This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/n0ts-ZAT1lOETjQar-r7dG5m8B4.roa File: n0ts-ZAT1lOETjQar-r7dG5m8B4.roa (raw, json) Hash identifier: H4GnEfKzurSyqgM4XWV1rjv75zWH0JewFqcCuzz38h8= Subject key identifier: 9F:4B:6C:F9:90:13:D6:53:84:4E:34:1A:AF:EA:FB:74:6E:66:F0:1E Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Certificate serial: 019B7BA52117E436AED88E66C6C351EC732F Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/n0ts-ZAT1lOETjQar-r7dG5m8B4.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41872 IP address blocks: 91.207.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:17:e4:36:ae:d8:8e:66:c6:c3:51:ec:73:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f4b6cf99013d653844e341aafeafb746e66f01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:99:c7:9d:95:01:d0:3e:70:52:4c:7a:cd: e6:3d:04:80:61:13:bd:fd:3b:09:78:60:c4:6b:35: 57:1b:a3:25:29:45:3c:57:23:c8:78:fb:52:41:e6: 22:54:44:0e:ca:04:45:d2:bd:e0:66:29:2e:60:93: 83:46:47:19:94:4a:aa:47:eb:3f:f7:c4:1a:40:09: 22:82:9a:31:bb:b3:35:7a:da:28:39:29:94:8a:24: 1d:49:c3:53:3e:7b:8b:d3:7c:dd:2a:d8:34:5c:27: de:e9:79:96:97:e9:f7:e0:6c:11:99:df:c7:2c:0d: 54:74:af:57:8b:52:79:c3:5b:5d:f3:9c:d2:df:65: de:5b:36:d9:a4:c2:51:12:ab:2b:8a:89:48:10:e5: 14:bf:cb:48:1b:0f:bc:72:fd:64:53:91:f7:74:df: ae:ac:ac:39:5a:bc:eb:9f:d2:d1:55:a7:6e:cf:05: dd:54:4d:c9:cd:b7:aa:1f:dd:36:0e:ca:08:0e:76: 6d:64:d3:fd:21:80:9c:dc:dc:31:21:16:9c:d2:29: b4:ad:30:08:aa:5b:37:18:6b:a5:fb:9a:aa:7d:ea: fc:c7:7a:0a:fc:2f:cb:e9:b6:29:fe:7c:bc:da:61: cd:3d:ca:f5:74:24:33:81:50:db:a3:79:6e:2a:b3: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:6C:F9:90:13:D6:53:84:4E:34:1A:AF:EA:FB:74:6E:66:F0:1E X509v3 Authority Key Identifier: keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/n0ts-ZAT1lOETjQar-r7dG5m8B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.164.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b0:07:09:41:c2:3c:20:eb:a6:22:52:2f:b9:03:f3:c3:5b: 18:e7:5a:52:11:5b:bf:a5:e6:3c:27:da:6c:0a:aa:15:0d:6d: 30:2e:06:79:d7:ea:06:fb:0c:87:3f:12:ff:75:dc:3c:a2:b0: e0:57:67:66:12:0e:6f:7d:0e:b8:c4:ff:4c:0e:e2:cb:34:a5: b7:cb:37:01:f9:61:90:77:fa:3e:98:1e:6a:3f:a5:d9:c1:5c: b1:6a:87:07:01:ea:c3:2b:c1:1b:45:04:49:eb:02:19:72:eb: 3d:fa:a3:85:56:72:4a:b7:89:77:63:7a:5f:6d:82:a0:e7:d7: 42:18:f5:6c:d7:0d:bb:c7:d2:5a:a5:0a:4b:1c:95:62:86:8f: 01:63:5b:c2:95:de:67:25:ef:ce:66:50:10:c6:61:0e:9b:b2: 27:9f:eb:e4:56:63:c4:a8:aa:77:8a:a9:10:70:d1:d8:56:28: d7:58:92:4e:1d:2d:60:49:14:36:74:83:5b:30:29:79:11:9d: 9b:03:83:9c:d2:be:03:f5:43:1b:71:c6:5c:d9:44:6b:90:05: b5:f4:fe:3b:d0:b6:4a:46:20:13:0e:ca:7d:5c:c3:8f:ae:9d: 1e:a8:67:2b:40:fa:17:44:ab:34:44:bb:c5:86:22:b5:75:60: 80:74:7b:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSEX5Dau2I5mxsNR7HMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl NWE4ZDAwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjRiNmNmOTkwMTNkNjUzODQ0ZTM0MWFhZmVhZmI3NDZlNjZmMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSZx52VAdA+cFJMes3mPQSAYRO9 /TsJeGDEazVXG6MlKUU8VyPIePtSQeYiVEQOygRF0r3gZikuYJODRkcZlEqqR+s/ 98QaQAkigpoxu7M1etooOSmUiiQdScNTPnuL03zdKtg0XCfe6XmWl+n34GwRmd/H LA1UdK9Xi1J5w1td85zS32XeWzbZpMJREqsriolIEOUUv8tIGw+8cv1kU5H3dN+u rKw5Wrzrn9LRVaduzwXdVE3JzbeqH902DsoIDnZtZNP9IYCc3NwxIRac0im0rTAI qls3GGul+5qqfer8x3oK/C/L6bYp/ny82mHNPcr1dCQzgVDbo3luKrPAfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9LbPmQE9ZThE40Gq/q+3RuZvAeMB8GA1UdIwQY MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut MjdlOWJlYjMyOTRiLzEvbjB0cy1aQVQxbE9FVGpRYXItcjdkRzVtOEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8+kMA0G CSqGSIb3DQEBCwUAA4IBAQB1sAcJQcI8IOumIlIvuQPzw1sY51pSEVu/peY8J9ps CqoVDW0wLgZ51+oG+wyHPxL/ddw8orDgV2dmEg5vfQ64xP9MDuLLNKW3yzcB+WGQ d/o+mB5qP6XZwVyxaocHAerDK8EbRQRJ6wIZcus9+qOFVnJKt4l3Y3pfbYKg59dC GPVs1w27x9JapQpLHJViho8BY1vCld5nJe/OZlAQxmEOm7Inn+vkVmPEqKp3iqkQ cNHYVijXWJJOHS1gSRQ2dINbMCl5EZ2bA4Oc0r4D9UMbccZc2URrkAW19P470LZK RiATDsp9XMOPrp0eqGcrQPoXRKs0RLvFhiK1dWCAdHtL -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:24 2026 by rpki-client