This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/NXzgYU-C6vYUH9piPE5IVfQUDws.roa File: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (raw, json) Hash identifier: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0= Subject key identifier: 35:7C:E0:61:4F:82:EA:F6:14:1F:DA:62:3C:4E:48:55:F4:14:0F:0B Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019B7EA4FF45A2997FA1419502610E1A1018 Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/NXzgYU-C6vYUH9piPE5IVfQUDws.roa Signing time: Fri 02 Jan 2026 12:18:21 +0000 ROA not before: Fri 02 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 89.184.0.0/21 maxlen: 24 89.184.8.0/23 maxlen: 23 89.184.10.0/23 maxlen: 23 89.184.12.0/23 maxlen: 23 89.184.14.0/23 maxlen: 23 89.184.16.0/21 maxlen: 24 89.184.16.0/22 maxlen: 24 89.184.24.0/21 maxlen: 24 89.184.30.0/24 maxlen: 24 89.184.31.0/24 maxlen: 24 193.222.251.0/24 maxlen: 24 193.223.69.0/24 maxlen: 24 193.223.103.0/24 maxlen: 24 193.223.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ff:45:a2:99:7f:a1:41:95:02:61:0e:1a:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Jan 2 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=357ce0614f82eaf6141fda623c4e4855f4140f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:4a:56:2d:8f:a5:d2:e9:cc:2f:52:62:80: b2:01:3d:c4:83:0b:22:dc:23:37:95:eb:60:46:18: 20:c5:e1:85:fc:21:b2:fc:65:19:0c:33:96:60:33: f2:35:99:3d:9d:8e:f6:00:3a:33:45:40:f3:66:d3: 18:99:25:9b:7b:59:14:34:51:18:10:2e:1b:2a:af: 99:03:8e:8a:7a:e6:58:c8:ba:90:ec:e9:5a:c3:2e: 08:45:5a:9c:f2:51:07:22:12:c5:39:b8:e9:ed:d8: ac:53:82:e9:84:eb:36:1c:49:f1:6f:d9:69:07:a0: f7:8c:42:cf:66:ca:40:47:1c:6e:67:43:06:4e:8a: 07:70:19:c8:03:5c:bc:57:b1:e5:ae:07:9a:3c:8d: a3:ba:37:e2:b2:51:87:1f:c3:71:ce:04:07:34:9b: f7:a0:5c:da:6d:9d:14:4f:45:c5:26:e8:98:b8:43: ad:4e:d7:f4:22:26:c2:93:d6:69:5d:63:17:c4:48: ce:0f:54:ec:32:0e:0b:25:eb:26:50:c4:20:9b:1d: f8:ec:4c:d2:95:b5:ca:ff:4a:fb:2b:88:df:e1:83: 75:a5:3b:06:10:1b:e4:4a:61:ec:1d:76:16:21:53: 1a:a1:50:cc:50:34:72:fb:c3:38:b0:74:c4:f2:19: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7C:E0:61:4F:82:EA:F6:14:1F:DA:62:3C:4E:48:55:F4:14:0F:0B X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/NXzgYU-C6vYUH9piPE5IVfQUDws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.0.0/19 193.222.251.0/24 193.223.69.0/24 193.223.103.0/24 193.223.108.0/24 Signature Algorithm: sha256WithRSAEncryption 44:6f:10:ea:85:c0:08:c0:0c:ec:2b:82:54:5f:43:3f:c7:46: 21:98:ae:bc:c9:bf:0a:c4:90:4a:87:c7:7b:85:c7:73:ae:af: 64:01:fe:ef:2b:db:3f:5a:fe:b4:09:39:47:7d:e4:70:df:43: 27:3a:a4:49:55:bc:ce:37:64:cc:4f:eb:88:48:74:67:12:52: b1:ee:8b:0c:ef:27:20:3b:da:db:04:70:1b:a5:39:f4:b1:6f: fd:34:fb:07:52:3b:d2:b0:da:08:47:d1:11:f0:0a:8d:b8:54: dc:e1:e8:03:1f:f3:04:e7:54:f1:3e:54:f1:cf:6a:85:5d:ac: a0:1f:d6:8f:77:ae:b7:61:75:d7:63:67:8d:cb:2d:cd:b0:ff: 0c:e6:f9:c7:a9:ab:2c:48:f6:6b:59:14:e1:59:0f:6a:7b:58: 6f:6b:39:e8:70:5d:dc:40:96:e5:42:90:56:d9:e0:82:e8:89: 13:5b:70:96:c9:8c:ef:e9:49:75:12:cb:2d:da:f8:f1:e9:0e: 8c:76:35:06:1a:21:59:5b:d4:ff:32:55:9a:ac:ab:10:20:0d: e0:24:a7:53:09:0a:17:35:f6:f4:60:a6:b5:02:82:57:39:d3: 55:1e:22:aa:fd:9c:cb:f4:07:c9:d7:e2:c0:69:12:ad:42:bb: 35:e0:c8:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pP9Fopl/oUGVAmEOGhAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjYwMTAyMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTdjZTA2MTRmODJlYWY2MTQxZmRhNjIzYzRlNDg1NWY0MTQwZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRKVi2PpdLpzC9SYoCyAT3Egwsi 3CM3letgRhggxeGF/CGy/GUZDDOWYDPyNZk9nY72ADozRUDzZtMYmSWbe1kUNFEY EC4bKq+ZA46KeuZYyLqQ7Olawy4IRVqc8lEHIhLFObjp7disU4LphOs2HEnxb9lp B6D3jELPZspARxxuZ0MGTooHcBnIA1y8V7HlrgeaPI2jujfislGHH8NxzgQHNJv3 oFzabZ0UT0XFJuiYuEOtTtf0IibCk9ZpXWMXxEjOD1TsMg4LJesmUMQgmx347EzS lbXK/0r7K4jf4YN1pTsGEBvkSmHsHXYWIVMaoVDMUDRy+8M4sHTE8hkIFwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDV84GFPgur2FB/aYjxOSFX0FA8LMB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvTlh6Z1lVLUM2dllVSDlwaVBFNUlWZlFVRHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFWbgAAwQA wd77AwQAwd9FAwQAwd9nAwQAwd9sMA0GCSqGSIb3DQEBCwUAA4IBAQBEbxDqhcAI wAzsK4JUX0M/x0YhmK68yb8KxJBKh8d7hcdzrq9kAf7vK9s/Wv60CTlHfeRw30Mn OqRJVbzON2TMT+uISHRnElKx7osM7ycgO9rbBHAbpTn0sW/9NPsHUjvSsNoIR9ER 8AqNuFTc4egDH/ME51TxPlTxz2qFXaygH9aPd663YXXXY2eNyy3NsP8M5vnHqass SPZrWRThWQ9qe1hvaznocF3cQJblQpBW2eCC6IkTW3CWyYzv6Ul1Esst2vjx6Q6M djUGGiFZW9T/MlWarKsQIA3gJKdTCQoXNfb0YKa1AoJXOdNVHiKq/ZzL9AfJ1+LA aRKtQrs14Mhi -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:36 2026 by rpki-client