This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa File: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (raw, json) Hash identifier: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8= Subject key identifier: 9C:FE:24:CA:BD:C9:75:B1:A3:66:95:60:1E:9C:37:EA:A3:31:4C:F4 Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA7432B7ED654A76187181B7F75A53D Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20811 IP address blocks: 37.186.128.0/18 maxlen: 24 46.234.224.0/19 maxlen: 24 84.18.128.0/19 maxlen: 24 89.190.160.0/19 maxlen: 24 93.89.48.0/20 maxlen: 24 95.171.32.0/19 maxlen: 24 185.6.192.0/22 maxlen: 24 212.46.160.0/21 maxlen: 24 217.199.0.0/19 maxlen: 24 2a02:490::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:43:2b:7e:d6:54:a7:61:87:18:1b:7f:75:a5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cfe24cabdc975b1a36695601e9c37eaa3314cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:f5:39:7e:d3:a8:1e:83:26:2f:78:ec:57: fe:ee:09:ad:51:47:d5:d7:c1:d0:61:24:f6:c1:a5: c7:0a:92:55:e7:0f:dc:a0:b9:00:ef:6e:9f:c8:7b: f9:1d:b5:41:ed:61:33:dc:a2:2e:b0:1a:00:36:f0: b1:34:09:b8:a8:9b:f5:39:e1:e8:8f:42:f4:7a:1e: 77:9e:c3:8f:99:83:62:7c:c8:15:6d:41:ea:8b:91: e6:bc:a6:ce:88:5d:50:da:8b:3e:b0:d5:63:b6:77: 4d:4d:cb:91:dd:80:59:9b:8e:49:56:92:79:d3:d6: 4f:bd:ce:73:c3:d5:7c:4c:3b:aa:db:83:7c:5b:a9: 7b:9c:ed:a0:e5:55:85:65:22:cf:b4:46:d4:58:95: 72:9c:7b:ae:29:25:4d:ab:e2:40:e3:8c:b8:ae:ee: a0:cf:d1:8b:ac:07:bb:9f:a9:51:47:b5:5b:48:b4: 2e:36:a2:9d:0d:2e:b5:c3:12:c0:b9:0f:1b:3c:c9: 46:85:4e:5d:5c:3f:5b:bf:8a:65:88:a6:f1:55:f7: 45:5b:c7:03:88:75:02:51:19:4d:f0:e1:89:9f:71: ad:31:b9:32:0f:ca:fe:6a:b0:f9:aa:d1:0d:8e:82: 89:21:f2:d8:d8:80:e2:5c:d7:a6:66:55:13:94:80: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:24:CA:BD:C9:75:B1:A3:66:95:60:1E:9C:37:EA:A3:31:4C:F4 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.128.0/18 46.234.224.0/19 84.18.128.0/19 89.190.160.0/19 93.89.48.0/20 95.171.32.0/19 185.6.192.0/22 212.46.160.0/21 217.199.0.0/19 IPv6: 2a02:490::/29 Signature Algorithm: sha256WithRSAEncryption 4e:3c:d3:7f:11:f0:35:eb:ab:7e:fc:e6:32:96:1b:aa:1a:3e: 2e:52:f9:f6:50:8c:c5:a6:49:52:7f:1b:90:6a:f4:19:10:c2: 66:91:96:01:14:7a:8d:83:7f:50:d1:56:ba:b0:ea:51:56:e5: c6:91:c8:4a:3a:b3:71:5e:dd:c2:54:77:4f:f3:5b:f2:e2:4c: ac:ea:ff:b6:b9:84:94:27:d8:ce:4a:db:85:52:1b:0e:dc:ee: 24:35:c3:62:82:d6:2b:c8:56:7f:5e:0a:a9:83:35:7d:d2:a4: 94:9c:5e:9c:c4:27:75:d7:b5:de:76:8c:a3:5d:c8:48:1d:32: 7d:dd:91:7c:98:2f:be:9f:1f:a3:1a:67:36:e4:b8:46:cf:15: ed:7c:89:42:c3:59:07:f9:e7:d7:98:74:16:95:76:8e:35:bd: 23:3d:b8:90:a6:e1:f1:a8:45:cd:9c:e3:5f:70:3a:cf:77:bd: 9d:73:f8:58:64:2c:d5:60:5d:43:1c:78:96:46:47:f5:cf:49: e6:0f:75:08:e9:10:7f:fc:1c:31:73:32:97:9b:e5:36:b5:b7: b1:7f:e3:b1:b5:59:5e:19:04:71:99:bc:05:ae:e2:9c:c1:1c: a7:5d:e8:b9:d0:df:5e:9a:d9:a2:f2:eb:c9:96:57:76:98:76: 69:6d:c8:d2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt+p0MrftZUp2GHGBt/daU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2ZlMjRjYWJkYzk3NWIxYTM2Njk1NjAxZTljMzdlYWEzMzE0Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd31OX7TqB6DJi947Ff+7gmtUUfV 18HQYST2waXHCpJV5w/coLkA726fyHv5HbVB7WEz3KIusBoANvCxNAm4qJv1OeHo j0L0eh53nsOPmYNifMgVbUHqi5HmvKbOiF1Q2os+sNVjtndNTcuR3YBZm45JVpJ5 09ZPvc5zw9V8TDuq24N8W6l7nO2g5VWFZSLPtEbUWJVynHuuKSVNq+JA44y4ru6g z9GLrAe7n6lRR7VbSLQuNqKdDS61wxLAuQ8bPMlGhU5dXD9bv4pliKbxVfdFW8cD iHUCURlN8OGJn3GtMbkyD8r+arD5qtENjoKJIfLY2IDiXNemZlUTlIDH5wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJz+JMq9yXWxo2aVYB6cN+qjMUz0MB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvblA0a3lyM0pkYkdqWnBWZ0hwdzM2cU14VFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQGJbqAAwQF LurgAwQFVBKAAwQFWb6gAwQEXVkwAwQFX6sgAwQCuQbAAwQD1C6gAwQF2ccAMA0E AgACMAcDBQMqAgSQMA0GCSqGSIb3DQEBCwUAA4IBAQBOPNN/EfA166t+/OYylhuq Gj4uUvn2UIzFpklSfxuQavQZEMJmkZYBFHqNg39Q0Va6sOpRVuXGkchKOrNxXt3C VHdP81vy4kys6v+2uYSUJ9jOStuFUhsO3O4kNcNigtYryFZ/XgqpgzV90qSUnF6c xCd117XedoyjXchIHTJ93ZF8mC++nx+jGmc25LhGzxXtfIlCw1kH+efXmHQWlXaO Nb0jPbiQpuHxqEXNnONfcDrPd72dc/hYZCzVYF1DHHiWRkf1z0nmD3UI6RB//Bwx czKXm+U2tbexf+OxtVleGQRxmbwFruKcwRynXei50N9emtmi8uvJlld2mHZpbcjS -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:16 2026 by rpki-client