This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/njGiyS1riv8o5Tx4DTboEJsmuyA.roa File: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (raw, json) Hash identifier: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo= Subject key identifier: 9E:31:A2:C9:2D:6B:8A:FF:28:E5:3C:78:0D:36:E8:10:9B:26:BB:20 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF4CFA073C9E1D4136FAE323CB61A Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/njGiyS1riv8o5Tx4DTboEJsmuyA.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 89.249.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:cf:a0:73:c9:e1:d4:13:6f:ae:32:3c:b6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e31a2c92d6b8aff28e53c780d36e8109b26bb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:22:9b:9a:da:51:e3:14:f2:21:8f:6f:a1: ce:8c:25:3b:35:26:4d:66:e8:b8:0e:ce:73:b8:0c: 22:f5:e6:28:03:0f:55:c3:76:93:d8:80:9c:48:44: a6:ca:d3:1d:7d:4c:ae:24:fe:c3:cf:5c:b1:2e:a5: de:90:f6:33:58:ee:51:c1:fa:5b:db:59:0d:6d:94: b9:85:2a:7c:e8:1a:4e:69:b4:3e:3f:65:1c:40:94: 43:9f:5c:e2:6a:e8:49:d8:73:80:5c:38:66:e8:5f: 86:60:3c:6b:7f:30:de:cc:78:ef:43:59:78:c9:58: 47:33:02:2a:8d:a5:96:d2:ec:79:99:c6:cf:a6:19: d8:12:ed:af:fb:c6:93:89:e9:14:0d:6e:73:73:1e: e2:1c:37:b7:9e:2e:66:83:b0:d9:64:51:e5:c3:65: 55:1b:7e:1e:d6:d1:aa:3a:e3:c2:c9:be:c5:11:f0: 97:30:27:a0:38:11:cd:ca:64:21:39:ca:2f:40:dc: 8d:62:47:51:e5:c4:f4:03:38:b0:f7:1d:17:8f:27: 99:1c:38:f5:a2:f8:a7:15:e2:e3:ac:28:19:5b:cc: 0d:38:d5:32:fa:ac:ee:7a:7a:dc:c6:34:0d:d1:a6: 3d:af:49:5d:01:b2:8e:09:bd:dc:5a:3d:12:df:69: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:A2:C9:2D:6B:8A:FF:28:E5:3C:78:0D:36:E8:10:9B:26:BB:20 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/njGiyS1riv8o5Tx4DTboEJsmuyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.202.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:d7:91:96:fe:b4:29:49:7a:91:34:81:1f:c7:51:9b:54:f1: 0e:92:1d:28:e5:39:65:0b:09:f2:8a:78:71:60:ae:32:00:c1: 3e:96:5f:68:f5:f9:b4:6c:00:f1:24:f1:e9:cc:79:a9:31:d2: b4:e3:d8:92:d8:53:cb:00:14:86:c7:6b:62:f2:31:18:f7:6a: 0d:2b:76:fa:25:1b:77:5b:55:cc:f9:0e:df:82:7d:bc:95:1a: 58:3e:05:04:9a:bb:c1:22:d2:21:66:d1:f2:4f:53:32:e0:10: 4c:51:89:d0:2c:cb:39:02:b7:39:cb:46:f5:5a:3d:a2:f4:b3: 60:6a:3d:7f:64:3b:db:86:7e:e4:cc:2d:64:d3:a1:ed:68:64: 73:50:c0:d7:fa:af:2f:61:a6:5b:0f:35:e1:85:e5:80:27:a5: 57:c5:35:f1:52:fb:2a:aa:19:43:1d:39:c6:a2:a6:65:db:ee: f0:eb:88:f8:7c:23:bf:af:a7:7b:d1:c5:b2:f3:7e:1e:55:ab: 64:0a:ca:5b:09:0c:e8:01:91:03:49:fb:ea:28:19:04:de:53: 41:26:3f:c1:f8:bb:b8:45:9d:6b:14:0c:61:ca:e4:a1:35:be: dc:c6:36:9d:24:3b:f8:f3:33:35:9c:c4:07:a7:81:04:6c:60: 8c:5d:9b:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvTPoHPJ4dQTb64yPLYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTMxYTJjOTJkNmI4YWZmMjhlNTNjNzgwZDM2ZTgxMDliMjZiYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMim5raUeMU8iGPb6HOjCU7NSZN Zui4Ds5zuAwi9eYoAw9Vw3aT2ICcSESmytMdfUyuJP7Dz1yxLqXekPYzWO5Rwfpb 21kNbZS5hSp86BpOabQ+P2UcQJRDn1ziauhJ2HOAXDhm6F+GYDxrfzDezHjvQ1l4 yVhHMwIqjaWW0ux5mcbPphnYEu2v+8aTiekUDW5zcx7iHDe3ni5mg7DZZFHlw2VV G34e1tGqOuPCyb7FEfCXMCegOBHNymQhOcovQNyNYkdR5cT0Aziw9x0XjyeZHDj1 ovinFeLjrCgZW8wNONUy+qzuenrcxjQN0aY9r0ldAbKOCb3cWj0S32kDoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4xoskta4r/KOU8eA026BCbJrsgMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvbmpHaXlTMXJpdjhvNVR4NERUYm9FSnNtdXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnKMA0G CSqGSIb3DQEBCwUAA4IBAQB815GW/rQpSXqRNIEfx1GbVPEOkh0o5TllCwnyinhx YK4yAME+ll9o9fm0bADxJPHpzHmpMdK049iS2FPLABSGx2ti8jEY92oNK3b6JRt3 W1XM+Q7fgn28lRpYPgUEmrvBItIhZtHyT1My4BBMUYnQLMs5Arc5y0b1Wj2i9LNg aj1/ZDvbhn7kzC1k06HtaGRzUMDX+q8vYaZbDzXhheWAJ6VXxTXxUvsqqhlDHTnG oqZl2+7w64j4fCO/r6d70cWy834eVatkCspbCQzoAZEDSfvqKBkE3lNBJj/B+Lu4 RZ1rFAxhyuShNb7cxjadJDv48zM1nMQHp4EEbGCMXZss -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:48 2026 by rpki-client