This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/nzlaOINlB5NKeARZuU4upJ4rUbo.roa File: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (raw, json) Hash identifier: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E= Subject key identifier: 9F:39:5A:38:83:65:07:93:4A:78:04:59:B9:4E:2E:A4:9E:2B:51:BA Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38DCFA95309CE33662B4CA9E2C4521 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/nzlaOINlB5NKeARZuU4upJ4rUbo.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397229 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:dc:fa:95:30:9c:e3:36:62:b4:ca:9e:2c:45:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f395a38836507934a780459b94e2ea49e2b51ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:55:22:e8:2c:66:da:82:f8:d9:7a:7f:02: b8:2c:eb:95:2b:6b:f1:1a:07:cd:63:4c:1d:38:1d: 82:fe:17:91:c9:0f:d1:14:e3:dd:a3:2f:20:f7:19: e8:95:4f:01:4c:aa:82:7c:22:a0:e2:9b:23:35:8c: 1c:e1:40:db:7f:72:c3:71:77:5c:5c:0e:ee:1b:1c: 75:67:32:02:15:54:bf:2b:ea:25:68:a1:aa:f8:3c: a0:a0:02:c5:86:d6:be:7e:a6:61:55:2d:77:3b:f3: f2:68:41:fa:ad:63:4a:71:b6:eb:18:f2:0d:ff:48: db:3c:e2:f4:15:ee:25:1d:fb:b4:b3:4d:e6:e8:e3: e4:8a:ea:cd:2d:87:c0:dd:a1:50:b5:06:74:df:78: 77:b6:27:9a:46:f1:9f:cd:f9:94:07:3a:3b:db:73: 67:38:1e:e7:32:e7:a2:95:3f:93:a3:b5:0b:ff:7a: 6e:ac:74:1a:67:15:c3:a0:98:4c:e4:2d:6b:d2:26: 89:80:a8:78:98:0d:a1:3d:44:86:e9:fa:f6:5e:8f: 67:71:d1:86:ff:e3:b3:5b:5f:61:3e:6f:61:a6:e6: 3a:13:22:67:10:a4:0e:e6:71:b6:d2:06:d8:6d:1b: 62:74:00:10:d3:c2:93:76:78:9c:a2:cf:3c:68:18: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:5A:38:83:65:07:93:4A:78:04:59:B9:4E:2E:A4:9E:2B:51:BA X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/nzlaOINlB5NKeARZuU4upJ4rUbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:75:2f:e8:74:8d:cf:86:5f:c0:a5:e5:30:e9:ed:e5:0b:fe: 63:18:ff:6f:a8:cc:97:a4:06:96:f5:55:2c:f7:95:8f:19:6f: ba:66:b2:3f:a7:43:e3:06:84:a1:78:e6:33:46:2f:b4:f1:88: c1:c0:8a:3b:0b:39:e3:07:c4:0b:61:e0:69:e1:a8:32:5c:aa: ed:b9:49:13:77:12:26:7d:84:6c:5c:3f:77:63:27:16:a4:84: f9:06:7f:2b:5e:32:8e:13:e3:f7:b9:26:2c:b4:74:c1:d5:36: f1:cd:ed:e8:ec:d5:67:e2:f8:cc:d1:82:45:d2:db:c7:2d:96: b5:fb:a9:77:0e:2b:70:f1:b7:94:32:db:75:6d:08:0d:26:b1: 5d:0b:d0:86:68:95:8d:f5:89:93:7c:0a:0e:db:ca:a5:5b:65: 4e:7e:c8:bc:39:6a:a8:79:e7:bb:2d:5b:79:d8:d7:3f:17:df: 23:df:21:e8:ac:7e:01:05:19:3c:26:e8:cd:5d:89:81:79:da: 71:4d:ac:fa:0e:85:5d:6e:b8:86:b4:5f:14:44:e3:c9:a3:a8: fe:f7:51:7a:5b:d1:50:6a:87:e5:bf:a8:2d:27:02:e3:a1:73: a2:31:d7:fd:77:d7:06:33:04:b0:d6:cf:ac:c6:49:d5:e8:a4: 10:6f:80:66 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONz6lTCc4zZitMqeLEUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjM5NWEzODgzNjUwNzkzNGE3ODA0NTliOTRlMmVhNDllMmI1MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjFVIugsZtqC+Nl6fwK4LOuVK2vx GgfNY0wdOB2C/heRyQ/RFOPdoy8g9xnolU8BTKqCfCKg4psjNYwc4UDbf3LDcXdc XA7uGxx1ZzICFVS/K+olaKGq+DygoALFhta+fqZhVS13O/PyaEH6rWNKcbbrGPIN /0jbPOL0Fe4lHfu0s03m6OPkiurNLYfA3aFQtQZ033h3tieaRvGfzfmUBzo723Nn OB7nMueilT+To7UL/3purHQaZxXDoJhM5C1r0iaJgKh4mA2hPUSG6fr2Xo9ncdGG /+OzW19hPm9hpuY6EyJnEKQO5nG20gbYbRtidAAQ08KTdnicos88aBiC7wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ85WjiDZQeTSngEWblOLqSeK1G6MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvbnpsYU9JTmxCNU5LZUFSWnVVNHVwSjRyVWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAqdS/odI3Phl/ApeUw 6e3lC/5jGP9vqMyXpAaW9VUs95WPGW+6ZrI/p0PjBoSheOYzRi+08YjBwIo7Cznj B8QLYeBp4agyXKrtuUkTdxImfYRsXD93YycWpIT5Bn8rXjKOE+P3uSYstHTB1Tbx ze3o7NVn4vjM0YJF0tvHLZa1+6l3Ditw8beUMtt1bQgNJrFdC9CGaJWN9YmTfAoO 28qlW2VOfsi8OWqoeee7LVt52Nc/F98j3yHorH4BBRk8JujNXYmBedpxTaz6DoVd briGtF8UROPJo6j+91F6W9FQaoflv6gtJwLjoXOiMdf9d9cGMwSw1s+sxknV6KQQ b4Bm -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:05 2026 by rpki-client