This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nEWYMu_4NA4MfkJsquDKi_gTHjg.roa File: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (raw, json) Hash identifier: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M= Subject key identifier: 9C:45:98:32:EF:F8:34:0E:0C:7E:42:6C:AA:E0:CA:8B:F8:13:1E:38 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA5305DE2BCEF02594E57A08D7BD30E Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nEWYMu_4NA4MfkJsquDKi_gTHjg.roa Signing time: Fri 02 Jan 2026 12:18:33 +0000 ROA not before: Fri 02 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44525 IP address blocks: 109.160.57.0/24 maxlen: 24 109.160.58.0/24 maxlen: 24 109.160.60.0/24 maxlen: 24 109.160.61.0/24 maxlen: 24 109.160.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:30:5d:e2:bc:ef:02:59:4e:57:a0:8d:7b:d3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c459832eff8340e0c7e426caae0ca8bf8131e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:51:18:5c:85:9b:e9:76:45:05:c5:15:81: 66:0a:5a:81:e5:fc:6a:fe:30:f0:4c:24:76:18:b2: 97:f3:fc:8e:cb:12:c6:d9:bd:ce:f8:79:9e:93:ac: 84:54:10:43:15:79:00:b4:f5:76:86:bc:4c:a3:8d: 79:16:0f:95:89:bb:0a:f9:f1:e8:9a:a5:eb:e0:76: e3:5d:0e:63:be:80:05:08:71:82:6a:5a:c0:5f:21: 52:ab:01:37:05:e4:c8:f2:5b:f5:0b:55:c8:74:f3: bb:9e:76:d7:76:f9:5f:f8:25:44:6f:a2:09:da:af: 3e:4d:05:da:92:e4:0e:a2:c3:1b:d5:b8:f8:bf:00: 96:e6:dc:bc:85:3d:80:41:12:b0:d7:a7:b9:6c:f9: 53:9f:bd:65:9b:d0:8c:15:6e:5e:f4:38:1e:98:7d: 28:c6:12:02:34:d4:a7:4d:8f:3d:b3:e8:bb:fb:24: 6a:08:76:ee:c6:3d:63:e8:42:b6:50:b1:fd:a0:e7: 36:4c:fb:0b:fd:0a:ac:9f:b4:a0:a5:76:bf:4e:3b: 7f:6c:5a:2c:43:91:e6:d5:87:59:75:0c:a7:39:08: 21:6a:8b:8b:ef:07:1e:08:9d:f9:8c:d6:0b:77:b0: a0:16:cf:d8:a3:f4:74:8c:d4:ff:d2:b4:85:c8:9e: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:98:32:EF:F8:34:0E:0C:7E:42:6C:AA:E0:CA:8B:F8:13:1E:38 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nEWYMu_4NA4MfkJsquDKi_gTHjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.57.0-109.160.58.255 109.160.60.0/23 109.160.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:a8:0c:a9:71:52:de:86:f9:70:6e:5f:e9:90:e0:50:db:5d: b2:15:51:6d:dd:7c:ca:82:e6:fc:67:1c:a2:b1:de:34:22:ce: 3c:6c:c7:78:14:27:ac:d2:28:9b:0b:30:86:ac:3b:b5:ad:58: 17:37:c2:7d:61:9c:f6:a6:1e:12:af:ea:3b:49:eb:a0:8d:f3: ba:a2:fe:2f:f3:34:52:be:63:90:83:7b:53:f0:7c:ae:96:a7: dc:be:44:b9:3a:bd:16:fe:bd:37:4c:31:4d:19:f3:2c:dd:92: b5:b5:fc:cb:00:1b:cd:10:f0:55:8f:c1:aa:25:a1:0a:fa:61: 5a:26:a0:dc:5d:77:aa:85:13:a3:17:55:80:61:4f:2b:b5:89: b1:ed:20:df:64:f3:d1:9f:1f:b7:ff:a7:5c:6e:b6:82:ff:ee: 12:06:56:a9:64:ab:6b:38:27:43:39:1b:33:dd:c5:58:59:44: 2d:a3:ea:62:fc:ac:e3:51:66:6e:93:9d:a4:f6:a9:9f:c9:15: 3b:01:d3:48:33:71:b2:23:a8:81:84:19:ff:67:a5:54:c5:9a: cf:e7:fd:70:8c:3b:d3:e1:03:86:35:65:fd:c4:25:a1:7b:5f: f7:9e:8a:f4:fc:be:bd:15:a4:d0:de:0a:36:c9:b9:78:71:75: 1c:42:be:70 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pTBd4rzvAllOV6CNe9MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzQ1OTgzMmVmZjgzNDBlMGM3ZTQyNmNhYWUwY2E4YmY4MTMxZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFdRGFyFm+l2RQXFFYFmClqB5fxq /jDwTCR2GLKX8/yOyxLG2b3O+Hmek6yEVBBDFXkAtPV2hrxMo415Fg+VibsK+fHo mqXr4HbjXQ5jvoAFCHGCalrAXyFSqwE3BeTI8lv1C1XIdPO7nnbXdvlf+CVEb6IJ 2q8+TQXakuQOosMb1bj4vwCW5ty8hT2AQRKw16e5bPlTn71lm9CMFW5e9DgemH0o xhICNNSnTY89s+i7+yRqCHbuxj1j6EK2ULH9oOc2TPsL/Qqsn7SgpXa/Tjt/bFos Q5Hm1YdZdQynOQghaouL7wceCJ35jNYLd7CgFs/Yo/R0jNT/0rSFyJ4GswIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJxFmDLv+DQODH5CbKrgyov4Ex44MB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvbkVXWU11XzROQTRNZmtKc3F1REtpX2dUSGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABtoDkD BABtoDoDBAFtoDwDBABtoFYwDQYJKoZIhvcNAQELBQADggEBAJuoDKlxUt6G+XBu X+mQ4FDbXbIVUW3dfMqC5vxnHKKx3jQizjxsx3gUJ6zSKJsLMIasO7WtWBc3wn1h nPamHhKv6jtJ66CN87qi/i/zNFK+Y5CDe1PwfK6Wp9y+RLk6vRb+vTdMMU0Z8yzd krW1/MsAG80Q8FWPwaoloQr6YVomoNxdd6qFE6MXVYBhTyu1ibHtIN9k89GfH7f/ p1xutoL/7hIGVqlkq2s4J0M5GzPdxVhZRC2j6mL8rONRZm6TnaT2qZ/JFTsB00gz cbIjqIGEGf9npVTFms/n/XCMO9PhA4Y1Zf3EJaF7X/eeivT8vr0VpNDeCjbJuXhx dRxCvnA= -----END CERTIFICATE-----Generated at Tue Jan 20 03:33:28 2026 by rpki-client