This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nZXVAEhAwzesGngGVae3JHM5UNg.roa File: nZXVAEhAwzesGngGVae3JHM5UNg.roa (raw, json) Hash identifier: JJvr3kNnqWeUrrnpiI7ivzQbH103rdFaTcpNQ7xPtuc= Subject key identifier: 9D:95:D5:00:48:40:C3:37:AC:1A:78:06:55:A7:B7:24:73:39:50:D8 Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e Certificate serial: 019B7DCB0E8CD93CFE3486152D6948F3E2C3 Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nZXVAEhAwzesGngGVae3JHM5UNg.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216314 IP address blocks: 91.204.77.0/24 maxlen: 24 91.204.78.0/24 maxlen: 24 91.204.79.0/24 maxlen: 24 195.34.94.0/24 maxlen: 24 195.34.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0e:8c:d9:3c:fe:34:86:15:2d:69:48:f3:e2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d95d5004840c337ac1a780655a7b724733950d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:31:81:f0:bd:4d:e4:e6:e9:95:b1:5c:70: a9:d2:9b:78:5b:82:bb:4b:87:69:f5:04:73:e5:0f: 81:69:3f:ec:3b:28:e0:64:16:e0:d8:68:6d:47:45: 8d:de:a1:f5:98:96:ad:f9:fd:39:63:7b:12:34:06: ec:51:a5:47:06:1f:6e:12:c8:b9:75:b0:9a:4b:ff: 26:a6:f9:48:80:fd:40:71:ba:c4:8b:5c:80:dc:8e: cf:76:3c:ea:06:14:90:13:c0:fc:14:44:cf:ee:e4: cc:50:1b:c2:9b:38:9d:b9:3c:03:4d:84:ba:93:d0: 72:dc:95:ce:dd:50:dd:7a:27:39:01:a2:a4:77:3f: 3a:24:68:ce:c6:93:12:c6:23:19:66:1e:f6:12:f0: 29:15:38:4e:7c:f5:ca:8f:6e:0e:92:24:35:e2:50: 7b:5f:ee:f9:ae:54:ce:de:2e:c7:63:3a:48:86:f8: 71:a6:9a:bd:0d:d4:66:cb:92:7f:7d:0e:9b:1b:5e: 5c:f5:fd:63:af:6b:d8:7b:ee:49:cb:d9:6f:3d:da: 5e:e3:6d:74:e2:b6:db:18:08:da:86:36:40:7e:12: 4e:aa:f1:d7:c5:16:81:c9:f9:5b:3e:c5:82:2c:81: b4:98:6c:ac:8e:d7:49:8e:30:cf:66:33:ed:15:82: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:D5:00:48:40:C3:37:AC:1A:78:06:55:A7:B7:24:73:39:50:D8 X509v3 Authority Key Identifier: keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nZXVAEhAwzesGngGVae3JHM5UNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.77.0-91.204.79.255 195.34.94.0/23 Signature Algorithm: sha256WithRSAEncryption 11:5f:ed:19:fd:26:12:f9:be:92:af:3d:09:37:15:35:51:03: f8:f2:b2:28:90:51:9a:dc:a4:28:b2:e7:78:88:e0:58:30:39: 95:e4:8a:25:d0:e7:c6:8c:0a:36:16:8c:33:0e:ac:93:84:f3: 39:92:bb:ab:c5:8f:36:4c:d9:9c:b1:44:b7:26:b5:df:c0:ed: 0b:1c:9c:1e:9b:5c:82:c4:ff:8e:54:75:d7:49:b7:e2:fd:6e: d4:8d:b6:90:db:23:de:ab:0b:1b:82:fa:c0:f6:30:4f:65:58: af:13:b1:3a:d6:39:41:f8:a9:56:69:e3:58:e4:02:6a:e2:8f: e3:c3:be:f4:db:a5:31:e7:05:ba:8c:7d:43:cb:31:dd:2f:f4: 81:96:10:54:4d:02:fa:27:d9:19:3b:12:42:d0:6f:33:be:d1: 0d:d0:c0:11:66:a6:0d:37:07:5c:97:38:f1:15:b5:43:93:9c: 82:d2:c3:f4:df:14:b3:0c:e9:9b:e4:6b:a9:75:b7:65:88:aa: d2:a9:05:11:50:85:aa:dd:b9:83:ed:de:ba:4f:d9:7e:89:04: 60:3c:0d:9d:66:3e:3b:6b:6d:27:19:8c:00:7a:16:fd:36:22: 34:61:3c:08:1d:5f:d2:3b:60:97:b1:12:b1:95:53:57:08:42: ed:99:b7:b2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yw6M2Tz+NIYVLWlI8+LDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTdkMWYwZDczZmU0ODFjMjE4OGQyOGRlZjBlODU4ZTcx NTY5N2UwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDk1ZDUwMDQ4NDBjMzM3YWMxYTc4MDY1NWE3YjcyNDczMzk1MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNsxgfC9TeTm6ZWxXHCp0pt4W4K7 S4dp9QRz5Q+BaT/sOyjgZBbg2GhtR0WN3qH1mJat+f05Y3sSNAbsUaVHBh9uEsi5 dbCaS/8mpvlIgP1AcbrEi1yA3I7PdjzqBhSQE8D8FETP7uTMUBvCmziduTwDTYS6 k9By3JXO3VDdeic5AaKkdz86JGjOxpMSxiMZZh72EvApFThOfPXKj24OkiQ14lB7 X+75rlTO3i7HYzpIhvhxppq9DdRmy5J/fQ6bG15c9f1jr2vYe+5Jy9lvPdpe4210 4rbbGAjahjZAfhJOqvHXxRaByflbPsWCLIG0mGysjtdJjjDPZjPtFYLlHQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJ2V1QBIQMM3rBp4BlWntyRzOVDYMB8GA1UdIwQY MBaAFCen0fDXP+SBwhiNKN7w6FjnFWl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEt ZDZlYWFmYzZiNGY1LzEvblpYVkFFaEF3emVzR25nR1ZhZTNKSE01VU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEtZDZlYWFmYzZiNGY1 LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABbzE0D BARbzEADBAHDIl4wDQYJKoZIhvcNAQELBQADggEBABFf7Rn9JhL5vpKvPQk3FTVR A/jysiiQUZrcpCiy53iI4FgwOZXkiiXQ58aMCjYWjDMOrJOE8zmSu6vFjzZM2Zyx RLcmtd/A7QscnB6bXILE/45UdddJt+L9btSNtpDbI96rCxuC+sD2ME9lWK8TsTrW OUH4qVZp41jkAmrij+PDvvTbpTHnBbqMfUPLMd0v9IGWEFRNAvon2Rk7EkLQbzO+ 0Q3QwBFmpg03B1yXOPEVtUOTnILSw/TfFLMM6Zvka6l1t2WIqtKpBRFQharduYPt 3rpP2X6JBGA8DZ1mPjtrbScZjAB6Fv02IjRhPAgdX9I7YJexErGVU1cIQu2Zt7I= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:42 2026 by rpki-client