This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/nxHEgGmNDS7-geQ5hOsqGMEpJHc.roa File: nxHEgGmNDS7-geQ5hOsqGMEpJHc.roa (raw, json) Hash identifier: 0LTihJ1p3YwES3vN//+gWZyPU4fXm6Nydwbsciw+uU8= Subject key identifier: 9F:11:C4:80:69:8D:0D:2E:FE:81:E4:39:84:EB:2A:18:C1:29:24:77 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019AEA2FC17503DA10C9656FECD5752239E0 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/nxHEgGmNDS7-geQ5hOsqGMEpJHc.roa Signing time: Thu 04 Dec 2025 16:26:29 +0000 ROA not before: Thu 04 Dec 2025 16:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58123 IP address blocks: 46.19.4.0/24 maxlen: 24 46.19.5.0/24 maxlen: 24 46.19.6.0/24 maxlen: 24 2a01:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:2f:c1:75:03:da:10:c9:65:6f:ec:d5:75:22:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Dec 4 16:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f11c480698d0d2efe81e43984eb2a18c1292477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:e0:e0:04:5e:2e:cb:b8:f4:b7:9f:01:59: 47:5f:82:9a:0c:fa:f6:cb:18:72:b7:dd:70:43:09: 34:c8:e1:5b:66:44:ea:e5:99:c3:b0:8b:ef:fc:8d: ae:38:b7:f6:0c:c4:fe:b5:53:fd:77:e4:2e:0f:20: 44:06:d5:24:ee:e0:e1:3b:df:99:f6:0b:6b:f1:08: 12:a6:d0:1c:9a:b7:a4:99:b7:ea:96:9b:cf:f7:05: ad:a1:df:a4:a8:37:57:b0:f0:4f:6a:f9:da:cb:ba: 97:e9:04:74:79:04:e3:de:4b:af:11:9b:7d:82:be: 8d:7d:86:9b:33:36:0f:31:2c:b3:e6:60:a4:4a:19: e7:d2:6a:1c:88:02:ce:d5:b2:da:54:91:5e:be:61: 2b:c5:51:6f:2b:0f:b6:7f:de:1d:34:7a:1f:52:71: a9:b5:fe:10:2b:a5:f6:02:b3:40:d6:4a:68:96:ea: e2:dd:b7:a5:ea:1e:7c:39:fd:1e:24:99:c8:96:a1: ec:fc:30:4d:1d:8d:0a:06:2b:17:90:fa:68:18:a1: 72:fa:12:16:d2:a8:b2:b2:62:2e:1a:05:e7:db:cc: 1c:4b:c5:19:81:9b:44:54:4b:f3:5c:84:a0:dd:b1: cc:b0:91:0a:09:f6:eb:36:f5:35:d6:22:43:b5:28: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:C4:80:69:8D:0D:2E:FE:81:E4:39:84:EB:2A:18:C1:29:24:77 X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/nxHEgGmNDS7-geQ5hOsqGMEpJHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.4.0-46.19.6.255 IPv6: 2a01:7040::/32 Signature Algorithm: sha256WithRSAEncryption ba:71:55:44:6c:0e:cd:7e:17:ac:29:57:f6:ca:07:48:38:13: a2:96:cf:67:cc:cb:0d:23:42:a7:66:3a:1a:d7:38:dc:5d:31: 16:3a:61:89:a2:9e:45:4b:8d:3e:bd:02:63:b8:f1:bd:01:91: 2a:77:5e:0f:40:e4:d1:74:9c:fd:28:b7:5d:cc:8f:d2:25:ce: b7:8e:a9:64:25:82:74:a1:ac:13:56:6a:58:ce:54:fb:9c:c4: a4:69:08:f1:17:ef:ea:6a:24:4e:a8:5e:d7:33:2e:38:d0:51: c4:4a:79:b3:25:40:f1:46:01:a6:58:b8:d4:db:8f:de:f1:7d: 50:6f:c1:7f:e1:1d:0e:c7:a5:c7:fd:99:88:53:b9:ec:8a:26: 43:d3:db:df:9a:3a:b0:eb:9b:84:ac:22:87:e7:f3:82:92:42: 32:39:65:e9:08:ac:f5:d4:e6:30:94:59:60:bc:ce:b4:24:71: 97:f2:9d:21:41:2b:3b:68:7e:28:12:02:bb:7d:83:3e:22:d7: 6f:00:2a:da:94:e7:29:5c:34:71:69:50:d1:2b:34:b1:22:11: 3d:01:c6:c4:35:18:53:52:af:7c:25:b6:13:9c:a5:b2:d3:20: 2d:cc:05:5f:3a:81:6e:44:86:82:ce:3c:d1:62:11:02:bf:56: 3e:dc:b8:59 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrqL8F1A9oQyWVv7NV1IjngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjUxMjA0MTYyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjExYzQ4MDY5OGQwZDJlZmU4MWU0Mzk4NGViMmExOGMxMjkyNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp/g4AReLsu49LefAVlHX4KaDPr2 yxhyt91wQwk0yOFbZkTq5ZnDsIvv/I2uOLf2DMT+tVP9d+QuDyBEBtUk7uDhO9+Z 9gtr8QgSptAcmrekmbfqlpvP9wWtod+kqDdXsPBPavnay7qX6QR0eQTj3kuvEZt9 gr6NfYabMzYPMSyz5mCkShnn0mociALO1bLaVJFevmErxVFvKw+2f94dNHofUnGp tf4QK6X2ArNA1kpoluri3bel6h58Of0eJJnIlqHs/DBNHY0KBisXkPpoGKFy+hIW 0qiysmIuGgXn28wcS8UZgZtEVEvzXISg3bHMsJEKCfbrNvU11iJDtSi3RQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ8RxIBpjQ0u/oHkOYTrKhjBKSR3MB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvbnhIRWdHbU5EUzctZ2VRNWhPc3FHTUVwSkhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAIuEwQD BAAuEwYwDQQCAAIwBwMFACoBcEAwDQYJKoZIhvcNAQELBQADggEBALpxVURsDs1+ F6wpV/bKB0g4E6KWz2fMyw0jQqdmOhrXONxdMRY6YYminkVLjT69AmO48b0BkSp3 Xg9A5NF0nP0ot13Mj9IlzreOqWQlgnShrBNWaljOVPucxKRpCPEX7+pqJE6oXtcz LjjQUcRKebMlQPFGAaZYuNTbj97xfVBvwX/hHQ7Hpcf9mYhTueyKJkPT29+aOrDr m4SsIofn84KSQjI5ZekIrPXU5jCUWWC8zrQkcZfynSFBKztofigSArt9gz4i128A KtqU5ylcNHFpUNErNLEiET0BxsQ1GFNSr3wlthOcpbLTIC3MBV86gW5EhoLOPNFi EQK/Vj7cuFk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:06 2025 by rpki-client