This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/nt6j0M5k40J221DBq4EEB-4AdjU.roa File: nt6j0M5k40J221DBq4EEB-4AdjU.roa (raw, json) Hash identifier: ZolhnulZI85QrjvvsEsAb+TY48nVRV/0kpIOIks7Vbw= Subject key identifier: 9E:DE:A3:D0:CE:64:E3:42:76:DB:50:C1:AB:81:04:07:EE:00:76:35 Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589F706E2937C9FB553488055357DC Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/nt6j0M5k40J221DBq4EEB-4AdjU.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201924 IP address blocks: 195.146.0.0/24 maxlen: 24 195.146.1.0/24 maxlen: 24 195.146.2.0/24 maxlen: 24 195.146.4.0/24 maxlen: 24 195.146.5.0/24 maxlen: 24 195.146.6.0/24 maxlen: 24 195.146.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9f:70:6e:29:37:c9:fb:55:34:88:05:53:57:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9edea3d0ce64e34276db50c1ab810407ee007635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:b4:77:35:c2:74:73:1f:72:48:8e:08:92: b8:e5:bf:be:cf:c1:dd:5a:32:94:06:50:3f:33:71: 7a:6f:a8:71:fa:e4:e3:e2:f2:84:12:b0:69:dd:70: 82:c9:60:49:f4:47:ec:da:0c:e7:f7:f2:30:a5:41: ac:65:e5:fc:ed:59:8d:8c:53:2b:6b:55:30:70:0f: 2b:15:ba:c0:21:54:d1:58:a5:e0:f4:7b:bc:92:07: 3c:98:a2:63:80:40:e7:2b:d8:b2:39:5c:70:1d:3c: fd:b7:42:e5:23:07:d5:49:bf:8c:8b:03:60:ef:31: b5:38:23:79:d5:36:05:51:df:0f:48:34:fa:bb:02: ab:50:06:4d:17:60:15:7f:f9:d9:eb:c9:2f:03:aa: 30:d6:98:cb:02:a0:a4:03:a3:41:f4:3e:52:cd:24: 3f:c2:e7:86:b6:83:2a:2e:78:80:4e:39:d6:df:81: 5f:88:31:b4:a4:7b:03:67:37:21:e9:4e:c5:94:71: cf:c4:3f:72:65:57:d5:7d:57:e1:2b:75:8a:0a:a2: d5:c8:14:00:8f:53:c8:2d:38:18:ea:04:12:75:fc: 2b:d6:4e:81:0c:be:89:9a:51:fd:f9:82:59:db:9a: ac:99:bb:a8:b6:3c:aa:4d:b7:20:33:cd:b4:34:ee: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:A3:D0:CE:64:E3:42:76:DB:50:C1:AB:81:04:07:EE:00:76:35 X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/nt6j0M5k40J221DBq4EEB-4AdjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.0.0-195.146.2.255 195.146.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:db:d3:42:d6:ee:af:cd:75:9c:3a:64:16:27:81:fc:fb:33: b0:7a:30:22:56:db:31:92:0a:31:e9:64:10:2d:97:6d:e9:8c: 51:42:6f:47:bb:89:c7:db:03:37:1f:0f:b9:d2:75:31:71:c2: b3:ee:05:06:40:dc:f8:de:d9:ee:32:14:74:45:d4:eb:9c:65: 37:72:8d:6f:85:7a:da:89:49:88:93:c3:d5:ea:7b:98:e4:bd: 32:52:76:36:5a:fd:55:07:5f:a0:bd:b0:39:7f:6e:df:35:85: 06:88:01:be:f3:00:fa:ad:a0:dc:0f:d4:b6:da:ab:6b:cd:13: 66:42:5c:b8:66:a1:2a:9e:9a:70:7f:23:af:ad:f6:39:ea:c6: 59:c4:c9:7f:5a:88:6c:b1:c5:af:79:bc:af:a7:f5:2a:27:aa: 25:86:eb:66:f0:3a:8c:28:f5:b9:c3:4c:84:c7:f5:1d:3d:55: 43:0e:c3:31:55:75:b0:07:5f:bc:6e:fc:78:b2:50:a3:c1:0c: 71:da:ab:b2:7c:ee:7a:c5:7c:ca:de:51:92:47:f1:6a:4c:f6: 81:2a:f5:2c:69:a6:69:71:a5:92:70:49:0a:ae:dd:cf:86:44: 67:0c:26:8a:35:38:92:d5:91:d7:c8:2b:93:14:03:74:fa:7c: e6:31:eb:95 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt3WJ9wbik3yftVNIgFU1fcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWRlYTNkMGNlNjRlMzQyNzZkYjUwYzFhYjgxMDQwN2VlMDA3NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZu0dzXCdHMfckiOCJK45b++z8Hd WjKUBlA/M3F6b6hx+uTj4vKEErBp3XCCyWBJ9Efs2gzn9/IwpUGsZeX87VmNjFMr a1UwcA8rFbrAIVTRWKXg9Hu8kgc8mKJjgEDnK9iyOVxwHTz9t0LlIwfVSb+MiwNg 7zG1OCN51TYFUd8PSDT6uwKrUAZNF2AVf/nZ68kvA6ow1pjLAqCkA6NB9D5SzSQ/ wueGtoMqLniATjnW34FfiDG0pHsDZzch6U7FlHHPxD9yZVfVfVfhK3WKCqLVyBQA j1PILTgY6gQSdfwr1k6BDL6JmlH9+YJZ25qsmbuotjyqTbcgM820NO6UOQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJ7eo9DOZONCdttQwauBBAfuAHY1MB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvbnQ2ajBNNWs0MEoyMjFEQnE0RUVCLTRBZGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwHDkgME AMOSAgMEAsOSBDANBgkqhkiG9w0BAQsFAAOCAQEAntvTQtbur811nDpkFieB/Psz sHowIlbbMZIKMelkEC2XbemMUUJvR7uJx9sDNx8PudJ1MXHCs+4FBkDc+N7Z7jIU dEXU65xlN3KNb4V62olJiJPD1ep7mOS9MlJ2Nlr9VQdfoL2wOX9u3zWFBogBvvMA +q2g3A/Uttqra80TZkJcuGahKp6acH8jr632OerGWcTJf1qIbLHFr3m8r6f1Kieq JYbrZvA6jCj1ucNMhMf1HT1VQw7DMVV1sAdfvG78eLJQo8EMcdqrsnzuesV8yt5R kkfxakz2gSr1LGmmaXGlknBJCq7dz4ZEZwwmijU4ktWR18grkxQDdPp85jHrlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client