This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nl6qPWMAnZASlpsl7namy3rQd64.roa File: nl6qPWMAnZASlpsl7namy3rQd64.roa (raw, json) Hash identifier: loXDXRO+mPOB9lEz0UNovXlA+ursO+WZZ8rEXRBAgN4= Subject key identifier: 9E:5E:AA:3D:63:00:9D:90:12:96:9B:25:EE:76:A6:CB:7A:D0:77:AE Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBBF69CD00FF2BE3D30C02A8EED21C Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nl6qPWMAnZASlpsl7namy3rQd64.roa Signing time: Thu 01 Jan 2026 14:17:31 +0000 ROA not before: Thu 01 Jan 2026 14:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34304 IP address blocks: 86.107.57.0/24 maxlen: 24 86.107.60.0/23 maxlen: 23 86.107.63.0/24 maxlen: 24 89.35.224.0/24 maxlen: 24 89.35.229.0/24 maxlen: 24 89.35.232.0/24 maxlen: 24 89.35.235.0/24 maxlen: 24 89.35.236.0/24 maxlen: 24 89.35.238.0/24 maxlen: 24 89.47.0.0/24 maxlen: 24 89.47.12.0/24 maxlen: 24 89.47.14.0/24 maxlen: 24 188.211.164.0/23 maxlen: 23 193.138.192.0/23 maxlen: 23 193.138.194.0/24 maxlen: 24 2a05:8880::/30 maxlen: 30 2a05:8884::/30 maxlen: 30 2a0f:55c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bf:69:cd:00:ff:2b:e3:d3:0c:02:a8:ee:d2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e5eaa3d63009d9012969b25ee76a6cb7ad077ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:e7:2d:db:16:06:e2:bd:ff:b6:59:c3:ee: 87:26:cb:1c:60:b7:fc:eb:35:e8:15:71:a7:44:bb: 90:68:4d:8a:ee:2e:41:f3:ac:88:8a:77:0f:37:b8: c1:29:bb:e9:62:84:07:7b:e4:36:f3:cb:8a:89:97: 6e:d5:78:c2:59:0e:25:ed:15:f9:1a:29:4f:8f:6a: ca:c4:c3:70:0e:d6:7a:02:43:d8:6c:06:29:b6:71: b6:49:e9:a1:a2:73:b5:b8:fb:be:5e:ab:0b:07:c5: d5:e2:2e:dd:24:9e:2b:e3:04:21:f7:ab:a3:ab:d8: ca:23:24:73:23:7b:10:6f:35:96:fc:dc:f6:61:48: c2:e2:1d:d9:27:01:48:ba:33:cd:a4:aa:d2:e1:b0: 35:62:d8:df:5c:f6:3b:47:3d:fe:54:20:91:3e:23: ee:f7:98:af:8f:49:50:3f:94:8f:88:d3:36:93:36: b7:2e:90:ea:63:9e:4d:ca:aa:ea:50:e7:71:a9:6f: 67:e8:45:c1:4c:ee:92:14:53:8d:3b:17:8d:56:0f: a1:98:6f:42:e6:8d:ae:e4:fc:a7:2f:09:b8:90:db: 4f:71:d5:fb:99:52:bf:a5:ee:f6:67:40:ee:2e:6e: b3:eb:07:b2:6a:e5:00:c1:a9:34:f1:ca:48:95:8d: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5E:AA:3D:63:00:9D:90:12:96:9B:25:EE:76:A6:CB:7A:D0:77:AE X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nl6qPWMAnZASlpsl7namy3rQd64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.57.0/24 86.107.60.0/23 86.107.63.0/24 89.35.224.0/24 89.35.229.0/24 89.35.232.0/24 