This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa File: nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa (raw, json) Hash identifier: nLy78X+XVrYs4fJKoVbx5CKz3kGaFoiDi0xYmsQEn8I= Subject key identifier: 9D:28:94:8C:71:89:83:5F:CD:1B:B3:06:1B:B9:9B:7E:46:E5:FE:6B Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F843FADE976F0753F0B07F739EE2CBC Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1015 IP address blocks: 193.57.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3f:ad:e9:76:f0:75:3f:0b:07:f7:39:ee:2c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d28948c7189835fcd1bb3061bb99b7e46e5fe6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:38:96:6c:ce:55:19:1b:c1:ed:a9:1c:aa: b7:85:e4:e8:cc:20:88:d1:71:e1:d3:f4:ce:84:e8: 23:fd:ce:5a:21:65:14:1d:ae:73:2a:cc:a8:6e:7e: 65:83:05:9e:42:95:e8:54:e8:81:3c:0b:d4:0f:da: 40:a1:b2:52:7d:9b:f4:9b:55:a9:8c:fc:3f:28:c1: a6:a4:c1:49:d4:8f:fd:19:2e:2d:1d:b8:7a:d9:f5: 36:6e:44:9d:ce:72:cc:6c:c4:e5:47:5f:dc:1a:7d: d4:de:ec:a0:58:bd:84:7b:c8:61:0c:62:1b:93:6f: 0c:b4:3b:71:56:c4:68:11:8b:39:3a:f2:87:7a:b7: f2:a1:34:9b:f5:f3:62:49:f8:62:6e:40:b8:f9:76: 23:5d:71:2e:63:41:1c:fc:47:6c:b0:7b:44:5d:b8: ed:e6:dd:fb:ea:c0:3e:58:f5:e8:13:5b:99:e4:64: e5:9c:ad:56:b6:5c:f0:4a:95:f2:35:4b:ad:03:23: 7b:75:92:e3:b4:85:b1:de:a1:21:9e:41:04:cc:7c: 2e:35:34:91:02:10:ca:59:5a:61:c2:78:4b:e7:96: 29:6f:fe:c6:12:f6:9e:c5:68:32:e0:9a:45:86:19: c9:e8:33:ea:21:fa:57:0c:0a:69:53:3a:b2:8b:58: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:28:94:8C:71:89:83:5F:CD:1B:B3:06:1B:B9:9B:7E:46:E5:FE:6B X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.8.0/24 Signature Algorithm: sha256WithRSAEncryption b2:8a:b0:10:c9:c8:9e:09:e6:4d:f6:5a:e5:9c:fc:06:93:2b: d2:bd:61:02:42:ad:9c:fd:bd:9e:fc:4f:91:41:c5:9c:53:67: 81:45:6f:66:da:f2:58:ef:71:77:f7:04:2c:cd:31:38:4e:54: d8:9f:65:37:b7:9e:0d:a4:09:ab:3a:e9:5b:2a:a5:0f:26:d8: 9b:9d:30:0a:46:4d:86:41:ae:b9:2a:54:4d:ab:50:30:25:15: ac:22:36:d6:fe:19:63:bf:2e:87:fd:a8:46:06:09:e9:24:a8: cc:88:15:99:f0:96:d3:c0:1a:b7:22:8e:c3:2a:8a:2e:81:17: 4d:df:1b:a3:84:e7:7b:8a:cb:99:e2:10:a2:15:5e:05:b5:3a: a1:3b:ab:c7:d0:cf:bd:3c:d9:c1:0a:97:66:a5:42:2b:17:d6: f2:58:35:37:7c:45:05:51:92:49:da:d6:3a:c5:f7:1c:fd:b5: cb:67:84:18:2f:f9:8a:d0:f9:ec:f2:9b:b6:2d:f5:7c:09:48: c6:a2:e0:9e:8f:e2:2d:de:02:de:6b:88:c1:ee:a9:2f:61:9d: c0:f4:2c:d0:3f:18:ac:8c:2c:6d:e5:38:84:21:3f:85:ce:7c: 7e:6e:53:ac:43:00:47:0d:4f:25:6b:be:55:a9:f6:9b:06:48: 0a:60:40:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hD+t6XbwdT8LB/c57iy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDI4OTQ4YzcxODk4MzVmY2QxYmIzMDYxYmI5OWI3ZTQ2ZTVmZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIo4lmzOVRkbwe2pHKq3heTozCCI 0XHh0/TOhOgj/c5aIWUUHa5zKsyobn5lgwWeQpXoVOiBPAvUD9pAobJSfZv0m1Wp jPw/KMGmpMFJ1I/9GS4tHbh62fU2bkSdznLMbMTlR1/cGn3U3uygWL2Ee8hhDGIb k28MtDtxVsRoEYs5OvKHerfyoTSb9fNiSfhibkC4+XYjXXEuY0Ec/EdssHtEXbjt 5t376sA+WPXoE1uZ5GTlnK1WtlzwSpXyNUutAyN7dZLjtIWx3qEhnkEEzHwuNTSR AhDKWVphwnhL55Ypb/7GEvaexWgy4JpFhhnJ6DPqIfpXDAppUzqyi1gK8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0olIxxiYNfzRuzBhu5m35G5f5rMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvblNpVWpIR0pnMV9ORzdNR0c3bWJma2JsX21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkIMA0G CSqGSIb3DQEBCwUAA4IBAQCyirAQycieCeZN9lrlnPwGkyvSvWECQq2c/b2e/E+R QcWcU2eBRW9m2vJY73F39wQszTE4TlTYn2U3t54NpAmrOulbKqUPJtibnTAKRk2G Qa65KlRNq1AwJRWsIjbW/hljvy6H/ahGBgnpJKjMiBWZ8JbTwBq3Io7DKoougRdN 3xujhOd7isuZ4hCiFV4FtTqhO6vH0M+9PNnBCpdmpUIrF9byWDU3fEUFUZJJ2tY6 xfcc/bXLZ4QYL/mK0Pns8pu2LfV8CUjGouCej+It3gLea4jB7qkvYZ3A9CzQPxis jCxt5TiEIT+Fznx+blOsQwBHDU8la75VqfabBkgKYED3 -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:56 2026 by rpki-client