This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/NurrzfLeVosuCbdskOR80jmR2QQ.roa File: NurrzfLeVosuCbdskOR80jmR2QQ.roa (raw, json) Hash identifier: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM= Subject key identifier: 36:EA:EB:CD:F2:DE:56:8B:2E:09:B7:6C:90:E4:7C:D2:39:91:D9:04 Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05 Certificate serial: 019B7F80BD567457CEE7A2887DD2999C32FA Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/NurrzfLeVosuCbdskOR80jmR2QQ.roa Signing time: Fri 02 Jan 2026 16:18:22 +0000 ROA not before: Fri 02 Jan 2026 16:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202025 IP address blocks: 5.8.252.0/24 maxlen: 24 5.8.253.0/24 maxlen: 24 5.8.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bd:56:74:57:ce:e7:a2:88:7d:d2:99:9c:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Validity Not Before: Jan 2 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36eaebcdf2de568b2e09b76c90e47cd23991d904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:b6:a0:12:f4:90:fe:a7:b5:48:43:d8:f2: f7:d2:0d:7f:72:dd:63:7f:a9:8a:65:0a:20:e1:73: a4:6e:ba:9a:7f:2f:fe:e1:ad:5f:4f:83:90:1b:41: 6a:4c:57:bd:b7:bf:e5:13:55:d5:76:28:03:38:6b: 90:41:8b:5f:54:17:e9:9b:75:cd:31:3d:1d:b4:c2: 56:ad:d0:49:8b:70:2f:b5:e7:bd:3f:1d:69:5f:c2: 7e:3b:14:b1:52:a7:4d:16:86:ff:22:c3:e5:01:85: a1:5d:b5:71:28:c1:a6:a4:42:c6:15:92:8b:a8:ba: 3d:d3:22:4f:b2:46:68:f7:d9:73:ae:db:ba:07:ad: ca:0f:56:56:f5:37:ed:77:b1:c0:31:45:fd:ff:a3: d1:74:2e:58:de:d3:dc:c5:af:d8:d1:45:61:63:6e: 8b:c2:40:69:72:4c:c7:35:40:81:83:44:a8:6e:75: 27:f4:b1:a6:cd:6f:71:18:8b:5f:34:eb:08:88:9c: 02:15:4a:5e:96:ac:d7:3f:0a:75:8a:cc:94:a6:36: 67:01:9e:b4:00:f2:bc:2f:a3:9b:28:53:2d:94:7b: da:8e:0b:24:35:4f:fb:90:95:bd:fb:62:65:94:b5: cf:77:42:c0:02:13:c6:8d:86:3e:2c:2c:8c:eb:29: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:EB:CD:F2:DE:56:8B:2E:09:B7:6C:90:E4:7C:D2:39:91:D9:04 X509v3 Authority Key Identifier: keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/NurrzfLeVosuCbdskOR80jmR2QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.252.0-5.8.254.255 Signature Algorithm: sha256WithRSAEncryption 4e:45:32:ae:61:c6:ac:c6:2d:d6:68:89:6e:eb:f3:53:0d:cf: cf:47:f6:98:02:b0:be:ef:b3:c5:23:13:ee:f4:79:6e:9e:89: 87:2b:3b:c1:75:16:23:ef:73:65:de:77:1e:7e:65:7d:94:95: fe:3b:45:e8:2a:e2:53:88:a4:64:14:8e:74:30:fb:48:79:1b: 74:4e:db:9f:2f:91:45:91:c8:cc:85:e6:c9:b2:81:91:5a:22: 26:fc:a6:e6:a0:c4:4f:b9:7c:e3:3f:72:77:fa:87:e5:45:87: 3c:97:a7:ff:82:06:23:45:9f:b9:e6:0f:ac:67:9f:81:e7:95: 53:3a:ef:ac:7b:0a:ff:61:29:27:bd:51:78:28:19:7f:1d:68: 4d:68:69:99:75:31:29:98:a9:af:47:be:b8:be:0f:5a:4a:66: 4d:f2:83:1a:7d:1c:e4:b7:62:95:6e:66:4c:96:f0:4c:df:e7: 28:1a:69:4b:98:86:d0:00:68:2e:7a:14:d4:26:ae:86:3c:70: 00:78:a1:7d:0e:c8:51:b0:0d:df:5b:6e:c1:ee:44:ad:23:7d: 55:09:d2:94:e0:46:31:58:54:9d:72:55:fb:5b:62:ba:5a:76: 59:97:7a:06:ae:d9:42:8d:c4:18:f9:8d:0f:43:f2:10:80:71: 2b:c0:a0:4c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gL1WdFfO56KIfdKZnDL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx ZjhjMDUwHhcNMjYwMTAyMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmVhZWJjZGYyZGU1NjhiMmUwOWI3NmM5MGU0N2NkMjM5OTFkOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb22oBL0kP6ntUhD2PL30g1/ct1j f6mKZQog4XOkbrqafy/+4a1fT4OQG0FqTFe9t7/lE1XVdigDOGuQQYtfVBfpm3XN MT0dtMJWrdBJi3Avtee9Px1pX8J+OxSxUqdNFob/IsPlAYWhXbVxKMGmpELGFZKL qLo90yJPskZo99lzrtu6B63KD1ZW9Tftd7HAMUX9/6PRdC5Y3tPcxa/Y0UVhY26L wkBpckzHNUCBg0SobnUn9LGmzW9xGItfNOsIiJwCFUpelqzXPwp1isyUpjZnAZ60 APK8L6ObKFMtlHvajgskNU/7kJW9+2JllLXPd0LAAhPGjYY+LCyM6yn65wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDbq683y3laLLgm3bJDkfNI5kdkEMB8GA1UdIwQY MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt MTliYzdiZGNjYmMxLzEvTnVycnpmTGVWb3N1Q2Jkc2tPUjgwam1SMlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFCPwD BAAFCP4wDQYJKoZIhvcNAQELBQADggEBAE5FMq5hxqzGLdZoiW7r81MNz89H9pgC sL7vs8UjE+70eW6eiYcrO8F1FiPvc2Xedx5+ZX2Ulf47Regq4lOIpGQUjnQw+0h5 G3RO258vkUWRyMyF5smygZFaIib8puagxE+5fOM/cnf6h+VFhzyXp/+CBiNFn7nm D6xnn4HnlVM676x7Cv9hKSe9UXgoGX8daE1oaZl1MSmYqa9Hvri+D1pKZk3ygxp9 HOS3YpVuZkyW8Ezf5ygaaUuYhtAAaC56FNQmroY8cAB4oX0OyFGwDd9bbsHuRK0j fVUJ0pTgRjFYVJ1yVftbYrpadlmXegau2UKNxBj5jQ9D8hCAcSvAoEw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:27 2026 by rpki-client