsFFHTzdt3YPGNn/c+lT5n8oTNPXAuDeWpj82AwwHGFrJu/W3TGU+Fmc EcwZiaTvZ1OAcRawGOGJoToS929j6TBnmNum87J1kTP/sqXwFbpUGhi/PdTxLP3k SvUp4V3oprGJ5IUksn/3e5n6UNbL27+tchn58xUM78gcynrGC8KuNgwkt7RF03Ih NeyFHQbNj6fCiShNRQIxy9T5K1NwCoD42jg9zV9tGsA6SaQX2Hx76vWXzlikljuK Ffr1ZtpDLc6TvEUDTZGPpSF5bbHczr38a8VYgMiEFxeInLaWu/uC -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:43 2026 by rpki-client