This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/NRwgJUwXk3BWkcpGjCMp97lO_U4.roa File: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (raw, json) Hash identifier: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8= Subject key identifier: 35:1C:20:25:4C:17:93:70:56:91:CA:46:8C:23:29:F7:B9:4E:FD:4E Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Certificate serial: 019B7DCB359231CF618AFF824CD7C726AA1C Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/NRwgJUwXk3BWkcpGjCMp97lO_U4.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57630 IP address blocks: 91.237.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:35:92:31:cf:61:8a:ff:82:4c:d7:c7:26:aa:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=351c20254c1793705691ca468c2329f7b94efd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:4b:84:6f:2d:45:1a:1d:88:6f:e2:03:b9: e5:a6:ba:20:33:ec:44:2e:43:cd:3a:df:ac:ae:ee: d7:01:97:ac:63:4f:50:28:c3:c6:0c:67:37:db:e3: e0:29:45:6d:ba:f4:2e:36:0d:f2:b1:8a:37:1b:ec: 34:20:c4:35:4a:f2:d1:3f:3e:a1:4d:67:d3:a6:7a: 5f:be:38:ed:42:79:c8:89:49:45:2d:ec:d3:2d:50: 8a:02:6f:c9:f7:95:69:39:ed:81:62:eb:94:68:89: f5:1c:d7:84:72:7d:d6:36:ba:6f:b3:ed:db:23:61: 51:13:00:07:65:b3:73:e1:3e:14:2f:82:28:b1:6c: 99:69:7f:f8:46:df:56:d2:b6:e2:d5:75:e5:4a:ca: 8b:e6:38:81:a1:ef:39:e8:da:d5:3f:cb:b4:ee:1e: 0b:66:3b:78:d8:df:61:19:81:61:ec:00:89:7b:db: de:43:30:99:02:b7:86:02:6a:9c:70:87:f5:71:f8: 36:cf:07:af:c7:98:a3:4c:f1:ed:df:ed:9c:95:34: 80:79:e0:05:42:0c:2d:14:30:69:f7:49:54:de:60: 13:5a:e1:e6:4c:66:37:8b:bc:6d:d5:db:67:34:be: 24:e5:56:f8:04:ce:b8:3a:4b:76:2b:be:71:43:e6: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:20:25:4C:17:93:70:56:91:CA:46:8C:23:29:F7:B9:4E:FD:4E X509v3 Authority Key Identifier: keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/NRwgJUwXk3BWkcpGjCMp97lO_U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.106.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ab:4d:20:10:2c:3e:de:e7:49:64:88:0e:79:12:f3:1e:c4: 9f:d0:e5:4c:b7:9e:da:c4:ee:93:32:90:91:80:c4:ad:e6:9f: 5d:4a:74:a9:f0:99:dd:aa:5a:25:47:e7:64:cd:da:b9:bc:c9: 4e:2e:20:72:f4:e2:a0:ea:e5:a0:3d:b3:00:a4:98:93:9d:ef: 8b:28:34:4b:ea:34:83:5e:91:24:8d:60:37:22:63:ed:31:fc: eb:f6:35:2f:6e:1b:c5:22:0c:6a:0e:5f:97:cd:c7:95:79:f1: 1f:58:72:a1:fe:38:a4:ef:fa:a6:c8:69:21:ed:43:a6:ac:29: c2:7b:45:ce:7d:df:c3:2a:e7:68:d5:a0:a5:74:50:80:fc:bd: 1a:5b:ed:21:5c:7c:ee:2d:6a:29:61:a6:c7:cd:6e:f0:49:c7: f8:b7:f4:8a:32:95:a7:9a:ca:c7:d5:43:53:e2:b2:ad:ff:65: 74:df:f5:9e:11:63:01:df:9c:9d:8e:8a:11:83:da:9c:ed:cc: f7:2d:32:cd:4e:df:15:a9:ce:e6:f2:f5:13:db:07:22:92:d6: 43:04:92:a9:bb:00:70:7d:2e:03:2a:f0:3d:19:02:29:5d:66: 2e:86:88:a3:80:50:d5:49:b6:52:d6:3d:ee:bf:c6:c2:3a:a5: 28:4d:9d:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzWSMc9hiv+CTNfHJqocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk MWViYmUwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTFjMjAyNTRjMTc5MzcwNTY5MWNhNDY4YzIzMjlmN2I5NGVmZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxBLhG8tRRodiG/iA7nlprogM+xE LkPNOt+sru7XAZesY09QKMPGDGc32+PgKUVtuvQuNg3ysYo3G+w0IMQ1SvLRPz6h TWfTpnpfvjjtQnnIiUlFLezTLVCKAm/J95VpOe2BYuuUaIn1HNeEcn3WNrpvs+3b I2FREwAHZbNz4T4UL4IosWyZaX/4Rt9W0rbi1XXlSsqL5jiBoe856NrVP8u07h4L Zjt42N9hGYFh7ACJe9veQzCZAreGAmqccIf1cfg2zwevx5ijTPHt3+2clTSAeeAF QgwtFDBp90lU3mATWuHmTGY3i7xt1dtnNL4k5Vb4BM64Okt2K75xQ+Yt+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUcICVMF5NwVpHKRowjKfe5Tv1OMB8GA1UdIwQY MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt ZjIyZWI2NWZjYzcyLzEvTlJ3Z0pVd1hrM0JXa2NwR2pDTXA5N2xPX1U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+1qMA0G CSqGSIb3DQEBCwUAA4IBAQAaq00gECw+3udJZIgOeRLzHsSf0OVMt57axO6TMpCR gMSt5p9dSnSp8JndqlolR+dkzdq5vMlOLiBy9OKg6uWgPbMApJiTne+LKDRL6jSD XpEkjWA3ImPtMfzr9jUvbhvFIgxqDl+XzceVefEfWHKh/jik7/qmyGkh7UOmrCnC e0XOfd/DKudo1aCldFCA/L0aW+0hXHzuLWopYabHzW7wScf4t/SKMpWnmsrH1UNT 4rKt/2V03/WeEWMB35ydjooRg9qc7cz3LTLNTt8Vqc7m8vUT2wciktZDBJKpuwBw fS4DKvA9GQIpXWYuhoijgFDVSbZS1j3uv8bCOqUoTZ3/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:21 2026 by rpki-client