This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/nbIvrx7sm7OwjVQqUWYz7-Ej8ik.roa File: nbIvrx7sm7OwjVQqUWYz7-Ej8ik.roa (raw, json) Hash identifier: ojgsRosmxWEVTH6lCEXrXkAjnSTCm4lGdDblGwk6LXQ= Subject key identifier: 9D:B2:2F:AF:1E:EC:9B:B3:B0:8D:54:2A:51:66:33:EF:E1:23:F2:29 Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e Certificate serial: 019B7A5B325A5D7AFFB51CC31DA8C217FAD7 Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/nbIvrx7sm7OwjVQqUWYz7-Ej8ik.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30720 IP address blocks: 80.85.160.0/24 maxlen: 24 80.85.175.0/24 maxlen: 24 2a01:6a40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:32:5a:5d:7a:ff:b5:1c:c3:1d:a8:c2:17:fa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db22faf1eec9bb3b08d542a516633efe123f229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:b9:31:0e:2c:9a:5b:eb:89:39:e6:06:45: 0c:4b:ea:c7:9d:23:d5:da:ad:66:3d:3f:e2:ed:db: 34:3c:ae:9b:45:50:50:74:d2:15:b8:48:e7:cf:e5: c8:67:55:00:0b:ec:2d:aa:3c:b9:fc:cd:45:ec:05: 26:8f:4d:3d:85:ae:3d:f3:49:d9:9b:b4:37:ce:74: 50:e9:31:81:8d:c4:b5:12:a6:90:f4:a4:4d:4a:66: e5:de:69:ff:47:dd:dc:eb:04:5d:30:e9:18:fe:50: 91:cb:59:e1:44:19:f9:89:fc:1a:96:a3:f5:48:67: 8f:b2:a5:0f:25:89:ea:b5:03:81:19:31:b0:92:4c: ad:5f:07:85:3b:9e:cd:4d:2b:2b:29:b9:3e:15:cd: 12:00:ab:0e:44:ad:21:77:a7:72:0f:45:ad:3d:5c: 43:bb:4d:46:47:24:8b:36:24:de:08:95:12:03:cc: 6a:49:97:f9:02:2d:97:78:85:bc:a6:66:37:21:9c: 21:b6:a9:d2:30:bd:a2:77:87:36:37:5a:68:21:9c: c9:e3:4b:5b:a5:61:9f:a1:0e:c6:0d:76:6e:bb:07: 9d:18:11:30:30:6b:92:0e:fe:48:19:81:a3:ec:ac: f9:d1:48:4e:3c:a0:e9:1b:07:61:4b:34:76:12:13: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B2:2F:AF:1E:EC:9B:B3:B0:8D:54:2A:51:66:33:EF:E1:23:F2:29 X509v3 Authority Key Identifier: keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/nbIvrx7sm7OwjVQqUWYz7-Ej8ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.160.0/24 80.85.175.0/24 IPv6: 2a01:6a40:1::/48 Signature Algorithm: sha256WithRSAEncryption af:c5:91:18:be:24:8a:38:2b:41:85:c3:ed:fc:26:cf:0b:dc: 4e:ab:97:f2:1a:aa:e0:a8:5e:d4:4f:c8:31:55:70:5f:67:74: 0b:8b:67:83:fa:1a:ae:a3:3a:d4:84:7d:f2:05:79:8a:21:e7: d2:0c:39:4f:c5:14:e6:59:04:37:44:8a:51:39:5a:44:9f:c1: 7f:05:01:4f:74:c5:fb:80:b4:9d:e5:6e:93:be:e0:47:bc:b7: f9:e7:0e:4b:da:e6:02:cc:ee:f2:cc:cf:6e:82:99:39:03:a7: 48:05:e4:f0:98:4e:6c:1e:16:d7:85:8d:31:f0:9e:d6:4f:f5: 04:ad:24:a1:c3:cb:94:a3:84:56:ef:9e:08:d7:6e:b7:5a:10: b0:32:d7:e9:45:d6:1c:1f:0e:97:84:2b:96:7e:ef:cf:75:6d: 03:de:cc:81:ea:47:c1:ec:c1:eb:28:89:70:95:1c:d1:12:ce: 73:64:03:a1:8e:a5:1e:98:56:e5:da:b7:79:93:b1:b6:43:0d: 96:0e:e5:1e:29:c9:4a:01:b4:97:73:e6:73:14:77:4e:9c:37: c3:81:b7:d1:7b:1c:18:e2:ba:01:65:4e:df:9b:20:79:bb:49: 2b:1f:29:f9:ac:9c:df:23:8b:93:e2:b8:d1:e6:77:ee:4e:78: c2:56:84:9c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WzJaXXr/tRzDHajCF/rXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2FlODBjZWNiNTZmNWIzMDAzODgzYTk1ZTI2ZjQ0MWQ3 NDlmMmUwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGIyMmZhZjFlZWM5YmIzYjA4ZDU0MmE1MTY2MzNlZmUxMjNmMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ai5MQ4smlvriTnmBkUMS+rHnSPV 2q1mPT/i7ds0PK6bRVBQdNIVuEjnz+XIZ1UAC+wtqjy5/M1F7AUmj009ha4980nZ m7Q3znRQ6TGBjcS1EqaQ9KRNSmbl3mn/R93c6wRdMOkY/lCRy1nhRBn5ifwalqP1 SGePsqUPJYnqtQOBGTGwkkytXweFO57NTSsrKbk+Fc0SAKsORK0hd6dyD0WtPVxD u01GRySLNiTeCJUSA8xqSZf5Ai2XeIW8pmY3IZwhtqnSML2id4c2N1poIZzJ40tb pWGfoQ7GDXZuuwedGBEwMGuSDv5IGYGj7Kz50UhOPKDpGwdhSzR2EhPj4QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ2yL68e7JuzsI1UKlFmM+/hI/IpMB8GA1UdIwQY MBaAFGs66AzstW9bMAOIOpXib0QddJ8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQt YzlhNTZjNWQzZTkxLzEvbmJJdnJ4N3NtN093alZRcVVXWXo3LUVqOGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQtYzlhNTZjNWQzZTkx LzEvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUFWgAwQA UFWvMA8EAgACMAkDBwAqAWpAAAEwDQYJKoZIhvcNAQELBQADggEBAK/FkRi+JIo4 K0GFw+38Js8L3E6rl/IaquCoXtRPyDFVcF9ndAuLZ4P6Gq6jOtSEffIFeYoh59IM OU/FFOZZBDdEilE5WkSfwX8FAU90xfuAtJ3lbpO+4Ee8t/nnDkva5gLM7vLMz26C mTkDp0gF5PCYTmweFteFjTHwntZP9QStJKHDy5SjhFbvngjXbrdaELAy1+lF1hwf DpeEK5Z+7891bQPezIHqR8HswesoiXCVHNESznNkA6GOpR6YVuXat3mTsbZDDZYO 5R4pyUoBtJdz5nMUd06cN8OBt9F7HBjiugFlTt+bIHm7SSsfKfmsnN8ji5PiuNHm d+5OeMJWhJw= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:35 2026 by rpki-client