This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nbnAtkPbvNLb1NtHq16fguBICgM.roa File: nbnAtkPbvNLb1NtHq16fguBICgM.roa (raw, json) Hash identifier: AkT7CI5x7ivVy9y1P9B2rhA4RUSeXnUrr5iWZfxrlWE= Subject key identifier: 9D:B9:C0:B6:43:DB:BC:D2:DB:D4:DB:47:AB:5E:9F:82:E0:48:0A:03 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1332CB48F0777875B86F1B35ED11D3 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nbnAtkPbvNLb1NtHq16fguBICgM.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.81.174.0/24 maxlen: 24 185.81.184.0/24 maxlen: 24 185.81.187.0/24 maxlen: 24 185.89.104.0/23 maxlen: 24 185.89.108.0/22 maxlen: 24 185.95.101.0/24 maxlen: 24 185.95.102.0/23 maxlen: 24 185.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:cb:48:f0:77:78:75:b8:6f:1b:35:ed:11:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db9c0b643dbbcd2dbd4db47ab5e9f82e0480a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:30:4f:a4:65:de:f5:db:18:0e:d0:38:c1: 1f:38:f7:54:30:1d:96:09:7b:58:23:aa:aa:c2:1f: 73:b7:93:d7:54:23:cd:18:63:24:7c:11:d5:43:57: 7f:02:1a:83:bc:2e:11:71:72:e9:90:97:77:23:03: 4c:c4:eb:29:9c:c6:d8:a0:a6:47:bf:0d:ca:10:a6: bf:d1:b0:ae:7a:8e:54:19:a3:cf:92:0a:d1:ef:b5: e4:a9:2d:08:f1:18:90:80:aa:72:6d:05:3a:7e:26: 04:13:9d:2f:c7:21:5b:11:8e:43:91:44:3b:5b:77: 25:fc:e1:73:71:70:55:04:c7:1f:3c:03:7d:b9:ab: 6e:14:77:02:91:86:4b:bc:f6:d8:11:63:b1:f9:d7: 27:13:d9:2d:44:e7:e3:9b:fe:09:ad:53:8e:07:50: b1:f1:4c:6a:64:82:65:01:46:bb:5f:a9:e7:10:05: ad:f0:87:15:c8:d8:36:68:35:2b:b3:2f:86:a8:c4: 6c:e8:15:d2:18:c3:95:e2:af:54:e2:08:d9:d7:80: 86:33:03:56:6f:7b:23:75:04:c9:fd:ae:1a:fc:3f: 47:10:79:b4:55:09:1b:18:6b:4d:6c:44:a3:98:d4: 16:d3:22:5f:6c:d2:ed:a6:24:b6:90:fc:23:94:e8: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B9:C0:B6:43:DB:BC:D2:DB:D4:DB:47:AB:5E:9F:82:E0:48:0A:03 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nbnAtkPbvNLb1NtHq16fguBICgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.174.0/24 185.81.184.0/24 185.81.187.0/24 185.89.104.0/23 185.89.108.0/22 185.95.101.0-185.95.103.255 185.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 51:e6:2e:1b:1a:45:6d:17:5f:3d:5a:15:3a:1e:1f:bc:77:1c: 0d:af:66:9c:11:69:72:da:55:d5:e7:81:91:6c:a0:6c:53:03: 42:8e:0f:54:8a:97:97:89:5b:8a:eb:b9:3d:bb:72:a3:50:45: 92:ce:89:e5:37:1b:a3:2f:e9:0a:28:0f:5a:e9:1a:4f:06:39: 2c:a4:fc:0a:c7:63:08:c5:c1:5e:bd:9d:b0:6d:f1:00:56:70: 16:52:df:d4:2f:02:39:46:1c:40:93:db:65:66:b6:d8:6d:fe: d4:96:b4:55:6c:ad:47:47:b9:c4:54:fd:c2:40:59:82:18:3c: 1b:3c:94:7e:9d:fd:6f:4e:37:d2:0a:1e:c1:60:d7:b9:2b:db: 6a:08:1d:55:10:af:cf:d4:dc:e8:29:fc:ee:2c:ae:ea:7d:05: c6:d2:a2:98:b7:95:8a:16:94:5e:26:d7:34:40:07:d2:c9:9d: b3:24:f6:c1:9f:1e:d6:31:db:a3:7a:ed:51:1b:ee:b9:3b:4c: 98:14:2f:53:b4:ff:4c:30:67:2d:d5:24:6c:3a:6e:bb:dd:ef: 36:ab:84:f9:6f:16:bf:1b:b4:b2:bf:57:b4:18:2f:aa:af:b3: 2d:a1:05:ab:f0:d4:5c:ea:b9:b4:1d:7c:3e:5f:4e:e1:e0:2a: f6:13:dd:7a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt8EzLLSPB3eHW4bxs17RHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGI5YzBiNjQzZGJiY2QyZGJkNGRiNDdhYjVlOWY4MmUwNDgwYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0wT6Rl3vXbGA7QOMEfOPdUMB2W CXtYI6qqwh9zt5PXVCPNGGMkfBHVQ1d/AhqDvC4RcXLpkJd3IwNMxOspnMbYoKZH vw3KEKa/0bCueo5UGaPPkgrR77XkqS0I8RiQgKpybQU6fiYEE50vxyFbEY5DkUQ7 W3cl/OFzcXBVBMcfPAN9uatuFHcCkYZLvPbYEWOx+dcnE9ktROfjm/4JrVOOB1Cx 8UxqZIJlAUa7X6nnEAWt8IcVyNg2aDUrsy+GqMRs6BXSGMOV4q9U4gjZ14CGMwNW b3sjdQTJ/a4a/D9HEHm0VQkbGGtNbESjmNQW0yJfbNLtpiS2kPwjlOgnFQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFJ25wLZD27zS29TbR6ten4LgSAoDMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvbmJuQXRrUGJ2TkxiMU50SHExNmZndUJJQ2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAuVGuAwQA uVG4AwQAuVG7AwQBuVloAwQCuVlsMAwDBAC5X2UDBAO5X2ADBAC5YCYwDQYJKoZI hvcNAQELBQADggEBAFHmLhsaRW0XXz1aFToeH7x3HA2vZpwRaXLaVdXngZFsoGxT A0KOD1SKl5eJW4rruT27cqNQRZLOieU3G6Mv6QooD1rpGk8GOSyk/ArHYwjFwV69 nbBt8QBWcBZS39QvAjlGHECT22Vmttht/tSWtFVsrUdHucRU/cJAWYIYPBs8lH6d /W9ON9IKHsFg17kr22oIHVUQr8/U3Ogp/O4srup9BcbSopi3lYoWlF4m1zRAB9LJ nbMk9sGfHtYx26N67VEb7rk7TJgUL1O0/0wwZy3VJGw6brvd7zarhPlvFr8btLK/ V7QYL6qvsy2hBavw1FzqubQdfD5fTuHgKvYT3Xo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:19 2026 by rpki-client