This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa File: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (raw, json) Hash identifier: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4= Subject key identifier: 35:24:B4:81:4F:71:B1:07:0E:64:42:1F:2A:4A:4B:B2:36:6E:34:1D Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F665B4483086749173BE1184BF11 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57782 IP address blocks: 79.110.168.0/23 maxlen: 24 139.28.206.0/24 maxlen: 24 185.202.104.0/24 maxlen: 24 2a06:1e83:cafe::/48 maxlen: 48 2a06:1e83:caff::/48 maxlen: 48 2a06:1e85::/32 maxlen: 48 2a0d:1a40::/29 maxlen: 48 2a0d:1a40:5500::/48 maxlen: 48 2a0d:1a45::/32 maxlen: 48 2a0d:9cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f6:65:b4:48:30:86:74:91:73:be:11:84:bf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3524b4814f71b1070e64421f2a4a4bb2366e341d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:b5:f1:2c:0d:c1:5b:94:5c:14:9c:a6:fa: b0:bc:5f:01:3d:46:dd:ff:97:2d:3f:b4:6e:1a:cb: ed:21:1f:a0:3b:32:d5:b0:68:a2:1d:8e:7e:a9:0a: c8:31:c2:48:a2:f3:14:9b:84:44:39:47:71:e9:45: e8:7c:d2:ec:1e:13:37:10:49:7e:97:b1:2a:3f:5f: ca:23:3a:0e:5e:61:5d:0e:f6:b1:d8:89:f9:44:ac: b4:81:a7:d4:7a:86:cf:f6:a3:06:90:1e:2a:23:29: b4:7e:91:76:d3:d5:bc:c4:f7:c2:04:ac:e0:85:d6: ce:54:4a:73:07:12:02:ee:24:b5:36:9f:1b:bb:8d: 39:cf:d3:71:0f:bd:2f:d5:03:85:6f:f6:f7:8b:e5: 5c:2e:5f:2e:76:0c:0e:09:a5:fc:66:13:96:87:f4: cf:c4:1c:36:d9:25:5c:13:93:85:70:34:31:61:dd: 3e:c1:14:55:b1:78:9b:c9:a6:81:16:ac:0e:8e:67: 9d:d4:29:8f:be:21:52:45:e6:c7:18:54:85:b4:1c: 81:2c:7c:c6:76:a0:8b:4d:4e:74:04:d6:d7:19:a5: 6d:bb:a2:7c:eb:65:ac:34:30:a6:7a:a2:47:f7:d3: ee:9a:96:3d:c4:2c:47:b6:01:d0:ca:60:a2:2d:90: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:B4:81:4F:71:B1:07:0E:64:42:1F:2A:4A:4B:B2:36:6E:34:1D X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.168.0/23 139.28.206.0/24 185.202.104.0/24 IPv6: 2a06:1e83:cafe::/47 2a06:1e85::/32 2a0d:1a40::/29 2a0d:9cc0::/29 Signature Algorithm: sha256WithRSAEncryption 91:11:aa:f4:96:0f:8e:c8:8a:6a:cf:fa:1a:97:ca:00:b2:f8: 16:ca:bf:00:d4:b1:eb:bf:7b:c6:3e:59:1d:b5:a6:7c:04:89: 90:78:2c:ae:87:ed:f8:a0:73:bd:ee:6e:7c:80:70:65:b5:fc: e9:df:f8:c9:e5:20:dd:0f:58:4d:23:bc:30:9f:f4:ef:4b:7a: 47:a6:2f:b8:4a:cb:60:6f:d8:3c:7e:05:25:4a:20:b4:35:97: 60:4c:dc:86:2f:3f:0b:ea:12:2e:e4:62:96:0a:d4:cd:a9:31: 03:63:8b:d1:e9:cd:9b:93:87:b6:d1:6a:da:22:3e:5f:20:03: 96:d6:b2:a7:7d:47:67:d0:22:7c:63:1a:27:66:33:1c:83:66: 59:e6:41:e8:14:8e:bd:7a:8a:99:75:53:75:06:f9:35:e1:dc: bc:46:4a:d4:f0:4e:95:df:d1:a0:07:6e:2f:f9:bd:0b:2a:05: 8b:c5:1d:1b:fc:52:22:02:03:d7:28:30:1a:e6:81:78:e5:a1: e0:62:b5:e8:65:9a:68:e1:20:9f:29:66:ee:cf:b7:ab:ff:45: f2:27:26:a1:c1:35:7e:07:6b:d5:1b:19:20:a9:04:ba:a0:6c: 01:2d:9a:8b:92:cd:87:ee:73:e8:30:b7:bd:10:61:3e:ce:20: cf:83:89:42 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt8EvZltEgwhnSRc74RhL8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTI0YjQ4MTRmNzFiMTA3MGU2NDQyMWYyYTRhNGJiMjM2NmUzNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoe18SwNwVuUXBScpvqwvF8BPUbd /5ctP7RuGsvtIR+gOzLVsGiiHY5+qQrIMcJIovMUm4REOUdx6UXofNLsHhM3EEl+ l7EqP1/KIzoOXmFdDvax2In5RKy0gafUeobP9qMGkB4qIym0fpF209W8xPfCBKzg hdbOVEpzBxIC7iS1Np8bu405z9NxD70v1QOFb/b3i+VcLl8udgwOCaX8ZhOWh/TP xBw22SVcE5OFcDQxYd0+wRRVsXibyaaBFqwOjmed1CmPviFSRebHGFSFtByBLHzG dqCLTU50BNbXGaVtu6J862WsNDCmeqJH99PumpY9xCxHtgHQymCiLZB5pQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFDUktIFPcbEHDmRCHypKS7I2bjQdMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvTlNTMGdVOXhzUWNPWkVJZktrcExzalp1TkIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAYBAIAATASAwQBT26oAwQA ixzOAwQAucpoMCQEAgACMB4DBwEqBh6Dyv4DBQAqBh6FAwUDKg0aQAMFAyoNnMAw DQYJKoZIhvcNAQELBQADggEBAJERqvSWD47IimrP+hqXygCy+BbKvwDUseu/e8Y+ WR21pnwEiZB4LK6H7figc73ubnyAcGW1/Onf+MnlIN0PWE0jvDCf9O9LekemL7hK y2Bv2Dx+BSVKILQ1l2BM3IYvPwvqEi7kYpYK1M2pMQNji9HpzZuTh7bRatoiPl8g A5bWsqd9R2fQInxjGidmMxyDZlnmQegUjr16ipl1U3UG+TXh3LxGStTwTpXf0aAH bi/5vQsqBYvFHRv8UiICA9coMBrmgXjloeBitehlmmjhIJ8pZu7Pt6v/RfInJqHB NX4Ha9UbGSCpBLqgbAEtmouSzYfuc+gwt70QYT7OIM+DiUI= -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:10 2026 by rpki-client