This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa File: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (raw, json) Hash identifier: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis= Subject key identifier: 9E:A0:55:3C:0D:A6:5E:79:4E:17:56:04:5F:61:74:31:2D:EA:80:D8 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7AD9A0F9FEA79896E6D225CF3DA3 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13237 IP address blocks: 89.167.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7a:d9:a0:f9:fe:a7:98:96:e6:d2:25:cf:3d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ea0553c0da65e794e1756045f6174312dea80d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:79:1d:6e:83:80:44:48:9d:d1:d4:35:95: cd:1b:99:38:08:d2:9f:42:d9:06:e0:b7:3f:19:77: 0d:0b:00:cf:f8:87:52:84:80:8a:8e:98:8b:6a:36: 31:0a:ff:39:b6:08:9e:41:ba:f0:69:92:ce:9e:9f: e4:59:f7:6b:4c:19:2e:96:58:81:f8:6d:ff:8a:a8: 9e:9f:73:91:37:c0:95:8e:c0:b1:e4:18:eb:27:cd: 3d:62:ff:e7:43:47:54:42:56:94:4a:11:13:af:e3: 2d:b7:3c:d9:05:4f:ee:3f:89:b0:a2:7f:93:e3:ab: 24:c2:2d:4e:fb:3d:07:5b:84:3a:bc:30:fa:b0:81: d3:2e:d6:5f:6a:73:60:ce:36:5b:4b:c2:a4:92:f6: eb:d1:a2:67:34:4f:24:74:fd:e3:8c:c2:4a:3c:d1: f7:79:90:b8:79:0b:21:fa:3f:ff:40:76:aa:33:23: 0b:77:0b:bb:a7:c0:93:4b:62:48:c5:7c:20:4d:1a: e7:29:60:c1:76:b9:06:98:58:b9:13:b7:79:50:64: cd:e7:1c:9f:a6:85:fa:c0:f9:e1:62:b6:24:d3:5e: 3f:2a:42:c7:63:e5:f4:33:21:66:3f:2e:a4:a9:9d: 9e:ad:78:bd:d7:90:5c:62:4b:7f:ea:5b:20:40:7b: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:55:3C:0D:A6:5E:79:4E:17:56:04:5F:61:74:31:2D:EA:80:D8 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.167.229.0/24 Signature Algorithm: sha256WithRSAEncryption 60:47:57:7c:0a:ed:76:01:ea:49:be:57:29:7d:a6:2c:ed:72: 42:fa:fa:4c:49:cd:59:11:02:ce:bd:50:13:6e:b9:c4:1c:34: fb:92:bc:9a:fd:a8:28:17:0f:7a:f5:29:14:48:56:5e:8f:bd: 3b:71:b9:28:02:21:97:2f:51:b8:e3:30:ec:73:36:32:d3:cc: 99:f3:f8:c4:8c:f2:9d:b3:d2:b2:d7:99:d9:ca:d3:22:7a:4c: 83:57:29:2e:a3:34:81:85:63:cc:54:19:88:e8:85:f0:31:e6: 12:06:d2:e8:0d:c9:2e:f4:13:6d:8a:0f:6d:e8:fb:74:c2:62: 0b:f3:89:42:f0:15:2d:87:fe:d2:93:b0:44:a9:c0:76:b9:1f: 90:33:29:83:bb:88:6e:f7:c6:60:2d:bc:0f:1d:f9:2b:83:c6: f6:5b:24:53:03:82:96:95:90:87:72:17:04:4a:5e:9a:40:a6: 9b:b5:d3:a2:fe:9d:b1:4d:29:c1:7a:8f:01:aa:68:29:d5:86: 98:34:5c:df:5c:e3:13:2e:ee:86:da:ca:fc:44:3f:79:88:67: de:45:c7:1d:1a:11:6d:80:ef:68:b7:d0:2e:db:da:b9:bc:85: 40:b3:b8:0b:b3:37:c9:59:16:09:54:6f:70:f7:f5:2a:8e:0d: c3:9f:5f:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3rZoPn+p5iW5tIlzz2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEwNTUzYzBkYTY1ZTc5NGUxNzU2MDQ1ZjYxNzQzMTJkZWE4MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdt5HW6DgERIndHUNZXNG5k4CNKf QtkG4Lc/GXcNCwDP+IdShICKjpiLajYxCv85tgieQbrwaZLOnp/kWfdrTBkulliB +G3/iqien3ORN8CVjsCx5BjrJ809Yv/nQ0dUQlaUShETr+MttzzZBU/uP4mwon+T 46skwi1O+z0HW4Q6vDD6sIHTLtZfanNgzjZbS8Kkkvbr0aJnNE8kdP3jjMJKPNH3 eZC4eQsh+j//QHaqMyMLdwu7p8CTS2JIxXwgTRrnKWDBdrkGmFi5E7d5UGTN5xyf poX6wPnhYrYk014/KkLHY+X0MyFmPy6kqZ2erXi915BcYkt/6lsgQHu3CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6gVTwNpl55ThdWBF9hdDEt6oDYMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvbnFCVlBBMm1YbmxPRjFZRVgyRjBNUzNxZ05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaflMA0G CSqGSIb3DQEBCwUAA4IBAQBgR1d8Cu12AepJvlcpfaYs7XJC+vpMSc1ZEQLOvVAT brnEHDT7krya/agoFw969SkUSFZej707cbkoAiGXL1G44zDsczYy08yZ8/jEjPKd s9Ky15nZytMiekyDVykuozSBhWPMVBmI6IXwMeYSBtLoDcku9BNtig9t6Pt0wmIL 84lC8BUth/7Sk7BEqcB2uR+QMymDu4hu98ZgLbwPHfkrg8b2WyRTA4KWlZCHchcE Sl6aQKabtdOi/p2xTSnBeo8Bqmgp1YaYNFzfXOMTLu6G2sr8RD95iGfeRccdGhFt gO9ot9Au29q5vIVAs7gLszfJWRYJVG9w9/Uqjg3Dn1/3 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:32 2026 by rpki-client