89.35.235.0-89.35.236.255 89.35.238.0/24 89.47.0.0/24 89.47.12.0/24 89.47.14.0/24 188.211.164.0/23 193.138.192.0-193.138.194.255 IPv6: 2a05:8880::/29 2a0f:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 24:fc:bb:06:34:94:7b:68:bf:8f:cc:78:85:e7:b4:dd:43:0e: 43:e5:99:66:e0:0f:59:36:9b:a0:c7:2c:e9:3b:ba:88:54:e0: c9:e2:94:a9:29:58:fa:7d:2f:3d:f1:e2:83:e2:c5:3c:5e:83: 18:99:cf:0a:8e:76:2f:5e:bc:c3:a4:66:af:3e:49:61:9d:4c: f4:47:49:18:45:a0:6e:95:dd:ad:55:35:d8:96:c4:ec:fe:5a: c8:f8:7f:61:82:8e:4f:24:75:ab:99:e3:62:bc:98:fe:8d:7b: 64:f2:ea:34:36:a7:6b:1d:58:1a:7e:46:8d:ec:58:1c:ef:f8: 00:ca:5b:fc:ec:f6:b9:e3:99:aa:f0:40:34:99:0b:2d:92:4b: d8:85:a6:69:5c:55:04:69:95:4f:a2:f4:23:f9:d4:16:ec:ea: c0:c1:91:ba:17:d4:6b:93:16:b4:9c:7b:4a:2d:2a:f6:91:53: 57:7d:34:e6:b8:70:36:75:be:f7:d6:6f:20:a2:69:d0:ee:b5: 76:de:f3:31:06:71:77:e8:2a:6d:8d:6e:25:61:e6:35:75:47: 47:59:17:6e:30:40:22:9f:cc:68:77:a1:69:ef:a7:3f:1f:dd: 4e:ae:ea:87:d1:03:2b:6e:c4:17:0a:4b:08:1b:f9:7c:bb:b7: 0b:44:d6:b2 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt5679pzQD/K+PTDAKo7tIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTVlYWEzZDYzMDA5ZDkwMTI5NjliMjVlZTc2YTZjYjdhZDA3N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBfnLdsWBuK9/7ZZw+6HJsscYLf8 6zXoFXGnRLuQaE2K7i5B86yIincPN7jBKbvpYoQHe+Q288uKiZdu1XjCWQ4l7RX5 GilPj2rKxMNwDtZ6AkPYbAYptnG2SemhonO1uPu+XqsLB8XV4i7dJJ4r4wQh96uj q9jKIyRzI3sQbzWW/Nz2YUjC4h3ZJwFIujPNpKrS4bA1YtjfXPY7Rz3+VCCRPiPu 95ivj0lQP5SPiNM2kza3LpDqY55NyqrqUOdxqW9n6EXBTO6SFFONOxeNVg+hmG9C 5o2u5PynLwm4kNtPcdX7mVK/pe72Z0DuLm6z6weyauUAwak08cpIlY0sEQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFJ5eqj1jAJ2QEpabJe52pst60HeuMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbmw2cVBXTUFuWkFTbHBzbDduYW15M3JRZDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwZAQCAAEwXgMEAFZrOQME AVZrPAMEAFZrPwMEAFkj4AMEAFkj5QMEAFkj6DAMAwQAWSPrAwQAWSPsAwQAWSPu AwQAWS8AAwQAWS8MAwQAWS8OAwQBvNOkMAwDBAbBisADBADBisIwFAQCAAIwDgMF AyoFiIADBQMqD1XAMA0GCSqGSIb3DQEBCwUAA4IBAQAk/LsGNJR7aL+PzHiF57Td Qw5D5Zlm4A9ZNpugxyzpO7qIVODJ4pSpKVj6fS898eKD4sU8XoMYmc8KjnYvXrzD pGavPklhnUz0R0kYRaBuld2tVTXYlsTs/lrI+H9hgo5PJHWrmeNivJj+jXtk8uo0 NqdrHVgafkaN7Fgc7/gAylv87Pa545mq8EA0mQstkkvYhaZpXFUEaZVPovQj+dQW 7OrAwZG6F9Rrkxa0nHtKLSr2kVNXfTTmuHA2db731m8gomnQ7rV23vMxBnF36Cpt jW4lYeY1dUdHWRduMEAin8xod6Fp76c/H91OruqH0QMrbsQXCksIG/l8u7cLRNay -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:41 2026 by rpki-client