This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/nl8rJp2Gx045j4pPDWegyHxSDoU.roa File: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (raw, json) Hash identifier: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30= Subject key identifier: 9E:5F:2B:26:9D:86:C7:4E:39:8F:8A:4F:0D:67:A0:C8:7C:52:0E:85 Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Certificate serial: 019B7B35AA24EF2C5668B6C23452668B7030 Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/nl8rJp2Gx045j4pPDWegyHxSDoU.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35130 IP address blocks: 80.91.48.0/21 maxlen: 24 80.91.56.0/24 maxlen: 24 80.91.57.0/24 maxlen: 24 185.196.160.0/22 maxlen: 24 2a02:6000::/33 maxlen: 33 2a02:6000:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:aa:24:ef:2c:56:68:b6:c2:34:52:66:8b:70:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e5f2b269d86c74e398f8a4f0d67a0c87c520e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:a2:7d:19:07:d9:ab:bc:79:8e:87:41:7c: 35:0e:48:be:35:28:3b:96:de:af:2c:58:6e:ab:32: 35:60:11:a3:65:c1:1b:86:f3:c1:84:60:20:98:21: 9d:44:7a:a6:8b:8b:2e:2c:33:59:1b:43:6b:5b:e5: 2e:8a:3c:c4:e6:0c:53:33:33:7a:af:85:26:e2:1d: fc:d7:ef:f4:3c:b5:f8:94:4e:3d:68:1c:8b:31:94: 73:0f:51:f6:74:89:07:33:18:0c:9b:86:c4:12:23: 6b:7e:31:d4:42:3b:d1:99:23:42:6a:6e:6e:5a:b5: 6c:a3:35:a9:34:cc:c5:a0:b2:52:49:b2:6e:cc:3c: 52:a4:fe:f0:66:26:e7:eb:9d:a0:56:ab:63:82:97: b7:95:fd:82:a5:27:bb:54:e4:62:5f:d1:8c:af:c6: 51:1d:c5:02:80:67:d3:d0:f8:a7:1b:75:90:81:95: 02:ee:e4:2f:c1:7f:a5:2d:a5:ed:b6:32:90:d4:c6: 4a:1f:8a:57:fd:dd:5c:56:a5:d9:85:a7:01:e3:fa: 44:37:73:c4:f2:bb:87:23:3f:9c:c7:03:ea:58:9c: b6:1a:a2:10:cd:80:6e:75:a2:10:d3:6b:a7:dd:57: 6b:6e:74:4a:f6:85:83:3d:bd:70:c4:75:bd:a2:f2: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5F:2B:26:9D:86:C7:4E:39:8F:8A:4F:0D:67:A0:C8:7C:52:0E:85 X509v3 Authority Key Identifier: keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/nl8rJp2Gx045j4pPDWegyHxSDoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.48.0-80.91.57.255 185.196.160.0/22 IPv6: 2a02:6000::/33 2a02:6000:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 6b:ec:16:86:ed:14:e8:08:4f:86:52:6e:6b:b8:6e:74:6d:2e: 2e:91:32:00:cf:54:75:6e:41:d4:5c:6c:8d:f7:be:c0:30:51: 9d:a7:f3:72:b1:ca:db:55:63:2f:0f:bc:4d:04:a7:a2:23:36: ac:23:32:0b:d6:51:c3:6d:4c:5a:41:99:ed:70:cd:8b:fc:97: f5:7d:97:13:72:b1:6b:c2:23:a3:18:e1:29:43:83:d1:de:b3: bb:5c:a1:21:a3:c6:b8:c1:79:38:ba:a5:bf:7b:ba:79:31:f9: aa:93:cb:ed:e6:27:a0:e0:fb:5c:9c:04:80:57:28:9b:5c:72: 31:a0:7b:13:f6:e5:d4:1f:6d:41:90:d7:37:e6:a1:5a:ca:e6: a0:60:8b:48:62:37:2b:3f:24:3d:25:86:bd:1d:a9:f0:fd:76: f4:36:4a:e7:80:30:6f:20:80:dd:17:7a:58:f9:dd:e2:78:44: 2d:9b:cf:d1:e6:94:75:43:0c:5b:98:4a:12:36:aa:bf:f0:c7: ce:aa:1f:e9:d4:58:ed:d2:e5:9a:c1:13:d4:d7:87:d9:8f:ba: 4c:f9:24:88:14:8b:ce:6f:af:23:10:b9:96:ad:35:c1:35:bb: ac:e2:2c:91:1c:d1:af:ba:5d:fb:af:50:9c:1d:14:5a:ea:c2: b2:0a:c4:8f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7Naok7yxWaLbCNFJmi3AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk ZmI5ZmMwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTVmMmIyNjlkODZjNzRlMzk4ZjhhNGYwZDY3YTBjODdjNTIwZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yyifRkH2au8eY6HQXw1Dki+NSg7 lt6vLFhuqzI1YBGjZcEbhvPBhGAgmCGdRHqmi4suLDNZG0NrW+UuijzE5gxTMzN6 r4Um4h381+/0PLX4lE49aByLMZRzD1H2dIkHMxgMm4bEEiNrfjHUQjvRmSNCam5u WrVsozWpNMzFoLJSSbJuzDxSpP7wZibn652gVqtjgpe3lf2CpSe7VORiX9GMr8ZR HcUCgGfT0PinG3WQgZUC7uQvwX+lLaXttjKQ1MZKH4pX/d1cVqXZhacB4/pEN3PE 8ruHIz+cxwPqWJy2GqIQzYBudaIQ02un3VdrbnRK9oWDPb1wxHW9ovKtdwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJ5fKyadhsdOOY+KTw1noMh8Ug6FMB8GA1UdIwQY MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt Mzg3OWJkNzAzOTQ2LzEvbmw4ckpwMkd4MDQ1ajRwUERXZWd5SHhTRG9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2 LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAaBAIAATAUMAwDBARQWzAD BAFQWzgDBAK5xKAwFwQCAAIwEQMGByoCYAAAAwcAKgJgAP//MA0GCSqGSIb3DQEB CwUAA4IBAQBr7BaG7RToCE+GUm5ruG50bS4ukTIAz1R1bkHUXGyN977AMFGdp/Ny scrbVWMvD7xNBKeiIzasIzIL1lHDbUxaQZntcM2L/Jf1fZcTcrFrwiOjGOEpQ4PR 3rO7XKEho8a4wXk4uqW/e7p5Mfmqk8vt5ieg4PtcnASAVyibXHIxoHsT9uXUH21B kNc35qFayuagYItIYjcrPyQ9JYa9Hanw/Xb0NkrngDBvIIDdF3pY+d3ieEQtm8/R 5pR1QwxbmEoSNqq/8MfOqh/p1Fjt0uWawRPU14fZj7pM+SSIFIvOb68jELmWrTXB Nbus4iyRHNGvul37r1CcHRRa6sKyCsSP -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:18 2026 by rpki-client