This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NBJYNGSr51SMleuFNsZLvRbpa9Q.roa File: NBJYNGSr51SMleuFNsZLvRbpa9Q.roa (raw, json) Hash identifier: F+8H2MKyX4rHj0SBCYwdBxReSeqZDOx0tBNI/Nal5+s= Subject key identifier: 34:12:58:34:64:AB:E7:54:8C:95:EB:85:36:C6:4B:BD:16:E9:6B:D4 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EBE60C085EA7AF05B82A7864E3BB1 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NBJYNGSr51SMleuFNsZLvRbpa9Q.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44179 IP address blocks: 82.103.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:60:c0:85:ea:7a:f0:5b:82:a7:86:4e:3b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3412583464abe7548c95eb8536c64bbd16e96bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:3d:dd:81:eb:e6:79:ce:30:cb:d3:75:0c: cc:96:c4:ac:59:13:75:9e:53:62:cf:c9:56:09:f5: 5e:5a:e7:c3:dd:2c:cd:69:d0:5d:31:f4:b5:7a:54: de:f7:a8:c2:34:9c:9a:59:e8:c9:89:b1:42:11:e3: 29:54:1c:7c:a7:92:58:2e:3e:b5:23:79:44:2f:2f: fc:46:73:8a:ac:df:c3:b3:3d:09:53:02:57:a7:08: 74:02:93:97:1a:af:9b:e0:5a:32:c6:e6:3d:85:fe: 70:be:f5:bf:13:7c:21:d6:17:c2:5b:10:77:85:8f: 64:67:c9:48:59:b3:3f:85:bb:c1:3e:7b:eb:37:55: 1f:fd:09:01:0d:18:48:3c:f4:5f:4b:58:e0:50:bb: e0:d9:58:d7:fa:bb:a6:8f:55:28:f4:72:8f:68:3b: 0b:48:4e:80:f7:30:08:72:cd:9c:49:2e:dd:47:61: c8:3b:15:d5:11:66:16:65:72:53:b8:24:ea:75:97: a7:cf:78:44:3f:d5:ae:2b:ee:c0:89:e6:7d:b4:ea: 87:f3:64:8d:a3:cc:02:a1:84:5c:95:0f:55:6b:5c: 74:8a:4b:2f:6a:c6:be:82:9e:c8:38:76:92:de:3f: 2d:00:3f:14:46:4c:bc:36:56:68:ca:d2:75:1e:dd: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:58:34:64:AB:E7:54:8C:95:EB:85:36:C6:4B:BD:16:E9:6B:D4 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NBJYNGSr51SMleuFNsZLvRbpa9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.103.64.0/24 Signature Algorithm: sha256WithRSAEncryption 57:85:c8:58:ca:5d:96:e2:f3:b5:2c:60:d8:b9:ca:fc:d1:63: 4f:a3:a0:7b:da:35:4b:cb:3c:4d:60:5e:7e:b5:a3:7d:9c:a5: 33:3e:ee:c6:aa:33:27:36:d8:d8:6b:bc:fa:cb:28:ba:c8:6b: 47:31:08:ec:e5:a6:71:11:78:9a:e4:3a:51:01:1e:66:a8:54: 08:fb:f3:5a:24:ef:61:c5:cd:79:60:1f:14:2d:7e:ca:4d:c4: 70:0b:7d:09:bb:8e:1d:b8:d4:59:12:00:e1:14:a4:eb:a5:b5: 1f:83:e2:ac:22:ff:32:5c:29:f6:25:bf:75:1c:43:70:e8:c0: 89:a2:21:8f:0e:ae:0b:6f:41:e2:9e:6e:47:2e:1b:0a:ec:db: 95:24:bc:80:2e:e7:1c:74:f4:29:29:4d:25:1f:18:82:93:0b: a2:7b:fd:16:bd:c8:24:9f:4d:78:62:aa:b0:9f:53:66:bd:9d: 52:1e:3a:ef:1b:20:52:36:2e:e8:16:68:84:eb:ba:cc:71:52: d7:f7:7c:b8:32:c1:69:ce:6a:94:68:70:3b:19:73:83:b4:e8: 79:bb:00:00:bc:72:62:94:fb:bf:3d:c2:dc:f3:76:bf:4c:c0: 65:57:ed:70:60:8c:81:31:ee:a1:11:ec:b8:b3:4f:2d:27:27: 6b:62:89:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr5gwIXqevBbgqeGTjuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDEyNTgzNDY0YWJlNzU0OGM5NWViODUzNmM2NGJiZDE2ZTk2YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsE93YHr5nnOMMvTdQzMlsSsWRN1 nlNiz8lWCfVeWufD3SzNadBdMfS1elTe96jCNJyaWejJibFCEeMpVBx8p5JYLj61 I3lELy/8RnOKrN/Dsz0JUwJXpwh0ApOXGq+b4FoyxuY9hf5wvvW/E3wh1hfCWxB3 hY9kZ8lIWbM/hbvBPnvrN1Uf/QkBDRhIPPRfS1jgULvg2VjX+rumj1Uo9HKPaDsL SE6A9zAIcs2cSS7dR2HIOxXVEWYWZXJTuCTqdZenz3hEP9WuK+7AieZ9tOqH82SN o8wCoYRclQ9Va1x0iksvasa+gp7IOHaS3j8tAD8URky8NlZoytJ1Ht1rVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQSWDRkq+dUjJXrhTbGS70W6WvUMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvTkJKWU5HU3I1MVNNbGV1Rk5zWkx2UmJwYTlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmdAMA0G CSqGSIb3DQEBCwUAA4IBAQBXhchYyl2W4vO1LGDYucr80WNPo6B72jVLyzxNYF5+ taN9nKUzPu7GqjMnNtjYa7z6yyi6yGtHMQjs5aZxEXia5DpRAR5mqFQI+/NaJO9h xc15YB8ULX7KTcRwC30Ju44duNRZEgDhFKTrpbUfg+KsIv8yXCn2Jb91HENw6MCJ oiGPDq4Lb0Hinm5HLhsK7NuVJLyALuccdPQpKU0lHxiCkwuie/0Wvcgkn014Yqqw n1NmvZ1SHjrvGyBSNi7oFmiE67rMcVLX93y4MsFpzmqUaHA7GXODtOh5uwAAvHJi lPu/PcLc83a/TMBlV+1wYIyBMe6hEey4s08tJydrYon6 -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:36 2026 by rpki-client