This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa File: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (raw, json) Hash identifier: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k= Subject key identifier: 9E:7E:30:C5:0E:18:8C:4E:D5:F9:F2:D8:37:D4:25:04:A2:71:DE:47 Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Certificate serial: 019B76EB02B05B05791031A022AEEB15A92A Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42714 IP address blocks: 31.170.128.0/19 maxlen: 24 31.170.128.0/20 maxlen: 24 31.170.144.0/21 maxlen: 24 31.170.152.0/21 maxlen: 24 193.200.38.0/23 maxlen: 23 193.200.38.0/24 maxlen: 24 193.200.39.0/24 maxlen: 24 195.211.184.0/22 maxlen: 24 2a02:7640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:02:b0:5b:05:79:10:31:a0:22:ae:eb:15:a9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e7e30c50e188c4ed5f9f2d837d42504a271de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:af:dd:d8:16:b0:48:3d:0a:bf:bf:fc:8e: e5:7c:e2:79:01:38:1a:06:ca:81:d2:55:78:88:1e: d0:3a:0f:f6:4c:c2:e6:0a:c6:b1:a7:73:9a:07:72: 68:e9:85:38:e0:3f:22:05:0a:3a:93:09:10:50:23: da:15:c4:6f:4c:c6:30:bf:f0:51:d8:58:72:45:cc: dc:bd:71:ea:b0:56:0d:d6:62:91:5c:fe:8f:65:ca: 64:41:08:57:f2:28:43:b1:ad:ef:dd:03:aa:6c:75: ce:f1:ea:39:48:1b:c8:6b:a3:47:c6:6b:be:cb:b3: dd:99:a0:da:2d:7f:53:61:59:fa:36:09:f4:71:e8: 2e:cd:08:ea:2f:d8:1e:d3:db:a6:6f:e6:af:d3:71: 90:de:ce:f9:a7:3b:fb:64:cc:87:a7:a7:72:69:19: 53:dd:c6:c8:04:49:f2:c3:6d:c3:d6:8a:2e:85:8d: 04:c3:cc:47:4b:85:fa:ea:e4:40:87:56:5d:1c:39: 68:d4:6f:62:dd:81:f2:3e:27:36:4a:b6:57:25:49: 58:06:f5:8b:07:34:15:1f:cc:a3:f6:4d:a2:c5:7a: 20:c7:0f:e1:27:f6:08:ed:cf:91:23:05:79:6f:61: c2:84:fa:5e:9d:0d:37:1f:cb:ba:84:ba:68:3e:d3: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:30:C5:0E:18:8C:4E:D5:F9:F2:D8:37:D4:25:04:A2:71:DE:47 X509v3 Authority Key Identifier: keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.128.0/19 193.200.38.0/23 195.211.184.0/22 IPv6: 2a02:7640::/32 Signature Algorithm: sha256WithRSAEncryption 6d:ac:22:cc:92:c3:45:a3:ca:05:ba:76:94:a5:ee:61:c8:39: 9c:27:bb:b9:41:2c:30:e4:94:4e:0e:36:10:8b:5d:57:7e:6a: e9:75:75:c6:fa:f5:a2:70:a3:84:bf:84:6c:3f:c0:84:c0:6f: ea:92:8f:be:74:6f:e3:0f:04:06:ee:da:77:04:f4:a2:68:ea: 42:2d:ab:d2:3a:7f:17:45:da:b7:6f:a1:50:28:35:ac:80:db: 38:bf:83:5e:47:81:ea:9a:1c:b3:ac:8a:bc:c7:21:23:24:b0: b8:77:df:45:ee:34:7c:50:52:d5:54:53:1f:90:ca:21:27:82: 73:fd:de:e7:87:5d:1a:b5:0d:82:5f:40:1b:21:12:0d:55:d5: 05:cd:cc:ed:9e:2d:78:d7:20:ae:62:0b:de:d9:89:63:66:63: 7b:68:28:42:10:21:94:53:b5:d8:80:ab:8d:59:6d:de:d5:bd: 10:56:8a:8e:77:96:d7:bd:d3:e5:64:30:1a:09:af:c9:f5:d9: 71:e9:80:87:a2:e2:19:e1:79:d2:9e:fb:c6:6d:fe:e5:7d:b0: 7f:72:0d:5a:e5:b4:56:a5:25:08:a4:8d:07:39:b9:27:38:2d: 86:54:ec:07:64:90:14:09:88:48:fd:36:6a:1b:2c:53:f0:e4: ab:fe:0d:4c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26wKwWwV5EDGgIq7rFakqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjYzZWZhMjY5YTE0MTE3NTRlMWNkYWFiODQ4ZmIwNmZh MDg0MTEwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTdlMzBjNTBlMTg4YzRlZDVmOWYyZDgzN2Q0MjUwNGEyNzFkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Cv3dgWsEg9Cr+//I7lfOJ5ATga BsqB0lV4iB7QOg/2TMLmCsaxp3OaB3Jo6YU44D8iBQo6kwkQUCPaFcRvTMYwv/BR 2FhyRczcvXHqsFYN1mKRXP6PZcpkQQhX8ihDsa3v3QOqbHXO8eo5SBvIa6NHxmu+ y7PdmaDaLX9TYVn6Ngn0ceguzQjqL9ge09umb+av03GQ3s75pzv7ZMyHp6dyaRlT 3cbIBEnyw23D1oouhY0Ew8xHS4X66uRAh1ZdHDlo1G9i3YHyPic2SrZXJUlYBvWL BzQVH8yj9k2ixXogxw/hJ/YI7c+RIwV5b2HChPpenQ03H8u6hLpoPtMsrQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJ5+MMUOGIxO1fny2DfUJQSicd5HMB8GA1UdIwQY MBaAFM22PvommhQRdU4c2quEj7BvoIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYt NDM4ODM0ODdlNDkyLzEvbm40d3hRNFlqRTdWLWZMWU45UWxCS0p4M2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYtNDM4ODM0ODdlNDky LzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFH6qAAwQB wcgmAwQCw9O4MA0EAgACMAcDBQAqAnZAMA0GCSqGSIb3DQEBCwUAA4IBAQBtrCLM ksNFo8oFunaUpe5hyDmcJ7u5QSww5JRODjYQi11XfmrpdXXG+vWicKOEv4RsP8CE wG/qko++dG/jDwQG7tp3BPSiaOpCLavSOn8XRdq3b6FQKDWsgNs4v4NeR4Hqmhyz rIq8xyEjJLC4d99F7jR8UFLVVFMfkMohJ4Jz/d7nh10atQ2CX0AbIRINVdUFzczt ni141yCuYgve2YljZmN7aChCECGUU7XYgKuNWW3e1b0QVoqOd5bXvdPlZDAaCa/J 9dlx6YCHouIZ4XnSnvvGbf7lfbB/cg1a5bRWpSUIpI0HObknOC2GVOwHZJAUCYhI /TZqGyxT8OSr/g1M -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:39 2026 by rpki-client