This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nrEO1LwODrFmSevli7_t9F7GPZ4.roa File: nrEO1LwODrFmSevli7_t9F7GPZ4.roa (raw, json) Hash identifier: Zoj1yWH/o3nIYH7s5SfUXzlnm7ibfpx4Jw+0Ke350ZM= Subject key identifier: 9E:B1:0E:D4:BC:0E:0E:B1:66:49:EB:E5:8B:BF:ED:F4:5E:C6:3D:9E Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C7752372C9FC648DBA6C9FBC7EDC2D Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nrEO1LwODrFmSevli7_t9F7GPZ4.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 212.116.230.0/24 maxlen: 24 212.116.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:23:72:c9:fc:64:8d:ba:6c:9f:bc:7e:dc:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eb10ed4bc0e0eb16649ebe58bbfedf45ec63d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:ce:e8:d2:e5:1a:83:e7:25:4d:36:37:c0: 73:fb:71:f5:8c:79:bb:6c:7a:12:ef:24:62:e0:2e: dc:c5:98:a8:8c:ee:0a:0c:e7:b3:04:91:4d:73:22: 1e:82:ba:98:fb:55:c3:e6:e9:3f:e0:2a:c5:c9:6b: 46:04:06:6f:2f:6c:1e:24:d5:2a:e8:b5:bd:ed:8c: 14:0c:89:16:19:3b:20:86:a8:1d:ec:dc:14:1c:5c: 6f:0a:5b:fb:67:e8:02:df:0b:fd:d4:e6:0c:e9:fa: e0:62:7e:5a:4d:e0:70:92:0a:e0:8a:28:99:d5:e3: e3:0d:79:ea:08:b9:b1:69:df:89:b8:b8:04:48:2c: c0:0c:71:e9:91:90:fc:8a:ae:bf:e8:8d:2d:91:09: fc:89:ce:e0:c3:6b:0b:cc:10:a7:41:fb:ce:6c:17: cf:d3:63:01:bb:ca:45:fa:7e:3e:03:71:8f:d0:6f: 10:14:61:cd:1b:e5:c8:26:e7:1d:6f:6f:74:84:34: d3:75:58:c6:ae:c4:80:6e:b1:d7:06:bf:31:61:92: cf:68:d0:6a:e6:ed:7d:23:55:66:bd:8a:18:4b:9d: b8:4b:53:9b:b6:b5:d3:f5:5e:ed:f8:74:07:12:64: 86:20:9e:46:24:8e:07:d1:8d:cf:43:0f:c8:54:10: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:0E:D4:BC:0E:0E:B1:66:49:EB:E5:8B:BF:ED:F4:5E:C6:3D:9E X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/nrEO1LwODrFmSevli7_t9F7GPZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.230.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:ad:34:2f:72:03:0e:26:16:5e:0e:ac:26:2c:ef:4d:b0:f5: 8c:06:62:cb:8a:9f:72:8c:0b:fe:d9:12:89:56:09:e6:91:ff: 83:c5:f6:4c:3a:b1:fb:06:6d:00:b9:f6:53:fe:f1:58:75:bd: 6f:1f:d7:a6:cf:92:67:3f:1a:97:40:10:5b:fd:d6:a1:21:6d: 59:d8:d1:36:b7:75:15:e7:51:87:85:6e:b3:f7:ab:41:fb:1e: b3:e3:a6:5c:e3:21:d3:57:df:78:35:e6:3a:dd:99:ce:7c:f1: 6d:a3:6a:1c:53:ab:80:e3:c4:bb:c0:92:23:b6:a6:76:1b:8f: 8d:f5:f4:79:39:4c:4d:6c:ff:a3:3c:03:94:c5:2d:b0:47:f8: 78:34:bf:6a:e2:1f:b4:b6:ce:31:86:f6:23:d3:5d:e5:33:7d: 6d:63:03:6e:43:6d:ef:ce:89:5a:6b:80:50:d2:87:97:4f:6d: 59:0e:20:d7:cb:5b:f5:a0:19:bd:31:00:aa:95:29:70:0e:18: 58:67:f6:4e:9a:c1:fc:b0:f1:87:5e:37:04:bf:28:64:32:c7: 54:b8:74:a8:f7:e4:97:5c:0f:fe:24:35:ef:34:a8:f7:fe:4a: f0:1e:a6:7d:34:a7:3e:74:8f:7f:77:f5:41:48:4c:b4:71:5b: d1:75:a3:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Ujcsn8ZI26bJ+8ftwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWIxMGVkNGJjMGUwZWIxNjY0OWViZTU4YmJmZWRmNDVlYzYzZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zO6NLlGoPnJU02N8Bz+3H1jHm7 bHoS7yRi4C7cxZiojO4KDOezBJFNcyIegrqY+1XD5uk/4CrFyWtGBAZvL2weJNUq 6LW97YwUDIkWGTsghqgd7NwUHFxvClv7Z+gC3wv91OYM6frgYn5aTeBwkgrgiiiZ 1ePjDXnqCLmxad+JuLgESCzADHHpkZD8iq6/6I0tkQn8ic7gw2sLzBCnQfvObBfP 02MBu8pF+n4+A3GP0G8QFGHNG+XIJucdb290hDTTdVjGrsSAbrHXBr8xYZLPaNBq 5u19I1VmvYoYS524S1ObtrXT9V7t+HQHEmSGIJ5GJI4H0Y3PQw/IVBBeUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6xDtS8Dg6xZknr5Yu/7fRexj2eMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvbnJFTzFMd09EckZtU2V2bGk3X3Q5RjdHUFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HTmMA0G CSqGSIb3DQEBCwUAA4IBAQBdrTQvcgMOJhZeDqwmLO9NsPWMBmLLip9yjAv+2RKJ Vgnmkf+DxfZMOrH7Bm0AufZT/vFYdb1vH9emz5JnPxqXQBBb/dahIW1Z2NE2t3UV 51GHhW6z96tB+x6z46Zc4yHTV994NeY63ZnOfPFto2ocU6uA48S7wJIjtqZ2G4+N 9fR5OUxNbP+jPAOUxS2wR/h4NL9q4h+0ts4xhvYj013lM31tYwNuQ23vzolaa4BQ 0oeXT21ZDiDXy1v1oBm9MQCqlSlwDhhYZ/ZOmsH8sPGHXjcEvyhkMsdUuHSo9+SX XA/+JDXvNKj3/krwHqZ9NKc+dI9/d/VBSEy0cVvRdaOi -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:55 2026 by rpki-client