This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ni-6spSM5tqhVpd7CHDDjBEaSEg.roa File: ni-6spSM5tqhVpd7CHDDjBEaSEg.roa (raw, json) Hash identifier: +vplWNgzIzmKdb1SyIbUSnitWbWB9YaWnv+Tux4ELBk= Subject key identifier: 9E:2F:BA:B2:94:8C:E6:DA:A1:56:97:7B:08:70:C3:8C:11:1A:48:48 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6B46AFA5FC76369BC1EADCF4F997 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ni-6spSM5tqhVpd7CHDDjBEaSEg.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214430 IP address blocks: 2a06:de02:20::/48 maxlen: 48 2a06:de02:21::/48 maxlen: 48 2a06:de02:22::/48 maxlen: 48 2a06:de02:23::/48 maxlen: 48 2a06:de02:24::/48 maxlen: 48 2a06:de02:25::/48 maxlen: 48 2a06:de02:26::/48 maxlen: 48 2a06:de02:27::/48 maxlen: 48 2a06:de02:28::/48 maxlen: 48 2a06:de02:29::/48 maxlen: 48 2a06:de02:2a::/48 maxlen: 48 2a06:de02:2b::/48 maxlen: 48 2a06:de02:2c::/48 maxlen: 48 2a06:de02:2d::/48 maxlen: 48 2a06:de02:2e::/48 maxlen: 48 2a06:de02:2f::/48 maxlen: 48 2a10:2f00:12c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6b:46:af:a5:fc:76:36:9b:c1:ea:dc:f4:f9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2fbab2948ce6daa156977b0870c38c111a4848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:e7:ae:6b:f9:27:40:c5:92:d8:d6:db:ab: 38:b6:b9:6e:fa:21:3b:9f:9a:1f:8a:7f:9a:74:7b: 0e:69:7d:29:12:7a:c9:0b:44:ed:8c:81:a4:85:dd: 2b:2a:2d:4a:f9:aa:cb:5b:0b:ca:7b:79:e5:e8:51: 6d:6e:97:4e:2f:49:cb:34:35:c7:69:1a:35:65:8d: 1f:45:bf:9d:14:9a:ab:7e:49:bc:8c:1f:3a:17:b6: 00:03:70:fb:4e:ef:23:8e:06:e5:1a:f4:94:84:dc: 10:9a:56:31:f7:d7:76:28:8b:5b:9d:db:bf:4d:7f: aa:1e:1a:f0:1b:7b:1c:f0:1b:a7:49:e1:0c:d2:e9: 10:cc:91:f8:60:42:4d:c8:33:b3:21:e2:ed:71:ca: 0a:75:b6:06:ec:5f:38:1d:65:4f:ed:ef:cf:32:69: 07:68:e7:4e:77:80:b2:e8:78:f9:42:04:7d:fb:39: 8d:b2:f4:bf:27:5e:c3:e7:b7:84:3b:13:03:af:9e: 6c:19:32:04:fa:ad:a4:16:f5:ba:fe:15:21:7c:2f: a3:c4:f1:94:fa:c7:70:ea:96:77:2b:81:30:f0:b7: e7:79:9e:5d:f0:a6:1a:1e:ab:4a:97:02:17:e0:a5: f4:b9:0b:00:6d:a7:82:f4:93:ca:b7:b5:c8:75:61: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:BA:B2:94:8C:E6:DA:A1:56:97:7B:08:70:C3:8C:11:1A:48:48 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ni-6spSM5tqhVpd7CHDDjBEaSEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de02:20::/44 2a10:2f00:12c::/48 Signature Algorithm: sha256WithRSAEncryption c8:47:d7:e3:a2:b6:fb:d9:a6:4f:58:c2:8c:a6:e0:78:f3:9d: 9c:aa:ad:db:f5:1f:bd:eb:35:fa:65:b7:1d:3d:ac:3f:ab:48: 2f:e8:c3:0b:fc:d0:8c:80:b5:a0:c5:b8:2b:7c:ec:b4:db:b7: d9:19:3b:b5:37:e7:62:29:a8:ed:fd:0c:4b:72:0e:f9:7e:22: 0e:91:d6:8c:85:97:c1:a4:26:53:ec:ce:69:13:f7:1e:fc:cb: 7a:a8:a9:48:1e:4b:1e:f2:5d:42:09:7d:92:d7:04:15:fd:3e: 21:60:ba:d5:94:85:89:05:93:4b:f9:0a:d9:ec:51:ef:6f:00: af:d8:a8:0a:ac:84:e9:24:ff:19:06:03:c9:77:a0:98:68:04: 68:f6:ed:ba:0c:ae:ce:95:5d:19:62:11:ee:9c:86:8a:fe:70: de:8c:9a:65:58:ad:5b:f4:98:53:7a:19:0a:e4:cb:78:a9:fd: 6d:aa:f6:3d:ec:79:a6:6b:9b:e4:d2:d1:82:69:7b:33:42:78: e7:73:da:4e:04:3c:5d:e2:c4:c8:09:33:4d:c3:77:87:ff:56: a1:fa:3b:2d:c6:52:21:5a:3e:59:88:5b:eb:4c:1b:33:c5:28: db:84:5d:f5:89:31:54:f9:12:15:4e:a4:79:87:1f:f5:db:07: a4:df:27:52 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XWtGr6X8djabwerc9PmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJmYmFiMjk0OGNlNmRhYTE1Njk3N2IwODcwYzM4YzExMWE0ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVznrmv5J0DFktjW26s4trlu+iE7 n5ofin+adHsOaX0pEnrJC0TtjIGkhd0rKi1K+arLWwvKe3nl6FFtbpdOL0nLNDXH aRo1ZY0fRb+dFJqrfkm8jB86F7YAA3D7Tu8jjgblGvSUhNwQmlYx99d2KItbndu/ TX+qHhrwG3sc8BunSeEM0ukQzJH4YEJNyDOzIeLtccoKdbYG7F84HWVP7e/PMmkH aOdOd4Cy6Hj5QgR9+zmNsvS/J17D57eEOxMDr55sGTIE+q2kFvW6/hUhfC+jxPGU +sdw6pZ3K4Ew8LfneZ5d8KYaHqtKlwIX4KX0uQsAbaeC9JPKt7XIdWH7uwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ4vurKUjObaoVaXewhww4wRGkhIMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbmktNnNwU001dHFoVnBkN0NIRERqQkVhU0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAgAg AwcAKhAvAAEsMA0GCSqGSIb3DQEBCwUAA4IBAQDIR9fjorb72aZPWMKMpuB4852c qq3b9R+96zX6ZbcdPaw/q0gv6MML/NCMgLWgxbgrfOy027fZGTu1N+diKajt/QxL cg75fiIOkdaMhZfBpCZT7M5pE/ce/Mt6qKlIHkse8l1CCX2S1wQV/T4hYLrVlIWJ BZNL+QrZ7FHvbwCv2KgKrITpJP8ZBgPJd6CYaARo9u26DK7OlV0ZYhHunIaK/nDe jJplWK1b9JhTehkK5Mt4qf1tqvY97Hmma5vk0tGCaXszQnjnc9pOBDxd4sTICTNN w3eH/1ah+jstxlIhWj5ZiFvrTBszxSjbhF31iTFU+RIVTqR5hx/12wek3ydS -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client