This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa File: nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa (raw, json) Hash identifier: NleUca8CC+8N3vwArPhRJ2zlLJElpiDe/ATFPORPOnM= Subject key identifier: 9E:5B:DC:4D:6F:E7:46:BA:91:81:3B:53:EC:63:C9:A0:46:3C:CE:DF Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Certificate serial: 019B7C11813B4E56B789977D40C4D5054C19 Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa Signing time: Fri 02 Jan 2026 00:18:00 +0000 ROA not before: Fri 02 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48003 IP address blocks: 91.208.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:81:3b:4e:56:b7:89:97:7d:40:c4:d5:05:4c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Validity Not Before: Jan 2 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e5bdc4d6fe746ba91813b53ec63c9a0463ccedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:64:9d:7d:e1:ee:dd:ca:a8:74:55:76:68: 6b:61:b7:9f:12:17:66:09:85:5c:98:8d:8e:67:40: f9:b2:26:84:13:0e:83:11:79:09:73:60:1e:d3:72: 5d:88:23:77:cf:bb:e0:b9:da:4f:90:b8:b4:88:91: 6b:d7:9a:37:05:b0:c0:26:94:9b:d8:2e:15:5c:6c: b9:4b:63:f9:c4:49:b7:c2:81:4f:ae:18:43:14:5a: e3:30:1c:7c:17:7e:4e:23:12:d7:e9:08:45:eb:31: 65:b4:06:99:b8:c1:a2:ac:9c:30:bd:5f:61:28:42: 8d:7c:33:cf:c1:da:15:f4:2f:f0:35:26:7a:9d:de: e7:94:06:8c:4a:85:23:43:12:85:00:08:9a:7b:54: 46:f8:0a:d6:f7:c8:9f:8a:1e:47:4a:08:4a:9a:20: b5:6a:e8:fa:e8:49:70:8a:50:41:97:91:eb:f8:04: 3c:1a:e2:80:97:23:aa:77:c7:3c:bd:eb:b7:a7:b1: 94:35:a8:2c:ec:85:11:7e:0f:97:1c:69:9f:0d:61: c4:55:41:20:7e:81:f1:48:65:a7:40:1c:be:6c:35: c9:04:fd:f3:39:24:53:79:1d:2e:17:b4:72:98:a4: 44:d0:dc:be:c0:59:2d:04:6f:af:18:94:6b:64:4c: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5B:DC:4D:6F:E7:46:BA:91:81:3B:53:EC:63:C9:A0:46:3C:CE:DF X509v3 Authority Key Identifier: keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.239.0/24 Signature Algorithm: sha256WithRSAEncryption ae:04:29:d4:e3:87:e2:fc:17:80:1c:69:0e:3c:9c:e4:20:ff: bc:01:ff:f6:b9:62:48:2e:b8:37:ca:80:1d:5c:39:df:cc:db: 75:66:dd:2f:e2:e1:ea:df:c3:a3:d9:82:c9:c7:b7:4a:f4:98: 79:e3:39:be:70:70:b1:04:6b:36:43:7a:de:b1:29:e8:28:7c: 04:7f:09:fe:52:18:f1:70:51:8a:b0:5a:28:af:b1:ee:8e:62: 4e:3e:2f:d4:19:44:98:25:45:ef:57:18:bb:86:51:e9:25:03: 28:e1:86:3c:c9:23:3c:80:7d:e8:20:ea:65:bb:bd:0d:96:60: 17:fc:f0:c7:54:8b:81:23:e1:87:8d:51:25:88:eb:92:9d:45: 70:47:e5:2c:ef:1d:99:33:74:10:c8:e4:c8:a0:c1:c6:b1:1f: 59:ef:df:4f:84:3f:ff:80:95:22:09:32:95:58:23:93:f0:7e: 15:65:a9:de:ff:bb:f9:7b:e2:7d:e2:69:ee:82:8c:f1:6c:d4: e6:50:d0:53:b7:cf:ca:2d:76:0c:d0:0d:11:d6:b8:31:85:b3: 6f:ea:87:4a:10:df:b2:01:79:de:72:57:c8:61:7e:38:d1:a1: b5:6f:41:63:de:1c:1a:f5:67:fe:2f:27:6f:b1:27:33:c8:28: 87:86:57:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYE7Tla3iZd9QMTVBUwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1 ZDE0ZWMwHhcNMjYwMTAyMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTViZGM0ZDZmZTc0NmJhOTE4MTNiNTNlYzYzYzlhMDQ2M2NjZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tknX3h7t3KqHRVdmhrYbefEhdm CYVcmI2OZ0D5siaEEw6DEXkJc2Ae03JdiCN3z7vgudpPkLi0iJFr15o3BbDAJpSb 2C4VXGy5S2P5xEm3woFPrhhDFFrjMBx8F35OIxLX6QhF6zFltAaZuMGirJwwvV9h KEKNfDPPwdoV9C/wNSZ6nd7nlAaMSoUjQxKFAAiae1RG+ArW98ifih5HSghKmiC1 auj66ElwilBBl5Hr+AQ8GuKAlyOqd8c8veu3p7GUNags7IURfg+XHGmfDWHEVUEg foHxSGWnQBy+bDXJBP3zOSRTeR0uF7RymKRE0Ny+wFktBG+vGJRrZEwKUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5b3E1v50a6kYE7U+xjyaBGPM7fMB8GA1UdIwQY MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt OGIzMTUyMjk3NTdkLzEvbmx2Y1RXX25ScnFSZ1R0VDdHUEpvRVk4enQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DvMA0G CSqGSIb3DQEBCwUAA4IBAQCuBCnU44fi/BeAHGkOPJzkIP+8Af/2uWJILrg3yoAd XDnfzNt1Zt0v4uHq38Oj2YLJx7dK9Jh54zm+cHCxBGs2Q3resSnoKHwEfwn+Uhjx cFGKsFoor7HujmJOPi/UGUSYJUXvVxi7hlHpJQMo4YY8ySM8gH3oIOplu70NlmAX /PDHVIuBI+GHjVEliOuSnUVwR+Us7x2ZM3QQyOTIoMHGsR9Z799PhD//gJUiCTKV WCOT8H4VZane/7v5e+J94mnugozxbNTmUNBTt8/KLXYM0A0R1rgxhbNv6odKEN+y AXneclfIYX440aG1b0Fj3hwa9Wf+LydvsSczyCiHhlfw -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:47 2026 by rpki-client