This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/nkXKQXQZfWoB_SRu8UGi2gudjoE.roa File: nkXKQXQZfWoB_SRu8UGi2gudjoE.roa (raw, json) Hash identifier: yyTA0n4064ykc+ZOi6FPjYYdwqHRzajU9OCljE+08GA= Subject key identifier: 9E:45:CA:41:74:19:7D:6A:01:FD:24:6E:F1:41:A2:DA:0B:9D:8E:81 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B04820A5A70C54CE385A30747F44E1BDF Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/nkXKQXQZfWoB_SRu8UGi2gudjoE.roa Signing time: Tue 09 Dec 2025 19:06:29 +0000 ROA not before: Tue 09 Dec 2025 19:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20668 IP address blocks: 89.35.0.0/23 maxlen: 24 89.40.42.0/24 maxlen: 24 194.26.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:82:0a:5a:70:c5:4c:e3:85:a3:07:47:f4:4e:1b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Dec 9 19:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e45ca4174197d6a01fd246ef141a2da0b9d8e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:59:61:48:20:64:5e:68:08:9f:06:4e:91: 06:6d:7d:a5:11:7b:e5:45:c3:34:9d:36:da:2e:24: 9f:94:2c:51:30:7d:9d:30:11:3e:76:c8:92:de:59: 57:41:a6:67:40:7c:1d:83:d2:eb:92:68:54:90:10: f5:59:a2:4d:57:59:42:14:e5:da:a6:fc:1b:9e:e3: 15:b1:7b:ed:2b:f2:1b:63:3e:f0:2b:54:de:a3:b3: d3:45:16:a9:fa:3e:a9:33:0c:43:5b:76:0c:8c:1f: d9:93:ff:6b:3b:69:80:fe:40:1b:4b:b2:09:bd:87: 12:bd:e1:d1:98:b1:fd:a1:34:cd:fd:3d:45:66:a8: 3f:65:76:02:1a:2a:53:5d:6e:80:a6:bc:6b:84:7b: c5:d1:a7:82:90:0e:2a:f3:64:09:70:b9:c3:34:cb: 09:fd:c5:17:22:43:59:fb:ef:16:f0:9a:b7:12:e0: 02:d2:b8:d4:77:bf:89:87:2a:dc:d8:b8:71:59:7d: 20:50:ac:db:e7:b0:b1:95:cd:1f:90:24:ac:cc:04: f6:b1:7f:df:d5:b6:a1:9a:4f:af:ca:50:d8:2e:d4: e4:49:4f:54:99:c5:d5:5d:d2:be:63:09:20:a8:7c: 92:04:59:f7:37:fc:43:29:b6:22:d2:ca:a2:b8:1a: a6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:CA:41:74:19:7D:6A:01:FD:24:6E:F1:41:A2:DA:0B:9D:8E:81 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/nkXKQXQZfWoB_SRu8UGi2gudjoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.0.0/23 89.40.42.0/24 194.26.128.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d3:7d:d3:4b:16:63:db:96:bb:31:11:e5:78:13:4e:da:e3: 6b:69:27:b0:4c:40:23:d8:31:2c:fe:97:7e:27:a1:a7:b7:13: f9:ee:b9:ca:8a:de:38:41:93:cd:12:27:a8:ad:da:b7:3c:90: f0:39:e2:01:70:b0:87:c9:46:fb:34:3b:e0:a0:83:d6:c4:ce: 08:71:fb:fb:dd:36:69:bb:7b:df:2c:40:af:81:e6:de:d5:dd: 27:2f:fd:41:2f:17:58:6a:6a:7f:c4:4c:99:ab:48:e6:e5:d1: 35:b4:e1:95:25:bb:9e:9e:a4:56:02:8a:f1:03:0c:40:4f:79: dd:65:8a:f3:22:62:76:55:ef:d8:bb:6b:de:28:98:ba:ed:87: d4:86:cc:b1:31:38:12:2e:2c:e7:7f:d6:9d:a2:76:75:70:1f: 2b:d7:68:21:e9:c5:b7:5f:ab:f8:d5:50:a5:6f:31:fa:34:70: fe:db:50:95:05:f5:81:20:0e:9e:14:c9:f8:27:29:b0:0a:c7: 72:9b:f6:58:38:60:25:97:7f:ba:11:4a:28:fa:bb:50:bb:0e: dc:2d:f8:b9:fd:1d:68:ac:3b:46:e8:63:16:29:75:d1:85:90: 9a:88:e2:f8:d1:12:e0:48:76:a1:6b:d0:ad:bd:38:48:81:3f: c6:13:2a:6c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsEggpacMVM44WjB0f0ThvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMjA5MTkwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQ1Y2E0MTc0MTk3ZDZhMDFmZDI0NmVmMTQxYTJkYTBiOWQ4ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GVZYUggZF5oCJ8GTpEGbX2lEXvl RcM0nTbaLiSflCxRMH2dMBE+dsiS3llXQaZnQHwdg9LrkmhUkBD1WaJNV1lCFOXa pvwbnuMVsXvtK/IbYz7wK1Teo7PTRRap+j6pMwxDW3YMjB/Zk/9rO2mA/kAbS7IJ vYcSveHRmLH9oTTN/T1FZqg/ZXYCGipTXW6AprxrhHvF0aeCkA4q82QJcLnDNMsJ /cUXIkNZ++8W8Jq3EuAC0rjUd7+Jhyrc2LhxWX0gUKzb57Cxlc0fkCSszAT2sX/f 1bahmk+vylDYLtTkSU9UmcXVXdK+YwkgqHySBFn3N/xDKbYi0sqiuBqmuwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ5FykF0GX1qAf0kbvFBotoLnY6BMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvbmtYS1FYUVpmV29CX1NSdThVR2kyZ3Vkam9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWSMAAwQA WSgqAwQAwhqAMA0GCSqGSIb3DQEBCwUAA4IBAQAB033TSxZj25a7MRHleBNO2uNr aSewTEAj2DEs/pd+J6GntxP57rnKit44QZPNEieordq3PJDwOeIBcLCHyUb7NDvg oIPWxM4Icfv73TZpu3vfLECvgebe1d0nL/1BLxdYamp/xEyZq0jm5dE1tOGVJbue nqRWAorxAwxAT3ndZYrzImJ2Ve/Yu2veKJi67YfUhsyxMTgSLiznf9adonZ1cB8r 12gh6cW3X6v41VClbzH6NHD+21CVBfWBIA6eFMn4JymwCsdym/ZYOGAll3+6EUoo +rtQuw7cLfi5/R1orDtG6GMWKXXRhZCaiOL40RLgSHaha9CtvThIgT/GEyps -----END CERTIFICATE-----Generated at Thu Dec 18 20:19:18 2025 by rpki-client