This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/nbAQ4BPt9n4nKfMqMproTXSCv8M.roa File: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (raw, json) Hash identifier: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI= Subject key identifier: 9D:B0:10:E0:13:ED:F6:7E:27:29:F3:2A:32:9A:E8:4D:74:82:BF:C3 Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6AC6CDDBCE68F89C7C05F2D8EBECE Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/nbAQ4BPt9n4nKfMqMproTXSCv8M.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 91.199.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:6c:dd:bc:e6:8f:89:c7:c0:5f:2d:8e:be:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db010e013edf67e2729f32a329ae84d7482bfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:37:50:24:95:f4:e5:40:26:18:0f:92:7b: ae:0c:cd:a0:ab:b8:b7:9e:b9:b9:cb:4c:16:c9:5f: 58:f6:49:6b:a8:af:57:e3:73:ea:b1:6a:d0:6a:1b: ec:63:1d:80:10:97:6e:02:fd:fa:2d:8a:c0:82:50: 4f:a0:c7:a7:cb:91:bb:36:c5:2e:e0:dc:13:3b:f4: 42:98:9d:90:80:fa:c6:22:3d:50:23:04:e0:c1:1e: 1b:d6:0b:20:f6:17:10:78:4e:49:47:3a:fc:7f:d0: cb:33:ac:50:a2:d0:af:fa:45:28:c6:02:27:a6:2f: c2:9b:88:64:80:cc:c5:f8:35:88:bf:70:94:b3:b3: 07:a7:45:58:46:7f:32:8c:2a:07:f2:c1:6d:80:dd: c7:eb:ab:c5:5c:8f:97:39:ea:74:6c:cd:a6:75:52: f2:19:1e:f2:39:bc:9c:d4:05:6a:a4:46:2b:ab:49: 11:11:f8:08:8c:ef:4e:a4:be:34:3a:09:ee:b5:ce: f4:9d:4f:a4:60:2c:a3:f1:3e:05:29:07:11:26:d8: be:35:d4:1c:1a:0e:e0:34:a6:52:a4:20:0d:c9:bf: b6:15:18:e9:35:18:15:59:32:f2:1a:ab:4a:f3:4f: 7e:84:73:87:48:c7:56:fd:49:38:3a:3b:f9:2e:b5: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:10:E0:13:ED:F6:7E:27:29:F3:2A:32:9A:E8:4D:74:82:BF:C3 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/nbAQ4BPt9n4nKfMqMproTXSCv8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.173.0/24 Signature Algorithm: sha256WithRSAEncryption 02:c4:bf:62:57:b0:db:74:89:19:34:41:99:12:ce:52:ab:c6: c3:34:c4:4f:67:a5:8d:c6:2a:08:62:ed:3a:13:84:4c:67:11: 72:e8:f8:ac:10:ec:79:f8:70:9c:bd:4f:ea:73:62:3f:61:d7: a3:90:38:1d:3b:c1:2f:99:d6:1f:62:dc:b0:73:07:a2:1a:1f: f6:e5:4d:39:b4:2f:b3:ad:e0:d8:3c:e0:48:6e:be:6d:79:08: 0c:99:37:7f:44:a6:22:1c:51:0b:ec:a9:2b:24:68:0f:53:69: 83:7f:7d:ca:d2:4e:3c:a3:fc:1e:b4:ef:8b:5d:93:08:11:2a: ea:64:4b:21:18:51:ad:64:32:cf:bc:63:b8:c4:cb:68:65:09: 8a:66:49:ae:8b:c8:b8:dd:27:a4:79:66:18:ac:06:2c:25:22: 9b:d5:f2:53:a8:9d:83:9f:7e:3b:58:d5:e9:69:4a:ab:a1:69: 9d:d9:3d:0b:7f:95:2e:78:da:80:3c:a2:9c:19:b0:d4:94:7a: bf:30:3b:df:de:e4:57:a2:63:0d:64:13:9b:6a:e4:11:59:75: 23:3b:a1:78:5c:cf:af:1b:50:ac:a2:cd:52:e9:3e:4f:8c:5a: c6:c2:dd:14:55:e6:47:29:ec:cf:38:1d:43:1d:58:85:ae:57: 28:f0:83:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqxs3bzmj4nHwF8tjr7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGIwMTBlMDEzZWRmNjdlMjcyOWYzMmEzMjlhZTg0ZDc0ODJiZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVs3UCSV9OVAJhgPknuuDM2gq7i3 nrm5y0wWyV9Y9klrqK9X43PqsWrQahvsYx2AEJduAv36LYrAglBPoMeny5G7NsUu 4NwTO/RCmJ2QgPrGIj1QIwTgwR4b1gsg9hcQeE5JRzr8f9DLM6xQotCv+kUoxgIn pi/Cm4hkgMzF+DWIv3CUs7MHp0VYRn8yjCoH8sFtgN3H66vFXI+XOep0bM2mdVLy GR7yObyc1AVqpEYrq0kREfgIjO9OpL40Ognutc70nU+kYCyj8T4FKQcRJti+NdQc Gg7gNKZSpCANyb+2FRjpNRgVWTLyGqtK809+hHOHSMdW/Uk4Ojv5LrU4OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2wEOAT7fZ+JynzKjKa6E10gr/DMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvbmJBUTRCUHQ5bjRuS2ZNcU1wcm9UWFNDdjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8etMA0G CSqGSIb3DQEBCwUAA4IBAQACxL9iV7DbdIkZNEGZEs5Sq8bDNMRPZ6WNxioIYu06 E4RMZxFy6PisEOx5+HCcvU/qc2I/YdejkDgdO8EvmdYfYtywcweiGh/25U05tC+z reDYPOBIbr5teQgMmTd/RKYiHFEL7KkrJGgPU2mDf33K0k48o/wetO+LXZMIESrq ZEshGFGtZDLPvGO4xMtoZQmKZkmui8i43SekeWYYrAYsJSKb1fJTqJ2Dn347WNXp aUqroWmd2T0Lf5UueNqAPKKcGbDUlHq/MDvf3uRXomMNZBObauQRWXUjO6F4XM+v G1Csos1S6T5PjFrGwt0UVeZHKezPOB1DHViFrlco8IMw -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client