This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa File: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (raw, json) Hash identifier: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU= Subject key identifier: 36:35:FF:F9:01:53:F8:A6:08:41:BF:08:86:1B:16:76:6B:58:98:8B Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Certificate serial: 019B7D5C313A6D437FCC4A4238B64DD0289D Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa Signing time: Fri 02 Jan 2026 06:19:12 +0000 ROA not before: Fri 02 Jan 2026 06:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42160 IP address blocks: 81.95.112.0/20 maxlen: 20 81.95.112.0/22 maxlen: 24 81.95.112.0/24 maxlen: 24 81.95.113.0/24 maxlen: 24 81.95.114.0/24 maxlen: 24 81.95.115.0/24 maxlen: 24 81.95.116.0/24 maxlen: 24 81.95.117.0/24 maxlen: 24 81.95.118.0/23 maxlen: 23 81.95.118.0/24 maxlen: 24 81.95.119.0/24 maxlen: 24 81.95.120.0/23 maxlen: 23 81.95.120.0/24 maxlen: 24 81.95.121.0/24 maxlen: 24 81.95.122.0/23 maxlen: 23 81.95.122.0/24 maxlen: 24 81.95.123.0/24 maxlen: 24 81.95.124.0/22 maxlen: 22 81.95.124.0/24 maxlen: 24 81.95.125.0/24 maxlen: 24 81.95.126.0/24 maxlen: 24 81.95.127.0/24 maxlen: 24 185.55.92.0/22 maxlen: 22 185.55.92.0/23 maxlen: 24 185.55.93.0/24 maxlen: 24 185.55.94.0/24 maxlen: 24 185.55.95.0/24 maxlen: 24 193.110.248.0/21 maxlen: 21 193.110.248.0/23 maxlen: 23 193.110.248.0/24 maxlen: 24 193.110.249.0/24 maxlen: 24 193.110.250.0/23 maxlen: 23 193.110.250.0/24 maxlen: 24 193.110.251.0/24 maxlen: 24 193.110.252.0/22 maxlen: 22 193.110.252.0/24 maxlen: 24 193.110.253.0/24 maxlen: 24 193.110.254.0/24 maxlen: 24 193.110.255.0/24 maxlen: 24 2a02:5940::/32 maxlen: 34 2a02:5940::/34 maxlen: 34 2a02:5940:4000::/34 maxlen: 34 2a02:5940:8000::/34 maxlen: 34 2a02:5940:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:31:3a:6d:43:7f:cc:4a:42:38:b6:4d:d0:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Validity Not Before: Jan 2 06:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3635fff90153f8a60841bf08861b16766b58988b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:8c:44:88:f1:1e:82:69:f2:fd:91:b6:a7: 06:48:5c:c9:6f:c7:a7:e7:b5:9f:84:e5:d4:32:d0: 60:ab:8b:4a:1e:2b:97:90:bd:04:64:68:44:03:93: 3d:d9:9d:bb:27:e4:7b:a5:80:64:ad:a9:97:3a:a8: 79:68:04:cc:1a:b3:f5:fa:be:37:27:f4:ac:b4:57: 45:46:13:9e:32:1b:17:bf:3e:e4:11:0e:d1:c4:1f: 5f:40:70:0a:9b:47:78:f0:82:db:4c:0f:7d:33:38: 59:2e:b1:cf:60:87:24:26:fa:8f:b2:15:f0:e5:38: 91:09:09:a2:b5:5a:28:1d:42:8a:f5:e0:71:4f:55: 04:a2:f2:63:b1:7d:70:fc:bd:0e:c0:12:4c:c6:52: ac:3a:da:12:9c:ff:9b:ef:e0:86:65:60:cd:6b:24: 83:a3:86:12:b1:b7:d4:ba:2c:0b:a2:2d:6b:b5:a6: 23:8c:3a:29:df:fd:b1:3b:59:a3:76:7b:65:db:73: