This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NKNI5EPHGmcMWDwr_n3SFT33BdU.roa File: NKNI5EPHGmcMWDwr_n3SFT33BdU.roa (raw, json) Hash identifier: 8SbVPV71ph6yfOFYMhyiyYI6uJDhqxxtrA2uKLj3584= Subject key identifier: 34:A3:48:E4:43:C7:1A:67:0C:58:3C:2B:FE:7D:D2:15:3D:F7:05:D5 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019BC1BFC653E8AAA7BA182E00F76CFDEB24 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NKNI5EPHGmcMWDwr_n3SFT33BdU.roa Signing time: Thu 15 Jan 2026 13:02:09 +0000 ROA not before: Thu 15 Jan 2026 13:02:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56534 IP address blocks: 82.179.248.0/22 maxlen: 22 85.142.82.0/24 maxlen: 24 85.142.136.0/24 maxlen: 24 85.142.164.0/22 maxlen: 22 85.142.168.0/21 maxlen: 21 85.142.176.0/22 maxlen: 22 85.142.192.0/22 maxlen: 24 85.142.208.0/22 maxlen: 22 85.142.244.0/24 maxlen: 24 85.142.252.0/24 maxlen: 24 85.143.144.0/22 maxlen: 22 85.143.160.0/21 maxlen: 21 85.143.176.0/22 maxlen: 22 85.143.184.0/22 maxlen: 22 85.143.203.0/24 maxlen: 24 85.143.204.0/22 maxlen: 22 85.143.250.0/24 maxlen: 24 85.143.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:bf:c6:53:e8:aa:a7:ba:18:2e:00:f7:6c:fd:eb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 15 13:02:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34a348e443c71a670c583c2bfe7dd2153df705d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:ca:5b:3a:65:99:9c:9d:9b:ce:78:4e:e4: 5f:79:a6:37:d7:80:aa:e1:48:15:82:b6:bd:b8:25: 44:58:a8:0f:55:b8:bf:16:9d:9a:46:fa:07:3d:33: 1e:25:e5:39:98:8d:06:7a:f4:51:32:5a:b4:dc:4b: f6:ff:7a:46:7d:d7:4c:78:ad:6d:84:9e:b6:73:c5: ae:0d:80:65:f5:38:f6:e9:0c:21:7b:61:c9:7f:55: 8f:fc:36:58:2d:4f:3b:b8:94:f7:cb:25:08:6f:98: 0b:da:3a:4a:d6:24:c0:d5:72:05:d6:37:e3:d2:f0: 1a:be:7d:36:d4:aa:7b:f8:17:f2:9a:68:57:68:bd: 80:d1:9f:5d:c4:87:21:f8:e1:c7:6d:b3:b8:b7:f4: eb:a5:1a:73:16:4a:b1:fd:79:3b:c2:c5:7e:7c:ee: 3b:fb:97:72:be:8d:60:3a:17:60:10:5c:b8:66:be: 94:5b:d7:47:02:e0:c5:7a:5c:c9:3c:03:b4:f9:df: 09:3e:58:ae:0f:73:36:b1:bd:0c:9a:98:58:ae:a8: 34:17:6f:ee:be:52:f0:06:1c:a4:f1:1f:31:fe:22: 73:9b:8f:cb:5d:cf:c9:87:7a:3d:28:84:d9:c0:86: 1f:64:c6:a9:59:f9:1f:69:dc:9d:d3:fb:24:33:2a: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A3:48:E4:43:C7:1A:67:0C:58:3C:2B:FE:7D:D2:15:3D:F7:05:D5 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NKNI5EPHGmcMWDwr_n3SFT33BdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.248.0/22 85.142.82.0/24 85.142.136.0/24 85.142.164.0-85.142.179.255 85.142.192.0/22 85.142.208.0/22 85.142.244.0/24 85.142.252.0/24 85.143.144.0/22 85.143.160.0/21 85.143.176.0/22 85.143.184.0/22 85.143.203.0-85.143.207.255 85.143.250.0/24 85.143.