This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ngXBDJqFRHqY02oCl22jHBT8QTU.roa File: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (raw, json) Hash identifier: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8= Subject key identifier: 9E:05:C1:0C:9A:85:44:7A:98:D3:6A:02:97:6D:A3:1C:14:FC:41:35 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F8487FD6334CCAC5285ACF46EC51869 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ngXBDJqFRHqY02oCl22jHBT8QTU.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198985 IP address blocks: 45.67.80.0/23 maxlen: 23 46.231.240.0/22 maxlen: 22 185.233.100.0/22 maxlen: 22 2a09:7340::/32 maxlen: 32 2a0c:e300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:87:fd:63:34:cc:ac:52:85:ac:f4:6e:c5:18:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e05c10c9a85447a98d36a02976da31c14fc4135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:87:1c:62:b0:ad:3e:10:8a:0c:ee:e5:77: a3:dd:b7:7b:1c:22:4f:8d:62:33:e7:4c:60:39:0b: 58:28:5a:a6:24:1c:7f:fa:86:58:18:da:61:d1:08: 2b:be:1c:b5:75:3c:cd:76:8d:2a:b4:34:f9:2f:72: 3d:22:d6:0a:03:ee:47:09:2c:16:59:6d:92:db:12: 80:e8:5f:55:e9:82:c9:68:38:76:7f:32:ee:1a:63: ff:8d:df:19:b6:b8:f9:29:05:b5:91:03:29:cc:2f: d6:e8:9b:af:ef:a5:13:b1:f8:d8:ad:bb:5c:6b:91: 66:14:89:98:f9:62:cf:d4:30:28:e9:b8:a7:2b:28: 13:35:6a:06:f2:84:63:6f:8f:dd:32:26:1f:30:15: 2d:64:fb:29:9a:22:4c:da:c5:e9:96:eb:4c:a5:be: 0f:50:8e:92:74:cf:89:07:7d:7f:3c:b7:ba:90:b5: 1f:20:35:cd:54:4a:52:93:58:79:41:37:5a:c1:35: 4e:23:bd:07:26:bf:34:84:7c:2a:3e:91:5f:2b:c9: 06:00:38:b3:b5:86:13:bd:9a:fa:09:20:fb:87:05: 20:4a:19:7b:9a:5a:94:7b:d8:44:e5:ef:b8:5a:19: 22:b9:aa:ea:24:5e:58:bb:e5:ad:7d:cc:61:10:de: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:C1:0C:9A:85:44:7A:98:D3:6A:02:97:6D:A3:1C:14:FC:41:35 X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/ngXBDJqFRHqY02oCl22jHBT8QTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.80.0/23 46.231.240.0/22 185.233.100.0/22 IPv6: 2a09:7340::/32 2a0c:e300::/29 Signature Algorithm: sha256WithRSAEncryption 1c:a2:e9:bb:e3:2e:9c:7c:c5:88:23:cb:f6:44:09:8c:0f:83: 68:49:d5:8e:f1:b1:e0:e3:2e:05:14:c3:de:d2:bb:74:72:8c: 59:61:bc:22:b4:c2:9c:67:67:d0:f7:60:5c:4d:22:ab:9b:96: 3f:a3:49:ab:a1:11:6e:39:b7:c6:8a:d7:c0:ea:c0:f2:fd:59: 01:be:d7:5b:11:25:e2:6a:48:9f:2f:1f:46:28:fd:90:13:fe: 91:c8:a5:a8:2f:6e:78:70:4c:95:08:21:44:aa:f1:8b:a9:7a: 92:d6:89:e4:b0:fa:d1:85:d7:8b:17:76:5f:d7:ed:24:1b:dc: 97:98:e6:7c:34:ba:b3:a5:82:56:3d:97:c7:8b:d8:ae:d3:79: 82:9d:bb:1c:80:2d:92:46:a8:62:31:f2:b7:f7:69:2b:84:7a: 42:81:8b:73:fc:de:92:4f:de:d5:a8:cd:bd:a6:41:11:0e:18: f4:fa:15:c3:87:fe:9c:e1:49:c1:dd:04:a7:9c:bc:a5:55:4f: b5:53:99:9c:91:ee:e8:03:52:70:dc:ee:0f:93:43:98:20:4a: 6f:72:2e:20:4c:9b:57:d2:0c:a2:49:16:66:65:9a:89:c2:7a: 22:8a:2b:83:37:f7:06:be:99:1d:df:32:a2:39:5d:da:89:fe: 88:7a:32:8b -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/hIf9YzTMrFKFrPRuxRhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTA1YzEwYzlhODU0NDdhOThkMzZhMDI5NzZkYTMxYzE0ZmM0MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GuHHGKwrT4Qigzu5Xej3bd7HCJP jWIz50xgOQtYKFqmJBx/+oZYGNph0Qgrvhy1dTzNdo0qtDT5L3I9ItYKA+5HCSwW WW2S2xKA6F9V6YLJaDh2fzLuGmP/jd8Ztrj5KQW1kQMpzC/W6Juv76UTsfjYrbtc a5FmFImY+WLP1DAo6binKygTNWoG8oRjb4/dMiYfMBUtZPspmiJM2sXplutMpb4P UI6SdM+JB31/PLe6kLUfIDXNVEpSk1h5QTdawTVOI70HJr80hHwqPpFfK8kGADiz tYYTvZr6CSD7hwUgShl7mlqUe9hE5e+4WhkiuarqJF5Yu+WtfcxhEN7sJQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJ4FwQyahUR6mNNqApdtoxwU/EE1MB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvbmdYQkRKcUZSSHFZMDJvQ2wyMmpIQlQ4UVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQBLUNQAwQC LufwAwQCuelkMBQEAgACMA4DBQAqCXNAAwUDKgzjADANBgkqhkiG9w0BAQsFAAOC AQEAHKLpu+MunHzFiCPL9kQJjA+DaEnVjvGx4OMuBRTD3tK7dHKMWWG8IrTCnGdn 0PdgXE0iq5uWP6NJq6ERbjm3xorXwOrA8v1ZAb7XWxEl4mpIny8fRij9kBP+kcil qC9ueHBMlQghRKrxi6l6ktaJ5LD60YXXixd2X9ftJBvcl5jmfDS6s6WCVj2Xx4vY rtN5gp27HIAtkkaoYjHyt/dpK4R6QoGLc/zekk/e1ajNvaZBEQ4Y9PoVw4f+nOFJ wd0Ep5y8pVVPtVOZnJHu6ANScNzuD5NDmCBKb3IuIEybV9IMokkWZmWaicJ6Ioor gzf3Br6ZHd8yojld2on+iHoyiw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:12 2026 by rpki-client