This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/nykf0zrTCoPd1iM-xAnh89_VJaM.roa File: nykf0zrTCoPd1iM-xAnh89_VJaM.roa (raw, json) Hash identifier: MbWss0wBitxLQn7qC9neXRi6hi6X3oH2hMY4Zjhb/A4= Subject key identifier: 9F:29:1F:D3:3A:D3:0A:83:DD:D6:23:3E:C4:09:E1:F3:DF:D5:25:A3 Certificate issuer: /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Certificate serial: 019B7EA738786A5FB8F87F49509C951EFB79 Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/nykf0zrTCoPd1iM-xAnh89_VJaM.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216285 IP address blocks: 194.153.116.0/24 maxlen: 24 2a14:4280::/29 maxlen: 29 2a14:4280::/32 maxlen: 32 2a14:4281::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:38:78:6a:5f:b8:f8:7f:49:50:9c:95:1e:fb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f291fd33ad30a83ddd6233ec409e1f3dfd525a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:c5:f8:9a:10:ca:53:aa:d0:7e:52:e2:3c: c4:69:ef:25:9d:7b:d4:5b:45:16:76:8a:86:b8:60: 60:f5:e5:b7:99:4d:71:85:b0:41:39:77:8e:99:52: 3a:0d:90:f9:f0:90:b7:87:f7:1d:c4:2a:7e:16:ed: 66:0f:a2:78:86:bc:50:6b:6d:03:9c:34:6d:5a:38: 38:d1:4c:f2:56:69:14:48:67:72:22:4c:b9:fe:d2: 26:ac:93:ca:79:36:20:9e:80:84:0d:87:91:3c:45: d7:f1:44:08:63:e0:a3:80:56:3f:dd:6e:17:25:a9: e5:5e:17:8b:d8:0a:40:6f:cd:5f:06:cb:66:33:85: fd:01:25:96:06:4e:c9:1a:f2:96:99:83:8c:0b:e3: a3:89:d1:64:d8:de:22:90:61:48:c3:c3:ac:ef:5f: 65:9d:42:29:ec:0f:42:b6:b6:d0:c2:a5:da:0b:b3: 0e:15:03:e7:73:30:29:1b:0d:dc:e8:71:a5:a9:23: 45:75:f0:5f:ce:37:f9:b2:60:ee:4f:d9:91:48:65: ff:ed:bc:d0:d5:90:15:69:34:4d:8f:f5:b2:6c:6e: 87:f5:0c:ea:22:20:26:16:b0:86:cc:d5:b3:e7:e2: 1a:91:36:1e:59:a3:35:3e:6e:f5:dc:ca:6a:25:b4: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:29:1F:D3:3A:D3:0A:83:DD:D6:23:3E:C4:09:E1:F3:DF:D5:25:A3 X509v3 Authority Key Identifier: keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/nykf0zrTCoPd1iM-xAnh89_VJaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.116.0/24 IPv6: 2a14:4280::/29 Signature Algorithm: sha256WithRSAEncryption 66:93:7b:6b:21:22:45:4c:a7:26:8f:a3:d1:d4:12:cf:a4:2c: 4e:ed:64:10:0a:1f:b3:e1:6a:80:6d:52:8d:f2:7e:c4:cf:37: 38:74:b6:f0:b2:eb:1c:e0:a0:cd:21:02:39:ee:e0:1a:e1:cb: 87:f7:f1:97:9d:08:93:9e:30:be:cb:15:b5:00:59:74:ee:0d: be:ab:82:9b:76:5b:b0:ce:da:55:82:5b:2a:fd:c9:c7:af:25: d9:8d:54:f7:33:4f:c0:40:0e:60:d2:04:fe:bd:77:a9:e7:e5: 63:e9:15:36:54:eb:2e:59:e2:6f:a0:bf:22:8d:6b:bf:2f:71: 89:86:40:1a:31:1b:f3:a8:e4:df:37:e1:71:3f:44:cf:7b:bf: df:9d:4f:8a:e9:81:92:19:5b:59:68:ac:13:6f:5d:24:be:c2: 54:e6:e1:1a:a1:15:ba:68:b1:bd:27:d1:63:68:b2:bc:c2:3c: a8:71:34:4a:2d:43:0a:3f:d0:13:0e:cb:f1:1b:0a:22:72:bb: 13:34:35:8a:1e:ef:b5:ff:16:0b:4a:d3:0c:ef:bc:bf:85:f4: 44:9a:d3:f9:8e:32:21:e1:59:7d:58:04:8d:d5:54:cb:88:ae: 9b:be:a0:34:d8:24:0a:c1:0b:4f:6a:af:88:b9:2b:40:84:b7: 94:42:26:e0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzh4al+4+H9JUJyVHvt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl ZWQ3OTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI5MWZkMzNhZDMwYTgzZGRkNjIzM2VjNDA5ZTFmM2RmZDUyNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhvF+JoQylOq0H5S4jzEae8lnXvU W0UWdoqGuGBg9eW3mU1xhbBBOXeOmVI6DZD58JC3h/cdxCp+Fu1mD6J4hrxQa20D nDRtWjg40UzyVmkUSGdyIky5/tImrJPKeTYgnoCEDYeRPEXX8UQIY+CjgFY/3W4X JanlXheL2ApAb81fBstmM4X9ASWWBk7JGvKWmYOMC+OjidFk2N4ikGFIw8Os719l nUIp7A9CtrbQwqXaC7MOFQPnczApGw3c6HGlqSNFdfBfzjf5smDuT9mRSGX/7bzQ 1ZAVaTRNj/WybG6H9QzqIiAmFrCGzNWz5+IakTYeWaM1Pm713MpqJbQBGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ8pH9M60wqD3dYjPsQJ4fPf1SWjMB8GA1UdIwQY MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt NGFhYjJkNjhmYTVhLzEvbnlrZjB6clRDb1BkMWlNLXhBbmg4OV9WSmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwpl0MA0E AgACMAcDBQMqFEKAMA0GCSqGSIb3DQEBCwUAA4IBAQBmk3trISJFTKcmj6PR1BLP pCxO7WQQCh+z4WqAbVKN8n7Ezzc4dLbwsusc4KDNIQI57uAa4cuH9/GXnQiTnjC+ yxW1AFl07g2+q4KbdluwztpVglsq/cnHryXZjVT3M0/AQA5g0gT+vXep5+Vj6RU2 VOsuWeJvoL8ijWu/L3GJhkAaMRvzqOTfN+FxP0TPe7/fnU+K6YGSGVtZaKwTb10k vsJU5uEaoRW6aLG9J9FjaLK8wjyocTRKLUMKP9ATDsvxGwoicrsTNDWKHu+1/xYL StMM77y/hfREmtP5jjIh4Vl9WASN1VTLiK6bvqA02CQKwQtPaq+IuStAhLeUQibg -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:46 2026 by rpki-client