This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nqsnbKBWogvnLtJ7L7s0il9P2Io.roa File: nqsnbKBWogvnLtJ7L7s0il9P2Io.roa (raw, json) Hash identifier: 4DHV/IAHnC9d/T49CJU+OWH1NfsUgjQIKgy2nbXiPgc= Subject key identifier: 9E:AB:27:6C:A0:56:A2:0B:E7:2E:D2:7B:2F:BB:34:8A:5F:4F:D8:8A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68FAEE65F4838986E33290FC486FF Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nqsnbKBWogvnLtJ7L7s0il9P2Io.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199952 IP address blocks: 5.154.19.0/24 maxlen: 24 84.232.18.0/23 maxlen: 23 94.76.154.0/24 maxlen: 24 178.156.86.0/24 maxlen: 24 178.156.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:ae:e6:5f:48:38:98:6e:33:29:0f:c4:86:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eab276ca056a20be72ed27b2fbb348a5f4fd88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:00:8d:1a:d7:68:9c:c2:5b:81:8c:d5:a2: 46:92:f0:ec:7c:1c:f8:25:55:0d:ed:42:bd:fb:ad: cc:0d:79:d3:59:2e:1f:ae:50:1e:29:14:83:f3:ac: 05:9e:95:61:20:04:85:5f:5b:bb:d7:30:47:1b:ea: ec:91:aa:05:2c:62:31:f8:3e:41:63:86:ee:0d:ff: 64:8a:a4:10:86:31:c5:0f:68:2f:ec:a9:5c:74:8d: c2:26:bb:52:a8:81:17:ae:68:66:48:50:41:f0:fe: 9a:33:6c:bd:00:3b:fc:3d:ca:a3:78:fc:43:d6:5e: c1:68:a2:07:0b:bd:7d:32:88:c2:7d:2d:a0:89:76: a1:24:9c:73:af:59:88:49:88:8c:63:07:a4:65:2a: a8:f7:e2:89:e7:38:05:9c:ee:0e:69:fa:f7:78:09: ad:31:3d:fa:9d:ff:c3:9c:57:73:4a:0e:53:d3:68: 6d:dd:06:86:8a:2a:0a:a7:7c:59:25:2e:6d:9d:80: 20:ce:02:f3:f2:2a:79:84:91:1d:6c:fa:fc:72:3b: 44:5f:18:25:b7:35:19:f8:75:34:d1:16:66:ee:17: 5b:c1:82:84:75:94:6f:9e:93:4f:1b:fa:83:10:ed: a2:e5:2d:86:12:38:62:66:4b:9a:10:d4:d8:22:6e: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:27:6C:A0:56:A2:0B:E7:2E:D2:7B:2F:BB:34:8A:5F:4F:D8:8A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/nqsnbKBWogvnLtJ7L7s0il9P2Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.19.0/24 84.232.18.0/23 94.76.154.0/24 178.156.86.0/24 178.156.91.0/24 Signature Algorithm: sha256WithRSAEncryption cf:0b:39:4a:8c:2a:36:17:7f:6f:55:a4:40:ce:a9:67:5b:10: 1d:c6:38:0b:e7:71:75:cf:50:c7:82:2a:c4:0d:27:89:94:a0: ff:19:d7:5d:59:ea:80:b2:7c:56:92:9d:63:3a:11:84:dc:f2: a8:7e:6f:c7:4b:d5:eb:ec:1b:8f:34:c1:0f:59:aa:3b:3c:36: 5b:8a:28:81:29:c7:51:5f:21:4b:70:c5:df:88:41:bf:06:da: ac:41:b7:25:30:cf:fe:b5:cf:43:95:f7:a5:02:9c:ef:4b:23: f6:17:12:64:f6:df:38:cf:80:76:08:53:53:ce:eb:87:c4:2c: 38:da:09:c5:20:25:2d:b3:58:c9:75:f0:90:47:b8:74:64:1a: 39:75:dd:41:92:78:bb:fb:2d:25:d3:df:6c:e8:ef:58:74:f1: de:bf:a1:02:8c:75:ef:e1:73:51:c0:15:ac:23:04:aa:41:18: a7:47:3b:b2:f7:19:14:e9:ce:66:69:57:c8:7a:7d:43:02:28: 23:49:03:02:21:54:5e:44:05:33:12:17:f7:02:44:77:de:48: 66:f2:5f:4c:84:25:ff:84:4f:09:b3:10:6a:f1:f7:f8:75:4a: be:4d:35:cb:48:98:72:ea:31:67:35:06:27:0c:67:1d:5a:42: ed:7d:e5:fd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xo+u5l9IOJhuMykPxIb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWFiMjc2Y2EwNTZhMjBiZTcyZWQyN2IyZmJiMzQ4YTVmNGZkODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkAjRrXaJzCW4GM1aJGkvDsfBz4 JVUN7UK9+63MDXnTWS4frlAeKRSD86wFnpVhIASFX1u71zBHG+rskaoFLGIx+D5B Y4buDf9kiqQQhjHFD2gv7KlcdI3CJrtSqIEXrmhmSFBB8P6aM2y9ADv8PcqjePxD 1l7BaKIHC719MojCfS2giXahJJxzr1mISYiMYwekZSqo9+KJ5zgFnO4Oafr3eAmt MT36nf/DnFdzSg5T02ht3QaGiioKp3xZJS5tnYAgzgLz8ip5hJEdbPr8cjtEXxgl tzUZ+HU00RZm7hdbwYKEdZRvnpNPG/qDEO2i5S2GEjhiZkuaENTYIm6KSwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJ6rJ2ygVqIL5y7Sey+7NIpfT9iKMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvbnFzbmJLQldvZ3ZuTHRKN0w3czBpbDlQMklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABZoTAwQB VOgSAwQAXkyaAwQAspxWAwQAspxbMA0GCSqGSIb3DQEBCwUAA4IBAQDPCzlKjCo2 F39vVaRAzqlnWxAdxjgL53F1z1DHgirEDSeJlKD/GdddWeqAsnxWkp1jOhGE3PKo fm/HS9Xr7BuPNMEPWao7PDZbiiiBKcdRXyFLcMXfiEG/BtqsQbclMM/+tc9Dlfel ApzvSyP2FxJk9t84z4B2CFNTzuuHxCw42gnFICUts1jJdfCQR7h0ZBo5dd1Bkni7 +y0l099s6O9YdPHev6ECjHXv4XNRwBWsIwSqQRinRzuy9xkU6c5maVfIen1DAigj SQMCIVReRAUzEhf3AkR33khm8l9MhCX/hE8JsxBq8ff4dUq+TTXLSJhy6jFnNQYn DGcdWkLtfeX9 -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:24 2026 by rpki-client