This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/NK0rJz3IZ4C5eNe7s0HqRjPk3Dw.roa File: NK0rJz3IZ4C5eNe7s0HqRjPk3Dw.roa (raw, json) Hash identifier: /8QWQq6fZMs0B3BMqZFvUPnGx8SrCOd225/E1rIxmuE= Subject key identifier: 34:AD:2B:27:3D:C8:67:80:B9:78:D7:BB:B3:41:EA:46:33:E4:DC:3C Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Certificate serial: 019B02EF298C56DECF2D67B7B826FDBF6F88 Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/NK0rJz3IZ4C5eNe7s0HqRjPk3Dw.roa Signing time: Tue 09 Dec 2025 11:46:26 +0000 ROA not before: Tue 09 Dec 2025 11:46:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3303 IP address blocks: 91.220.99.0/24 maxlen: 24 185.176.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:ef:29:8c:56:de:cf:2d:67:b7:b8:26:fd:bf:6f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Validity Not Before: Dec 9 11:46:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34ad2b273dc86780b978d7bbb341ea4633e4dc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:57:94:e4:7b:8d:ac:15:fa:c0:87:12:25: 56:68:55:75:17:1d:9c:00:dd:07:d6:26:27:f6:c5: 3f:3e:33:c2:7a:82:4b:36:78:ee:74:d7:f8:70:b9: 49:e0:3e:36:3a:17:42:f3:a5:a6:d8:0e:43:1c:4f: da:60:40:99:08:5d:74:74:8f:2b:4e:0d:b4:8a:8c: 51:b2:ba:7a:d3:7d:8c:76:cf:d8:35:b0:2b:72:90: cc:4d:5a:a2:ff:8b:47:08:e6:60:cd:84:7b:6b:75: 2f:9c:06:7c:b9:33:93:27:e5:0d:9c:2a:10:2d:b3: 3f:6d:8e:e3:a2:32:e1:69:04:6c:25:9f:e3:f7:e5: 0a:1d:b9:6f:4c:ba:f2:11:8d:10:f0:b8:05:81:66: 5b:98:20:ac:c0:b6:a4:55:04:70:a3:6a:d4:b2:0a: f5:41:00:28:1f:d5:e3:a9:0d:4a:51:8a:9e:28:af: fc:a6:93:08:85:5b:36:2b:b4:0f:9a:10:2b:68:e3: 96:3d:77:a5:a4:8d:a5:bc:2e:14:9f:5e:92:f9:66: 28:43:93:39:f9:eb:80:31:c7:20:49:fd:06:db:ae: d1:a4:b1:96:55:f7:cf:71:55:ee:ba:0c:43:9c:49: 50:73:a8:ca:cd:eb:1b:01:fa:a1:c7:d8:23:a2:03: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:2B:27:3D:C8:67:80:B9:78:D7:BB:B3:41:EA:46:33:E4:DC:3C X509v3 Authority Key Identifier: keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/NK0rJz3IZ4C5eNe7s0HqRjPk3Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.99.0/24 185.176.236.0/22 Signature Algorithm: sha256WithRSAEncryption 38:09:4b:3b:9b:6f:b4:cf:1e:38:a8:57:73:01:5c:41:6b:ba: 3e:ec:4f:3b:c9:26:32:4f:76:ef:8d:dc:d2:0b:28:80:12:dc: f8:1e:52:01:34:80:1c:d6:0d:11:a2:4d:bc:af:6e:c1:97:bf: 3a:d5:2a:1a:bd:82:7f:08:2a:ef:25:d2:aa:81:0c:3a:9b:d4: ea:34:f6:ec:29:1a:e4:12:72:4d:3c:80:31:c7:dd:08:d3:7d: 85:be:79:d4:eb:18:d2:95:fa:86:87:33:0f:2f:b8:c4:4e:85: 2b:73:f2:d1:61:4f:48:a1:51:a6:50:a2:31:bc:ba:7e:60:35: cd:58:9a:1b:5b:94:2b:c0:31:06:37:bc:88:85:6c:85:a1:7a: 36:5b:99:85:f8:c7:eb:26:4e:ff:cb:74:66:c3:3b:bb:a2:f1: c9:92:d7:66:27:f2:1e:db:66:02:c9:bc:21:be:85:8a:c1:89: 4f:a0:14:12:25:9b:73:96:a4:02:81:9b:2a:90:16:c8:82:c1: 34:11:86:11:37:50:63:f1:eb:bd:66:ad:fc:97:47:05:27:c9: 7f:71:0e:af:c3:21:a9:3e:46:76:f6:3d:d7:cf:70:a0:3a:2c: 6f:5b:19:ec:76:56:0f:50:70:c0:08:b6:a9:fe:d3:2b:41:75: ac:86:b1:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsC7ymMVt7PLWe3uCb9v2+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDRiYzg5ZWViNGE5Yzg5ZjEwMDVlYWFkMjI3YzEzMjVl ZDE1NjIwHhcNMjUxMjA5MTE0NjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGFkMmIyNzNkYzg2NzgwYjk3OGQ3YmJiMzQxZWE0NjMzZTRkYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVJXlOR7jawV+sCHEiVWaFV1Fx2c AN0H1iYn9sU/PjPCeoJLNnjudNf4cLlJ4D42OhdC86Wm2A5DHE/aYECZCF10dI8r Tg20ioxRsrp6032Mds/YNbArcpDMTVqi/4tHCOZgzYR7a3UvnAZ8uTOTJ+UNnCoQ LbM/bY7jojLhaQRsJZ/j9+UKHblvTLryEY0Q8LgFgWZbmCCswLakVQRwo2rUsgr1 QQAoH9XjqQ1KUYqeKK/8ppMIhVs2K7QPmhAraOOWPXelpI2lvC4Un16S+WYoQ5M5 +euAMccgSf0G267RpLGWVffPcVXuugxDnElQc6jKzesbAfqhx9gjogNwFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDStKyc9yGeAuXjXu7NB6kYz5Nw8MB8GA1UdIwQY MBaAFHbUvInutKnInxAF6q0ifBMl7RViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt MDkxZjdmOWI5NzYxLzEvTkswckp6M0laNEM1ZU5lN3MwSHFSalBrM0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx LzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9xjAwQC ubDsMA0GCSqGSIb3DQEBCwUAA4IBAQA4CUs7m2+0zx44qFdzAVxBa7o+7E87ySYy T3bvjdzSCyiAEtz4HlIBNIAc1g0Rok28r27Bl7861SoavYJ/CCrvJdKqgQw6m9Tq NPbsKRrkEnJNPIAxx90I032FvnnU6xjSlfqGhzMPL7jEToUrc/LRYU9IoVGmUKIx vLp+YDXNWJobW5QrwDEGN7yIhWyFoXo2W5mF+MfrJk7/y3Rmwzu7ovHJktdmJ/Ie 22YCybwhvoWKwYlPoBQSJZtzlqQCgZsqkBbIgsE0EYYRN1Bj8eu9Zq38l0cFJ8l/ cQ6vwyGpPkZ29j3Xz3CgOixvWxnsdlYPUHDACLap/tMrQXWshrG4 -----END CERTIFICATE-----Generated at Fri Dec 12 00:14:11 2025 by rpki-client