This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/niXIs67HnTRfFLGC1HZAY3uj8cU.roa File: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (raw, json) Hash identifier: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg= Subject key identifier: 9E:25:C8:B3:AE:C7:9D:34:5F:14:B1:82:D4:76:40:63:7B:A3:F1:C5 Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Certificate serial: 019B77C6A87498CAC3B86AABDD4833F98C4C Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/niXIs67HnTRfFLGC1HZAY3uj8cU.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62121 IP address blocks: 193.200.90.0/23 maxlen: 23 2001:67c:564::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a8:74:98:ca:c3:b8:6a:ab:dd:48:33:f9:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e25c8b3aec79d345f14b182d47640637ba3f1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:82:e7:6c:75:12:0d:c8:2a:78:a1:70:74: 5e:92:6a:1a:ce:31:36:92:c3:bc:27:d6:fa:c7:0f: 93:07:58:7d:be:32:62:98:b1:cf:5f:67:19:82:56: 7a:3f:2f:f0:09:30:60:04:f9:1c:20:24:0b:1d:97: 35:4d:85:bf:80:f7:61:e9:65:0d:53:a1:97:c7:e0: 0e:0a:c7:bc:e1:99:e6:d1:d3:ec:c8:b7:06:bf:4f: 8b:9e:da:ec:53:08:29:e4:b0:8d:fe:b4:31:b6:59: 07:dd:8e:df:45:1b:64:df:57:93:e4:c8:e6:31:f5: 48:dc:6b:90:54:ad:de:17:06:13:01:3b:1b:48:8c: 75:fd:ff:c7:e8:8c:8f:62:a8:bb:9e:ef:67:db:3d: c1:28:97:ed:52:f0:44:70:cf:8f:90:91:dc:1d:da: 04:e5:e1:5b:90:da:64:dd:5f:ed:29:d4:b1:cd:fe: fb:6a:ae:24:97:d5:2b:67:ab:4d:fa:18:c9:9f:e7: 77:34:c7:4a:f1:8a:4d:1b:8c:4a:82:87:4e:e1:32: 63:58:e2:51:8b:4c:3f:32:56:ca:4d:52:b2:b9:a8: 0d:5c:ad:94:87:32:dc:1c:a4:e4:27:89:1f:43:2f: f4:5f:53:f8:07:c4:3e:ac:5f:19:af:0d:38:d4:e0: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:C8:B3:AE:C7:9D:34:5F:14:B1:82:D4:76:40:63:7B:A3:F1:C5 X509v3 Authority Key Identifier: keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/niXIs67HnTRfFLGC1HZAY3uj8cU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.90.0/23 IPv6: 2001:67c:564::/48 Signature Algorithm: sha256WithRSAEncryption 60:17:47:42:30:cf:10:4d:7d:c1:a6:d8:52:27:7d:75:6f:18: 0d:77:8d:42:e9:02:c2:25:91:9f:4e:e5:6a:23:31:f3:20:7c: 7a:0c:dd:98:3d:66:18:37:e1:c7:c6:a6:40:2d:25:fc:b1:fa: 36:03:b3:fe:e1:84:68:ec:60:62:89:50:bb:2c:cd:ef:d4:5f: 83:8f:a7:42:42:2f:21:ac:65:de:40:06:d1:ab:88:65:20:dc: 94:92:87:96:3c:8a:7c:4f:89:b0:00:aa:4e:ab:9a:60:35:74: 1d:ed:30:f1:b1:6c:be:d9:f7:65:34:6f:a5:d3:b9:8c:34:5c: 1e:20:97:5d:a1:80:6f:83:49:0f:1f:0f:1f:33:88:a5:57:28: e5:ad:67:d5:fd:cf:bf:0e:04:7b:5f:a2:45:7a:22:49:05:f0: 0a:c7:70:5c:65:08:dd:47:80:46:a2:22:57:4c:e3:09:d4:31: 87:cf:90:ad:31:9a:38:8d:8c:96:78:16:6e:a7:b9:67:f4:ad: 6c:c6:09:ea:14:95:8a:02:ed:4d:4d:3b:1d:75:92:de:ed:1f: 9e:6c:68:f9:f7:bd:1e:bf:87:a8:e0:d0:ae:4d:fe:a5:60:91: f6:c4:38:46:7c:50:96:08:b6:5a:8b:13:e2:ab:c0:74:a3:81: d1:dc:3e:b6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xqh0mMrDuGqr3Ugz+YxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz ODM5YjIwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTI1YzhiM2FlYzc5ZDM0NWYxNGIxODJkNDc2NDA2MzdiYTNmMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iuC52x1Eg3IKnihcHRekmoazjE2 ksO8J9b6xw+TB1h9vjJimLHPX2cZglZ6Py/wCTBgBPkcICQLHZc1TYW/gPdh6WUN U6GXx+AOCse84Znm0dPsyLcGv0+LntrsUwgp5LCN/rQxtlkH3Y7fRRtk31eT5Mjm MfVI3GuQVK3eFwYTATsbSIx1/f/H6IyPYqi7nu9n2z3BKJftUvBEcM+PkJHcHdoE 5eFbkNpk3V/tKdSxzf77aq4kl9UrZ6tN+hjJn+d3NMdK8YpNG4xKgodO4TJjWOJR i0w/MlbKTVKyuagNXK2UhzLcHKTkJ4kfQy/0X1P4B8Q+rF8Zrw041OCLHwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ4lyLOux500XxSxgtR2QGN7o/HFMB8GA1UdIwQY MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt YTk1ZmUzMTAyNjQ1LzEvbmlYSXM2N0huVFJmRkxHQzFIWkFZM3VqOGNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1 LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwchaMA8E AgACMAkDBwAgAQZ8BWQwDQYJKoZIhvcNAQELBQADggEBAGAXR0IwzxBNfcGm2FIn fXVvGA13jULpAsIlkZ9O5WojMfMgfHoM3Zg9Zhg34cfGpkAtJfyx+jYDs/7hhGjs YGKJULssze/UX4OPp0JCLyGsZd5ABtGriGUg3JSSh5Y8inxPibAAqk6rmmA1dB3t MPGxbL7Z92U0b6XTuYw0XB4gl12hgG+DSQ8fDx8ziKVXKOWtZ9X9z78OBHtfokV6 IkkF8ArHcFxlCN1HgEaiIldM4wnUMYfPkK0xmjiNjJZ4Fm6nuWf0rWzGCeoUlYoC 7U1NOx11kt7tH55saPn3vR6/h6jg0K5N/qVgkfbEOEZ8UJYItlqLE+KrwHSjgdHc PrY= -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:42 2026 by rpki-client