This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/NbrX-DYcBWtycuQYT-jhpcFiOoU.roa File: NbrX-DYcBWtycuQYT-jhpcFiOoU.roa (raw, json) Hash identifier: x0hRQkO2Y1zh9lxhkUCPbygGJ3L2UD6I/3/m7QAzYf4= Subject key identifier: 35:BA:D7:F8:36:1C:05:6B:72:72:E4:18:4F:E8:E1:A5:C1:62:3A:85 Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA357E0CE2EFF27B08753ED84D03CFA Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/NbrX-DYcBWtycuQYT-jhpcFiOoU.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.63.24.0/24 maxlen: 24 5.63.25.0/24 maxlen: 24 5.63.26.0/24 maxlen: 24 5.63.27.0/24 maxlen: 24 5.63.28.0/24 maxlen: 24 91.190.168.0/24 maxlen: 24 91.190.169.0/24 maxlen: 24 91.190.171.0/24 maxlen: 24 91.190.172.0/24 maxlen: 24 91.190.173.0/24 maxlen: 24 91.190.174.0/24 maxlen: 24 91.190.175.0/24 maxlen: 24 185.85.78.0/24 maxlen: 24 185.85.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:57:e0:ce:2e:ff:27:b0:87:53:ed:84:d0:3c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35bad7f8361c056b7272e4184fe8e1a5c1623a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:86:f4:02:f0:e7:4f:16:16:8d:ee:8c:1c: 71:12:05:0d:ab:7a:0a:52:9a:48:fa:9f:e9:63:b0: 54:8e:31:3b:24:48:b5:4d:4e:a8:df:8f:01:01:20: 75:1f:2c:8d:46:38:c1:6d:60:26:f6:c1:67:81:e9: ab:7a:a6:a5:b5:d6:15:5a:35:01:09:8f:2f:07:5d: 2b:e9:df:c4:b0:f2:5f:01:c7:f2:67:1e:11:98:3b: 35:b4:b4:bb:d1:f4:cd:90:97:87:25:5e:1e:fb:d5: e2:94:e5:bf:04:b3:d2:38:29:0a:89:aa:e8:a8:62: 7d:a1:a4:40:bf:d8:ab:7a:a2:a3:af:04:31:01:d9: 77:e9:35:5e:d7:a1:ab:5a:fd:32:ef:22:6e:18:3f: 27:3d:ee:9f:8c:28:f5:cb:63:0e:a3:7a:bd:13:21: e6:39:e7:66:1c:36:9f:b9:73:61:d4:c2:23:c4:77: 06:18:65:b2:31:6a:ca:af:b2:8c:39:aa:91:0d:b1: 24:ef:0d:9f:63:e2:68:92:93:b5:ea:c1:57:f8:22: 04:1d:b3:a4:32:78:22:37:3c:66:a6:38:ff:31:6b: 93:d9:40:bc:b0:5d:89:4b:d4:8f:82:ba:39:0e:b1: f5:93:05:82:36:c2:5f:49:6d:ba:f3:32:c9:91:9d: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BA:D7:F8:36:1C:05:6B:72:72:E4:18:4F:E8:E1:A5:C1:62:3A:85 X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/NbrX-DYcBWtycuQYT-jhpcFiOoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0-5.63.28.255 91.190.168.0/23 91.190.171.0-91.190.175.255 185.85.78.0/23 Signature Algorithm: sha256WithRSAEncryption 80:f6:1e:34:07:fe:27:e1:57:1a:c7:4a:1f:48:70:e2:11:bb: 65:a2:ca:d3:91:91:a9:03:43:40:37:74:1f:1c:8e:e3:b7:bd: 05:10:24:63:d2:95:9a:8b:92:38:4c:10:51:f6:ca:4d:c0:5e: e4:1c:40:19:ae:c5:7c:22:f3:f9:0b:75:b8:94:d7:f1:dd:b1: 7c:d6:16:d0:4c:b9:f0:8c:9d:e0:b3:1c:f1:aa:e7:76:76:a8: 1e:fd:c2:d4:92:ad:c8:7e:cd:df:ae:1c:59:89:15:8b:26:65: 49:d7:28:a3:00:17:7f:e2:da:ae:0c:27:9c:bb:bf:23:43:fe: fa:82:d0:93:21:47:ad:5f:e9:db:d6:ea:89:a6:51:a2:22:d5: 39:7e:4e:23:d5:0f:0e:a6:bf:b7:29:ba:f6:3c:49:3a:fb:4c: c4:7f:b2:d2:14:74:a8:fd:b7:1e:75:6d:ea:c3:08:16:08:7d: 14:b1:ad:ef:0c:b0:b1:ce:4c:96:03:ae:6c:19:47:f3:09:18: 13:09:b5:72:57:78:05:1b:0a:8f:62:9c:6c:66:a6:4e:62:7d: 2a:34:cc:14:3c:9e:d1:d4:3a:5e:f2:4f:59:9a:2a:13:2e:d3: 04:16:34:87:60:98:d1:82:4f:30:6b:d6:0a:b8:30:c8:bd:55: 50:c6:94:f5 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7o1fgzi7/J7CHU+2E0Dz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWJhZDdmODM2MWMwNTZiNzI3MmU0MTg0ZmU4ZTFhNWMxNjIzYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4KG9ALw508WFo3ujBxxEgUNq3oK UppI+p/pY7BUjjE7JEi1TU6o348BASB1HyyNRjjBbWAm9sFngemreqaltdYVWjUB CY8vB10r6d/EsPJfAcfyZx4RmDs1tLS70fTNkJeHJV4e+9XilOW/BLPSOCkKiaro qGJ9oaRAv9ireqKjrwQxAdl36TVe16GrWv0y7yJuGD8nPe6fjCj1y2MOo3q9EyHm OedmHDafuXNh1MIjxHcGGGWyMWrKr7KMOaqRDbEk7w2fY+JokpO16sFX+CIEHbOk MngiNzxmpjj/MWuT2UC8sF2JS9SPgro5DrH1kwWCNsJfSW268zLJkZ3ZWwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDW61/g2HAVrcnLkGE/o4aXBYjqFMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvTmJyWC1EWWNCV3R5Y3VRWVQtamhwY0ZpT29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAMFPxgD BAAFPxwDBAFbvqgwDAMEAFu+qwMEBFu+oAMEAblVTjANBgkqhkiG9w0BAQsFAAOC AQEAgPYeNAf+J+FXGsdKH0hw4hG7ZaLK05GRqQNDQDd0HxyO47e9BRAkY9KVmouS OEwQUfbKTcBe5BxAGa7FfCLz+Qt1uJTX8d2xfNYW0Ey58Iyd4LMc8arndnaoHv3C 1JKtyH7N364cWYkViyZlSdcoowAXf+LargwnnLu/I0P++oLQkyFHrV/p29bqiaZR oiLVOX5OI9UPDqa/tym69jxJOvtMxH+y0hR0qP23HnVt6sMIFgh9FLGt7wywsc5M lgOubBlH8wkYEwm1cld4BRsKj2KcbGamTmJ9KjTMFDye0dQ6XvJPWZoqEy7TBBY0 h2CY0YJPMGvWCrgwyL1VUMaU9Q== -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:07 2026 by rpki-client