This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa File: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (raw, json) Hash identifier: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc= Subject key identifier: 9D:83:8C:9A:AF:6B:DA:36:0A:C4:E6:7F:BC:C6:55:B0:6D:98:A0:86 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019B7C80A9E21DEF186B0FE603836028A401 Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41697 IP address blocks: 69.94.125.0/24 maxlen: 24 85.132.240.0/24 maxlen: 24 85.132.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a9:e2:1d:ef:18:6b:0f:e6:03:83:60:28:a4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d838c9aaf6bda360ac4e67fbcc655b06d98a086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:27:fd:36:84:e5:f2:29:ce:3c:4b:18:81: 7a:4a:85:3b:03:84:3f:43:38:e6:3f:db:11:03:98: d3:ea:f6:12:b7:7e:7e:00:6a:e9:32:ac:d2:64:b4: 4c:81:71:b9:17:7a:62:17:21:69:2e:c1:60:bd:7c: 97:9d:5a:8a:57:50:3a:8d:c8:f2:d2:ae:7b:81:48: 77:93:39:2e:4c:8c:61:60:90:e9:b6:ef:af:33:bb: 79:5e:a8:b1:cc:7c:62:1c:5f:1b:fe:56:27:29:16: 6c:4c:35:3e:2f:5d:17:43:a4:0e:5b:9f:6d:b5:18: d3:c7:7c:4e:b3:bb:84:f9:ed:d5:93:ab:c3:30:48: 03:36:83:cf:13:b6:f9:0b:65:a3:9b:00:fe:c6:4e: 66:4a:44:98:d7:84:4f:15:41:4e:ee:61:4c:4a:8b: 22:e7:ec:12:bd:54:95:2e:3d:2c:0d:a1:d2:7b:6f: ec:28:c5:e0:7f:cb:d9:66:65:73:85:79:30:27:9b: c6:ca:1f:76:3b:24:9e:20:83:15:af:4b:26:df:b5: 4f:f2:3c:2e:c8:2e:f0:00:80:a8:41:cb:44:e9:dc: dc:5f:a3:84:69:46:67:79:f4:0b:9d:17:a1:69:77: 92:d0:55:1c:b7:e4:60:08:a3:66:5a:62:1e:4a:0f: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:8C:9A:AF:6B:DA:36:0A:C4:E6:7F:BC:C6:55:B0:6D:98:A0:86 X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.94.125.0/24 85.132.240.0/24 85.132.250.0/24 Signature Algorithm: sha256WithRSAEncryption 31:1a:3b:41:5e:ec:7d:23:f5:39:6e:02:9e:84:88:95:de:2d: bf:e7:36:cb:68:32:1d:60:65:a2:2f:4a:78:b1:2f:79:2d:b6: 5b:f3:1b:23:f6:a8:0e:96:44:7a:d9:b4:0a:7b:e1:1b:dc:fc: 3e:6c:33:53:20:f5:76:32:04:2c:d6:1f:d0:23:8d:d2:ed:36: 03:5e:6d:fe:05:3d:3f:72:10:b2:ec:2c:1f:a9:a4:8b:41:ad: 9f:6e:ae:b1:20:e2:85:11:cd:4b:ff:94:cc:9b:fd:fd:26:e4: 09:99:4a:a7:97:df:39:59:e6:7f:db:c4:6e:30:6e:1f:0b:fe: e4:c9:0f:47:58:64:92:11:71:48:3d:fd:5b:42:07:5d:e1:b5: 00:41:25:16:37:97:e8:9d:53:95:32:f5:87:e0:34:0e:c5:81: 95:75:86:6a:a9:4f:10:d1:21:2e:01:46:aa:b0:70:db:f7:7d: 00:49:69:bf:7d:2c:d7:d8:d6:4f:c5:1e:56:b8:9f:26:66:0a: 9e:2e:3c:33:26:1d:66:de:e9:64:1c:de:37:6a:b2:bd:f0:c5: 68:1d:89:fb:c6:74:d1:e6:60:4b:1f:a1:0b:9b:01:ae:e3:04: 82:88:00:91:06:78:5d:31:f3:69:5f:e4:32:12:2d:c0:90:1e: 4b:dc:24:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gKniHe8Yaw/mA4NgKKQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDgzOGM5YWFmNmJkYTM2MGFjNGU2N2ZiY2M2NTViMDZkOThhMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaQn/TaE5fIpzjxLGIF6SoU7A4Q/ QzjmP9sRA5jT6vYSt35+AGrpMqzSZLRMgXG5F3piFyFpLsFgvXyXnVqKV1A6jcjy 0q57gUh3kzkuTIxhYJDptu+vM7t5XqixzHxiHF8b/lYnKRZsTDU+L10XQ6QOW59t tRjTx3xOs7uE+e3Vk6vDMEgDNoPPE7b5C2WjmwD+xk5mSkSY14RPFUFO7mFMSosi 5+wSvVSVLj0sDaHSe2/sKMXgf8vZZmVzhXkwJ5vGyh92OySeIIMVr0sm37VP8jwu yC7wAICoQctE6dzcX6OEaUZnefQLnRehaXeS0FUct+RgCKNmWmIeSg+Y+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ2DjJqva9o2CsTmf7zGVbBtmKCGMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvbllPTW1xOXIyallLeE9aX3ZNWlZzRzJZb0lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQARV59AwQA VYTwAwQAVYT6MA0GCSqGSIb3DQEBCwUAA4IBAQAxGjtBXux9I/U5bgKehIiV3i2/ 5zbLaDIdYGWiL0p4sS95LbZb8xsj9qgOlkR62bQKe+Eb3Pw+bDNTIPV2MgQs1h/Q I43S7TYDXm3+BT0/chCy7CwfqaSLQa2fbq6xIOKFEc1L/5TMm/39JuQJmUqnl985 WeZ/28RuMG4fC/7kyQ9HWGSSEXFIPf1bQgdd4bUAQSUWN5fonVOVMvWH4DQOxYGV dYZqqU8Q0SEuAUaqsHDb930ASWm/fSzX2NZPxR5WuJ8mZgqeLjwzJh1m3ulkHN43 arK98MVoHYn7xnTR5mBLH6ELmwGu4wSCiACRBnhdMfNpX+QyEi3AkB5L3CRG -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:53 2026 by rpki-client