This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa File: nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa (raw, json) Hash identifier: LvM9PvMHii47fjgjeXdKFvVutcctBWDj/KaR746D+Xc= Subject key identifier: 9F:13:FD:7A:ED:C9:9D:52:96:6F:8B:98:CE:44:CE:3E:4F:71:4A:08 Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5 Certificate serial: 019B7D5CE79F21CD08F4B6B7B2F76F5E24F4 Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50316 IP address blocks: 45.135.24.0/22 maxlen: 24 45.147.236.0/22 maxlen: 24 46.234.192.0/19 maxlen: 24 46.234.198.240/30 maxlen: 30 185.10.188.0/22 maxlen: 24 185.43.164.0/22 maxlen: 24 185.74.188.0/22 maxlen: 24 185.96.96.0/22 maxlen: 24 185.121.32.0/22 maxlen: 24 185.142.122.0/23 maxlen: 24 185.157.24.0/22 maxlen: 24 185.158.140.0/22 maxlen: 24 185.193.252.0/22 maxlen: 24 185.219.44.0/22 maxlen: 24 185.219.45.64/30 maxlen: 30 185.245.120.0/22 maxlen: 24 193.3.245.0/24 maxlen: 24 193.5.31.0/24 maxlen: 24 193.5.39.0/24 maxlen: 24 193.5.41.0/24 maxlen: 24 193.5.120.0/24 maxlen: 24 193.38.132.0/22 maxlen: 24 193.47.52.0/22 maxlen: 24 195.184.74.0/24 maxlen: 24 213.187.0.0/19 maxlen: 24 2a00:1f48::/29 maxlen: 56 2a01:6d60::/29 maxlen: 56 2a05:4a00::/29 maxlen: 56 2a06:9c80::/29 maxlen: 56 2a07:a2c0::/29 maxlen: 56 2a07:adc0::/29 maxlen: 56 2a0a:41c0::/29 maxlen: 56 2a0a:c180::/29 maxlen: 56 2a0b:e040::/29 maxlen: 56 2a0d:5780::/29 maxlen: 56 2a0d:e540::/29 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e7:9f:21:cd:08:f4:b6:b7:b2:f7:6f:5e:24:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f13fd7aedc99d52966f8b98ce44ce3e4f714a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:4c:3e:75:d2:f2:67:0c:bf:6c:e9:b2:9d: de:06:42:19:b4:1c:d3:62:72:ac:aa:7d:3f:ce:86: 6c:86:11:97:76:89:17:44:ab:ae:5b:f5:48:14:6f: 65:bb:7a:cc:f6:09:21:97:35:de:a6:2b:28:44:35: a5:99:3e:9a:8f:35:ca:f1:78:04:c4:49:1f:ae:b3: b2:f0:e6:57:44:42:f2:2d:b6:9f:af:ec:de:80:dc: 1c:b9:57:ee:d1:51:8e:31:af:f6:9e:f9:aa:d8:23: 73:16:82:d0:a7:ce:4b:e2:ea:22:cb:32:21:b0:f7: ec:93:38:5d:8d:ce:43:e8:6d:c0:89:ca:40:7f:69: 15:c0:c8:5d:34:f1:5c:9a:b3:90:30:2f:87:20:95: c8:dd:3c:df:64:61:3a:16:8a:ba:a6:77:1a:18:3a: 4a:60:fc:d2:0f:3c:5d:85:44:0d:8f:84:64:8a:82: d7:30:9f:09:05:a6:5f:c2:d2:a4:31:48:40:fd:c5: 86:aa:ee:33:b2:c7:09:be:02:d6:10:ec:2d:d7:a2: 08:88:21:2f:a5:b3:bf:52:d5:3c:82:68:39:2e:56: c1:2c:32:97:d4:9b:83:5b:d9:21:4e:19:ae:63:19: c9:e3:56:a7:22:22:ca:c7:83:4f:35:b0:0c:aa:fa: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:13:FD:7A:ED:C9:9D:52:96:6F:8B:98:CE:44:CE:3E:4F:71:4A:08 X509v3 Authority Key Identifier: keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.24.0/22 45.147.236.0/22 46.234.192.0/19 185.10.188.0/22 185.43.164.0/22 185.74.188.0/22 185.96.96.0/22 185.121.32.0/22 185.142.122.0/23 185.157.24.0/22 185.158.140.0/22 185.193.252.0/22 185.219.44.0/22 185.245.120.0/22 193.3.245.0/24 193.5.31.0/24 193.5.39.0/24 193.5.41.0/24 193.5.120.0/24 