This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa File: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (raw, json) Hash identifier: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I= Subject key identifier: 9D:FF:C6:E2:A1:60:AC:15:A1:5A:25:1B:25:39:F5:AC:CC:16:9D:7F Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 019B7B35C9D7D10E96F2F038FB947433F5F7 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44417 IP address blocks: 46.166.192.0/21 maxlen: 21 46.166.200.0/21 maxlen: 21 46.166.208.0/21 maxlen: 21 46.166.220.0/22 maxlen: 22 46.166.224.0/22 maxlen: 22 2a04:3800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c9:d7:d1:0e:96:f2:f0:38:fb:94:74:33:f5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dffc6e2a160ac15a15a251b2539f5accc169d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:a5:67:66:20:b6:62:d1:fc:af:73:7c:50: 82:ee:8e:4c:ae:23:60:5f:67:75:ee:8d:15:d3:ae: a3:49:34:f7:f8:27:ac:ea:24:5b:60:cb:e1:eb:dc: ea:0b:34:e7:13:b3:24:68:a6:7a:35:f7:81:76:60: d2:57:a8:31:1f:96:d0:c5:10:b1:86:d3:5e:04:d2: b4:3c:c2:29:94:0e:6b:02:a2:c7:7d:85:f9:89:46: a3:a5:fb:33:10:5b:53:15:0f:f0:bf:db:d2:36:ba: 17:9c:b1:48:2c:c6:95:6f:d9:aa:7f:a0:df:a4:ba: 44:d5:12:fa:2b:80:e4:85:6b:79:88:fd:22:05:c4: 57:f4:5f:a2:29:a5:c5:ae:42:58:a2:63:88:c0:bd: 96:51:81:11:29:fd:ee:a5:4b:64:39:fe:9c:81:e6: 1a:6f:92:11:0b:57:10:c9:4a:64:29:f3:bd:ae:aa: aa:39:82:94:84:aa:c5:23:0e:6c:b3:8b:2e:a4:53: 6e:2b:4c:9b:2c:2c:43:d7:df:8d:74:77:7f:f7:b8: 31:1b:f1:5c:b9:ac:bb:30:61:b1:02:8a:2a:3a:c4: 12:c0:78:3f:11:95:f8:b4:d4:0a:45:d2:e1:9b:16: ce:a9:96:d6:a7:84:3d:0d:28:85:05:dc:3b:40:b5: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FF:C6:E2:A1:60:AC:15:A1:5A:25:1B:25:39:F5:AC:CC:16:9D:7F X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.166.192.0-46.166.215.255 46.166.220.0-46.166.227.255 IPv6: 2a04:3800::/48 Signature Algorithm: sha256WithRSAEncryption 63:af:8e:ab:02:da:a7:d7:27:70:c2:54:5c:2e:9b:6b:8a:dd: 00:6c:f0:23:f1:6d:92:17:27:0d:b4:1a:f6:cc:fa:4e:d1:7f: b4:67:b0:f5:2d:3d:61:f3:aa:d3:a5:51:26:17:4b:8a:b7:a0: ea:d0:b2:7f:34:0e:0f:23:ab:68:f1:60:dc:2a:9a:be:8b:87: 26:09:70:bc:25:3b:83:7d:12:d3:9e:da:ef:94:5a:ff:7f:dc: 63:8f:40:f7:8a:51:28:01:88:45:c1:ef:b8:9e:e7:9a:50:f5: 3b:e4:3e:03:5e:5e:97:0d:58:40:cc:4f:bd:1d:e5:a5:5f:4b: 13:2a:11:6d:fe:dc:e1:1a:a9:6f:7e:f5:90:bb:25:cc:2f:92: cd:d8:d4:ea:46:89:b0:d8:cc:c5:38:bf:62:c9:4a:63:e8:fa: 2c:95:47:e6:c4:46:a5:82:e1:56:6d:44:84:ba:78:d1:a0:48: d9:56:6d:02:e4:6f:06:b8:93:26:bf:84:97:ae:73:67:03:e6: 3d:aa:bd:82:97:df:a3:ba:fc:d5:52:39:30:4c:b8:57:17:e4: 74:70:87:80:98:5d:d8:68:3d:cb:6e:c2:50:8c:ec:cf:ed:c5: d8:fc:44:f5:2c:ff:9d:90:05:14:70:ea:7a:46:64:f4:11:ee: 95:f8:be:35 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7NcnX0Q6W8vA4+5R0M/X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZmYzZlMmExNjBhYzE1YTE1YTI1MWIyNTM5ZjVhY2NjMTY5ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM+lZ2YgtmLR/K9zfFCC7o5MriNg X2d17o0V066jSTT3+Ces6iRbYMvh69zqCzTnE7MkaKZ6NfeBdmDSV6gxH5bQxRCx htNeBNK0PMIplA5rAqLHfYX5iUajpfszEFtTFQ/wv9vSNroXnLFILMaVb9mqf6Df pLpE1RL6K4DkhWt5iP0iBcRX9F+iKaXFrkJYomOIwL2WUYERKf3upUtkOf6cgeYa b5IRC1cQyUpkKfO9rqqqOYKUhKrFIw5ss4supFNuK0ybLCxD19+NdHd/97gxG/Fc uay7MGGxAooqOsQSwHg/EZX4tNQKRdLhmxbOqZbWp4Q9DSiFBdw7QLU1WwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJ3/xuKhYKwVoVolGyU59azMFp1/MB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvbmZfRzRxRmdyQldoV2lVYkpUbjFyTXdXblg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAiBAIAATAcMAwDBAYupsAD BAMuptAwDAMEAi6m3AMEAi6m4DAPBAIAAjAJAwcAKgQ4AAAAMA0GCSqGSIb3DQEB CwUAA4IBAQBjr46rAtqn1ydwwlRcLptrit0AbPAj8W2SFycNtBr2zPpO0X+0Z7D1 LT1h86rTpVEmF0uKt6Dq0LJ/NA4PI6to8WDcKpq+i4cmCXC8JTuDfRLTntrvlFr/ f9xjj0D3ilEoAYhFwe+4nueaUPU75D4DXl6XDVhAzE+9HeWlX0sTKhFt/tzhGqlv fvWQuyXML5LN2NTqRomw2MzFOL9iyUpj6PoslUfmxEalguFWbUSEunjRoEjZVm0C 5G8GuJMmv4SXrnNnA+Y9qr2Cl9+juvzVUjkwTLhXF+R0cIeAmF3YaD3LbsJQjOzP 7cXY/ET1LP+dkAUUcOp6RmT0Ee6V+L41 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:56 2026 by rpki-client