This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NxvpMC3lblglKzeF_lvEXTsAm0M.roa File: NxvpMC3lblglKzeF_lvEXTsAm0M.roa (raw, json) Hash identifier: h5SbOWhVOoNUHBZ1v4cWXnobus6Ezr2RSH0NoeXD8Eg= Subject key identifier: 37:1B:E9:30:2D:E5:6E:58:25:2B:37:85:FE:5B:C4:5D:3B:00:9B:43 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B79EBB181936B6A4EE262000043661B08 Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NxvpMC3lblglKzeF_lvEXTsAm0M.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8437 IP address blocks: 46.57.0.0/17 maxlen: 17 46.57.72.0/22 maxlen: 22 46.57.80.0/21 maxlen: 21 46.57.88.0/21 maxlen: 21 46.57.96.0/21 maxlen: 21 46.57.104.0/22 maxlen: 22 46.57.112.0/21 maxlen: 21 46.57.120.0/22 maxlen: 22 46.57.124.0/22 maxlen: 22 62.116.0.0/19 maxlen: 19 62.116.64.0/18 maxlen: 18 62.218.0.0/16 maxlen: 16 62.218.4.0/24 maxlen: 24 62.218.52.0/24 maxlen: 24 62.218.100.0/24 maxlen: 24 62.218.164.0/24 maxlen: 24 62.218.165.0/24 maxlen: 24 62.218.168.0/24 maxlen: 24 62.218.169.0/24 maxlen: 24 62.218.174.0/24 maxlen: 24 62.218.175.0/24 maxlen: 24 62.218.205.0/24 maxlen: 24 77.118.0.0/16 maxlen: 16 77.118.14.0/24 maxlen: 24 77.118.17.0/24 maxlen: 24 77.118.32.0/21 maxlen: 21 77.118.48.0/21 maxlen: 21 77.118.56.0/21 maxlen: 21 77.118.104.0/22 maxlen: 22 77.118.108.0/22 maxlen: 22 77.118.112.0/20 maxlen: 20 77.118.128.0/21 maxlen: 21 77.118.136.0/21 maxlen: 21 77.118.160.0/20 maxlen: 20 77.118.176.0/20 maxlen: 20 77.118.192.0/20 maxlen: 20 77.118.208.0/20 maxlen: 20 77.118.224.0/21 maxlen: 21 77.118.232.0/21 maxlen: 21 77.118.240.0/20 maxlen: 20 77.119.32.0/19 maxlen: 19 77.119.64.0/18 maxlen: 18 77.119.80.0/21 maxlen: 21 77.119.88.0/21 maxlen: 21 77.119.96.0/22 maxlen: 22 77.119.112.0/22 maxlen: 22 78.142.128.0/18 maxlen: 18 81.189.0.0/16 maxlen: 16 81.189.212.0/22 maxlen: 22 81.189.212.0/24 maxlen: 24 81.189.213.0/24 maxlen: 24 81.189.214.0/24 maxlen: 24 81.189.215.0/24 maxlen: 24 86.59.0.0/17 maxlen: 17 91.186.128.0/19 maxlen: 19 178.114.0.0/16 maxlen: 16 178.114.92.0/22 maxlen: 22 178.114.96.0/20 maxlen: 20 178.114.112.0/20 maxlen: 20 178.114.128.0/21 maxlen: 21 178.114.144.0/21 maxlen: 21 178.114.152.0/21 maxlen: 21 178.114.160.0/20 maxlen: 20 178.114.176.0/20 maxlen: 20 178.114.192.0/21 maxlen: 21 178.114.208.0/21 maxlen: 21 178.114.216.0/21 maxlen: 21 178.114.224.0/20 maxlen: 20 178.114.240.0/20 maxlen: 20 178.115.96.0/19 maxlen: 19 178.115.96.0/24 maxlen: 24 178.115.98.0/24 maxlen: 24 188.118.192.0/18 maxlen: 18 195.70.224.0/19 maxlen: 19 195.96.0.0/19 maxlen: 19 195.248.32.0/19 maxlen: 19 212.27.64.0/18 maxlen: 18 212.152.128.0/17 maxlen: 17 213.90.0.0/17 maxlen: 17 213.129.224.0/19 maxlen: 19 213.235.192.0/18 maxlen: 18 213.235.196.0/24 maxlen: 24 213.235.234.0/24 maxlen: 24 2001:858::/32 maxlen: 32 2001:858:40::/45 maxlen: 45 2001:938::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b1:81:93:6b:6a:4e:e2:62:00:00:43:66:1b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371be9302de56e58252b3785fe5bc45d3b009b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:eb:37:86:29:6f:7a:db:fe:ea:ab:26:eb: c8:0b:53:09:2e:94:06:56:90:f3:d9:8a:9b:f4:af: 02:0f:4d:d7:70:6b:c1:5f:95:dd:63:6a:b4:3b:27: 24:9d:8a:74:bf:86:6c:5e:67:e8:06:fc:7b:4d:1a: ab:81:d1:0c:5b:14:49:29:65:c2:e7:6e:f8:dd:03: 1c:d3:b9:37:c2:ab:cf:92:ff:ba:b8:3a:d3:56:9e: 88:fc:70:88:ce:a5:0c:fe:32:2e:07:fd:66:44:a4: 