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:ec:97:96:af:52:6d:a1:c8:50:42:f2:24:bd:83:3d:dd:85: dd:f5:f7:46:42:24:f3:cc:b1:ed:85:b4:87:81:76:66:99:92: 9d:19:f4:6d:2f:96:f4:7d:b8:92:42:d0:7e:d4:ba:f6:8f:dc: 3c:0f:7e:9a:d1:42:43:91:e9:91:fa:b4:b9:65:24:11:ba:d4: 98:29:7a:c2:1d:af:4e:08:62:c6:b2:89:b4:9f:03:f9:8d:3b: 6b:5d:c1:05:f9:9d:2d:6b:d2:3a:6a:fe:f0:9c:77:3b:cd:7a: c3:29:2d:a6:41:77:50:e1:84:9e:75:5a:32:73:52:97:98:80: 60:bc:c4:de:0e:c7:04:99:54:73:a6:e2:f7:48:a7:b6:e4:9e: 3f:8a:95:4d:29:b4:a8:2d:3e:fd:b9:8e:da:ab:90:66:ed:7b: 96:da:2d:89:a6:c2:cb:47:fb:8f:21:d3:1b:28:8a:ef:a2:5a: 44:a9:dd:73:39:a6:0d:7e:92:87:ef:46:5d:60:b4:83:23:51: 56:29:72:2a:81:9a:02:48:e5:ab:61:cf:e6:eb:52:03:e7:88: 1d:39:16:c4:14:1c:80:00:c5:59:9c:e0:2c:98:e3:7a:5b:a9: d8:74:6a:70:38:96:d3:ca:af:67:c0:db:a9:fa:cf:55:71:04: e6:40:3b:e0 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZvBv8ZT6KqnuhguAPds/eskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTE1MTMwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGEzNDhlNDQzYzcxYTY3MGM1ODNjMmJmZTdkZDIxNTNkZjcwNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlATKWzplmZydm854TuRfeaY314Cq 4UgVgra9uCVEWKgPVbi/Fp2aRvoHPTMeJeU5mI0GevRRMlq03Ev2/3pGfddMeK1t hJ62c8WuDYBl9Tj26Qwhe2HJf1WP/DZYLU87uJT3yyUIb5gL2jpK1iTA1XIF1jfj 0vAavn021Kp7+BfymmhXaL2A0Z9dxIch+OHHbbO4t/TrpRpzFkqx/Xk7wsV+fO47 +5dyvo1gOhdgEFy4Zr6UW9dHAuDFelzJPAO0+d8JPliuD3M2sb0MmphYrqg0F2/u vlLwBhyk8R8x/iJzm4/LXc/Jh3o9KITZwIYfZMapWfkfadyd0/skMyrHxwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFDSjSORDxxpnDFg8K/590hU99wXVMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvTktOSTVFUEhHbWNNV0R3cl9uM1NGVDMzQmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAlKz+AME AFWOUgMEAFWOiDAMAwQCVY6kAwQCVY6wAwQCVY7AAwQCVY7QAwQAVY70AwQAVY78 AwQCVY+QAwQDVY+gAwQCVY+wAwQCVY+4MAwDBABVj8sDBARVj8ADBABVj/oDBAJV j/wwDQYJKoZIhvcNAQELBQADggEBAG3sl5avUm2hyFBC8iS9gz3dhd3190ZCJPPM se2FtIeBdmaZkp0Z9G0vlvR9uJJC0H7UuvaP3DwPfprRQkOR6ZH6tLllJBG61Jgp esIdr04IYsayibSfA/mNO2tdwQX5nS1r0jpq/vCcdzvNesMpLaZBd1DhhJ51WjJz UpeYgGC8xN4OxwSZVHOm4vdIp7bknj+KlU0ptKgtPv25jtqrkGbte5baLYmmwstH +48h0xsoiu+iWkSp3XM5pg1+kofvRl1gtIMjUVYpciqBmgJI5athz+brUgPniB05 FsQUHIAAxVmc4CyY43pbqdh0anA4ltPKr2fA26n6z1VxBOZAO+A= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:11 2026 by rpki-client