193.38.132.0/22 193.47.52.0/22 195.184.74.0/24 213.187.0.0/19 IPv6: 2a00:1f48::/29 2a01:6d60::/29 2a05:4a00::/29 2a06:9c80::/29 2a07:a2c0::/29 2a07:adc0::/29 2a0a:41c0::/29 2a0a:c180::/29 2a0b:e040::/29 2a0d:5780::/29 2a0d:e540::/29 Signature Algorithm: sha256WithRSAEncryption a2:61:50:68:b0:e5:f5:68:65:66:c4:5f:03:ef:50:aa:3b:b6: 93:de:0d:8f:4a:cc:0c:72:be:02:42:a6:ef:4c:8e:0a:36:76: 31:03:2a:ee:6b:3f:15:b1:26:cd:98:07:0b:8c:c5:94:09:8d: 82:1f:53:11:ee:67:70:cf:32:7e:b9:fb:e3:38:34:7e:b9:aa: 74:62:f8:cd:f5:b8:7c:8f:5c:8c:25:ac:9d:60:f1:38:17:7f: c4:06:62:98:0c:7c:57:9b:fa:ed:b5:14:a7:26:b2:26:a7:6b: fd:74:9b:92:15:e7:32:3b:f9:24:32:b1:fc:24:46:7f:e0:fc: 67:ef:5b:09:7b:cb:a3:a5:d8:88:2c:a6:f6:3e:e9:88:3b:6b: aa:0d:4a:3e:ec:b4:a0:cb:d8:cf:23:14:53:8b:fd:a7:90:4c: 51:52:e8:37:60:31:8b:82:41:88:88:21:f2:f5:fd:4a:11:88: 81:e0:8c:53:62:60:82:70:b8:dd:cf:40:1e:67:57:e5:9f:70: dd:58:11:4e:20:8d:c6:5d:af:f5:7d:5a:e9:c9:ed:1b:e1:df: 61:0b:a4:1f:b8:c0:37:06:01:6d:73:35:a4:b2:51:50:98:f0: c5:b3:c9:42:32:e9:ac:27:ae:83:77:4c:4e:e8:2c:50:a3:7d: 47:7e:8f:bb -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt9XOefIc0I9La3svdvXiT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDVlYTU5ODA1Zjk0YmUxODUyODIwMzliYmFlMmZhOGE5 MjUzZjUwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjEzZmQ3YWVkYzk5ZDUyOTY2ZjhiOThjZTQ0Y2UzZTRmNzE0YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/hMPnXS8mcMv2zpsp3eBkIZtBzT YnKsqn0/zoZshhGXdokXRKuuW/VIFG9lu3rM9gkhlzXepisoRDWlmT6ajzXK8XgE xEkfrrOy8OZXRELyLbafr+zegNwcuVfu0VGOMa/2nvmq2CNzFoLQp85L4uoiyzIh sPfskzhdjc5D6G3AicpAf2kVwMhdNPFcmrOQMC+HIJXI3TzfZGE6Foq6pncaGDpK YPzSDzxdhUQNj4RkioLXMJ8JBaZfwtKkMUhA/cWGqu4zsscJvgLWEOwt16IIiCEv pbO/UtU8gmg5LlbBLDKX1JuDW9khThmuYxnJ41anIiLKx4NPNbAMqvpFCQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFJ8T/XrtyZ1Slm+LmM5Ezj5PcUoIMB8GA1UdIwQY MBaAFHoF6lmAX5S+GFKCA5u64vqKklP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzIt MDRiMzgxM2YzYjNkLzEvbnhQOWV1M0puVktXYjR1WXprVE9Qazl4U2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzItMDRiMzgxM2YzYjNk LzEvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH8BggrBgEFBQcBBwEB/wSB7DCB6TCBkQQCAAEwgYoDBAIt hxgDBAItk+wDBAUu6sADBAK5CrwDBAK5K6QDBAK5SrwDBAK5YGADBAK5eSADBAG5 jnoDBAK5nRgDBAK5nowDBAK5wfwDBAK52ywDBAK59XgDBADBA/UDBADBBR8DBADB BScDBADBBSkDBADBBXgDBALBJoQDBALBLzQDBADDuEoDBAXVuwAwUwQCAAIwTQMF AyoAH0gDBQMqAW1gAwUDKgVKAAMFAyoGnIADBQMqB6LAAwUDKgetwAMFAyoKQcAD BQMqCsGAAwUDKgvgQAMFAyoNV4ADBQMqDeVAMA0GCSqGSIb3DQEBCwUAA4IBAQCi YVBosOX1aGVmxF8D71CqO7aT3g2PSswMcr4CQqbvTI4KNnYxAyruaz8VsSbNmAcL jMWUCY2CH1MR7mdwzzJ+ufvjODR+uap0YvjN9bh8j1yMJaydYPE4F3/EBmKYDHxX m/rttRSnJrImp2v9dJuSFecyO/kkMrH8JEZ/4Pxn71sJe8ujpdiILKb2PumIO2uq DUo+7LSgy9jPIxRTi/2nkExRUug3YDGLgkGIiCHy9f1KEYiB4IxTYmCCcLjdz0Ae Z1fln3DdWBFOII3GXa/1fVrpye0b4d9hC6QfuMA3BgFtczWkslFQmPDFs8lCMums J66Dd0xO6CxQo31Hfo+7 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:27 2026 by rpki-client