This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NlPnezqtHfIpfZoqnmdhIzGckaI.roa File: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (raw, json) Hash identifier: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM= Subject key identifier: 36:53:E7:7B:3A:AD:1D:F2:29:7D:9A:2A:9E:67:61:23:31:9C:91:A2 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B7D7A7BF69EFEF2CF411D13E986288AAC Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NlPnezqtHfIpfZoqnmdhIzGckaI.roa Signing time: Fri 02 Jan 2026 06:52:17 +0000 ROA not before: Fri 02 Jan 2026 06:52:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.92.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:7a:7b:f6:9e:fe:f2:cf:41:1d:13:e9:86:28:8a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 2 06:52:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3653e77b3aad1df2297d9a2a9e676123319c91a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:8c:8f:bb:de:bf:33:5a:3f:89:44:00:f0: 8d:fa:ef:0f:61:38:21:e6:4b:f4:87:5c:7d:67:fd: f9:91:b4:4d:38:f1:09:05:d7:92:e0:0e:ac:ce:d8: fb:d2:db:7c:80:5d:8a:f5:87:a2:8f:dd:ad:63:39: 6d:84:37:9b:d9:10:dd:00:98:5d:5b:f5:5c:25:98: e7:2b:28:0d:10:7f:e6:c2:8e:05:d2:5f:d7:9b:bb: af:a5:9d:ed:b7:96:64:ae:c3:ba:0e:79:05:fb:d5: 78:ee:7b:c3:d6:0a:af:4c:bf:7d:be:ae:d9:ec:b7: 91:f6:02:86:54:3c:85:19:a0:d8:36:b3:dd:0f:5f: 62:36:7c:19:0b:6f:97:d8:05:60:e0:7d:1b:50:dc: 11:27:37:66:83:02:ee:9f:16:3a:9a:ab:97:c1:96: e4:9c:8a:44:d8:00:5b:39:bf:a6:df:5f:81:c5:c5: d6:d8:96:83:e5:67:70:b6:ea:1d:a5:67:12:be:6e: d4:e0:4a:46:13:fb:a9:94:85:0d:db:18:09:81:d3: b9:a6:c1:e9:a7:8a:1f:dd:11:ee:cc:77:90:98:b7: d3:84:2b:c9:4c:d2:a8:a6:69:10:18:8e:65:ac:e5: c8:75:da:8e:f0:89:dc:55:71:9b:af:9c:aa:75:b5: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:E7:7B:3A:AD:1D:F2:29:7D:9A:2A:9E:67:61:23:31:9C:91:A2 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/NlPnezqtHfIpfZoqnmdhIzGckaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.24.0/24 Signature Algorithm: sha256WithRSAEncryption 50:4c:7a:19:5f:cb:d2:cc:d9:05:bc:cc:55:12:d9:60:70:2d: 9d:cc:d3:f4:39:77:46:3a:fa:ba:99:f3:71:c7:4f:b7:1c:93: f7:24:31:f6:21:0a:b6:65:2c:1f:71:c6:90:65:be:dc:54:b2: 39:7d:d7:59:16:87:6f:05:23:64:12:41:a1:d5:56:63:0b:9e: 81:26:0e:ff:53:c5:b5:ed:72:fc:dd:9e:ff:e8:00:98:a3:65: 27:6f:29:d3:48:33:70:7c:75:ae:d9:4f:a8:34:8f:59:34:48: 7c:db:82:c1:64:86:88:f8:27:96:37:75:bf:18:20:ea:f6:97: cf:28:b8:eb:e6:ad:96:c4:36:e8:34:4a:77:0f:a7:99:2a:e0: cd:b1:21:27:d8:91:d9:ea:f7:c8:b6:44:6e:57:fd:49:12:18: 3a:6d:29:39:62:d5:61:b2:09:94:d8:d7:20:ac:23:76:19:ed: 46:5d:e0:be:29:08:d6:d7:b5:8a:03:05:d7:63:c9:f3:d4:72: c6:2a:c7:9f:15:f8:f8:7a:a3:12:9a:52:d3:ef:e4:44:06:01: 1e:42:0f:34:71:6b:ee:a2:6f:5b:fd:6d:b7:34:b4:28:9d:35: 0a:a5:42:1f:69:81:ed:fe:96:ac:42:c4:7c:05:30:10:8d:48: fc:30:48:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9env2nv7yz0EdE+mGKIqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAyMDY1MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjUzZTc3YjNhYWQxZGYyMjk3ZDlhMmE5ZTY3NjEyMzMxOWM5MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGyMj7vevzNaP4lEAPCN+u8PYTgh 5kv0h1x9Z/35kbRNOPEJBdeS4A6sztj70tt8gF2K9Yeij92tYzlthDeb2RDdAJhd W/VcJZjnKygNEH/mwo4F0l/Xm7uvpZ3tt5ZkrsO6DnkF+9V47nvD1gqvTL99vq7Z 7LeR9gKGVDyFGaDYNrPdD19iNnwZC2+X2AVg4H0bUNwRJzdmgwLunxY6mquXwZbk nIpE2ABbOb+m31+BxcXW2JaD5WdwtuodpWcSvm7U4EpGE/uplIUN2xgJgdO5psHp p4of3RHuzHeQmLfThCvJTNKopmkQGI5lrOXIddqO8IncVXGbr5yqdbWf7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZT53s6rR3yKX2aKp5nYSMxnJGiMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvTmxQbmV6cXRIZklwZlpvcW5tZGhJekdja2FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwYMA0G CSqGSIb3DQEBCwUAA4IBAQBQTHoZX8vSzNkFvMxVEtlgcC2dzNP0OXdGOvq6mfNx x0+3HJP3JDH2IQq2ZSwfccaQZb7cVLI5fddZFodvBSNkEkGh1VZjC56BJg7/U8W1 7XL83Z7/6ACYo2UnbynTSDNwfHWu2U+oNI9ZNEh824LBZIaI+CeWN3W/GCDq9pfP KLjr5q2WxDboNEp3D6eZKuDNsSEn2JHZ6vfItkRuV/1JEhg6bSk5YtVhsgmU2Ncg rCN2Ge1GXeC+KQjW17WKAwXXY8nz1HLGKsefFfj4eqMSmlLT7+REBgEeQg80cWvu om9b/W23NLQonTUKpUIfaYHt/pasQsR8BTAQjUj8MEhy -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:51 2026 by rpki-client