This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/nckzlZzEmCkRBssdIu4EBS5Mv74.roa File: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (raw, json) Hash identifier: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw= Subject key identifier: 9D:C9:33:95:9C:C4:98:29:11:06:CB:1D:22:EE:04:05:2E:4C:BF:BE Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF63CBD3F8C1090A97DC806B07E70 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/nckzlZzEmCkRBssdIu4EBS5Mv74.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50593 IP address blocks: 93.125.50.0/24 maxlen: 24 178.172.204.0/24 maxlen: 24 178.172.214.0/24 maxlen: 24 178.172.228.0/24 maxlen: 24 178.172.234.0/24 maxlen: 24 213.184.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f6:3c:bd:3f:8c:10:90:a9:7d:c8:06:b0:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dc933959cc498291106cb1d22ee04052e4cbfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:cb:92:de:de:04:97:33:f6:f8:df:76:9e: 2d:7a:15:28:d4:a8:1a:14:59:13:09:79:1e:26:7d: 4d:2a:b5:84:e8:fd:e4:6f:cc:8c:30:f9:79:74:e7: 38:4b:a2:39:79:f3:b6:5c:f8:6c:1d:29:d8:55:b1: cc:55:56:d2:87:17:35:c7:ac:ec:6a:d0:df:d1:0e: b1:ef:41:8a:74:99:7c:14:0f:13:05:6c:35:94:56: 59:04:c1:cf:c6:e3:fd:c6:49:bb:d4:8f:dd:49:cb: 61:50:b6:92:8a:80:38:08:e3:e6:09:e2:30:b7:fc: 26:71:1f:07:ca:17:fd:89:66:16:03:f9:db:2e:26: 5c:79:51:8d:f4:60:c4:13:55:12:2c:f9:0c:4e:5d: 15:e4:6e:b6:bd:21:10:23:36:c7:4b:a7:a4:b9:90: 15:76:42:af:af:0f:7d:35:a2:c1:4d:38:f9:1e:b1: 5c:5f:c4:75:9c:53:7a:6f:39:0e:01:a3:a1:94:ff: 22:5e:aa:e0:5b:b1:6a:2f:ea:56:3a:35:17:97:32: 41:2f:8a:08:e3:bb:47:33:19:35:0b:5d:ab:c9:6a: 92:67:6a:1d:ab:03:63:1a:2d:8a:f1:1a:1c:76:de: 54:07:78:f5:a1:52:42:0a:4c:e2:a9:a9:65:4f:b1: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:33:95:9C:C4:98:29:11:06:CB:1D:22:EE:04:05:2E:4C:BF:BE X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/nckzlZzEmCkRBssdIu4EBS5Mv74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.50.0/24 178.172.204.0/24 178.172.214.0/24 178.172.228.0/24 178.172.234.0/24 213.184.234.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:f5:b3:63:91:a2:ba:c7:6b:fa:6c:43:fd:2c:7f:5b:e2:c2: ae:61:30:5d:c3:ad:d7:1c:85:d3:e9:14:71:37:40:25:9f:71: f2:e4:d8:91:98:96:72:9d:fc:c5:9f:c4:b6:9c:aa:c6:32:a8: b4:a3:fb:2e:89:ce:eb:2d:c6:ee:5d:d4:96:14:b5:47:0b:36: 35:d6:30:75:fc:22:31:11:51:d1:4c:48:df:4d:da:fc:29:95: 38:db:8e:28:77:46:ba:ff:4b:80:1d:78:6e:a4:62:a5:66:6e: 6e:ea:94:c8:24:fe:89:f9:0e:d1:23:36:6c:9b:c6:93:3c:57: b2:87:23:f4:bf:99:e4:fd:85:2c:ac:f0:18:13:4e:f4:23:50: 5f:94:e5:ef:49:86:38:79:b8:5f:cc:b5:5b:47:d4:82:27:30: a1:8a:fa:43:fd:28:30:95:d2:a6:42:95:da:51:5c:2f:65:82: 6e:ae:82:99:9c:de:3a:b7:d6:ab:b7:30:bf:80:65:7f:4e:36: ca:fa:55:3c:e5:4d:a7:73:dc:3c:27:54:61:82:24:de:2e:2c: 59:96:82:8d:3a:2c:a6:9a:59:1c:69:d7:ea:bf:3f:47:02:4a: c5:f7:a9:60:45:07:ba:f7:95:bb:c1:a2:89:b1:f1:ba:5a:51: c8:d0:90:3a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt56/Y8vT+MEJCpfcgGsH5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGM5MzM5NTljYzQ5ODI5MTEwNmNiMWQyMmVlMDQwNTJlNGNiZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyTLkt7eBJcz9vjfdp4tehUo1Kga FFkTCXkeJn1NKrWE6P3kb8yMMPl5dOc4S6I5efO2XPhsHSnYVbHMVVbShxc1x6zs atDf0Q6x70GKdJl8FA8TBWw1lFZZBMHPxuP9xkm71I/dScthULaSioA4COPmCeIw t/wmcR8Hyhf9iWYWA/nbLiZceVGN9GDEE1USLPkMTl0V5G62vSEQIzbHS6ekuZAV dkKvrw99NaLBTTj5HrFcX8R1nFN6bzkOAaOhlP8iXqrgW7FqL+pWOjUXlzJBL4oI 47tHMxk1C12ryWqSZ2odqwNjGi2K8Rocdt5UB3j1oVJCCkziqallT7FRdwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJ3JM5WcxJgpEQbLHSLuBAUuTL++MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvbmNremxaekVtQ2tSQnNzZEl1NEVCUzVNdjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAXX0yAwQA sqzMAwQAsqzWAwQAsqzkAwQAsqzqAwQA1bjqMA0GCSqGSIb3DQEBCwUAA4IBAQB8 9bNjkaK6x2v6bEP9LH9b4sKuYTBdw63XHIXT6RRxN0Aln3Hy5NiRmJZynfzFn8S2 nKrGMqi0o/suic7rLcbuXdSWFLVHCzY11jB1/CIxEVHRTEjfTdr8KZU4244od0a6 /0uAHXhupGKlZm5u6pTIJP6J+Q7RIzZsm8aTPFeyhyP0v5nk/YUsrPAYE070I1Bf lOXvSYY4ebhfzLVbR9SCJzChivpD/SgwldKmQpXaUVwvZYJuroKZnN46t9artzC/ gGV/TjbK+lU85U2nc9w8J1RhgiTeLixZloKNOiymmlkcadfqvz9HAkrF96lgRQe6 95W7waKJsfG6WlHI0JA6 -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:45 2026 by rpki-client