This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nmGtGkrhBfqxDaqozTHEU7woU_8.roa File: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (raw, json) Hash identifier: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU= Subject key identifier: 9E:61:AD:1A:4A:E1:05:FA:B1:0D:AA:A8:CD:31:C4:53:BC:28:53:FF Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A33472E625D8567F1242E7DED207AD Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nmGtGkrhBfqxDaqozTHEU7woU_8.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59628 IP address blocks: 46.100.144.0/21 maxlen: 21 91.92.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:34:72:e6:25:d8:56:7f:12:42:e7:de:d2:07:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e61ad1a4ae105fab10daaa8cd31c453bc2853ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:83:73:b9:da:f8:69:30:37:0d:4d:a1:0a: e0:3f:0f:11:76:2c:42:07:4e:a9:0f:b5:f0:db:50: 4d:ce:1d:2b:a7:f1:b4:9a:c2:9e:2e:b8:b1:9e:71: e3:03:d8:15:71:ae:51:f8:b1:67:a5:c5:8d:c1:66: 84:cf:c0:d2:45:61:bb:3d:9d:d0:f2:b6:20:52:44: ca:05:67:5b:2b:60:ff:a4:aa:fc:c7:5f:63:f2:25: 42:05:e2:32:33:55:1d:19:00:92:33:1b:e4:98:35: 9e:64:fe:3e:f6:3c:5e:53:5e:8f:b3:9a:77:48:d0: f5:59:e2:e2:51:52:53:90:6e:52:7d:d1:dd:94:0b: 4a:6e:07:09:1d:24:c7:51:8d:2e:6c:66:5b:54:e3: a4:84:e8:42:cd:62:ca:ea:1a:5c:4d:a8:18:33:e0: 79:47:65:26:2e:e4:16:22:f8:6f:47:87:51:0b:b5: f0:a9:b1:cb:2e:a9:b9:fb:dc:46:ea:c4:10:c6:95: d7:db:cb:d4:aa:88:6b:ce:ea:5f:ca:e7:ac:dc:69: 63:ff:b4:a6:f5:c4:c6:16:68:9a:87:e7:3a:4b:7b: 93:ae:1c:f7:37:28:9c:cc:57:da:bc:9b:5d:12:37: b2:27:49:16:60:39:61:cd:96:88:78:1e:1a:7e:7d: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:AD:1A:4A:E1:05:FA:B1:0D:AA:A8:CD:31:C4:53:BC:28:53:FF X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nmGtGkrhBfqxDaqozTHEU7woU_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.100.144.0/21 91.92.172.0/22 Signature Algorithm: sha256WithRSAEncryption 84:5b:02:8c:e6:05:74:15:ec:47:6e:de:15:10:35:84:eb:73: 75:ac:df:ce:9d:9c:53:ef:13:b9:e1:0a:cd:9f:59:1c:3d:74: 7b:60:2a:17:c9:03:49:4d:99:d2:55:54:e4:9e:15:c2:a6:94: 8d:9b:02:e9:c8:21:88:43:f1:58:63:fd:7e:e4:1d:a0:47:20: dc:1d:93:67:90:ea:68:da:29:b7:a4:c2:08:2a:04:16:19:c4: c4:59:2b:81:5e:c8:84:09:9f:cc:99:5f:31:7a:89:3d:08:28: 39:2e:bc:cb:17:7e:72:fd:c7:d6:4a:1f:3d:3d:81:21:2a:63: 80:aa:c6:a4:c3:4a:20:84:52:83:b0:a2:5a:64:0b:6c:27:63: 16:c1:e7:e1:93:c5:65:ec:c7:15:3a:61:d4:cd:3b:d8:76:bc: 24:f3:47:d8:e0:bf:ff:05:df:23:43:12:ca:e6:10:bc:fa:ac: d5:b1:c0:99:53:56:1a:01:53:cb:8a:f5:ec:c6:b2:ff:30:45: 26:ea:97:d6:0b:d5:7b:26:39:fd:4a:c9:c7:97:da:97:bf:e3: 18:a4:e6:87:b6:8b:bf:32:64:a6:bf:99:31:89:5a:b7:69:4d: 1d:ce:fb:b0:3c:0c:c7:55:91:d8:96:88:ec:25:5a:e7:dc:ad: 53:d6:11:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ozRy5iXYVn8SQufe0getMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTYxYWQxYTRhZTEwNWZhYjEwZGFhYThjZDMxYzQ1M2JjMjg1M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UKDc7na+GkwNw1NoQrgPw8RdixC B06pD7Xw21BNzh0rp/G0msKeLrixnnHjA9gVca5R+LFnpcWNwWaEz8DSRWG7PZ3Q 8rYgUkTKBWdbK2D/pKr8x19j8iVCBeIyM1UdGQCSMxvkmDWeZP4+9jxeU16Ps5p3 SND1WeLiUVJTkG5SfdHdlAtKbgcJHSTHUY0ubGZbVOOkhOhCzWLK6hpcTagYM+B5 R2UmLuQWIvhvR4dRC7XwqbHLLqm5+9xG6sQQxpXX28vUqohrzupfyues3Glj/7Sm 9cTGFmiah+c6S3uTrhz3NyiczFfavJtdEjeyJ0kWYDlhzZaIeB4afn2DMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ5hrRpK4QX6sQ2qqM0xxFO8KFP/MB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvbm1HdEdrcmhCZnF4RGFxb3pUSEVVN3dvVV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLmSQAwQC W1ysMA0GCSqGSIb3DQEBCwUAA4IBAQCEWwKM5gV0FexHbt4VEDWE63N1rN/OnZxT 7xO54QrNn1kcPXR7YCoXyQNJTZnSVVTknhXCppSNmwLpyCGIQ/FYY/1+5B2gRyDc HZNnkOpo2im3pMIIKgQWGcTEWSuBXsiECZ/MmV8xeok9CCg5LrzLF35y/cfWSh89 PYEhKmOAqsakw0oghFKDsKJaZAtsJ2MWwefhk8Vl7McVOmHUzTvYdrwk80fY4L// Bd8jQxLK5hC8+qzVscCZU1YaAVPLivXsxrL/MEUm6pfWC9V7Jjn9SsnHl9qXv+MY pOaHtou/MmSmv5kxiVq3aU0dzvuwPAzHVZHYlojsJVrn3K1T1hHy -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:50 2026 by rpki-client