This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/nmV4wo1OsK526xeTri2upmPsAys.roa File: nmV4wo1OsK526xeTri2upmPsAys.roa (raw, json) Hash identifier: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY= Subject key identifier: 9E:65:78:C2:8D:4E:B0:AE:76:EB:17:93:AE:2D:AE:A6:63:EC:03:2B Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Certificate serial: 019B79EC89AA9B09C9B6A44FF5066A04F675 Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/nmV4wo1OsK526xeTri2upmPsAys.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 91.135.156.0/24 maxlen: 24 91.135.157.0/24 maxlen: 24 178.209.126.0/24 maxlen: 24 178.209.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:89:aa:9b:09:c9:b6:a4:4f:f5:06:6a:04:f6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e6578c28d4eb0ae76eb1793ae2daea663ec032b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:25:35:49:98:f1:b2:d2:4c:9b:b4:af:76: 27:5a:08:d0:87:5d:8e:9d:11:c0:ea:da:d0:0a:64: 44:ac:ab:18:60:c7:64:5c:b3:18:12:8f:7f:02:d5: 4a:41:53:dc:47:48:2b:68:de:61:9b:66:26:fe:0b: 30:4e:28:22:4b:cf:49:96:42:34:40:d4:dd:be:7a: 06:51:f0:02:f5:b5:62:18:71:f5:e1:96:09:65:35: df:d5:01:41:d1:09:01:e9:90:71:14:a7:e4:76:9a: 4b:ce:80:9c:50:75:79:67:f7:76:ef:17:aa:f9:5b: dd:2a:32:ce:98:87:07:1f:34:7e:91:c5:47:4a:6d: 29:dc:83:d8:52:65:ac:d1:e8:06:5e:80:a8:b7:de: 2d:bd:e4:1f:bb:bf:67:a9:43:b2:73:11:2c:fe:30: 60:25:b2:ab:73:b4:27:aa:c4:71:5e:7b:08:09:1d: a9:a0:1b:39:c1:3d:9a:0a:43:a8:60:cf:7c:29:7e: 92:ff:f9:0c:ae:63:80:b1:26:68:3a:d9:69:09:0c: 16:f4:5e:c4:c4:1c:ec:04:dd:fb:97:04:42:1e:6f: e1:d3:03:01:ab:15:74:88:e6:cc:e4:6b:62:d1:18: 70:bd:74:0d:63:28:75:55:ae:97:5c:de:00:c0:4f: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:65:78:C2:8D:4E:B0:AE:76:EB:17:93:AE:2D:AE:A6:63:EC:03:2B X509v3 Authority Key Identifier: keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/nmV4wo1OsK526xeTri2upmPsAys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.135.156.0/23 178.209.126.0/23 Signature Algorithm: sha256WithRSAEncryption 50:69:f5:58:72:b0:ed:ad:76:ae:a0:6f:c4:43:ee:9e:9f:c9: a5:1a:6b:09:01:4a:6c:a9:f9:ac:6f:f0:e9:f7:ac:b2:db:a5: 09:4b:cd:36:44:cf:32:e2:79:6d:cd:d3:58:e8:cb:dc:32:89: bf:b8:a2:68:cf:13:45:3d:48:8a:d6:e3:ca:d2:45:ba:81:56: aa:d3:fb:1d:12:ce:59:02:0d:54:83:af:c7:b6:49:fa:e2:6d: 30:40:5b:0b:8b:24:c4:a9:78:6f:bf:f8:67:f9:50:32:c2:22: 70:ee:5b:a7:e0:fd:b7:23:25:68:58:19:d3:eb:a0:aa:98:bb: a1:51:9b:84:43:4f:dc:ba:96:c5:68:3a:bf:53:d2:b0:d9:08: 48:05:db:13:be:c5:d1:20:36:c0:33:8a:b5:55:32:8f:fe:5f: 32:a4:dc:4a:8d:63:17:5d:e0:99:38:62:71:90:8c:c6:36:51: 02:82:b5:9a:c5:1e:c4:e1:09:dc:88:2e:16:2b:b4:47:36:71: ee:6c:5e:fa:3c:b1:4a:13:93:18:f2:1c:76:3c:79:9c:67:ac: fc:3f:ea:a7:5d:0a:1d:60:8f:03:5f:03:e4:3f:26:c4:a2:96: aa:9d:bb:66:db:79:51:2a:33:8d:07:07:0d:6a:e1:fc:ea:f7: 83:37:1a:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57ImqmwnJtqRP9QZqBPZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5 NjViOTYwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTY1NzhjMjhkNGViMGFlNzZlYjE3OTNhZTJkYWVhNjYzZWMwMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MolNUmY8bLSTJu0r3YnWgjQh12O nRHA6trQCmRErKsYYMdkXLMYEo9/AtVKQVPcR0graN5hm2Ym/gswTigiS89JlkI0 QNTdvnoGUfAC9bViGHH14ZYJZTXf1QFB0QkB6ZBxFKfkdppLzoCcUHV5Z/d27xeq +VvdKjLOmIcHHzR+kcVHSm0p3IPYUmWs0egGXoCot94tveQfu79nqUOycxEs/jBg JbKrc7QnqsRxXnsICR2poBs5wT2aCkOoYM98KX6S//kMrmOAsSZoOtlpCQwW9F7E xBzsBN37lwRCHm/h0wMBqxV0iObM5Gti0RhwvXQNYyh1Va6XXN4AwE+L7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ5leMKNTrCudusXk64trqZj7AMrMB8GA1UdIwQY MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt NzJhYzc5ZDdiYjA5LzEvbm1WNHdvMU9zSzUyNnhlVHJpMnVwbVBzQXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5 LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW4ecAwQB stF+MA0GCSqGSIb3DQEBCwUAA4IBAQBQafVYcrDtrXauoG/EQ+6en8mlGmsJAUps qfmsb/Dp96yy26UJS802RM8y4nltzdNY6MvcMom/uKJozxNFPUiK1uPK0kW6gVaq 0/sdEs5ZAg1Ug6/Htkn64m0wQFsLiyTEqXhvv/hn+VAywiJw7lun4P23IyVoWBnT 66CqmLuhUZuEQ0/cupbFaDq/U9Kw2QhIBdsTvsXRIDbAM4q1VTKP/l8ypNxKjWMX XeCZOGJxkIzGNlECgrWaxR7E4QnciC4WK7RHNnHubF76PLFKE5MY8hx2PHmcZ6z8 P+qnXQodYI8DXwPkPybEopaqnbtm23lRKjONBwcNauH86veDNxqw -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:03 2026 by rpki-client