This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/_NxFs9VMwTHWeFrLFxXw6Blpl0Q.roa File: _NxFs9VMwTHWeFrLFxXw6Blpl0Q.roa (raw, json) Hash identifier: pZ8HtaeBjPsZYe6sCpxe6vXfNXXqUpYEGChj0iJ3xgQ= Subject key identifier: FC:DC:45:B3:D5:4C:C1:31:D6:78:5A:CB:17:15:F0:E8:19:69:97:44 Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800 Certificate serial: 019B79104D251C1FA37359F1B15D58AE0D5D Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/_NxFs9VMwTHWeFrLFxXw6Blpl0Q.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48822 IP address blocks: 95.171.0.0/19 maxlen: 19 185.216.60.0/22 maxlen: 22 2a02:2548::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4d:25:1c:1f:a3:73:59:f1:b1:5d:58:ae:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcdc45b3d54cc131d6785acb1715f0e819699744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:70:24:41:4f:31:6e:73:08:bf:21:98:68: 20:23:2c:bc:80:26:31:48:fc:03:55:4c:cc:25:f7: 3c:2f:1d:86:05:53:74:d9:e7:f5:1a:6c:ea:fc:cb: 8e:af:2d:79:76:c7:cd:e5:a8:6a:f1:19:f9:68:f2: ad:ab:2d:27:4c:f2:e3:94:b4:ac:d3:68:69:18:33: d6:28:8c:00:fa:5b:01:92:3d:68:bb:34:bb:8e:ff: 79:ce:7b:43:67:54:1c:6b:ea:54:08:40:e8:b1:1c: d9:29:ec:d8:82:3c:35:db:1d:b7:4d:cc:fa:2d:6d: 4a:b4:8e:d4:15:92:c2:11:f6:ff:c3:2b:2a:ad:e0: 0f:84:54:00:9c:2a:27:45:86:1c:33:7f:6c:26:09: 64:24:6d:6e:1d:fb:c1:4f:71:1d:4b:fd:10:c9:7b: 4e:3c:8c:90:d8:7a:23:2c:d2:a8:72:54:da:de:16: 05:a1:77:7d:58:07:48:62:3c:03:8a:8c:6f:f6:80: a0:60:45:49:df:78:aa:00:7a:5d:ee:6b:5e:41:05: 83:97:58:03:af:0c:9b:fb:2d:0a:d6:b1:d2:f4:09: f6:0d:4e:81:71:e0:00:39:ce:f4:00:0b:7b:b1:11: 40:5f:9d:ed:7f:13:0b:ff:d3:67:b6:4a:94:7e:f9: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:45:B3:D5:4C:C1:31:D6:78:5A:CB:17:15:F0:E8:19:69:97:44 X509v3 Authority Key Identifier: keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/_NxFs9VMwTHWeFrLFxXw6Blpl0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.171.0.0/19 185.216.60.0/22 IPv6: 2a02:2548::/32 Signature Algorithm: sha256WithRSAEncryption 79:3b:13:b8:f2:1b:20:d7:45:32:78:d6:3c:e7:49:14:27:d7: 27:4b:ba:b9:32:f2:11:18:35:0c:17:ab:a3:6e:80:de:17:cd: 24:e3:c1:61:6f:19:5c:1e:7d:60:4f:5b:4f:35:21:ec:7a:4b: 42:33:1a:84:e5:58:6f:c4:66:b5:2b:c3:84:1d:f9:cf:6c:6b: 97:a4:31:7b:bd:e9:86:6a:0c:b1:ec:92:9f:fc:3e:4e:6a:fb: da:c8:6e:b5:d9:78:0b:f0:76:9a:3a:7d:e7:c9:6b:04:3c:03: ef:93:40:a3:b5:81:bc:4c:05:6b:62:ad:20:a7:68:f4:83:f0: 28:d7:90:ae:89:7e:54:70:90:82:76:13:f2:b0:5b:68:47:61: 88:7d:9b:cd:07:f2:ae:86:d4:eb:ad:4a:ed:a6:b5:0b:b7:16: 42:48:02:33:bf:8e:8d:4e:e3:d4:05:2c:2c:fc:55:46:c4:74: 5b:f4:c8:43:26:de:c3:31:e2:b6:d0:27:3e:46:b9:0f:03:07: d1:fd:52:04:e3:8d:a7:99:67:b9:b2:e2:fd:e0:d6:3a:2f:79: af:82:be:c6:5b:6d:67:cc:50:dd:f0:c8:ec:a2:ac:b0:9c:72: 63:c8:f1:b6:39:cd:3c:6c:21:02:0e:77:ac:01:b2:01:38:c3: 1a:07:2d:9f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EE0lHB+jc1nxsV1Yrg1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1 NWQ4MDAwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RjNDViM2Q1NGNjMTMxZDY3ODVhY2IxNzE1ZjBlODE5Njk5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3hwJEFPMW5zCL8hmGggIyy8gCYx SPwDVUzMJfc8Lx2GBVN02ef1Gmzq/MuOry15dsfN5ahq8Rn5aPKtqy0nTPLjlLSs 02hpGDPWKIwA+lsBkj1ouzS7jv95zntDZ1Qca+pUCEDosRzZKezYgjw12x23Tcz6 LW1KtI7UFZLCEfb/wysqreAPhFQAnConRYYcM39sJglkJG1uHfvBT3EdS/0QyXtO PIyQ2HojLNKoclTa3hYFoXd9WAdIYjwDioxv9oCgYEVJ33iqAHpd7mteQQWDl1gD rwyb+y0K1rHS9An2DU6BceAAOc70AAt7sRFAX53tfxML/9NntkqUfvlbjQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPzcRbPVTMEx1nhayxcV8OgZaZdEMB8GA1UdIwQY MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt OTMyYjRhYzBhYWZkLzEvX054RnM5Vk13VEhXZUZyTEZ4WHc2QmxwbDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFX6sAAwQC udg8MA0EAgACMAcDBQAqAiVIMA0GCSqGSIb3DQEBCwUAA4IBAQB5OxO48hsg10Uy eNY850kUJ9cnS7q5MvIRGDUMF6ujboDeF80k48FhbxlcHn1gT1tPNSHsektCMxqE 5VhvxGa1K8OEHfnPbGuXpDF7vemGagyx7JKf/D5OavvayG612XgL8HaaOn3nyWsE PAPvk0CjtYG8TAVrYq0gp2j0g/Ao15CuiX5UcJCCdhPysFtoR2GIfZvNB/KuhtTr rUrtprULtxZCSAIzv46NTuPUBSws/FVGxHRb9MhDJt7DMeK20Cc+RrkPAwfR/VIE 442nmWe5suL94NY6L3mvgr7GW21nzFDd8MjsoqywnHJjyPG2Oc08bCECDnesAbIB OMMaBy2f -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:41 2026 by rpki-client