This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nv6Ok4y2cOecEADCopzAJKhcBVU.roa File: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (raw, json) Hash identifier: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY= Subject key identifier: 9E:FE:8E:93:8C:B6:70:E7:9C:10:00:C2:A2:9C:C0:24:A8:5C:05:55 Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Certificate serial: 019B7D5B50993936139D52D02F0698583870 Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nv6Ok4y2cOecEADCopzAJKhcBVU.roa Signing time: Fri 02 Jan 2026 06:18:15 +0000 ROA not before: Fri 02 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 131.152.0.0/16 maxlen: 16 192.43.192.0/22 maxlen: 22 192.43.196.0/24 maxlen: 24 2a0a:4ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:50:99:39:36:13:9d:52:d0:2f:06:98:58:38:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Validity Not Before: Jan 2 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9efe8e938cb670e79c1000c2a29cc024a85c0555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:ab:53:21:dd:46:8c:2d:5c:72:fd:65:af: ad:db:a5:df:d9:25:b9:cb:81:cb:95:c5:82:50:92: 55:4a:ad:a5:e4:3a:91:57:79:da:ca:a5:fc:7e:f8: bb:8b:64:f6:ad:3d:61:1a:35:1b:01:64:c1:ac:a3: 66:b1:97:60:f6:c3:42:d6:d4:f7:b0:10:3a:b8:ff: 2b:a2:d1:ba:3a:76:2d:6d:02:b8:18:c6:5b:f6:64: 42:61:c5:a8:23:bb:e1:6a:57:22:84:b8:21:26:94: 9b:43:f3:4c:e1:8e:b3:fa:d6:18:04:24:f5:b4:7e: 50:79:2b:de:5a:6c:92:8f:31:fd:47:3b:ea:28:d1: bb:22:e5:93:ef:70:62:6d:76:05:25:c6:7a:38:b9: 0d:14:15:62:76:81:99:55:53:71:5d:55:e7:b4:dc: 3d:91:8d:ff:d4:32:fa:36:df:77:49:b8:ab:bc:13: 5c:66:7c:57:be:2c:f5:2d:7e:92:57:de:85:0d:c1: 47:82:63:95:97:2b:78:85:54:02:4e:0c:8a:15:91: ae:04:8f:46:f8:e5:f4:af:f2:18:9d:1c:e1:e9:c7: 58:5f:39:ee:03:f3:9a:70:50:b2:dd:2a:c0:d0:66: 6e:8d:4d:9b:05:cf:bc:d8:54:1f:82:b9:e8:6f:0d: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:8E:93:8C:B6:70:E7:9C:10:00:C2:A2:9C:C0:24:A8:5C:05:55 X509v3 Authority Key Identifier: keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nv6Ok4y2cOecEADCopzAJKhcBVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.152.0.0/16 192.43.192.0-192.43.196.255 IPv6: 2a0a:4ec0::/29 Signature Algorithm: sha256WithRSAEncryption 84:e9:29:92:a1:cd:56:6d:39:a1:dc:20:55:fc:ee:66:09:5f: e3:54:ae:08:9c:eb:77:2f:c2:72:5d:2d:94:3f:35:7f:4a:68: e8:d5:67:56:10:76:2f:55:02:69:d7:27:09:fa:f1:6d:a5:6a: 72:26:3c:8f:05:5e:91:a8:2e:ee:24:98:7b:54:9b:f8:a1:90: 42:63:b3:bb:fa:70:52:00:28:2b:b5:7f:9c:05:56:e2:9d:75: 76:84:e1:89:75:01:fd:c0:bb:ea:8e:58:80:ef:a4:61:9d:01: 07:76:1a:b0:25:0f:c7:bf:a7:92:8a:81:11:53:37:5e:b0:99: 99:20:6a:3c:49:cf:7f:05:77:cf:e0:83:54:ab:5e:47:fd:76: 58:09:2d:00:c6:ad:a5:e2:29:ad:e9:be:66:eb:74:61:ee:1b: 47:55:be:c6:96:38:31:da:ab:28:31:4b:4a:f9:48:ac:5e:04: ee:51:03:9b:9a:1f:a2:8c:f7:f2:13:9b:7a:02:65:93:a0:04: 16:0f:dc:5c:1a:d8:a4:32:82:98:36:f3:d7:96:cb:47:07:44: 02:79:87:60:84:1a:6a:62:ba:b6:60:be:02:d0:b7:1b:6f:4c: 67:a7:24:92:d3:38:2b:29:29:56:c6:36:6e:24:4b:7a:a1:d8: ac:d3:9a:9c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9W1CZOTYTnVLQLwaYWDhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh MjVlZDEwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWZlOGU5MzhjYjY3MGU3OWMxMDAwYzJhMjljYzAyNGE4NWMwNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsyrUyHdRowtXHL9Za+t26Xf2SW5 y4HLlcWCUJJVSq2l5DqRV3nayqX8fvi7i2T2rT1hGjUbAWTBrKNmsZdg9sNC1tT3 sBA6uP8rotG6OnYtbQK4GMZb9mRCYcWoI7vhalcihLghJpSbQ/NM4Y6z+tYYBCT1 tH5QeSveWmySjzH9RzvqKNG7IuWT73BibXYFJcZ6OLkNFBVidoGZVVNxXVXntNw9 kY3/1DL6Nt93SbirvBNcZnxXviz1LX6SV96FDcFHgmOVlyt4hVQCTgyKFZGuBI9G +OX0r/IYnRzh6cdYXznuA/OacFCy3SrA0GZujU2bBc+82FQfgrnobw0MBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJ7+jpOMtnDnnBAAwqKcwCSoXAVVMB8GA1UdIwQY MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt YTQ5YjcyYTFjZmUyLzEvbnY2T2s0eTJjT2VjRUFEQ29wekFKS2hjQlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATAwMAg5gwDAME BsArwAMEAMArxDANBAIAAjAHAwUDKgpOwDANBgkqhkiG9w0BAQsFAAOCAQEAhOkp kqHNVm05odwgVfzuZglf41SuCJzrdy/Ccl0tlD81f0po6NVnVhB2L1UCadcnCfrx baVqciY8jwVekagu7iSYe1Sb+KGQQmOzu/pwUgAoK7V/nAVW4p11doThiXUB/cC7 6o5YgO+kYZ0BB3YasCUPx7+nkoqBEVM3XrCZmSBqPEnPfwV3z+CDVKteR/12WAkt AMatpeIprem+Zut0Ye4bR1W+xpY4MdqrKDFLSvlIrF4E7lEDm5ofooz38hObegJl k6AEFg/cXBrYpDKCmDbz15bLRwdEAnmHYIQaamK6tmC+AtC3G29MZ6ckktM4Kykp VsY2biRLeqHYrNOanA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:01 2026 by rpki-client