This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nYnGcrNHNDmSHxuC9fcAOrphpEY.roa File: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (raw, json) Hash identifier: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc= Subject key identifier: 9D:89:C6:72:B3:47:34:39:92:1F:1B:82:F5:F7:00:3A:BA:61:A4:46 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C561A117EFB14DF29CC517CDF30F Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nYnGcrNHNDmSHxuC9fcAOrphpEY.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 185.71.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:61:a1:17:ef:b1:4d:f2:9c:c5:17:cd:f3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d89c672b3473439921f1b82f5f7003aba61a446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:af:67:8e:2b:0b:30:10:a5:09:04:90:d1: fa:49:b0:19:15:81:45:ed:72:07:c7:8b:ae:4d:29: 91:7c:b6:8e:dd:13:39:7c:80:72:c1:ba:67:41:4f: c5:fa:15:2f:ad:9d:2a:32:96:55:d8:14:c3:b3:3c: 07:ac:76:c3:be:52:9f:ea:b1:ba:8e:4f:0a:09:b5: 07:74:96:a2:c8:e9:ef:04:fd:61:f5:aa:a6:3e:cb: fb:a0:9f:fa:15:a9:2c:d7:7e:e0:65:ac:25:f7:f6: 54:f5:69:23:93:c8:62:06:7f:3d:2d:b0:4e:dc:d8: b5:7d:a6:ae:4f:69:55:f6:c4:36:3e:b5:de:2f:5f: 6a:ed:57:06:98:40:20:f8:13:25:53:06:79:c8:72: 47:e1:45:95:4e:41:54:73:7a:00:06:92:37:4c:11: 59:f7:27:ca:2b:56:eb:b0:85:cf:e6:3c:dc:d4:b6: 18:b4:3a:b8:31:e2:28:a8:9a:03:3e:6f:17:00:6f: 10:d8:d8:b5:07:ca:7e:94:19:03:9e:44:95:87:56: 88:5d:e7:1e:1c:2b:c5:96:81:1a:7f:e5:9d:f3:f1: 72:cb:ab:39:4c:8e:7e:ff:9c:57:24:f2:d3:a3:38: c1:15:52:a2:78:7f:1c:dd:94:46:68:6b:bd:47:43: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:C6:72:B3:47:34:39:92:1F:1B:82:F5:F7:00:3A:BA:61:A4:46 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nYnGcrNHNDmSHxuC9fcAOrphpEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.222.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:78:80:a4:0d:e7:fe:17:d8:a9:84:5d:28:ff:eb:66:30:bb: 31:6e:47:12:66:14:6e:dc:8d:5f:68:93:de:37:50:a5:a7:08: b7:d2:d8:a5:a9:36:0a:0b:d0:38:17:3d:99:e4:90:f8:37:32: 4a:8d:47:f9:17:74:7f:6d:c1:bc:c5:35:07:96:ad:cd:f6:4f: 55:2d:da:10:19:47:a3:3a:d0:73:41:d9:b9:29:e1:c6:95:71: 9a:85:42:e1:3c:8b:4c:7b:df:9d:bc:27:fd:26:db:04:dd:44: 60:d2:99:bd:02:fa:2e:86:c2:ac:96:20:8a:f2:e3:82:71:0a: d7:94:69:89:3b:cd:23:ba:11:0d:58:50:e0:4c:1c:9b:1c:a3: 3f:66:a5:3c:61:ee:bd:2b:ac:0f:3b:03:9b:f8:bd:89:c5:cc: f7:6f:3a:6f:b8:d2:52:2d:77:fb:0c:df:80:c8:65:29:b5:4c: ae:47:13:44:0a:1c:df:2b:7d:30:2a:c2:1a:97:99:c3:34:39: 08:28:75:35:89:08:54:05:02:f5:4d:37:95:9d:95:1e:b9:cd: 95:af:ae:05:46:94:0a:a0:1c:86:c8:b5:11:29:92:0d:d1:53: b7:f8:89:3f:23:97:94:35:a3:47:99:77:f8:8c:37:ef:52:17: 89:31:c5:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsVhoRfvsU3ynMUXzfMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDg5YzY3MmIzNDczNDM5OTIxZjFiODJmNWY3MDAzYWJhNjFhNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aKvZ44rCzAQpQkEkNH6SbAZFYFF 7XIHx4uuTSmRfLaO3RM5fIBywbpnQU/F+hUvrZ0qMpZV2BTDszwHrHbDvlKf6rG6 jk8KCbUHdJaiyOnvBP1h9aqmPsv7oJ/6Faks137gZawl9/ZU9Wkjk8hiBn89LbBO 3Ni1faauT2lV9sQ2PrXeL19q7VcGmEAg+BMlUwZ5yHJH4UWVTkFUc3oABpI3TBFZ 9yfKK1brsIXP5jzc1LYYtDq4MeIoqJoDPm8XAG8Q2Ni1B8p+lBkDnkSVh1aIXece HCvFloEaf+Wd8/Fyy6s5TI5+/5xXJPLTozjBFVKieH8c3ZRGaGu9R0N6JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2JxnKzRzQ5kh8bgvX3ADq6YaRGMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvblluR2NyTkhORG1TSHh1QzlmY0FPcnBocEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUfeMA0G CSqGSIb3DQEBCwUAA4IBAQBfeICkDef+F9iphF0o/+tmMLsxbkcSZhRu3I1faJPe N1Clpwi30tilqTYKC9A4Fz2Z5JD4NzJKjUf5F3R/bcG8xTUHlq3N9k9VLdoQGUej OtBzQdm5KeHGlXGahULhPItMe9+dvCf9JtsE3URg0pm9AvouhsKsliCK8uOCcQrX lGmJO80juhENWFDgTBybHKM/ZqU8Ye69K6wPOwOb+L2Jxcz3bzpvuNJSLXf7DN+A yGUptUyuRxNEChzfK30wKsIal5nDNDkIKHU1iQhUBQL1TTeVnZUeuc2Vr64FRpQK oByGyLURKZIN0VO3+Ik/I5eUNaNHmXf4jDfvUheJMcX1 -----END CERTIFICATE-----Generated at Tue Jan 20 17:06:30 2026 by rpki-client