This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/nEZjRqy_IwSXLZe3qFcr_H8crVs.roa File: nEZjRqy_IwSXLZe3qFcr_H8crVs.roa (raw, json) Hash identifier: HnhhwXUkjtked8MCegHmBPoKwaPIPxEWmVxgxvO0rNE= Subject key identifier: 9C:46:63:46:AC:BF:23:04:97:2D:97:B7:A8:57:2B:FC:7F:1C:AD:5B Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177 Certificate serial: 019B7B363E7719C24E451D9F3DDD0D4D9B97 Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/nEZjRqy_IwSXLZe3qFcr_H8crVs.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212542 IP address blocks: 91.233.100.0/24 maxlen: 24 194.42.200.0/24 maxlen: 24 195.189.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3e:77:19:c2:4e:45:1d:9f:3d:dd:0d:4d:9b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca942b2706761c2ba753289783edf985e338f177 Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c466346acbf2304972d97b7a8572bfc7f1cad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:ce:d4:a1:4d:72:1a:4f:b0:2e:0e:e9:e7: 25:a0:d7:5a:31:ce:9c:8c:fc:de:9f:a4:11:ec:b7: b3:d9:07:8e:fc:d3:93:ff:a9:68:92:04:68:20:d3: e3:49:b6:a1:61:b1:44:aa:3b:9d:89:a9:b3:c7:a3: cf:a0:d8:b5:d0:fc:41:4c:d2:bc:7d:da:37:19:1c: a0:6c:8b:48:83:6c:67:f0:92:cb:e2:32:4b:0a:b6: 52:2d:e8:51:d6:85:4b:23:7c:63:23:5e:44:53:7d: 9a:71:92:c2:73:37:5d:74:3d:b9:e4:d4:d6:98:32: 3c:6e:9c:63:ea:32:61:8f:53:39:26:a2:a7:c9:90: f1:e1:46:ee:3e:ad:91:c7:d5:82:95:d0:d9:26:28: d0:b7:28:04:82:82:bb:c5:6b:5e:79:98:fe:aa:2e: b2:35:47:41:41:7a:c2:34:3a:7c:95:6d:9f:c6:f0: 83:66:97:10:ca:a4:47:7c:83:83:23:e0:55:60:91: 76:32:28:32:fb:8b:c3:f5:e0:6f:dd:a6:9b:9d:a0: 28:11:2f:82:02:4e:7a:67:18:43:1e:a1:48:64:cc: 31:7a:1e:36:21:3a:d9:89:7d:e4:62:91:d9:70:9a: 8a:3f:75:71:7b:b3:23:e1:a5:41:f4:52:8e:18:92: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:46:63:46:AC:BF:23:04:97:2D:97:B7:A8:57:2B:FC:7F:1C:AD:5B X509v3 Authority Key Identifier: keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/nEZjRqy_IwSXLZe3qFcr_H8crVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.100.0/24 194.42.200.0/24 195.189.240.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:fe:56:46:3c:6d:4f:a0:97:53:1a:ab:35:eb:72:40:84:ed: f1:fe:71:d2:28:ff:f2:d2:28:dd:51:22:51:d0:0a:67:07:fa: 57:41:6b:2c:92:93:d9:c9:7b:ac:ca:87:94:09:03:54:5d:4f: 03:e1:25:2e:99:e2:64:47:3f:c1:92:ed:d6:18:8f:f2:72:37: 14:01:85:d1:c1:09:5c:d3:3e:0d:7e:f8:81:1c:65:a1:fe:b1: 34:dc:73:84:46:ac:0d:04:6d:f1:11:1d:ae:57:6b:3c:0b:9a: 6f:f5:52:2b:5b:7a:3c:9a:53:dd:a2:30:1a:df:37:da:1b:17: 44:60:a1:58:8f:81:10:b0:dd:c9:87:17:86:06:2a:63:56:ad: 27:63:60:89:30:f6:9a:74:1a:72:3d:3a:23:03:64:bf:b6:50: 60:7b:88:f0:ea:da:75:17:ed:55:ae:12:26:dc:f4:5a:45:4b: 12:70:a3:c3:47:ac:50:e2:54:aa:ae:56:44:3e:7a:63:c6:5d: d8:d7:6d:06:4f:3c:6e:ce:ce:fe:0a:cb:79:6f:97:50:2c:69: b0:14:bf:c6:40:86:c8:f8:73:d6:e5:8a:dd:f7:d2:bd:21:e7: f4:95:9d:2f:38:a8:b3:3d:77:88:ff:8f:33:c1:b1:a4:a7:7e: 8c:d2:70:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nj53GcJORR2fPd0NTZuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTQyYjI3MDY3NjFjMmJhNzUzMjg5NzgzZWRmOTg1ZTMz OGYxNzcwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzQ2NjM0NmFjYmYyMzA0OTcyZDk3YjdhODU3MmJmYzdmMWNhZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDjO1KFNchpPsC4O6ecloNdaMc6c jPzen6QR7Lez2QeO/NOT/6lokgRoINPjSbahYbFEqjudiamzx6PPoNi10PxBTNK8 fdo3GRygbItIg2xn8JLL4jJLCrZSLehR1oVLI3xjI15EU32acZLCczdddD255NTW mDI8bpxj6jJhj1M5JqKnyZDx4UbuPq2Rx9WCldDZJijQtygEgoK7xWteeZj+qi6y NUdBQXrCNDp8lW2fxvCDZpcQyqRHfIODI+BVYJF2Migy+4vD9eBv3aabnaAoES+C Ak56ZxhDHqFIZMwxeh42ITrZiX3kYpHZcJqKP3Vxe7Mj4aVB9FKOGJK0IQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJxGY0asvyMEly2Xt6hXK/x/HK1bMB8GA1UdIwQY MBaAFMqUKycGdhwrp1Mol4Pt+YXjOPF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEt ZWQ2NDgwNTk3N2YwLzEvbkVaalJxeV9Jd1NYTFplM3FGY3JfSDhjclZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEtZWQ2NDgwNTk3N2Yw LzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+lkAwQA wirIAwQAw73wMA0GCSqGSIb3DQEBCwUAA4IBAQBv/lZGPG1PoJdTGqs163JAhO3x /nHSKP/y0ijdUSJR0ApnB/pXQWsskpPZyXusyoeUCQNUXU8D4SUumeJkRz/Bku3W GI/ycjcUAYXRwQlc0z4NfviBHGWh/rE03HOERqwNBG3xER2uV2s8C5pv9VIrW3o8 mlPdojAa3zfaGxdEYKFYj4EQsN3JhxeGBipjVq0nY2CJMPaadBpyPTojA2S/tlBg e4jw6tp1F+1VrhIm3PRaRUsScKPDR6xQ4lSqrlZEPnpjxl3Y120GTzxuzs7+Cst5 b5dQLGmwFL/GQIbI+HPW5Yrd99K9Ief0lZ0vOKizPXeI/48zwbGkp36M0nAV -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:08 2026 by rpki-client