This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nAbHaxO3F_18HAXfxwmg-q53xPw.roa File: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (raw, json) Hash identifier: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY= Subject key identifier: 9C:06:C7:6B:13:B7:17:FD:7C:1C:05:DF:C7:09:A0:FA:AE:77:C4:FC Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019B7B359E0A4D2772EFEB837CB726CF3154 Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nAbHaxO3F_18HAXfxwmg-q53xPw.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62206 IP address blocks: 94.154.40.0/22 maxlen: 24 94.154.40.0/24 maxlen: 24 94.154.41.0/24 maxlen: 24 94.154.42.0/24 maxlen: 24 94.154.43.0/24 maxlen: 24 94.154.44.0/24 maxlen: 24 94.154.45.0/24 maxlen: 24 94.154.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9e:0a:4d:27:72:ef:eb:83:7c:b7:26:cf:31:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c06c76b13b717fd7c1c05dfc709a0faae77c4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:4d:77:ba:06:f1:29:a7:f7:2e:a9:48:7c: 44:8d:da:2e:6e:78:3c:54:45:3a:66:fd:03:c3:7b: e8:12:a2:59:ea:a1:5d:28:11:84:93:55:d9:26:25: a7:2e:f6:22:d2:5b:bb:55:2a:bc:b1:98:c5:de:91: 74:6b:67:44:79:cf:d7:79:22:3f:af:6c:13:2a:0e: 92:e5:2d:dc:bf:8a:2c:95:ec:67:58:f3:52:af:43: 3e:f2:fd:90:c3:79:84:aa:12:2a:f3:ed:b0:2c:7d: d5:9f:d5:ba:3d:6c:ab:05:24:c7:c2:c0:66:7f:f4: df:ff:e5:52:e8:15:0c:5d:8e:f2:da:b2:cd:9e:75: fa:af:7f:dc:da:a8:00:d9:65:1e:f3:79:44:d6:ae: 8c:3e:b1:9a:f2:c3:bc:ac:cb:32:3f:fb:df:bd:8e: 83:d9:64:d5:cf:6a:db:c1:c2:74:82:29:54:63:9f: 9c:1d:6d:8e:94:78:a1:a3:ae:ac:37:31:00:21:9a: 68:2f:fe:58:68:fd:f2:b9:89:0a:62:ee:a7:43:f2: 7d:b8:02:96:8c:0f:f8:6a:36:b4:c7:0f:34:4d:e5: 8d:5c:54:4e:af:ca:55:a8:0f:07:28:4a:bc:1b:f0: db:d7:d1:ce:0b:1e:cb:c1:70:da:2d:8b:05:f4:27: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:C7:6B:13:B7:17:FD:7C:1C:05:DF:C7:09:A0:FA:AE:77:C4:FC X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/nAbHaxO3F_18HAXfxwmg-q53xPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.40.0-94.154.46.255 Signature Algorithm: sha256WithRSAEncryption 19:aa:48:3a:46:01:55:0d:89:86:3d:52:97:58:8b:a3:af:3c: ad:7b:e7:19:0a:1a:55:bc:8b:99:e2:2d:c1:ff:6c:f0:75:48: bb:2d:81:d2:b2:ab:27:c1:8e:ae:b2:77:ff:da:37:1a:29:9d: 4c:12:69:66:a0:c7:e7:07:ac:b5:42:05:ad:e5:68:ef:77:2d: 22:f5:31:3e:5e:ba:ac:71:2d:1f:d8:88:9b:fa:51:fc:84:8a: a5:05:ab:78:d3:f7:c1:65:b9:d3:87:17:27:17:fd:7e:90:e5: a1:ea:3e:f1:2c:2d:2a:43:3a:5b:b2:77:c3:86:54:e3:9b:ef: 9d:3d:0f:c2:7c:c0:71:4e:9b:0b:86:39:61:d4:56:30:b5:fc: 83:13:83:98:de:aa:2b:94:c5:e4:68:f6:34:f2:07:79:19:96: a3:db:e5:a7:10:fd:76:2e:e2:5f:0f:27:7f:5b:54:22:12:40: d6:49:5e:e8:b6:f5:2a:5d:db:1b:f0:ad:64:09:ac:f8:99:9d: 79:a5:c9:09:83:e6:4b:02:ae:67:e7:17:45:d7:a4:63:3c:0d: 90:da:58:78:b9:ed:ee:b4:d2:54:29:e2:6f:b3:73:8b:05:7a: 83:e2:b3:fb:75:49:63:b2:21:89:b4:a3:14:55:c2:17:1e:ef: f6:fe:d6:cc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NZ4KTSdy7+uDfLcmzzFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA2Yzc2YjEzYjcxN2ZkN2MxYzA1ZGZjNzA5YTBmYWFlNzdjNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCtNd7oG8Smn9y6pSHxEjdoubng8 VEU6Zv0Dw3voEqJZ6qFdKBGEk1XZJiWnLvYi0lu7VSq8sZjF3pF0a2dEec/XeSI/ r2wTKg6S5S3cv4oslexnWPNSr0M+8v2Qw3mEqhIq8+2wLH3Vn9W6PWyrBSTHwsBm f/Tf/+VS6BUMXY7y2rLNnnX6r3/c2qgA2WUe83lE1q6MPrGa8sO8rMsyP/vfvY6D 2WTVz2rbwcJ0gilUY5+cHW2OlHiho66sNzEAIZpoL/5YaP3yuYkKYu6nQ/J9uAKW jA/4aja0xw80TeWNXFROr8pVqA8HKEq8G/Db19HOCx7LwXDaLYsF9CepTwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJwGx2sTtxf9fBwF38cJoPqud8T8MB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvbkFiSGF4TzNGXzE4SEFYZnh3bWctcTUzeFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANemigD BABemi4wDQYJKoZIhvcNAQELBQADggEBABmqSDpGAVUNiYY9UpdYi6OvPK175xkK GlW8i5niLcH/bPB1SLstgdKyqyfBjq6yd//aNxopnUwSaWagx+cHrLVCBa3laO93 LSL1MT5euqxxLR/YiJv6UfyEiqUFq3jT98FludOHFycX/X6Q5aHqPvEsLSpDOluy d8OGVOOb7509D8J8wHFOmwuGOWHUVjC1/IMTg5jeqiuUxeRo9jTyB3kZlqPb5acQ /XYu4l8PJ39bVCISQNZJXui29Spd2xvwrWQJrPiZnXmlyQmD5ksCrmfnF0XXpGM8 DZDaWHi57e600lQp4m+zc4sFeoPis/t1SWOyIYm0oxRVwhce7/b+1sw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:10:37 2026 by rpki-client