This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NKVLYnQ7KBEu7rsnaRE7Pfwf-6Q.roa File: NKVLYnQ7KBEu7rsnaRE7Pfwf-6Q.roa (raw, json) Hash identifier: 8YqvXCSwKwLknXwF3ktbhsXgtMWqIYHR5dMPI1adwwg= Subject key identifier: 34:A5:4B:62:74:3B:28:11:2E:EE:BB:27:69:11:3B:3D:FC:1F:FB:A4 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019C4603B189CBED931F8C14260C1F7D7DC0 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NKVLYnQ7KBEu7rsnaRE7Pfwf-6Q.roa Signing time: Tue 10 Feb 2026 05:26:13 +0000 ROA not before: Tue 10 Feb 2026 05:26:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215238 IP address blocks: 45.88.137.0/24 maxlen: 24 45.151.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Feb 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:03:b1:89:cb:ed:93:1f:8c:14:26:0c:1f:7d:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Feb 10 05:26:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34a54b62743b28112eeebb2769113b3dfc1ffba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:31:0e:39:67:14:88:9e:3f:76:24:9e:f1: 1c:c6:84:cb:da:5d:1e:9e:d9:d5:fc:9d:bd:75:0c: 16:99:bf:c6:1d:48:af:7a:f1:e5:14:77:c3:b2:5f: 1c:24:3e:a8:da:f4:75:f7:52:bb:ee:db:74:50:06: 32:af:a5:fd:8a:6e:5a:cb:e7:cc:30:d3:20:00:ea: 66:2a:4b:f3:46:70:22:64:ac:68:79:18:84:02:74: f5:53:23:ba:c3:a0:77:35:35:20:c7:f0:1a:83:b2: 3e:94:e5:d3:89:bb:4c:51:50:37:bc:42:c8:d2:69: ed:74:0b:c6:2a:3d:25:34:e8:54:d0:4e:2c:9a:0a: 02:9b:e1:35:a1:76:fc:0e:0a:a8:a9:f8:4e:82:5a: 37:3f:cc:e3:22:8c:82:9e:06:84:85:01:82:64:bc: 5d:14:01:1d:44:43:a3:96:dc:5b:bd:95:a0:0c:23: 89:7b:30:72:b8:56:60:5b:e3:4a:87:b5:bb:4c:33: bd:48:e1:70:5a:9d:35:cf:01:7a:c3:b4:53:07:9b: 2e:15:24:d7:07:db:36:dc:ba:eb:c2:fd:e5:59:1a: b6:d0:e6:20:6f:6f:dd:76:b0:b9:b1:8b:23:21:59: b1:24:a2:26:27:d5:c4:65:d4:d9:b4:15:4f:a4:ba: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A5:4B:62:74:3B:28:11:2E:EE:BB:27:69:11:3B:3D:FC:1F:FB:A4 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NKVLYnQ7KBEu7rsnaRE7Pfwf-6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.137.0/24 45.151.3.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:66:97:03:6f:bc:d1:cf:67:f8:eb:c5:58:83:ef:cd:3e:79: ec:45:1a:b3:fb:7f:43:e6:ee:2b:25:7b:a4:8d:02:82:43:c6: d7:b7:66:58:f6:29:22:22:96:8e:17:17:0e:1d:4a:40:c6:03: df:a2:be:ab:d9:94:15:94:33:36:f8:f1:e5:53:1d:2d:ba:09: ec:d4:83:96:00:2d:8f:25:3a:7f:fd:9c:e1:7c:5c:61:3c:0b: 1b:49:fd:de:07:e2:4e:2f:f9:16:2d:4e:6b:19:a7:16:53:0f: 46:3c:bd:d9:3a:fb:a9:98:bf:15:33:46:29:f1:b0:1f:02:d6: 98:54:f6:eb:ae:68:30:1b:c3:99:f6:c4:cb:c3:c5:7d:4e:c6: d3:bd:0a:7d:ca:99:e3:08:b2:ed:e4:d9:98:ee:79:c5:7e:b8: 98:6e:53:3a:99:82:79:c9:a5:e2:41:b6:04:f5:ae:d2:5b:b4: 8a:e6:4b:9e:0b:c0:cf:e5:2e:2a:b0:02:30:99:07:58:99:b7: c9:02:84:e9:f8:1f:db:be:25:2b:76:48:b0:76:eb:36:7a:41: 44:f7:2b:03:e6:91:58:4c:7e:80:26:23:0b:53:2b:ba:8d:d2: aa:68:a3:92:d6:7e:5c:28:83:68:91:0a:ae:0f:a4:8b:b7:da: b7:e2:08:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZxGA7GJy+2TH4wUJgwffX3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMjEwMDUyNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGE1NGI2Mjc0M2IyODExMmVlZWJiMjc2OTExM2IzZGZjMWZmYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqIxDjlnFIieP3YknvEcxoTL2l0e ntnV/J29dQwWmb/GHUivevHlFHfDsl8cJD6o2vR191K77tt0UAYyr6X9im5ay+fM MNMgAOpmKkvzRnAiZKxoeRiEAnT1UyO6w6B3NTUgx/Aag7I+lOXTibtMUVA3vELI 0mntdAvGKj0lNOhU0E4smgoCm+E1oXb8DgqoqfhOglo3P8zjIoyCngaEhQGCZLxd FAEdREOjltxbvZWgDCOJezByuFZgW+NKh7W7TDO9SOFwWp01zwF6w7RTB5suFSTX B9s23Lrrwv3lWRq20OYgb2/ddrC5sYsjIVmxJKImJ9XEZdTZtBVPpLrp7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDSlS2J0OygRLu67J2kROz38H/ukMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvTktWTFluUTdLQkV1N3JzbmFSRTdQZndmLTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALViJAwQA LZcDMA0GCSqGSIb3DQEBCwUAA4IBAQB8ZpcDb7zRz2f468VYg+/NPnnsRRqz+39D 5u4rJXukjQKCQ8bXt2ZY9ikiIpaOFxcOHUpAxgPfor6r2ZQVlDM2+PHlUx0tugns 1IOWAC2PJTp//ZzhfFxhPAsbSf3eB+JOL/kWLU5rGacWUw9GPL3ZOvupmL8VM0Yp 8bAfAtaYVPbrrmgwG8OZ9sTLw8V9TsbTvQp9ypnjCLLt5NmY7nnFfriYblM6mYJ5 yaXiQbYE9a7SW7SK5kueC8DP5S4qsAIwmQdYmbfJAoTp+B/bviUrdkiwdus2ekFE 9ysD5pFYTH6AJiMLUyu6jdKqaKOS1n5cKINokQquD6SLt9q34ght -----END CERTIFICATE-----Generated at Wed Feb 11 10:51:25 2026 by rpki-client