This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa File: nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa (raw, json) Hash identifier: 7qt1S1ac2mzquZqXIpN+D95+VEOfMXy8eLXHEbsWSgE= Subject key identifier: 9D:49:25:6D:89:E6:E5:60:C9:2C:57:37:7A:56:7E:46:FC:10:FE:D5 Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564 Certificate serial: 019B7B361DAC70CC56C6565EFE97C5B6FA86 Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41327 IP address blocks: 171.22.208.0/24 maxlen: 24 171.22.209.0/24 maxlen: 24 171.22.210.0/24 maxlen: 24 2a09:3e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1d:ac:70:cc:56:c6:56:5e:fe:97:c5:b6:fa:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d49256d89e6e560c92c57377a567e46fc10fed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:80:1b:37:64:8f:a7:02:eb:00:14:a2:58: 42:35:2b:39:81:a5:a1:f5:05:20:cf:bb:c0:8e:f5: 4e:75:62:65:41:60:aa:2b:4e:ec:40:22:fc:39:b7: 8e:37:97:a2:f5:e3:06:97:7a:65:63:b8:77:7c:88: 66:e0:e9:54:59:a7:a3:26:5f:46:7f:e1:e9:a3:32: 1f:ef:c8:12:01:4d:1f:db:d1:5b:68:b9:b7:46:79: 55:13:e7:b0:86:07:75:8b:ae:37:cc:5a:0e:d2:3a: 17:50:bb:db:fa:44:30:5c:47:da:f2:05:83:25:af: 63:fa:1d:2a:d8:5c:41:32:be:4e:8f:89:a3:de:ae: 5e:0a:fd:46:59:5d:51:38:82:e7:9e:7a:8f:14:aa: 50:6c:0e:30:9d:20:95:f6:fa:62:0d:33:27:1e:66: 1e:78:7c:8b:ae:bd:b2:6e:72:c8:e9:1e:2f:8c:22: a0:15:01:bf:77:cd:18:bc:eb:5a:6e:7e:72:0d:e7: ab:f4:6a:70:c8:83:6d:36:5b:c5:16:4a:2f:f5:ff: 60:cb:d9:62:e8:c0:d3:07:29:6e:9c:78:b1:aa:55: 5d:45:39:bc:2b:3e:2d:1f:15:d4:06:0b:6a:ba:1d: 08:14:a0:5d:2f:c8:47:c8:89:ec:0d:8d:42:ab:30: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:25:6D:89:E6:E5:60:C9:2C:57:37:7A:56:7E:46:FC:10:FE:D5 X509v3 Authority Key Identifier: keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.208.0-171.22.210.255 IPv6: 2a09:3e40::/29 Signature Algorithm: sha256WithRSAEncryption 97:4e:df:51:2a:55:18:0c:1b:58:94:da:78:40:2d:54:28:04: fd:a4:77:58:64:79:de:a5:34:fa:bc:6d:e9:d5:3b:3d:2c:7b: f8:21:39:e1:75:cc:00:d1:bd:78:30:6b:1e:d9:a7:aa:05:f1: e9:6d:55:90:9f:c1:6c:95:f1:a9:9d:00:ff:62:76:98:c9:22: d3:10:08:65:7f:88:c6:e5:75:a3:78:79:67:c3:6f:f6:e1:e1: 17:95:d5:09:94:10:10:53:c4:fc:78:44:61:17:9c:dc:ba:ce: bf:35:8d:0a:24:5b:ca:2e:c6:b7:d3:f9:fc:ac:98:ba:22:72: c3:81:f3:eb:a6:2a:8e:a3:df:b1:79:31:8a:d3:cf:63:a8:40: 59:60:fe:0c:90:2a:ab:8c:00:e4:11:f1:c6:03:f8:ef:db:c8: b7:17:9f:7c:9b:b4:31:3c:05:32:81:e8:fd:98:b1:18:ca:8c: a4:af:35:bf:f9:01:4a:28:a6:4a:3c:dc:f7:97:32:60:98:ce: 22:60:9c:67:c3:0e:93:03:ef:40:93:db:09:a2:74:4b:ae:9c: 81:54:22:d8:9c:1e:c5:2a:91:f1:5d:d7:4d:de:41:1d:03:89: 60:b6:41:19:d0:f4:75:f2:52:fc:81:e4:5e:d2:88:2e:75:af: 7a:35:48:7e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7Nh2scMxWxlZe/pfFtvqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTEwNGY2YTg5NzhiYjE2Y2QwNTMxNGY5OGE3ODZlMGQw ZDk1NjQwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQ5MjU2ZDg5ZTZlNTYwYzkyYzU3Mzc3YTU2N2U0NmZjMTBmZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm6AGzdkj6cC6wAUolhCNSs5gaWh 9QUgz7vAjvVOdWJlQWCqK07sQCL8ObeON5ei9eMGl3plY7h3fIhm4OlUWaejJl9G f+HpozIf78gSAU0f29FbaLm3RnlVE+ewhgd1i643zFoO0joXULvb+kQwXEfa8gWD Ja9j+h0q2FxBMr5Oj4mj3q5eCv1GWV1ROILnnnqPFKpQbA4wnSCV9vpiDTMnHmYe eHyLrr2ybnLI6R4vjCKgFQG/d80YvOtabn5yDeer9GpwyINtNlvFFkov9f9gy9li 6MDTBylunHixqlVdRTm8Kz4tHxXUBgtquh0IFKBdL8hHyInsDY1CqzDjzQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ1JJW2J5uVgySxXN3pWfkb8EP7VMB8GA1UdIwQY MBaAFG+hBPaol4uxbNBTFPmKeG4NDZVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt NjUwOWNiNWYyN2Y4LzEvblVrbGJZbm01V0RKTEZjM2VsWi1SdndRX3RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4 LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBASrFtAD BACrFtIwDQQCAAIwBwMFAyoJPkAwDQYJKoZIhvcNAQELBQADggEBAJdO31EqVRgM G1iU2nhALVQoBP2kd1hked6lNPq8benVOz0se/ghOeF1zADRvXgwax7Zp6oF8elt VZCfwWyV8amdAP9idpjJItMQCGV/iMbldaN4eWfDb/bh4ReV1QmUEBBTxPx4RGEX nNy6zr81jQokW8ouxrfT+fysmLoicsOB8+umKo6j37F5MYrTz2OoQFlg/gyQKquM AOQR8cYD+O/byLcXn3ybtDE8BTKB6P2YsRjKjKSvNb/5AUoopko83PeXMmCYziJg nGfDDpMD70CT2wmidEuunIFUIticHsUqkfFd103eQR0DiWC2QRnQ9HXyUvyB5F7S iC51r3o1SH4= -----END CERTIFICATE-----Generated at Mon Jan 19 18:24:12 2026 by rpki-client