5e:8e:33:12:d9:0f:ed:3b:70:c2:3d:13:ab:72:9d: eb:28:94:58:46:9a:25:f9:07:ea:f3:a9:e2:0f:1f: 60:8e:e0:b0:98:9f:7b:52:73:bf:ea:66:fa:d5:c3: 36:1b:b7:65:e5:74:13:ca:20:1e:6e:7f:e6:fd:a0: 36:00:e1:57:ed:f1:83:da:73:7b:dd:9a:82:7d:22: cc:0e:b3:a6:f4:e0:d3:f8:02:6c:99:32:c9:2a:f7: 0d:28:dc:54:95:be:8c:03:3e:69:06:bf:cd:78:56: e4:52:32:f1:77:e5:4f:82:57:21:0f:6d:3a:9c:69: 3c:9f:ea:09:62:98:02:3c:89:79:90:a1:0c:ea:33: f6:2f:9f:7a:c8:0c:55:41:09:c5:b6:91:b4:cb:f8: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:E9:30:2D:E5:6E:58:25:2B:37:85:FE:5B:C4:5D:3B:00:9B:43 X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/NxvpMC3lblglKzeF_lvEXTsAm0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.0.0/17 62.116.0.0/19 62.116.64.0/18 62.218.0.0/16 77.118.0.0/16 77.119.32.0-77.119.127.255 78.142.128.0/18 81.189.0.0/16 86.59.0.0/17 91.186.128.0/19 178.114.0.0/16 178.115.96.0/19 188.118.192.0/18 195.70.224.0/19 195.96.0.0/19 195.248.32.0/19 212.27.64.0/18 212.152.128.0/17 213.90.0.0/17 213.129.224.0/19 213.235.192.0/18 IPv6: 2001:858::/32 2001:938::/32 Signature Algorithm: sha256WithRSAEncryption 53:40:5c:c6:ee:3b:16:2b:1f:b8:dd:03:f4:a9:16:7b:fd:13: db:ff:99:fc:ca:02:42:6d:e1:41:22:ac:f9:5f:9e:88:91:4f: 8e:39:4c:84:a3:b8:ad:65:ae:3b:c8:0f:02:0e:2c:e6:10:2c: 1f:9f:8b:25:96:05:c8:cb:ed:d7:69:c8:7c:fa:85:84:e0:4a: 0f:17:12:58:39:2b:a5:86:8a:74:b9:d7:7b:ee:1b:e0:c7:88: 4a:05:d9:b7:83:9a:9d:e9:d2:2f:13:6b:d6:bc:dc:10:69:59: 68:d3:3e:19:02:ce:c4:f2:32:8c:7e:88:1a:62:49:a8:b5:78: bf:ff:1a:ca:a5:fc:d4:9f:1b:bf:94:44:cd:ac:34:fb:be:d4: f6:fc:f9:70:b6:10:9c:2f:ca:b0:af:d1:78:1b:b1:80:2c:cb: fb:89:b0:98:72:44:fb:05:27:4e:8c:11:64:ac:a1:c7:43:60: f5:48:56:4f:33:46:b0:ca:2a:82:99:00:44:55:eb:21:20:a0: 4e:ae:f3:a8:35:2b:33:8c:3f:bc:bf:34:9a:5a:83:de:d5:60: 3d:bc:7b:0e:20:6e:67:31:07:75:d5:ea:e5:4a:12:4a:f5:bd: f7:05:70:b4:2a:1e:30:93:f7:fd:0a:42:12:f5:00:6a:70:77: 9d:fd:a9:fe -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt567GBk2tqTuJiAABDZhsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFiZTkzMDJkZTU2ZTU4MjUyYjM3ODVmZTViYzQ1ZDNiMDA5YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHfrN4Ypb3rb/uqrJuvIC1MJLpQG VpDz2Yqb9K8CD03XcGvBX5XdY2q0OycknYp0v4ZsXmfoBvx7TRqrgdEMWxRJKWXC 52743QMc07k3wqvPkv+6uDrTVp6I/HCIzqUM/jIuB/1mRKRejjMS2Q/tO3DCPROr cp3rKJRYRpol+Qfq86niDx9gjuCwmJ97UnO/6mb61cM2G7dl5XQTyiAebn/m/aA2 AOFX7fGD2nN73ZqCfSLMDrOm9ODT+AJsmTLJKvcNKNxUlb6MAz5pBr/NeFbkUjLx d+VPglchD206nGk8n+oJYpgCPIl5kKEM6jP2L596yAxVQQnFtpG0y/hRcwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDcb6TAt5W5YJSs3hf5bxF07AJtDMB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvTnh2cE1DM2xibGdsS3plRl9sdkVYVHNBbTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBiQQCAAEwgYIDBAcu OQADBAU+dAADBAY+dEADAwA+2gMDAE12MAwDBAVNdyADBAdNdwADBAZOjoADAwBR vQMEB1Y7AAMEBVu6gAMDALJyAwQFsnNgAwQGvHbAAwQFw0bgAwQFw2AAAwQFw/gg AwQG1BtAAwQH1JiAAwQH1VoAAwQF1YHgAwQG1evAMBQEAgACMA4DBQAgAQhYAwUA IAEJODANBgkqhkiG9w0BAQsFAAOCAQEAU0Bcxu47FisfuN0D9KkWe/0T2/+Z/MoC Qm3hQSKs+V+eiJFPjjlMhKO4rWWuO8gPAg4s5hAsH5+LJZYFyMvt12nIfPqFhOBK DxcSWDkrpYaKdLnXe+4b4MeISgXZt4OanenSLxNr1rzcEGlZaNM+GQLOxPIyjH6I GmJJqLV4v/8ayqX81J8bv5REzaw0+77U9vz5cLYQnC/KsK/ReBuxgCzL+4mwmHJE +wUnTowRZKyhx0Ng9UhWTzNGsMoqgpkARFXrISCgTq7zqDUrM4w/vL80mlqD3tVg Pbx7DiBuZzEHddXq5UoSSvW99wVwtCoeMJP3/QpCEvUAanB3nf2p/g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:22 2026 by rpki-client