This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NVKj6woT-fJPaVfcr9O7EUW5AlE.roa File: NVKj6woT-fJPaVfcr9O7EUW5AlE.roa (raw, json) Hash identifier: 9pmWIL3rH5wkbK7AJiKnnwiKMYGWFVxGS8vZ/hHe2wI= Subject key identifier: 35:52:A3:EB:0A:13:F9:F2:4F:69:57:DC:AF:D3:BB:11:45:B9:02:51 Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67 Certificate serial: 019B791033327A56788EAE83A8CFE590A9D6 Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NVKj6woT-fJPaVfcr9O7EUW5AlE.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50167 IP address blocks: 80.73.247.0/24 maxlen: 24 2a11:2800:f54b::/48 maxlen: 48 2a11:2802:25cf::/48 maxlen: 48 2a11:2803:cec2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:33:32:7a:56:78:8e:ae:83:a8:cf:e5:90:a9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3552a3eb0a13f9f24f6957dcafd3bb1145b90251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:f8:fb:f7:9f:b9:0c:18:6a:72:bc:3e:8a: d1:b6:d6:77:34:4e:f0:f7:94:f5:c0:4b:29:b1:4d: 39:36:40:e2:d3:1e:d2:53:88:20:7b:b8:1c:72:f0: 6f:96:0f:cd:71:1b:04:5e:62:6f:57:72:3e:5e:05: f1:e9:00:aa:5e:35:d7:26:bb:5b:eb:2f:29:af:4e: ce:96:6e:1e:ca:f3:00:90:14:cc:af:42:98:b8:5b: a9:55:ad:35:95:14:22:37:bc:2c:1b:f4:e2:ad:62: 6a:82:d3:ef:9c:8a:05:8e:f8:60:d9:ef:eb:43:9a: 6f:c3:d1:8b:fb:33:dd:dd:12:30:4f:45:fb:c7:ec: 9b:3f:96:80:6c:ad:f7:a0:26:cd:b6:d3:57:28:e6: 82:d5:01:5d:6a:66:b6:5b:4b:f2:c0:08:52:1e:4c: ec:36:19:59:a7:b9:f9:23:05:b6:ed:28:26:61:8b: 87:04:18:4c:70:ad:1a:36:cc:6e:e2:06:01:38:04: cc:15:2d:3f:19:42:66:97:50:fd:39:db:1f:1d:6b: c1:c9:32:90:06:a5:67:6b:98:3f:15:be:e0:43:7c: 08:b0:de:66:d4:c9:ff:47:d7:f2:a7:87:6e:4e:60: 61:ad:da:a7:1b:5c:26:fd:21:cf:9c:97:92:77:f2: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:A3:EB:0A:13:F9:F2:4F:69:57:DC:AF:D3:BB:11:45:B9:02:51 X509v3 Authority Key Identifier: keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/NVKj6woT-fJPaVfcr9O7EUW5AlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.247.0/24 IPv6: 2a11:2800:f54b::/48 2a11:2802:25cf::/48 2a11:2803:cec2::/48 Signature Algorithm: sha256WithRSAEncryption 4e:4a:bd:22:08:36:ba:b0:fc:cf:24:5b:31:f2:6a:77:72:e7: 65:7a:9b:6d:ba:e4:b0:43:e2:83:03:85:fa:4a:cc:45:58:f7: 5d:8f:ee:0f:9f:d4:06:10:50:e3:ef:e7:29:28:cc:ba:45:c6: 82:3d:8a:80:c6:ee:71:71:cf:17:fc:d3:27:a1:b3:e6:a6:be: 62:88:af:10:4c:b1:c5:e3:a3:ea:59:3f:3d:0a:3c:da:17:0d: c2:b2:d9:5f:67:5c:fd:92:a1:8c:07:cc:56:44:25:1c:c9:cf: a9:f2:96:97:6d:5e:12:68:ba:6d:cf:e3:6b:4c:a2:b0:6a:8e: d6:41:20:1f:c0:ff:5b:14:77:88:49:47:67:bf:d4:41:0c:31: bb:bb:99:3e:0e:2e:10:41:d3:53:a8:1a:c9:5f:8a:9a:06:4f: 3c:40:59:47:2b:d3:eb:17:61:43:a1:d4:0a:6c:f9:de:28:b6: d0:b9:a0:e1:f0:5f:9a:c5:a4:e2:74:cf:04:62:27:40:86:33: c4:02:bb:27:e7:cd:30:2a:92:cf:4c:93:d7:ba:f8:d7:a6:17: 3d:76:f1:59:77:35:ce:3f:01:e6:e9:bd:21:11:4a:35:15:87: 87:1c:ae:bc:a2:a9:63:be:e6:df:26:48:64:41:28:01:87:61: ad:e5:43:b5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5EDMyelZ4jq6DqM/lkKnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj M2NhNjcwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTUyYTNlYjBhMTNmOWYyNGY2OTU3ZGNhZmQzYmIxMTQ1YjkwMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1P4+/efuQwYanK8PorRttZ3NE7w 95T1wEspsU05NkDi0x7SU4gge7gccvBvlg/NcRsEXmJvV3I+XgXx6QCqXjXXJrtb 6y8pr07Olm4eyvMAkBTMr0KYuFupVa01lRQiN7wsG/TirWJqgtPvnIoFjvhg2e/r Q5pvw9GL+zPd3RIwT0X7x+ybP5aAbK33oCbNttNXKOaC1QFdama2W0vywAhSHkzs NhlZp7n5IwW27SgmYYuHBBhMcK0aNsxu4gYBOATMFS0/GUJml1D9OdsfHWvByTKQ BqVna5g/Fb7gQ3wIsN5m1Mn/R9fyp4duTmBhrdqnG1wm/SHPnJeSd/LlHwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDVSo+sKE/nyT2lX3K/TuxFFuQJRMB8GA1UdIwQY MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt NmFiYjFjY2I2MTUzLzEvTlZLajZ3b1QtZkpQYVZmY3I5TzdFVVc1QWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAUEn3MCEE AgACMBsDBwAqESgA9UsDBwAqESgCJc8DBwAqESgDzsIwDQYJKoZIhvcNAQELBQAD ggEBAE5KvSIINrqw/M8kWzHyandy52V6m2265LBD4oMDhfpKzEVY912P7g+f1AYQ UOPv5ykozLpFxoI9ioDG7nFxzxf80yehs+amvmKIrxBMscXjo+pZPz0KPNoXDcKy 2V9nXP2SoYwHzFZEJRzJz6nylpdtXhJoum3P42tMorBqjtZBIB/A/1sUd4hJR2e/ 1EEMMbu7mT4OLhBB01OoGslfipoGTzxAWUcr0+sXYUOh1Aps+d4ottC5oOHwX5rF pOJ0zwRiJ0CGM8QCuyfnzTAqks9Mk9e6+NemFz128Vl3Nc4/AebpvSERSjUVh4cc rryiqWO+5t8mSGRBKAGHYa3lQ7U= -----END CERTIFICATE-----Generated at Sun Jan 18 12:08:03 2026 by rpki-client