This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/nf0FQlz-riyLlGMxAPraGF20Wdc.roa File: nf0FQlz-riyLlGMxAPraGF20Wdc.roa (raw, json) Hash identifier: NBHokeUaEIht3H5bD8MsKVhV266hG6/CmlEn0lTi/SE= Subject key identifier: 9D:FD:05:42:5C:FE:AE:2C:8B:94:63:31:00:FA:DA:18:5D:B4:59:D7 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B26106F0BE09D15D06F378F74E9FA9F4C Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/nf0FQlz-riyLlGMxAPraGF20Wdc.roa Signing time: Tue 16 Dec 2025 07:29:29 +0000 ROA not before: Tue 16 Dec 2025 07:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2287 IP address blocks: 90.84.138.0/24 maxlen: 24 90.84.139.0/24 maxlen: 24 90.84.157.0/24 maxlen: 24 90.84.158.0/24 maxlen: 24 90.84.166.0/24 maxlen: 24 90.84.167.0/24 maxlen: 24 2a01:ceff::/48 maxlen: 48 2a01:ceff:1::/48 maxlen: 48 2a01:ceff:2::/48 maxlen: 48 2a01:ceff:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:10:6f:0b:e0:9d:15:d0:6f:37:8f:74:e9:fa:9f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Dec 16 07:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9dfd05425cfeae2c8b94633100fada185db459d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:bf:b5:54:b3:ad:10:dd:b1:c3:da:40:5e: ca:4f:84:17:bf:42:b0:a1:65:8f:29:bc:f6:a9:a5: a3:62:8b:c0:c6:69:b1:f4:29:6c:cf:cf:0d:4a:ab: c8:37:2c:ba:ec:e8:b6:f1:58:ae:b7:96:cc:07:58: b2:3f:8f:d2:eb:01:6c:29:47:59:55:75:f7:0f:4e: d3:d9:bf:3e:c4:57:d0:7a:72:a5:1a:61:62:cd:ba: 61:4f:81:f0:f4:f8:f6:88:36:09:fd:61:14:cb:18: 4b:d1:f7:a1:36:bb:fb:32:09:53:7c:d2:15:4b:ac: 34:17:5f:62:9e:d6:97:89:fe:d8:85:6e:d6:e7:62: b9:f4:83:de:0d:42:21:87:3a:fa:84:81:b9:9a:30: 6f:61:5b:07:3b:c3:ab:1a:75:72:d7:ee:d7:f8:76: 7b:8d:f4:5b:d3:14:bd:b5:44:72:ac:72:99:c0:51: 16:d8:2b:5c:c2:55:f2:bc:80:a8:da:f4:97:a0:3f: 43:72:1c:38:d2:45:37:da:b9:3a:0a:5e:ca:81:b7: 9a:62:b9:1b:3b:a7:5a:e7:7d:d2:6c:85:74:f8:ba: ca:2c:99:66:30:ab:ec:19:9f:76:71:ea:f1:3c:4b: 28:9c:bc:95:f9:c1:dd:cb:8c:d2:62:29:f7:b5:1e: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:05:42:5C:FE:AE:2C:8B:94:63:31:00:FA:DA:18:5D:B4:59:D7 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/nf0FQlz-riyLlGMxAPraGF20Wdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.138.0/23 90.84.157.0-90.84.158.255 90.84.166.0/23 IPv6: 2a01:ceff::/46 Signature Algorithm: sha256WithRSAEncryption 5f:aa:4e:8c:ef:fb:f4:4d:f0:ce:5b:0a:22:22:01:71:ac:f5: 90:e3:aa:01:3f:fe:53:a8:58:9d:2a:75:5d:79:8b:53:55:80: 72:f8:06:88:b7:5c:78:90:83:fb:58:e2:ee:66:31:0c:a2:0b: 1b:68:f5:a7:26:64:fd:bd:80:e9:da:ad:41:ce:1a:d7:2b:ea: 9f:24:d6:73:0e:ed:a6:68:20:22:af:14:34:0c:31:cd:1a:c6: 14:73:9f:d9:e6:48:3f:db:b3:b0:e8:ba:66:00:1e:30:94:c9: 1d:40:fe:18:cf:f1:22:bf:cf:1d:bb:a7:9c:15:d1:c7:17:bc: d0:3f:26:a5:9a:1e:27:8f:09:ff:5c:2d:40:ec:02:19:3e:ef: 95:3e:a1:92:b2:21:3b:64:be:42:1c:17:8b:26:03:fe:ae:76: b6:0d:96:c9:6f:e2:f6:94:8e:d0:e8:81:3f:b6:5a:ff:57:70: 4a:b3:ed:21:67:97:0e:72:5f:d7:f3:a1:1b:76:98:1c:59:ec: 03:66:dc:b9:2f:a2:9d:c5:c3:46:7b:d7:73:39:cc:66:5b:1b: f4:41:59:1a:dc:ae:bb:69:99:20:e5:1d:d7:ce:c5:a6:2b:ff: df:1a:23:b2:6e:5e:0f:84:ec:3a:87:db:63:cf:ad:58:e0:cd: 0d:90:1f:7f -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZsmEG8L4J0V0G83j3Tp+p9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjUxMjE2MDcyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZkMDU0MjVjZmVhZTJjOGI5NDYzMzEwMGZhZGExODVkYjQ1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4i/tVSzrRDdscPaQF7KT4QXv0Kw oWWPKbz2qaWjYovAxmmx9Clsz88NSqvINyy67Oi28Viut5bMB1iyP4/S6wFsKUdZ VXX3D07T2b8+xFfQenKlGmFizbphT4Hw9Pj2iDYJ/WEUyxhL0fehNrv7MglTfNIV S6w0F19intaXif7YhW7W52K59IPeDUIhhzr6hIG5mjBvYVsHO8OrGnVy1+7X+HZ7 jfRb0xS9tURyrHKZwFEW2CtcwlXyvICo2vSXoD9Dchw40kU32rk6Cl7KgbeaYrkb O6da533SbIV0+LrKLJlmMKvsGZ92cerxPEsonLyV+cHdy4zSYin3tR4LJQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFJ39BUJc/q4si5RjMQD62hhdtFnXMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvbmYwRlFsei1yaXlMbEdNeEFQcmFHRjIwV2RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQBWlSKMAwD BABaVJ0DBABaVJ4DBAFaVKYwDwQCAAIwCQMHAioBzv8AADANBgkqhkiG9w0BAQsF AAOCAQEAX6pOjO/79E3wzlsKIiIBcaz1kOOqAT/+U6hYnSp1XXmLU1WAcvgGiLdc eJCD+1ji7mYxDKILG2j1pyZk/b2A6dqtQc4a1yvqnyTWcw7tpmggIq8UNAwxzRrG FHOf2eZIP9uzsOi6ZgAeMJTJHUD+GM/xIr/PHbunnBXRxxe80D8mpZoeJ48J/1wt QOwCGT7vlT6hkrIhO2S+QhwXiyYD/q52tg2WyW/i9pSO0OiBP7Za/1dwSrPtIWeX DnJf1/OhG3aYHFnsA2bcuS+incXDRnvXcznMZlsb9EFZGtyuu2mZIOUd187Fpiv/ 3xojsm5eD4TsOofbY8+tWODNDZAffw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:51:35 2025 by rpki-client