This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa File: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (raw, json) Hash identifier: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4= Subject key identifier: 9E:41:66:71:B8:F9:49:1C:AB:01:78:D4:57:3E:E3:00:C4:A8:C8:99 Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345C13B765FCD48A8F29EFC5C32111 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47164 IP address blocks: 212.231.81.0/24 maxlen: 24 212.231.82.0/24 maxlen: 24 212.231.83.0/24 maxlen: 24 212.231.84.0/24 maxlen: 24 212.231.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5c:13:b7:65:fc:d4:8a:8f:29:ef:c5:c3:21:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e416671b8f9491cab0178d4573ee300c4a8c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:84:3e:a0:44:c4:ad:9c:8b:fc:f3:3f:0c: fc:42:88:65:fd:85:8f:2d:d1:b4:1b:f1:d3:fe:92: 43:27:cd:92:5e:83:5f:40:cd:74:ab:8d:37:58:8b: 49:94:ee:ba:3f:27:9e:da:3b:02:93:8e:17:10:8d: 31:05:cc:89:2c:ec:46:d5:ce:76:1d:38:20:b5:e9: 02:14:dc:32:82:9e:f0:dd:85:74:3d:4f:c7:5b:73: f8:91:29:80:dd:7e:ec:e8:9a:21:28:1a:fb:f6:33: ad:7f:08:d6:72:e8:38:02:17:2c:92:2e:ec:da:ed: 87:88:7e:96:84:3e:9d:46:cd:1f:55:7b:25:91:e2: d3:e4:5d:00:b8:4e:92:68:a0:bc:b0:54:18:e4:86: c4:e7:11:51:db:94:d5:b3:83:5b:bd:27:b0:bb:bf: 26:e9:8d:0f:83:ea:4e:e9:f2:1c:aa:83:bc:fc:23: df:55:dd:be:22:3e:c3:82:02:1b:b5:b8:2e:80:28: 46:53:8a:7b:1c:b1:15:d9:42:69:f3:e9:51:8b:41: 45:2a:8f:2d:00:f3:ac:c2:a2:1e:8a:96:ab:4c:0d: 7e:23:64:f3:4b:3d:d2:fe:ad:b5:b0:fe:f3:9e:19: d2:98:27:0f:85:96:9b:4c:9a:63:63:97:2d:6f:7e: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:66:71:B8:F9:49:1C:AB:01:78:D4:57:3E:E3:00:C4:A8:C8:99 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.231.81.0-212.231.85.255 Signature Algorithm: sha256WithRSAEncryption 93:d7:83:86:28:88:86:79:f3:86:45:6d:42:39:47:94:22:ba: ec:ae:45:8d:44:3d:58:ac:a0:88:97:8c:ec:e9:ae:b1:e2:30: ae:ed:92:ad:22:fe:d7:50:fa:c6:ac:d7:7b:90:37:20:b1:59: 8a:69:a3:21:d4:6b:15:fa:fd:43:0f:07:a8:9b:70:c9:2a:14: 72:a3:fe:ca:bf:a9:40:9c:31:6e:28:78:86:b1:7b:51:93:d5: 5a:5b:5a:2a:96:2d:d4:04:62:ad:fc:53:26:2b:62:8b:50:49: 3d:92:94:db:44:92:62:f4:85:bc:22:58:55:76:c9:fc:5f:2c: e3:22:4d:67:80:23:4b:c0:ba:2c:75:90:8d:42:bd:3d:b6:94: 55:e6:d4:29:a5:5f:76:9b:13:60:3c:1f:6b:14:f2:f1:96:bd: 28:66:b7:d0:22:84:6a:92:38:b9:16:78:00:dc:85:ef:4e:0a: f5:29:c3:8a:3d:f6:1b:65:bb:b8:a0:05:75:84:52:0d:a3:ec: 3a:13:f9:6f:00:9e:bf:fd:d4:90:37:2c:33:c6:c9:d9:da:fe: 0a:47:31:a0:8c:4d:9b:05:61:e2:50:87:2e:fd:34:ff:9d:db: d7:6f:e0:35:33:b7:5b:82:9e:2e:a7:d7:08:88:6a:7a:ed:a1: 73:bd:e9:68 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NFwTt2X81IqPKe/FwyERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQxNjY3MWI4Zjk0OTFjYWIwMTc4ZDQ1NzNlZTMwMGM0YThjODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF2EPqBExK2ci/zzPwz8Qohl/YWP LdG0G/HT/pJDJ82SXoNfQM10q403WItJlO66Pyee2jsCk44XEI0xBcyJLOxG1c52 HTggtekCFNwygp7w3YV0PU/HW3P4kSmA3X7s6JohKBr79jOtfwjWcug4Ahcski7s 2u2HiH6WhD6dRs0fVXslkeLT5F0AuE6SaKC8sFQY5IbE5xFR25TVs4NbvSewu78m 6Y0Pg+pO6fIcqoO8/CPfVd2+Ij7DggIbtbgugChGU4p7HLEV2UJp8+lRi0FFKo8t APOswqIeiparTA1+I2TzSz3S/q21sP7znhnSmCcPhZabTJpjY5ctb359yQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ5BZnG4+UkcqwF41Fc+4wDEqMiZMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvbmtGbWNiajVTUnlyQVhqVVZ6N2pBTVNveUprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADU51ED BAHU51QwDQYJKoZIhvcNAQELBQADggEBAJPXg4YoiIZ584ZFbUI5R5QiuuyuRY1E PVisoIiXjOzprrHiMK7tkq0i/tdQ+sas13uQNyCxWYppoyHUaxX6/UMPB6ibcMkq FHKj/sq/qUCcMW4oeIaxe1GT1VpbWiqWLdQEYq38UyYrYotQST2SlNtEkmL0hbwi WFV2yfxfLOMiTWeAI0vAuix1kI1CvT22lFXm1CmlX3abE2A8H2sU8vGWvShmt9Ai hGqSOLkWeADche9OCvUpw4o99htlu7igBXWEUg2j7DoT+W8Anr/91JA3LDPGydna /gpHMaCMTZsFYeJQhy79NP+d29dv4DUzt1uCni6n1wiIanrtoXO96Wg= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:23 2026 by rpki-client