This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nSkKcYyJLSgIPeMMAWrWGpPH5fw.roa File: nSkKcYyJLSgIPeMMAWrWGpPH5fw.roa (raw, json) Hash identifier: /s7UKMeyuKNegXOCBB0SWeTdk1u550tLTce3MF1Ul1A= Subject key identifier: 9D:29:0A:71:8C:89:2D:28:08:3D:E3:0C:01:6A:D6:1A:93:C7:E5:FC Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA754FF247291C8575B068074CE1646 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nSkKcYyJLSgIPeMMAWrWGpPH5fw.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6863 IP address blocks: 37.157.16.0/21 maxlen: 21 46.226.96.0/21 maxlen: 21 82.149.192.0/19 maxlen: 19 86.111.0.0/19 maxlen: 19 94.143.32.0/21 maxlen: 21 195.90.128.0/18 maxlen: 18 195.90.160.0/19 maxlen: 19 195.96.160.0/19 maxlen: 19 212.5.160.0/19 maxlen: 19 213.145.40.0/24 maxlen: 24 217.14.240.0/21 maxlen: 21 217.171.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:54:ff:24:72:91:c8:57:5b:06:80:74:ce:16:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d290a718c892d28083de30c016ad61a93c7e5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:41:a6:85:24:bc:c6:13:48:b1:11:67:f0: e8:33:ea:81:64:2f:e3:f5:4a:28:df:01:f0:fe:19: 0d:41:10:7b:cb:c9:54:3b:bc:d5:96:e4:3a:d7:0f: bf:c3:04:30:5f:d8:70:f3:b9:8f:c3:d2:85:1e:9f: 0d:ca:2f:5d:f9:4d:56:a9:b4:6d:6f:32:74:78:43: 96:a9:9e:2e:70:1c:5c:ba:18:92:4d:be:8c:b1:fb: c5:9b:f2:33:e0:66:2a:66:e3:13:c7:58:b6:25:cf: 36:e7:15:11:f5:4d:25:38:5f:51:2d:81:06:ac:2e: fc:8b:10:9b:af:78:e5:55:56:9f:a9:70:79:71:d1: 62:60:50:7f:2d:d8:ea:17:14:95:38:ae:1e:4c:73: d0:51:94:77:81:3a:c4:2c:91:46:24:22:4f:68:e4: c4:f7:af:e6:65:40:0a:49:4c:f5:4d:fc:7f:30:3d: 36:cd:b0:4d:89:2b:ff:a3:31:5c:ae:7e:ab:1d:40: 49:bb:81:7b:67:b3:41:b9:82:e6:47:b4:49:c0:c2: 83:33:30:48:dc:cd:a4:43:ef:7c:d4:34:b4:ce:df: 9d:25:7d:92:f1:58:9c:b8:13:c1:74:fa:39:f6:7a: 83:5a:37:96:23:96:7b:7c:cb:fa:b9:fe:4f:1e:32: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:29:0A:71:8C:89:2D:28:08:3D:E3:0C:01:6A:D6:1A:93:C7:E5:FC X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nSkKcYyJLSgIPeMMAWrWGpPH5fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.16.0/21 46.226.96.0/21 82.149.192.0/19 86.111.0.0/19 94.143.32.0/21 195.90.128.0/18 195.96.160.0/19 212.5.160.0/19 213.145.40.0/24 217.14.240.0/21 217.171.0.0/20 Signature Algorithm: sha256WithRSAEncryption 44:32:51:c1:24:a1:98:65:27:4f:09:84:5e:01:43:8d:bb:ac: ad:63:8b:2b:6a:ff:5c:97:66:c2:5f:ee:dd:cd:ef:18:aa:92: 1e:61:23:32:0c:52:a7:c2:54:68:0a:45:91:b6:49:78:83:2d: a8:1b:ce:32:c1:22:35:c8:8a:c8:65:b7:7e:af:5b:27:20:24: 35:42:be:e9:e4:b4:72:b2:bb:4e:36:9d:ee:02:7e:cd:2f:13: 9a:93:f5:9d:58:59:e0:75:07:5f:8e:bd:0a:17:8a:6a:42:f5: e4:72:67:5e:fe:b6:a1:eb:70:a7:4b:65:d5:ae:32:e0:31:79: 19:b5:b1:2c:56:5f:71:d3:15:5d:5a:3d:5c:e4:ec:68:09:5b: c2:7f:db:25:77:e5:72:3a:56:1e:f7:30:6d:fd:a8:69:65:ee: 81:eb:51:47:58:ef:93:21:68:76:f9:20:88:fd:4e:0b:e5:1c: ee:44:93:cc:df:12:84:c4:a7:69:93:13:ce:8b:d3:d0:21:20: 52:24:9a:35:1b:e3:03:ab:da:e3:7e:0f:b8:80:a4:dd:ce:8a: 2e:cf:e2:b4:30:1a:ff:28:88:b8:6f:45:41:fd:61:d4:e3:4e: 58:3e:f2:b6:d0:80:33:21:e0:2c:2b:30:b7:38:98:86:f8:43: 29:70:41:75 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+p1T/JHKRyFdbBoB0zhZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDI5MGE3MThjODkyZDI4MDgzZGUzMGMwMTZhZDYxYTkzYzdlNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpdBpoUkvMYTSLERZ/DoM+qBZC/j 9Uoo3wHw/hkNQRB7y8lUO7zVluQ61w+/wwQwX9hw87mPw9KFHp8Nyi9d+U1WqbRt bzJ0eEOWqZ4ucBxcuhiSTb6MsfvFm/Iz4GYqZuMTx1i2Jc825xUR9U0lOF9RLYEG rC78ixCbr3jlVVafqXB5cdFiYFB/LdjqFxSVOK4eTHPQUZR3gTrELJFGJCJPaOTE 96/mZUAKSUz1Tfx/MD02zbBNiSv/ozFcrn6rHUBJu4F7Z7NBuYLmR7RJwMKDMzBI 3M2kQ+981DS0zt+dJX2S8VicuBPBdPo59nqDWjeWI5Z7fMv6uf5PHjLsgwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFJ0pCnGMiS0oCD3jDAFq1hqTx+X8MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvblNrS2NZeUpMU2dJUGVNTUFXcldHcFBINWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQDJZ0QAwQD LuJgAwQFUpXAAwQFVm8AAwQDXo8gAwQGw1qAAwQFw2CgAwQF1AWgAwQA1ZEoAwQD 2Q7wAwQE2asAMA0GCSqGSIb3DQEBCwUAA4IBAQBEMlHBJKGYZSdPCYReAUONu6yt Y4srav9cl2bCX+7dze8YqpIeYSMyDFKnwlRoCkWRtkl4gy2oG84ywSI1yIrIZbd+ r1snICQ1Qr7p5LRysrtONp3uAn7NLxOak/WdWFngdQdfjr0KF4pqQvXkcmde/rah 63CnS2XVrjLgMXkZtbEsVl9x0xVdWj1c5OxoCVvCf9sld+VyOlYe9zBt/ahpZe6B 61FHWO+TIWh2+SCI/U4L5RzuRJPM3xKExKdpkxPOi9PQISBSJJo1G+MDq9rjfg+4 gKTdzoouz+K0MBr/KIi4b0VB/WHU405YPvK20IAzIeAsKzC3OJiG+EMpcEF1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:42 2026 by rpki-client