This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/nTVVQnVXJMG-QyafLdMazVtzFSM.roa File: nTVVQnVXJMG-QyafLdMazVtzFSM.roa (raw, json) Hash identifier: wBqPAHjbAyigYDbp/GK1N5eLyKdIQZmkBLvYK8qNoBo= Subject key identifier: 9D:35:55:42:75:57:24:C1:BE:43:26:9F:2D:D3:1A:CD:5B:73:15:23 Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Certificate serial: 019AD93C7113AF99D1F7C3E2F67F31794410 Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/nTVVQnVXJMG-QyafLdMazVtzFSM.roa Signing time: Mon 01 Dec 2025 09:26:48 +0000 ROA not before: Mon 01 Dec 2025 09:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60602 IP address blocks: 185.181.228.0/23 maxlen: 23 185.181.228.0/24 maxlen: 24 185.181.229.0/24 maxlen: 24 185.181.230.0/24 maxlen: 24 185.181.231.0/24 maxlen: 24 194.33.40.0/22 maxlen: 24 2a0a:d580::/32 maxlen: 32 2a0a:d580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:3c:71:13:af:99:d1:f7:c3:e2:f6:7f:31:79:44:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Validity Not Before: Dec 1 09:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d355542755724c1be43269f2dd31acd5b731523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:a5:34:a3:96:85:a4:11:82:2f:12:c5:e3: 63:a5:99:b3:78:37:03:e9:d5:f5:a5:ff:e1:d3:56: c5:56:53:29:64:85:d3:83:5e:e9:bb:c1:5a:94:bd: e7:91:c5:dc:b7:11:f1:18:bd:bf:a4:1a:74:3b:7b: d7:7a:73:b1:07:f4:72:fd:42:3a:c3:ef:8f:c4:0f: 69:71:95:c2:c8:fc:a2:62:16:4f:dd:ed:89:94:08: 62:dc:fe:ce:6b:35:3f:f4:1c:93:7c:99:d6:18:32: 31:88:36:eb:39:de:53:00:1b:48:8f:b1:c1:9d:79: 63:c7:a2:a9:da:4e:20:58:c4:80:e9:51:30:26:31: 6e:12:ff:c5:5d:50:c9:43:48:e3:0b:5c:df:2f:99: f9:ed:de:df:2a:38:ca:3a:8e:bf:3a:23:c6:a6:e3: cb:cb:39:c4:71:10:e0:b9:2e:c1:c8:cb:78:3f:01: 51:65:9c:27:7c:8c:4f:f4:1d:9c:c7:aa:39:a1:18: ff:3c:8b:f7:81:45:4b:fc:cf:d4:65:c8:92:d9:cd: fa:05:d9:6f:2b:e5:b5:10:93:91:20:6c:d5:3b:52: ca:be:56:db:f7:d9:64:0c:a9:a3:7a:cd:d9:02:46: ff:5a:f4:1b:19:7e:b6:f9:b0:bf:58:14:46:63:7f: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:35:55:42:75:57:24:C1:BE:43:26:9F:2D:D3:1A:CD:5B:73:15:23 X509v3 Authority Key Identifier: keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/nTVVQnVXJMG-QyafLdMazVtzFSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.228.0/22 194.33.40.0/22 IPv6: 2a0a:d580::/32 Signature Algorithm: sha256WithRSAEncryption 67:2a:ca:30:72:a0:4e:be:a8:cb:f8:d2:19:7f:a2:b5:e1:31: 08:cb:af:47:6a:eb:61:d6:e3:ff:2a:e7:43:af:c0:2d:bf:99: e2:68:0f:2c:35:f7:75:94:02:d3:3d:30:8f:dd:6d:db:ca:16: f5:7e:76:29:36:35:42:9f:b6:36:32:71:2f:74:30:65:75:b5: 24:c7:bd:33:1c:da:48:ec:86:eb:fb:0a:11:6d:05:e9:b0:55: 40:3f:38:fa:c7:72:a4:19:2e:47:3f:70:0f:72:f4:4e:86:55: 48:65:54:7f:ac:91:d0:91:37:a7:21:94:3b:d4:ae:56:5e:07: 1b:46:93:3e:22:09:95:47:49:08:38:a2:ce:7f:fc:28:76:c5: 98:23:ef:49:94:b2:07:25:85:49:10:74:bf:12:c6:69:bb:5f: ba:95:15:78:89:66:2e:be:e4:cf:41:5a:aa:67:1e:c1:14:ff: d8:b1:bd:eb:ef:b5:94:64:29:f5:d9:c6:a6:b8:fc:ab:d1:88: 6a:4d:ae:ce:f2:73:70:c0:20:38:d3:0c:42:2e:09:61:ad:49: 7b:d1:92:e4:eb:cc:44:51:52:f3:b7:cd:96:18:0c:92:67:c3: 8f:37:d5:70:aa:d6:58:7f:50:16:01:e4:b4:32:a0:dd:38:d9: db:e8:fb:44 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrZPHETr5nR98Pi9n8xeUQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5 MWFmOTgwHhcNMjUxMjAxMDkyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDM1NTU0Mjc1NTcyNGMxYmU0MzI2OWYyZGQzMWFjZDViNzMxNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizGlNKOWhaQRgi8SxeNjpZmzeDcD 6dX1pf/h01bFVlMpZIXTg17pu8FalL3nkcXctxHxGL2/pBp0O3vXenOxB/Ry/UI6 w++PxA9pcZXCyPyiYhZP3e2JlAhi3P7OazU/9ByTfJnWGDIxiDbrOd5TABtIj7HB nXljx6Kp2k4gWMSA6VEwJjFuEv/FXVDJQ0jjC1zfL5n57d7fKjjKOo6/OiPGpuPL yznEcRDguS7ByMt4PwFRZZwnfIxP9B2cx6o5oRj/PIv3gUVL/M/UZciS2c36Bdlv K+W1EJORIGzVO1LKvlbb99lkDKmjes3ZAkb/WvQbGX62+bC/WBRGY39EmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ01VUJ1VyTBvkMmny3TGs1bcxUjMB8GA1UdIwQY MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct ZjQ2MjI0YjBkMTYxLzEvblRWVlFuVlhKTUctUXlhZkxkTWF6VnR6RlNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubXkAwQC wiEoMA0EAgACMAcDBQAqCtWAMA0GCSqGSIb3DQEBCwUAA4IBAQBnKsowcqBOvqjL +NIZf6K14TEIy69Hauth1uP/KudDr8Atv5niaA8sNfd1lALTPTCP3W3byhb1fnYp NjVCn7Y2MnEvdDBldbUkx70zHNpI7Ibr+woRbQXpsFVAPzj6x3KkGS5HP3APcvRO hlVIZVR/rJHQkTenIZQ71K5WXgcbRpM+IgmVR0kIOKLOf/wodsWYI+9JlLIHJYVJ EHS/EsZpu1+6lRV4iWYuvuTPQVqqZx7BFP/Ysb3r77WUZCn12camuPyr0YhqTa7O 8nNwwCA40wxCLglhrUl70ZLk68xEUVLzt82WGAySZ8OPN9VwqtZYf1AWAeS0MqDd ONnb6PtE -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:33 2025 by rpki-client