b6:fc:3f:72:c0:d4:85:02:f3:3d:d5:96:c2:91:d9: f0:20:cb:2a:11:a4:e5:a5:44:63:51:0b:2b:8f:a7: 40:3e:01:df:4b:1a:c8:bb:91:b0:4e:b0:32:84:f3: 5c:82:8b:c3:0c:57:d4:23:97:0e:6f:31:e6:6e:b2: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:FF:F9:01:53:F8:A6:08:41:BF:08:86:1B:16:76:6B:58:98:8B X509v3 Authority Key Identifier: keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.112.0/20 185.55.92.0/22 193.110.248.0/21 IPv6: 2a02:5940::/32 Signature Algorithm: sha256WithRSAEncryption 1d:67:06:17:0a:79:b3:58:7f:e1:ac:18:17:75:1e:a5:e6:c3: 3c:e3:45:28:72:4e:3e:3b:e3:cd:3a:b0:be:16:73:bb:23:d0: 8c:6c:4b:9f:31:79:3f:5d:79:9c:6e:4a:f2:f7:51:69:08:60: c0:5d:65:36:46:b0:f9:23:1e:8b:60:35:1c:97:7f:b8:0d:14: d1:11:33:a0:5c:7c:db:b3:e2:cf:07:7f:f7:c7:61:0f:c6:ca: fd:08:24:5b:a0:f6:20:13:70:e2:26:02:7e:f7:ff:a3:3b:1a: 34:37:70:6d:e2:52:a8:78:14:d8:90:b8:1b:d9:04:2e:42:58: 1f:97:bf:4e:a7:d9:53:36:6b:b3:84:41:5c:83:cd:de:d1:34: 04:50:d6:f2:8a:b0:52:08:28:0e:81:b6:11:86:a0:82:fb:50: f0:2f:ce:f2:b4:f0:1d:ec:55:fa:9b:d9:8f:33:86:45:9a:a1: 07:0e:79:fb:d2:df:51:d1:6a:33:e1:e1:d8:37:1d:b9:9e:8a: 21:cc:21:c2:f6:76:6e:8b:c5:4c:0a:c1:73:75:47:91:08:66: d2:cf:a7:54:a2:fd:b9:d5:21:cd:9a:e7:d9:63:5c:4a:44:90: dc:02:6c:53:28:d9:06:12:03:5f:d1:af:49:25:fd:b8:b4:d1: 2c:5b:c1:b2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XDE6bUN/zEpCOLZN0CidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3 MWFiZjUwHhcNMjYwMTAyMDYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjM1ZmZmOTAxNTNmOGE2MDg0MWJmMDg4NjFiMTY3NjZiNTg5ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIyMRIjxHoJp8v2RtqcGSFzJb8en 57WfhOXUMtBgq4tKHiuXkL0EZGhEA5M92Z27J+R7pYBkramXOqh5aATMGrP1+r43 J/SstFdFRhOeMhsXvz7kEQ7RxB9fQHAKm0d48ILbTA99MzhZLrHPYIckJvqPshXw 5TiRCQmitVooHUKK9eBxT1UEovJjsX1w/L0OwBJMxlKsOtoSnP+b7+CGZWDNaySD o4YSsbfUuiwLoi1rtaYjjDop3/2xO1mjdntl23O2/D9ywNSFAvM91ZbCkdnwIMsq EaTlpURjUQsrj6dAPgHfSxrIu5GwTrAyhPNcgovDDFfUI5cObzHmbrJP+QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDY1//kBU/imCEG/CIYbFnZrWJiLMB8GA1UdIwQY MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt NTllNmE2ZDRkNTc2LzEvTmpYXy1RRlQtS1lJUWI4SWhoc1dkbXRZbUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2 LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUV9wAwQC uTdcAwQDwW74MA0EAgACMAcDBQAqAllAMA0GCSqGSIb3DQEBCwUAA4IBAQAdZwYX CnmzWH/hrBgXdR6l5sM840Uock4+O+PNOrC+FnO7I9CMbEufMXk/XXmcbkry91Fp CGDAXWU2RrD5Ix6LYDUcl3+4DRTRETOgXHzbs+LPB3/3x2EPxsr9CCRboPYgE3Di JgJ+9/+jOxo0N3Bt4lKoeBTYkLgb2QQuQlgfl79Op9lTNmuzhEFcg83e0TQEUNby irBSCCgOgbYRhqCC+1DwL87ytPAd7FX6m9mPM4ZFmqEHDnn70t9R0Woz4eHYNx25 noohzCHC9nZui8VMCsFzdUeRCGbSz6dUov251SHNmufZY1xKRJDcAmxTKNkGEgNf 0a9JJf24tNEsW8Gy -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:11 2026 by rpki-client