This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa File: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (raw, json) Hash identifier: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA= Subject key identifier: 9D:27:5B:40:46:4A:C2:9D:11:A2:6B:2A:8F:D9:EC:67:8B:D0:42:B8 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019B791125CA8C9DE8CF5DCD1DBB0B676E7A Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13631 IP address blocks: 46.255.29.0/24 maxlen: 24 194.59.56.0/23 maxlen: 24 2a13:bb80::/29 maxlen: 29 2a13:bb87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:25:ca:8c:9d:e8:cf:5d:cd:1d:bb:0b:67:6e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d275b40464ac29d11a26b2a8fd9ec678bd042b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:32:c2:e8:e2:25:25:cb:93:95:f5:26:86: 32:5d:04:99:13:36:88:47:8b:2b:7f:85:24:23:6f: 95:2a:44:d3:ad:4b:7e:c1:70:17:97:fd:d3:51:5f: 16:7f:d8:52:73:14:9e:5f:8e:43:c3:98:f3:21:98: 4e:a6:70:c4:9b:52:4b:27:7f:d3:39:79:8c:f4:76: 4b:59:b7:a0:c7:5a:e2:77:53:18:a0:78:4f:2d:9b: f6:07:cc:36:9b:1c:78:26:d3:f0:11:f3:c9:35:04: 85:08:9f:06:e9:b1:66:0b:b9:91:d8:9c:43:0e:57: 22:62:94:e3:8f:c7:3e:12:71:33:c7:ad:5f:00:5b: 3a:e8:8a:64:20:72:5b:2f:2b:35:85:f9:d5:74:a4: da:b9:9a:6a:2d:72:80:80:7a:df:c7:1f:84:b7:dd: 39:3f:8f:27:58:ed:86:82:70:5a:60:e5:a4:d0:7c: d0:95:36:77:b5:fb:33:1c:62:1f:da:d4:e8:c6:9a: 81:6d:c2:f1:cb:0c:00:d5:cf:95:6a:8d:e7:be:73: 1f:87:a6:0e:61:9b:a6:2d:88:dd:c7:80:3c:d9:6a: bb:54:7d:8b:32:dc:c1:e0:f8:a7:2e:54:36:d6:d0: 9b:5a:30:1f:12:a6:b0:a5:eb:c5:a0:ae:0e:31:cf: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:5B:40:46:4A:C2:9D:11:A2:6B:2A:8F:D9:EC:67:8B:D0:42:B8 X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.29.0/24 194.59.56.0/23 IPv6: 2a13:bb80::/29 Signature Algorithm: sha256WithRSAEncryption 4d:0a:51:c0:b3:0e:51:b3:11:ce:62:41:bd:b0:99:8c:93:78: da:15:d9:3f:43:38:d8:fc:e4:55:cf:4d:40:22:4c:50:cc:23: eb:1a:85:8c:0d:ab:01:0f:1d:cd:e9:9c:50:f0:c7:fd:05:6b: e9:77:5a:23:37:11:0b:ec:d4:1e:73:b9:9a:35:84:2d:16:fb: 1f:2f:1b:f0:92:91:5d:59:fe:dd:9e:cd:cc:ab:fd:92:dc:c8: c3:61:98:94:5a:2c:6c:8e:e2:f7:5b:5f:c4:9f:bc:4a:aa:1b: 67:b0:cc:e9:a5:5d:ec:38:f8:69:ec:98:ee:16:cf:5f:34:f4: 34:70:23:56:45:e7:91:26:b5:54:40:ef:8a:1f:9a:b1:0e:6b: 5a:ba:f9:f0:9f:85:82:cf:05:9c:26:c0:7d:94:54:eb:1f:67: 98:32:3f:fd:82:87:a2:8b:10:45:01:3a:71:30:82:52:54:02: 37:6d:7f:50:1d:77:a1:9f:c4:92:f9:5d:2e:00:d1:48:7e:92: 3c:2c:23:c7:33:76:6f:b3:87:a6:c8:28:65:27:58:51:80:99: 34:cc:21:68:19:25:00:31:ec:2c:dc:5c:0e:12:5a:72:09:0b: 3d:93:b4:f8:d5:31:06:59:f3:da:b1:38:cc:0c:51:92:d8:36: aa:a1:6d:39 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ESXKjJ3oz13NHbsLZ256MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDI3NWI0MDQ2NGFjMjlkMTFhMjZiMmE4ZmQ5ZWM2NzhiZDA0MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsggywujiJSXLk5X1JoYyXQSZEzaI R4srf4UkI2+VKkTTrUt+wXAXl/3TUV8Wf9hScxSeX45Dw5jzIZhOpnDEm1JLJ3/T OXmM9HZLWbegx1rid1MYoHhPLZv2B8w2mxx4JtPwEfPJNQSFCJ8G6bFmC7mR2JxD DlciYpTjj8c+EnEzx61fAFs66IpkIHJbLys1hfnVdKTauZpqLXKAgHrfxx+Et905 P48nWO2GgnBaYOWk0HzQlTZ3tfszHGIf2tToxpqBbcLxywwA1c+Vao3nvnMfh6YO YZumLYjdx4A82Wq7VH2LMtzB4PinLlQ21tCbWjAfEqawpevFoK4OMc9fbQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ0nW0BGSsKdEaJrKo/Z7GeL0EK4MB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvblNkYlFFWkt3cDBSb21zcWo5bnNaNHZRUXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALv8dAwQB wjs4MA0EAgACMAcDBQMqE7uAMA0GCSqGSIb3DQEBCwUAA4IBAQBNClHAsw5RsxHO YkG9sJmMk3jaFdk/QzjY/ORVz01AIkxQzCPrGoWMDasBDx3N6ZxQ8Mf9BWvpd1oj NxEL7NQec7maNYQtFvsfLxvwkpFdWf7dns3Mq/2S3MjDYZiUWixsjuL3W1/En7xK qhtnsMzppV3sOPhp7JjuFs9fNPQ0cCNWReeRJrVUQO+KH5qxDmtauvnwn4WCzwWc JsB9lFTrH2eYMj/9goeiixBFATpxMIJSVAI3bX9QHXehn8SS+V0uANFIfpI8LCPH M3Zvs4emyChlJ1hRgJk0zCFoGSUAMews3FwOElpyCQs9k7T41TEGWfPasTjMDFGS 2DaqoW05 -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:49 2026 by rpki-client