This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/nu2lbW0g95yVXBtDFUgDrkJzEwM.roa File: nu2lbW0g95yVXBtDFUgDrkJzEwM.roa (raw, json) Hash identifier: 8SMpinprSw+0Hderswh6JaQ9jOtPmZtb2eKAdki8fbU= Subject key identifier: 9E:ED:A5:6D:6D:20:F7:9C:95:5C:1B:43:15:48:03:AE:42:73:13:03 Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Certificate serial: 019B7C808B3B2E317E5F920A23973D002A43 Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/nu2lbW0g95yVXBtDFUgDrkJzEwM.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41600 IP address blocks: 91.201.36.0/22 maxlen: 22 195.138.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:3b:2e:31:7e:5f:92:0a:23:97:3d:00:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eeda56d6d20f79c955c1b43154803ae42731303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:6b:3d:57:ed:25:f2:7e:9a:b6:1e:82:ed: 0f:1c:6a:5a:79:44:1c:ac:b4:4c:e8:a5:e6:bd:1b: db:da:ff:75:80:1b:63:66:6e:21:7b:68:7f:43:9a: ec:33:c7:b3:95:59:08:80:3a:1b:fd:af:e0:bd:ed: 26:ea:c7:e1:0d:26:78:c2:03:72:a8:55:30:40:8e: 48:96:9e:e4:e8:7a:7b:9c:bf:ff:e6:0c:28:af:e2: 31:de:0f:4d:ba:82:44:a3:ce:59:8d:25:de:2d:39: a1:7c:14:a5:8c:e5:77:a9:f8:11:db:8e:25:09:8e: 5c:bd:3f:b5:d1:a2:71:10:9c:1d:2f:a4:c3:ba:1d: e2:eb:ad:99:6b:2c:0c:e4:24:31:97:5d:98:c8:f0: a7:c7:a2:43:39:75:39:d1:ec:80:f5:a6:af:45:77: d3:84:92:54:95:35:44:65:35:90:54:9e:6a:14:9d: 06:e6:b7:8e:59:85:e0:c4:fc:63:56:32:98:e6:04: 05:5b:ec:03:11:08:55:e3:f3:18:49:a6:ea:fd:70: 2a:e4:3b:23:ce:d7:83:7e:2e:77:06:2f:7e:84:c0: b6:be:45:4d:52:09:46:8c:02:0f:9e:69:31:66:c1: a5:84:b2:43:0f:eb:7d:97:36:aa:ef:04:42:da:06: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:ED:A5:6D:6D:20:F7:9C:95:5C:1B:43:15:48:03:AE:42:73:13:03 X509v3 Authority Key Identifier: keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/nu2lbW0g95yVXBtDFUgDrkJzEwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.36.0/22 195.138.218.0/24 Signature Algorithm: sha256WithRSAEncryption 69:08:b7:e2:24:36:2c:00:38:6e:fe:72:77:65:d4:1f:c3:46: a1:d8:89:6d:73:c6:d2:ab:85:5c:e6:0c:7d:08:21:f1:e8:3b: c5:15:94:29:19:ef:8b:6a:a6:6b:41:dd:a7:9d:c6:9f:cc:99: 53:0c:cb:89:1c:0d:b9:c9:e3:cd:8e:b1:d6:fd:32:ee:d3:8c: 65:fc:1a:48:77:d0:35:b0:23:15:a4:b7:a0:a4:f7:c6:6c:65: a1:b4:7e:68:4a:dc:e2:92:93:20:54:a6:66:e8:55:31:47:ca: 67:8a:b8:3c:2b:f4:1a:a9:60:6e:77:79:e6:18:99:64:f4:51: 88:76:8a:f0:f5:ba:8f:29:ed:38:94:f9:ab:77:6c:d9:35:eb: 2b:c0:6b:d6:9f:5e:7e:fd:3a:dc:5d:b7:75:b4:c4:1c:54:9b: 3c:b6:1e:8b:b7:03:b4:e3:d0:a5:2a:51:85:41:24:2c:99:de: 54:7a:72:5a:5c:28:cc:f6:98:b7:2a:ed:b5:a5:d7:3a:bf:c5: d9:71:dd:17:d0:92:c6:e9:d4:31:25:1b:3a:31:df:39:ed:03: c4:7c:27:71:e0:27:15:ce:a8:76:47:5b:66:a8:91:0e:d9:9d: e1:53:de:4f:2c:b0:84:b5:86:93:ef:3f:88:e9:23:0e:16:39: a3:4c:98:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gIs7LjF+X5IKI5c9ACpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMWRiNWQ3MjhiZDI3NmI0Yzc1MmUxMjVhNTA4ZmY4Nzg0 YWQyODUwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWVkYTU2ZDZkMjBmNzljOTU1YzFiNDMxNTQ4MDNhZTQyNzMxMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuZrPVftJfJ+mrYegu0PHGpaeUQc rLRM6KXmvRvb2v91gBtjZm4he2h/Q5rsM8ezlVkIgDob/a/gve0m6sfhDSZ4wgNy qFUwQI5Ilp7k6Hp7nL//5gwor+Ix3g9NuoJEo85ZjSXeLTmhfBSljOV3qfgR244l CY5cvT+10aJxEJwdL6TDuh3i662ZaywM5CQxl12YyPCnx6JDOXU50eyA9aavRXfT hJJUlTVEZTWQVJ5qFJ0G5reOWYXgxPxjVjKY5gQFW+wDEQhV4/MYSabq/XAq5Dsj zteDfi53Bi9+hMC2vkVNUglGjAIPnmkxZsGlhLJDD+t9lzaq7wRC2gZkZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ7tpW1tIPeclVwbQxVIA65CcxMDMB8GA1UdIwQY MBaAFL0dtdcovSdrTHUuElpQj/h4StKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMt Nzc2OTE1NDg4MjI1LzEvbnUybGJXMGc5NXlWWEJ0REZVZ0Rya0p6RXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMtNzc2OTE1NDg4MjI1 LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8kkAwQA w4raMA0GCSqGSIb3DQEBCwUAA4IBAQBpCLfiJDYsADhu/nJ3ZdQfw0ah2Iltc8bS q4Vc5gx9CCHx6DvFFZQpGe+LaqZrQd2nncafzJlTDMuJHA25yePNjrHW/TLu04xl /BpId9A1sCMVpLegpPfGbGWhtH5oStzikpMgVKZm6FUxR8pnirg8K/QaqWBud3nm GJlk9FGIdorw9bqPKe04lPmrd2zZNesrwGvWn15+/TrcXbd1tMQcVJs8th6LtwO0 49ClKlGFQSQsmd5UenJaXCjM9pi3Ku21pdc6v8XZcd0X0JLG6dQxJRs6Md857QPE fCdx4CcVzqh2R1tmqJEO2Z3hU95PLLCEtYaT7z+I6SMOFjmjTJio -----END CERTIFICATE-----Generated at Tue Feb 10 04:17:04 2026 by rpki-client