This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nHSV6jCrlItoU6f-zQHQjpVHfO4.roa File: nHSV6jCrlItoU6f-zQHQjpVHfO4.roa (raw, json) Hash identifier: 3QmkwPkxgJu6Tcc0YsHhnz3JYaB+OxBr2xp2NJthUfU= Subject key identifier: 9C:74:95:EA:30:AB:94:8B:68:53:A7:FE:CD:01:D0:8E:95:47:7C:EE Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3439C18585201920AD5A0EF992EDB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nHSV6jCrlItoU6f-zQHQjpVHfO4.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213613 IP address blocks: 91.92.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:9c:18:58:52:01:92:0a:d5:a0:ef:99:2e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c7495ea30ab948b6853a7fecd01d08e95477cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:8f:c6:60:6c:f0:35:54:b7:41:e2:05:e9: f3:91:fb:75:21:de:fe:1e:a9:1a:89:fd:c1:13:2e: e3:56:e2:5c:f5:8c:00:54:b3:d1:5b:5b:c8:ac:8e: 2b:85:90:64:c2:e6:59:b6:a4:fe:9e:b9:ca:79:22: 8b:0f:f3:79:c5:f4:f7:92:69:e6:38:44:2f:88:77: 50:bc:4d:b2:d8:21:8f:95:08:ea:ee:02:c1:ee:53: 76:60:2a:5b:50:ca:4a:5d:d8:f8:73:b2:93:d8:d5: 6e:4e:2a:95:5a:cc:3f:d0:57:3e:39:88:c2:5d:a4: 55:3f:f5:cb:b4:cc:86:91:ed:c9:fd:7f:41:5b:f8: 4a:0f:28:89:9b:9a:de:e0:5e:a6:0b:92:09:35:e1: 0c:07:84:cf:a7:01:e5:cd:82:ce:fe:6c:9e:91:7e: 65:36:50:be:60:e7:a3:55:f5:0e:15:b1:80:fe:76: 81:96:ec:08:26:ce:60:e3:c4:c3:bb:31:f1:d7:5d: 70:6f:31:08:03:38:19:0a:2e:eb:72:d3:14:76:7e: f2:c8:48:5a:d5:6f:dd:56:35:2d:92:c6:4d:7e:4f: d1:bf:3e:0c:6f:65:8f:24:48:5b:e5:9a:df:af:ec: f7:2a:01:22:37:a8:33:e1:c0:45:ce:60:ee:48:06: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:74:95:EA:30:AB:94:8B:68:53:A7:FE:CD:01:D0:8E:95:47:7C:EE X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nHSV6jCrlItoU6f-zQHQjpVHfO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.16.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e7:6a:28:e3:96:13:b5:85:f7:09:dc:1e:3a:8d:18:74:1d: 67:70:26:5d:c3:73:b6:e6:a9:f4:9c:e8:c6:3c:65:08:30:05: 71:e3:a2:62:25:64:06:29:11:f1:6d:6b:2f:49:1b:be:27:66: 5a:7d:85:d6:71:37:f9:4c:45:4d:12:f2:08:a0:0f:3f:b0:a1: 92:64:25:42:41:ba:fa:ce:b2:12:fd:45:14:26:b5:fb:de:b4: c9:67:91:1e:5f:99:a5:fb:07:c5:8c:89:65:43:3a:d1:df:54: d6:a8:27:6f:12:90:a5:02:ab:f1:02:fa:18:86:5d:01:88:c7: 2d:bc:6a:f3:60:7f:81:0d:cf:16:e0:78:f9:7c:b4:71:fa:06: 23:3b:5a:97:ff:13:65:29:e0:bb:62:41:7c:7c:6c:3f:94:4a: 77:6f:a5:91:cf:9b:f8:53:10:4e:45:fd:f4:71:a5:43:80:48: e1:47:4f:91:33:12:f8:88:45:46:fa:bc:98:e0:a6:24:28:aa: 86:58:fe:b8:f8:2e:27:28:fe:d2:d4:7d:a2:d4:17:4a:1c:7f: c8:42:eb:13:b8:69:c5:e7:a3:6f:0a:d0:7b:9d:55:9c:76:80: 2f:03:55:96:bf:49:68:97:04:48:bb:83:af:1f:64:8d:e6:8d: a0:32:fa:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0OcGFhSAZIK1aDvmS7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzc0OTVlYTMwYWI5NDhiNjg1M2E3ZmVjZDAxZDA4ZTk1NDc3Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucePxmBs8DVUt0HiBenzkft1Id7+ Hqkaif3BEy7jVuJc9YwAVLPRW1vIrI4rhZBkwuZZtqT+nrnKeSKLD/N5xfT3kmnm OEQviHdQvE2y2CGPlQjq7gLB7lN2YCpbUMpKXdj4c7KT2NVuTiqVWsw/0Fc+OYjC XaRVP/XLtMyGke3J/X9BW/hKDyiJm5re4F6mC5IJNeEMB4TPpwHlzYLO/myekX5l NlC+YOejVfUOFbGA/naBluwIJs5g48TDuzHx111wbzEIAzgZCi7rctMUdn7yyEha 1W/dVjUtksZNfk/Rvz4Mb2WPJEhb5Zrfr+z3KgEiN6gz4cBFzmDuSAa0tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJx0leowq5SLaFOn/s0B0I6VR3zuMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbkhTVjZqQ3JsSXRvVTZmLXpRSFFqcFZIZk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1wQMA0G CSqGSIb3DQEBCwUAA4IBAQAy52oo45YTtYX3CdweOo0YdB1ncCZdw3O25qn0nOjG PGUIMAVx46JiJWQGKRHxbWsvSRu+J2ZafYXWcTf5TEVNEvIIoA8/sKGSZCVCQbr6 zrIS/UUUJrX73rTJZ5EeX5ml+wfFjIllQzrR31TWqCdvEpClAqvxAvoYhl0BiMct vGrzYH+BDc8W4Hj5fLRx+gYjO1qX/xNlKeC7YkF8fGw/lEp3b6WRz5v4UxBORf30 caVDgEjhR0+RMxL4iEVG+ryY4KYkKKqGWP64+C4nKP7S1H2i1BdKHH/IQusTuGnF 56NvCtB7nVWcdoAvA1WWv0lolwRIu4OvH2SN5o2gMvrc -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client