This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/nRRzwVPO_lwp_dDipainvbLpMZ0.roa File: nRRzwVPO_lwp_dDipainvbLpMZ0.roa (raw, json) Hash identifier: XL1wzfMszjSpjfH9Vrf0CxfKPPrO6e01hughMU6CA/Y= Subject key identifier: 9D:14:73:C1:53:CE:FE:5C:29:FD:D0:E2:A5:A8:A7:BD:B2:E9:31:9D Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182 Certificate serial: 019B7C1362AB31F56315A10B6D8E8CD46341 Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/nRRzwVPO_lwp_dDipainvbLpMZ0.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49883 IP address blocks: 91.213.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:ab:31:f5:63:15:a1:0b:6d:8e:8c:d4:63:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d1473c153cefe5c29fdd0e2a5a8a7bdb2e9319d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:a4:2c:4b:40:f4:5d:f2:ea:78:8d:6f:eb: e2:70:bb:de:d9:3e:39:c2:8a:ba:cf:8d:90:e0:30: 21:12:fe:25:ba:29:25:0b:a3:c2:6b:44:c7:31:e4: 63:f9:1d:46:00:02:8b:50:8a:23:f7:d5:1c:75:84: b3:1b:59:8e:bb:2a:a3:ef:6b:0b:98:98:69:b4:ec: 01:66:fd:ef:be:62:a7:42:5a:3b:ef:93:fc:81:94: 56:d0:ce:a9:be:99:b4:4d:38:d1:8f:a4:c9:76:35: b0:f7:7b:0d:d1:e3:ed:f0:73:d5:09:64:09:3e:f2: 2f:a2:2a:50:68:e1:a6:f1:34:c9:82:ea:ed:be:4e: 3b:ac:32:3d:03:1f:3e:a8:cb:8d:89:19:85:44:c7: 75:25:57:c3:92:53:94:29:0b:bd:35:e0:e9:ad:5a: ef:b6:b7:dd:90:a7:1b:82:5c:3f:4f:e3:c4:e0:99: f5:a4:c8:92:fd:47:2e:7d:d3:45:51:28:60:67:50: be:24:ee:5d:a9:18:23:e7:2a:cb:17:4f:dd:8e:b0: 9f:be:6e:d6:4b:55:58:47:37:d5:e3:22:c3:35:3f: e4:50:31:f2:46:da:3e:1f:ba:ba:81:58:ae:1d:01: 81:de:31:12:dd:ed:d8:a4:e5:2a:0e:62:3a:bd:aa: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:14:73:C1:53:CE:FE:5C:29:FD:D0:E2:A5:A8:A7:BD:B2:E9:31:9D X509v3 Authority Key Identifier: keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/nRRzwVPO_lwp_dDipainvbLpMZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.187.0/24 Signature Algorithm: sha256WithRSAEncryption 66:9d:a7:9e:d3:c2:b9:67:6f:83:74:92:e2:0c:5b:03:86:da: 87:08:dd:1b:6a:bc:b3:13:95:66:ab:bc:a2:4a:85:3b:b4:13: ba:13:bc:72:c3:49:3d:2c:33:d8:f4:99:a1:2f:ee:f5:ec:30: c5:72:12:79:ee:2e:e3:85:ff:7e:f4:b8:ce:42:7f:5b:39:1e: cd:87:ec:98:90:b5:40:ba:af:8a:d8:13:92:45:c9:04:ca:46: 22:e6:a1:dc:77:c1:47:5b:d8:83:ee:4b:6e:64:1d:5d:df:f1: ee:87:a1:9f:c8:39:72:cb:92:85:7f:f8:8e:6e:b3:c6:f8:0d: d6:7a:29:c4:5c:ea:91:d5:27:0e:38:78:2f:25:7a:77:5d:44: fb:4a:10:04:e0:17:aa:7b:9c:82:4d:0e:50:aa:f3:32:1a:b9: 5b:20:37:97:f8:96:2f:4c:16:22:41:ee:46:96:e2:00:a5:ee: 17:4f:b2:0f:87:70:a0:a5:8d:e6:5d:07:ae:de:28:25:d7:6f: 8b:e5:40:d8:7e:5b:85:35:03:28:9e:5a:b0:6e:ec:3d:84:58: 29:c2:40:c5:2b:6b:42:a8:19:f1:20:94:46:3b:83:0e:3f:cd: 00:aa:8b:a9:6c:5c:69:9b:00:bd:8a:f3:7e:cc:a2:d2:1f:a7: 60:48:61:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2KrMfVjFaELbY6M1GNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzVhNzZmMjhiNzFlYThkYmY5OTlhYmFhYjdhNjU5ODM5 YWMxODIwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDE0NzNjMTUzY2VmZTVjMjlmZGQwZTJhNWE4YTdiZGIyZTkzMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWkLEtA9F3y6niNb+vicLve2T45 woq6z42Q4DAhEv4luiklC6PCa0THMeRj+R1GAAKLUIoj99UcdYSzG1mOuyqj72sL mJhptOwBZv3vvmKnQlo775P8gZRW0M6pvpm0TTjRj6TJdjWw93sN0ePt8HPVCWQJ PvIvoipQaOGm8TTJgurtvk47rDI9Ax8+qMuNiRmFRMd1JVfDklOUKQu9NeDprVrv trfdkKcbglw/T+PE4Jn1pMiS/UcufdNFUShgZ1C+JO5dqRgj5yrLF0/djrCfvm7W S1VYRzfV4yLDNT/kUDHyRto+H7q6gViuHQGB3jES3e3YpOUqDmI6vao9DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0Uc8FTzv5cKf3Q4qWop72y6TGdMB8GA1UdIwQY MBaAFFfFp28otx6o2/mZq6q3plmDmsGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEt NmE2ODI1MWYxMzg3LzEvblJSendWUE9fbHdwX2REaXBhaW52YkxwTVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEtNmE2ODI1MWYxMzg3 LzEvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W7MA0G CSqGSIb3DQEBCwUAA4IBAQBmnaee08K5Z2+DdJLiDFsDhtqHCN0baryzE5Vmq7yi SoU7tBO6E7xyw0k9LDPY9JmhL+717DDFchJ57i7jhf9+9LjOQn9bOR7Nh+yYkLVA uq+K2BOSRckEykYi5qHcd8FHW9iD7ktuZB1d3/Huh6GfyDlyy5KFf/iObrPG+A3W einEXOqR1ScOOHgvJXp3XUT7ShAE4Beqe5yCTQ5QqvMyGrlbIDeX+JYvTBYiQe5G luIApe4XT7IPh3CgpY3mXQeu3igl12+L5UDYfluFNQMonlqwbuw9hFgpwkDFK2tC qBnxIJRGO4MOP80AqoupbFxpmwC9ivN+zKLSH6dgSGH0 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:16 2026 by rpki-client