This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/N5As3_5f02c5s8zn2uyxGXeV7es.roa File: N5As3_5f02c5s8zn2uyxGXeV7es.roa (raw, json) Hash identifier: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k= Subject key identifier: 37:90:2C:DF:FE:5F:D3:67:39:B3:CC:E7:DA:EC:B1:19:77:95:ED:EB Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Certificate serial: 019B7A5B7BF0ACEE1C4A0FC7E900BFB78F5F Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/N5As3_5f02c5s8zn2uyxGXeV7es.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212148 IP address blocks: 91.212.156.0/24 maxlen: 24 2a07:b280::/29 maxlen: 29 2a07:b280:100::/40 maxlen: 40 2a07:b280:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:f0:ac:ee:1c:4a:0f:c7:e9:00:bf:b7:8f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37902cdffe5fd36739b3cce7daecb1197795edeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:d0:63:c1:2a:ee:ba:a1:cd:31:d6:32:2e: c1:06:24:08:28:3d:ce:ba:d4:5b:ba:5a:df:1c:33: 16:27:6d:ac:61:97:24:0c:6a:35:44:5d:b7:a5:48: 6f:f6:de:88:d1:49:10:3e:31:dc:b0:86:63:74:c7: 97:68:20:46:17:38:14:e8:c7:bb:8d:8e:e7:af:9d: 56:f1:da:df:77:92:83:1c:3c:c0:d9:cd:44:93:18: 77:ca:81:62:8c:02:f7:8b:8c:21:2d:c3:b3:0b:b7: 46:aa:55:43:95:c3:a5:ad:fa:fd:cf:79:40:87:11: d6:f5:cd:5a:30:71:f2:9e:1f:93:a2:a0:a9:02:d6: ba:95:4f:0d:40:85:84:fe:f6:dc:70:d8:d8:d6:84: f3:8e:26:42:c2:8f:fa:88:19:b3:ea:d0:c0:30:55: 99:8d:e7:ce:a4:66:7b:35:99:9e:02:c6:d5:a5:f6: df:a3:41:5e:f7:24:08:7c:da:ea:a8:f5:b7:9a:2d: 2d:17:5f:f0:c0:56:97:95:80:7d:84:25:b2:48:65: 22:f2:54:aa:06:2c:e0:f8:c7:dc:71:c1:ad:77:44: 01:56:75:3c:96:fe:a9:d4:f7:a0:0d:55:a4:ba:ab: 06:78:90:b8:b3:38:a6:75:5f:db:71:01:89:ab:1f: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:2C:DF:FE:5F:D3:67:39:B3:CC:E7:DA:EC:B1:19:77:95:ED:EB X509v3 Authority Key Identifier: keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/N5As3_5f02c5s8zn2uyxGXeV7es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.156.0/24 IPv6: 2a07:b280::/29 Signature Algorithm: sha256WithRSAEncryption 9e:4b:3d:a8:d5:da:cc:b4:08:59:6b:9a:f1:6b:89:b1:a9:a3: ff:86:9d:59:e9:3c:45:db:e7:68:e3:3a:92:58:50:77:76:16: 6b:e0:3e:41:b3:47:93:e9:30:63:45:2d:3f:d9:34:c5:1d:1f: 99:50:5e:56:cc:cd:dd:b3:98:07:e5:dd:84:de:f1:dd:87:e7: db:b7:8b:bb:f2:b0:3d:2f:01:d4:72:cd:ce:05:f7:a6:a0:71: 2b:27:91:04:a1:21:24:0b:04:42:73:e5:11:43:34:24:3c:7e: 13:82:5b:56:6b:ad:43:11:44:8b:e9:3f:a0:4d:a9:e7:d1:bd: 7e:01:ad:84:16:48:dd:ef:93:19:72:1c:98:58:e3:90:2d:9c: 94:e0:ea:c9:3b:80:71:90:59:36:40:de:3f:8b:c8:4b:b8:b3: 48:da:a4:56:a3:5d:d3:69:d9:10:17:a6:d6:f2:c8:27:04:4c: 1b:0a:ca:f4:47:91:54:d6:b8:90:ae:3c:04:57:7c:a8:e5:57: 7b:20:62:e3:e4:31:28:c0:37:02:df:4c:7d:d9:f9:7f:c1:ed: 31:aa:ba:c8:5c:66:85:94:9e:de:98:8b:d9:3d:25:f5:86:bc: 53:b9:f8:c2:8a:6d:ee:61:3b:bc:d9:00:67:e7:92:a1:69:ac: 33:af:5f:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W3vwrO4cSg/H6QC/t49fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj NDQ5YWYwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzkwMmNkZmZlNWZkMzY3MzliM2NjZTdkYWVjYjExOTc3OTVlZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfXQY8Eq7rqhzTHWMi7BBiQIKD3O utRbulrfHDMWJ22sYZckDGo1RF23pUhv9t6I0UkQPjHcsIZjdMeXaCBGFzgU6Me7 jY7nr51W8drfd5KDHDzA2c1Ekxh3yoFijAL3i4whLcOzC7dGqlVDlcOlrfr9z3lA hxHW9c1aMHHynh+ToqCpAta6lU8NQIWE/vbccNjY1oTzjiZCwo/6iBmz6tDAMFWZ jefOpGZ7NZmeAsbVpfbfo0Fe9yQIfNrqqPW3mi0tF1/wwFaXlYB9hCWySGUi8lSq Bizg+MfcccGtd0QBVnU8lv6p1PegDVWkuqsGeJC4szimdV/bcQGJqx+9VQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDeQLN/+X9NnObPM59rssRl3le3rMB8GA1UdIwQY MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt YTViMmQwOWUwNWNmLzEvTjVBczNfNWYwMmM1czh6bjJ1eXhHWGVWN2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9ScMA0E AgACMAcDBQMqB7KAMA0GCSqGSIb3DQEBCwUAA4IBAQCeSz2o1drMtAhZa5rxa4mx qaP/hp1Z6TxF2+do4zqSWFB3dhZr4D5Bs0eT6TBjRS0/2TTFHR+ZUF5WzM3ds5gH 5d2E3vHdh+fbt4u78rA9LwHUcs3OBfemoHErJ5EEoSEkCwRCc+URQzQkPH4TgltW a61DEUSL6T+gTann0b1+Aa2EFkjd75MZchyYWOOQLZyU4OrJO4BxkFk2QN4/i8hL uLNI2qRWo13TadkQF6bW8sgnBEwbCsr0R5FU1riQrjwEV3yo5Vd7IGLj5DEowDcC 30x92fl/we0xqrrIXGaFlJ7emIvZPSX1hrxTufjCim3uYTu82QBn55Khaawzr1+s -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:07 2026 by rpki-client