This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa File: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (raw, json) Hash identifier: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU= Subject key identifier: 9D:D9:59:4F:54:55:BF:92:E2:9B:ED:5F:1C:3F:66:19:26:5D:E5:E4 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A6A646B4C717A4F7AD1097D0C401 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209811 IP address blocks: 91.224.41.0/24 maxlen: 24 93.120.8.0/23 maxlen: 23 94.232.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a6:a6:46:b4:c7:17:a4:f7:ad:10:97:d0:c4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dd9594f5455bf92e29bed5f1c3f6619265de5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:2c:c9:d8:07:f5:ea:52:29:a2:51:cc:ed: 5d:9f:5f:26:91:d0:4f:0d:9c:e6:ec:a1:41:2a:ef: 0f:81:12:3e:b1:26:e6:6d:b8:6e:0a:fa:df:e2:94: d0:cd:2a:25:46:81:d2:2b:79:48:06:77:04:48:3c: b2:ba:d4:79:19:e9:b5:2e:4f:9a:cf:f9:20:2c:68: 3f:44:82:cc:7e:90:f1:73:f6:ba:5d:12:71:b1:4c: 7e:80:7f:67:6e:29:73:a9:b6:28:34:e3:14:ad:7c: b4:f9:fd:b8:a9:d1:84:ab:09:74:3a:55:42:9f:ef: d9:b0:39:6b:c2:9b:b8:cb:c8:47:38:f3:e5:5b:41: 07:35:54:85:71:d4:ee:08:83:53:e5:c5:57:73:6f: d9:ee:12:0f:0a:8a:a2:67:1f:db:f7:21:df:26:ab: e2:ef:4b:3c:31:df:a2:6f:a0:8e:8e:05:de:ef:7d: a7:80:ec:ff:8e:52:68:0b:7b:84:33:d0:b7:8a:50: 81:ad:39:3e:a4:84:96:0b:7d:f5:33:88:9f:8e:cd: a5:cb:89:57:c4:ea:41:f9:18:90:25:cf:23:70:74: a3:ed:53:01:4f:20:1b:8a:df:26:02:49:ad:5c:b8: c0:4d:e1:42:a7:c5:a6:7f:e2:d5:30:44:95:82:81: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D9:59:4F:54:55:BF:92:E2:9B:ED:5F:1C:3F:66:19:26:5D:E5:E4 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.41.0/24 93.120.8.0/23 94.232.96.0/22 Signature Algorithm: sha256WithRSAEncryption 10:50:fe:71:e0:d8:1a:ea:4c:e3:62:d7:ac:5f:94:a3:17:68: da:5c:67:01:67:d7:ae:4f:c0:ad:8e:c0:34:ea:b9:59:84:a3: d7:3c:67:d1:90:78:b2:3a:e2:ff:d3:ee:20:72:f9:c8:13:a7: 2b:9b:e7:65:a1:f4:03:5d:16:39:71:66:fe:27:e6:49:e2:9d: 2b:dc:b4:82:e0:72:c5:46:ca:6f:72:5d:31:3d:8d:6e:a2:8e: 27:c5:97:82:af:08:a0:84:3b:4d:10:b5:ab:0c:ae:19:bb:4a: 63:d4:59:63:c1:7a:a9:02:8b:15:c2:08:5a:e1:22:6f:af:ad: 15:53:7a:ab:63:72:d6:17:32:90:d4:f1:56:ca:79:0e:74:57: ec:79:92:fc:6b:ff:dd:b7:b1:a6:91:dd:6f:cf:6e:ee:b5:af: e7:2b:a9:25:07:72:06:dc:70:2c:11:a8:5e:b2:b4:4f:9f:ea: c5:25:0a:15:2b:14:7c:4b:8c:c0:77:b8:e9:d1:9b:b2:ed:06: 3f:c1:87:7e:f5:80:2c:e9:15:03:44:3c:ea:82:74:c7:b9:24: 4f:d5:90:d8:ee:68:09:05:6b:f9:52:16:74:bc:8d:99:7c:17: ac:13:3c:fe:2c:70:e0:01:84:4c:7b:24:2c:06:93:c9:d1:5f: 2f:bf:1c:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N6amRrTHF6T3rRCX0MQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQ5NTk0ZjU0NTViZjkyZTI5YmVkNWYxYzNmNjYxOTI2NWRlNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/YsydgH9epSKaJRzO1dn18mkdBP DZzm7KFBKu8PgRI+sSbmbbhuCvrf4pTQzSolRoHSK3lIBncESDyyutR5Gem1Lk+a z/kgLGg/RILMfpDxc/a6XRJxsUx+gH9nbilzqbYoNOMUrXy0+f24qdGEqwl0OlVC n+/ZsDlrwpu4y8hHOPPlW0EHNVSFcdTuCINT5cVXc2/Z7hIPCoqiZx/b9yHfJqvi 70s8Md+ib6COjgXe732ngOz/jlJoC3uEM9C3ilCBrTk+pISWC331M4ifjs2ly4lX xOpB+RiQJc8jcHSj7VMBTyAbit8mAkmtXLjATeFCp8Wmf+LVMESVgoH9SQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ3ZWU9UVb+S4pvtXxw/ZhkmXeXkMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvbmRsWlQxUlZ2NUxpbS0xZkhEOW1HU1pkNWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+ApAwQB XXgIAwQCXuhgMA0GCSqGSIb3DQEBCwUAA4IBAQAQUP5x4Nga6kzjYtesX5SjF2ja XGcBZ9euT8CtjsA06rlZhKPXPGfRkHiyOuL/0+4gcvnIE6crm+dlofQDXRY5cWb+ J+ZJ4p0r3LSC4HLFRspvcl0xPY1uoo4nxZeCrwighDtNELWrDK4Zu0pj1FljwXqp AosVwgha4SJvr60VU3qrY3LWFzKQ1PFWynkOdFfseZL8a//dt7Gmkd1vz27uta/n K6klB3IG3HAsEahesrRPn+rFJQoVKxR8S4zAd7jp0Zuy7QY/wYd+9YAs6RUDRDzq gnTHuSRP1ZDY7mgJBWv5UhZ0vI2ZfBesEzz+LHDgAYRMeyQsBpPJ0V8vvxz6 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client