This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa File: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (raw, json) Hash identifier: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30= Subject key identifier: 35:9E:0A:53:B5:E3:39:39:49:7E:9C:59:11:E6:01:3A:A8:A8:70:B7 Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459 Certificate serial: 019B7C7FD22DCB2ED9B6186FE340283C0BC3 Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 91.229.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d2:2d:cb:2e:d9:b6:18:6f:e3:40:28:3c:0b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=359e0a53b5e33939497e9c5911e6013aa8a870b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:ba:64:ac:88:2b:65:9e:cb:e3:fe:0f:f4: ff:0a:33:e5:1b:c7:36:b2:d4:e3:c0:e9:cb:71:5b: 98:61:5e:8d:af:47:31:72:9d:ce:36:53:23:8d:cc: 4d:42:5e:99:d4:70:a3:e0:2b:d5:81:90:81:8b:46: 84:fd:63:b9:22:1f:dc:41:6c:79:36:d5:95:dd:43: ea:5f:20:d6:1f:33:9b:ef:98:cd:09:28:ba:8b:10: ce:ff:78:1d:28:c6:73:f4:f7:f3:54:23:d0:8c:fa: 2a:77:c8:39:c0:bf:31:1b:c5:99:27:c9:1c:b3:de: 9a:42:85:6e:58:f6:32:e8:cd:37:b3:b3:c6:b6:e1: d1:2a:ac:fe:70:25:b9:65:56:eb:b5:fd:ce:95:20: 39:28:2a:7f:75:10:0f:a2:78:a1:2c:de:94:76:f4: d6:fd:48:42:11:65:cf:d1:73:4b:3a:e3:4e:7d:5a: dc:fd:b3:8c:a0:9e:5f:c5:fb:3f:c6:02:a5:5a:43: 06:67:b8:27:3d:3e:1a:ce:1f:f7:9e:4f:58:39:8a: c4:44:bd:f1:15:61:06:f6:ae:75:35:cf:f2:79:7b: 5b:b7:c4:af:8b:cd:55:2b:c8:7d:7c:68:73:89:82: 08:dd:cd:6e:3a:75:a7:ca:6e:8c:14:f9:79:99:ee: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9E:0A:53:B5:E3:39:39:49:7E:9C:59:11:E6:01:3A:A8:A8:70:B7 X509v3 Authority Key Identifier: keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.58.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d7:54:0e:7c:64:8c:cf:2e:39:af:05:a8:bd:42:b6:39:50: 52:b0:15:ed:43:95:92:85:f1:46:e6:22:5a:fc:62:32:dd:7a: 58:7e:1c:d5:fd:db:f2:c0:c9:fb:76:13:88:f5:b3:ce:f5:28: 67:87:e8:3c:d5:d3:a9:79:9f:c3:50:aa:fa:34:81:0c:ea:cb: 4f:1f:17:b1:85:19:de:24:b9:7e:3d:bb:7c:0e:a7:fe:c1:c8: f9:ed:3b:e3:87:16:e3:89:46:2f:9a:39:60:c5:d6:bd:ba:6d: 50:c3:4c:c5:5f:00:c6:44:d8:a1:5c:39:28:aa:0c:c1:6f:65: 09:05:32:41:b4:78:5a:df:6d:c8:ce:fd:48:02:41:97:26:d8: 6c:e4:bb:65:a2:1f:9c:ca:0d:b6:eb:c4:0a:a6:5c:fb:03:2a: 95:67:03:e1:4d:34:7d:de:63:8b:0a:29:d2:32:7a:96:32:60: d8:2a:e0:0f:89:7a:1e:a0:31:1d:4b:2b:c6:9f:f2:fb:ba:fe: 20:f3:4c:44:29:d9:5b:c2:eb:ea:8f:99:e0:e6:5b:01:f0:76: e6:da:37:43:1e:10:2e:d9:93:69:ba:b3:e4:6f:3e:02:d8:f2: 83:c2:a0:40:e3:2a:45:2c:1a:f4:fb:88:77:d1:2d:e3:ea:03: c7:1b:c0:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f9Ityy7Zthhv40AoPAvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzMyODU4Y2NkYTk1ODZjNmQ5NjcxZTMxMGQ1MWMyODI2 OGM0NTkwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTllMGE1M2I1ZTMzOTM5NDk3ZTljNTkxMWU2MDEzYWE4YTg3MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J26ZKyIK2Wey+P+D/T/CjPlG8c2 stTjwOnLcVuYYV6Nr0cxcp3ONlMjjcxNQl6Z1HCj4CvVgZCBi0aE/WO5Ih/cQWx5 NtWV3UPqXyDWHzOb75jNCSi6ixDO/3gdKMZz9PfzVCPQjPoqd8g5wL8xG8WZJ8kc s96aQoVuWPYy6M03s7PGtuHRKqz+cCW5ZVbrtf3OlSA5KCp/dRAPonihLN6UdvTW /UhCEWXP0XNLOuNOfVrc/bOMoJ5fxfs/xgKlWkMGZ7gnPT4azh/3nk9YOYrERL3x FWEG9q51Nc/yeXtbt8Svi81VK8h9fGhziYII3c1uOnWnym6MFPl5me6EYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWeClO14zk5SX6cWRHmATqoqHC3MB8GA1UdIwQY MBaAFKzDKFjM2pWGxtlnHjENUcKCaMRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYt ZWRjNTQwNzJhZTg5LzEvTlo0S1U3WGpPVGxKZnB4WkVlWUJPcWlvY0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYtZWRjNTQwNzJhZTg5 LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+U6MA0G CSqGSIb3DQEBCwUAA4IBAQBt11QOfGSMzy45rwWovUK2OVBSsBXtQ5WShfFG5iJa /GIy3XpYfhzV/dvywMn7dhOI9bPO9Shnh+g81dOpeZ/DUKr6NIEM6stPHxexhRne JLl+Pbt8Dqf+wcj57TvjhxbjiUYvmjlgxda9um1Qw0zFXwDGRNihXDkoqgzBb2UJ BTJBtHha323Izv1IAkGXJths5Ltloh+cyg2268QKplz7AyqVZwPhTTR93mOLCinS MnqWMmDYKuAPiXoeoDEdSyvGn/L7uv4g80xEKdlbwuvqj5ng5lsB8Hbm2jdDHhAu 2ZNpurPkbz4C2PKDwqBA4ypFLBr0+4h30S3j6gPHG8A1 -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:39 2026 by rpki-client