This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa File: NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa (raw, json) Hash identifier: puZ/+ztmFMeMmQqgSFGKCmQg2VYFRDLAAcv+aC1rqdo= Subject key identifier: 34:56:2D:D8:6B:92:59:7B:6E:3B:09:56:E8:DA:BC:08:C5:AD:A2:FB Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0 Certificate serial: 019B7AC8D6A1C3BC1971C3A95F39C68691ED Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56524 IP address blocks: 91.223.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d6:a1:c3:bc:19:71:c3:a9:5f:39:c6:86:91:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34562dd86b92597b6e3b0956e8dabc08c5ada2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:47:c0:d6:24:c9:90:18:8e:88:55:60:4a: 4b:44:12:8d:0a:b7:06:e6:e0:f7:91:b6:e4:e8:17: a2:e7:5c:3a:d6:8f:be:05:8f:94:76:ba:f8:67:31: 2b:41:d2:43:21:08:71:2a:0e:64:c9:52:e7:c6:a9: 92:04:a0:0a:c6:ef:a1:e6:e7:f7:b7:b1:ed:ab:81: 62:70:68:69:86:a2:e3:9c:35:08:5b:a6:f8:34:65: b8:73:10:e1:1c:99:80:0a:cf:5c:d9:7c:d8:75:76: 16:b3:26:e4:1b:4b:5c:23:67:bf:ea:ed:72:67:6a: 22:60:ad:4e:4a:96:8e:7c:66:be:da:24:ca:69:bd: eb:7b:09:47:c5:5e:2e:eb:e3:46:85:bf:9f:4f:ac: c4:92:5c:84:a5:8e:ca:be:99:98:77:f4:85:67:af: 86:65:57:7c:ac:a7:c5:3e:e8:ab:e7:cd:24:2e:08: 18:6c:60:f6:13:0f:b8:35:a9:54:3a:a2:4c:57:70: e0:73:ed:99:2d:f8:ad:51:98:2c:d7:65:ff:f0:4b: bd:2a:91:56:df:96:05:2c:3b:fd:a7:59:55:61:8f: 94:0d:87:76:26:1d:13:4b:d7:fa:1e:eb:b2:48:59: 80:22:5e:98:6a:82:5d:93:b7:4c:7d:5c:26:98:7b: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:56:2D:D8:6B:92:59:7B:6E:3B:09:56:E8:DA:BC:08:C5:AD:A2:FB X509v3 Authority Key Identifier: keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.214.0/24 Signature Algorithm: sha256WithRSAEncryption a1:9e:a8:f3:ce:50:d5:90:aa:21:f3:33:2b:8e:58:5a:0d:7a: 5c:c2:9c:d6:67:1b:ef:5a:71:83:82:7c:8d:b6:05:af:b9:40: 03:16:31:bc:87:f5:70:76:24:ed:3b:b5:04:21:14:a9:27:e1: d0:b8:a2:e3:0c:6a:e0:eb:67:df:00:b0:14:1e:3e:bf:88:a8: 2d:b6:94:e4:7d:cf:e4:f5:03:76:67:31:b2:88:39:7f:1e:a6: 74:e6:e7:48:98:2d:d5:71:5c:9c:20:22:12:3b:82:49:30:10: 10:e2:36:a7:74:58:9f:13:d6:20:9e:af:c7:be:43:61:36:5b: ee:77:29:71:60:75:39:f5:90:46:c0:5a:20:fa:f2:d7:7f:3a: f0:53:9e:41:80:6d:36:7c:56:a6:c4:cd:1d:44:55:37:7e:6f: e8:44:07:2a:21:a3:7d:92:d6:d0:6e:8a:52:95:13:f7:d4:3c: 75:31:22:22:9f:72:d6:ca:48:f7:5d:fc:05:21:3b:c8:d4:82: c4:41:72:ea:78:10:9c:88:33:2e:88:89:ae:8a:86:c8:8f:1a: 0b:42:50:8c:8f:65:3e:78:2d:f8:53:ad:b5:83:fb:55:b5:5c: 44:fb:f9:f3:4e:b9:74:23:0c:99:ae:b5:c4:b0:70:49:e7:65: 0b:6d:ab:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNahw7wZccOpXznGhpHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmQyNGFkZTM3YTIyMzM5MzI4NDA5ZDc1N2Q0N2Y5Nzk0 M2I3YTAwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDU2MmRkODZiOTI1OTdiNmUzYjA5NTZlOGRhYmMwOGM1YWRhMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRZHwNYkyZAYjohVYEpLRBKNCrcG 5uD3kbbk6Bei51w61o++BY+Udrr4ZzErQdJDIQhxKg5kyVLnxqmSBKAKxu+h5uf3 t7Htq4FicGhphqLjnDUIW6b4NGW4cxDhHJmACs9c2XzYdXYWsybkG0tcI2e/6u1y Z2oiYK1OSpaOfGa+2iTKab3rewlHxV4u6+NGhb+fT6zEklyEpY7KvpmYd/SFZ6+G ZVd8rKfFPuir580kLggYbGD2Ew+4NalUOqJMV3Dgc+2ZLfitUZgs12X/8Eu9KpFW 35YFLDv9p1lVYY+UDYd2Jh0TS9f6HuuySFmAIl6YaoJdk7dMfVwmmHsmdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRWLdhrkll7bjsJVujavAjFraL7MB8GA1UdIwQY MBaAFEktJK3jeiIzkyhAnXV9R/l5Q7egMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAt ZTI0YjU3OWM5OTE0LzEvTkZZdDJHdVNXWHR1T3dsVzZOcThDTVd0b3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAtZTI0YjU3OWM5OTE0 LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/WMA0G CSqGSIb3DQEBCwUAA4IBAQChnqjzzlDVkKoh8zMrjlhaDXpcwpzWZxvvWnGDgnyN tgWvuUADFjG8h/VwdiTtO7UEIRSpJ+HQuKLjDGrg62ffALAUHj6/iKgttpTkfc/k 9QN2ZzGyiDl/HqZ05udImC3VcVycICISO4JJMBAQ4jandFifE9Ygnq/HvkNhNlvu dylxYHU59ZBGwFog+vLXfzrwU55BgG02fFamxM0dRFU3fm/oRAcqIaN9ktbQbopS lRP31Dx1MSIin3LWykj3XfwFITvI1ILEQXLqeBCciDMuiImuiobIjxoLQlCMj2U+ eC34U621g/tVtVxE+/nzTrl0IwyZrrXEsHBJ52ULbatq -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client