This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/nhCRB2EZvy6lpN61s3yWl3YWmf0.roa File: nhCRB2EZvy6lpN61s3yWl3YWmf0.roa (raw, json) Hash identifier: 1OKAMyNDQ3fNoRIZKVtlohf9DC92nJdtKKmE6La/J+M= Subject key identifier: 9E:10:91:07:61:19:BF:2E:A5:A4:DE:B5:B3:7C:96:97:76:16:99:FD Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79C3AC0AED7F772CD14ECF6F63804 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/nhCRB2EZvy6lpN61s3yWl3YWmf0.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196695 IP address blocks: 45.147.3.0/24 maxlen: 24 91.200.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9c:3a:c0:ae:d7:f7:72:cd:14:ec:f6:f6:38:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e1091076119bf2ea5a4deb5b37c9697761699fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ce:38:61:c7:d7:1c:1a:4d:c7:88:f4:50:9a: f8:8c:96:cf:ac:a4:4b:8f:8f:e3:32:6f:32:1e:82: 75:dd:65:61:f3:79:1b:6f:4a:f7:af:2c:0a:a5:0d: 61:4b:45:53:75:66:7e:68:86:0e:74:71:b1:56:36: 1b:1a:dd:3a:d3:8e:e8:77:a6:b8:83:da:54:4b:73: fc:c1:60:1f:e1:fc:a1:66:40:0f:51:3c:ec:c8:02: aa:64:0f:e8:cf:2c:69:06:a1:f6:ee:11:a3:d5:9f: 93:53:50:ec:8b:53:e1:57:c1:12:ad:d7:67:ee:0c: d6:dc:a7:ca:46:8e:d0:c3:13:44:5f:2c:09:0e:74: e4:ef:de:51:16:7a:b9:8a:8d:fd:30:39:21:f7:73: 29:ce:c8:d4:5b:e5:04:01:c3:3d:e2:ae:22:3d:ea: cc:fb:c2:f0:24:1d:7a:ea:94:f5:3a:67:ce:b6:67: 6a:f6:c1:81:38:e8:0e:26:a4:fa:ba:b1:b1:19:4c: 0f:40:67:71:bb:56:b3:77:17:8e:1c:5f:46:6f:06: 4e:01:8b:69:4d:fc:df:98:e9:41:ee:a8:be:01:cf: 65:b3:b5:c0:52:8b:37:94:43:78:98:96:eb:7e:e0: e8:8e:69:e3:58:75:73:c3:3a:ff:f1:6b:29:02:0a: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:91:07:61:19:BF:2E:A5:A4:DE:B5:B3:7C:96:97:76:16:99:FD X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/nhCRB2EZvy6lpN61s3yWl3YWmf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.3.0/24 91.200.146.0/24 Signature Algorithm: sha256WithRSAEncryption 30:bb:51:5d:54:77:2a:66:73:f7:b4:89:5e:39:79:ef:45:02: d7:a9:93:55:b9:86:7c:18:8a:5c:6a:a5:ad:cc:6d:70:23:32: d8:08:01:6a:e7:97:95:fc:75:53:6e:18:aa:18:b4:5b:e6:66: 08:47:07:63:6d:ae:0d:14:ab:02:c5:59:f0:3a:a9:54:14:81: 9a:61:39:ef:b5:9d:55:08:aa:45:a9:6d:5b:6e:74:2f:23:26: ce:d4:17:46:07:ee:67:11:67:31:ab:c2:43:00:72:d7:de:eb: 25:56:50:ed:7e:6d:54:99:03:cb:d3:0d:54:4a:1e:17:de:de: d1:84:68:6b:b5:11:3a:44:83:36:1d:4b:c4:2f:7d:33:c4:40: 82:ad:35:bb:ac:19:e3:61:2f:8f:0b:f1:39:79:18:cf:9e:96: 99:02:b6:a0:8e:12:23:ad:c0:ec:bb:95:fb:ef:92:09:8f:90: 3c:2e:05:0b:f1:2c:e5:e3:cc:47:99:c3:73:88:79:a4:82:a6: 45:e6:30:0b:37:a5:d8:5c:c5:29:0c:54:8a:0b:47:54:d8:6c: e6:a5:42:37:b8:ee:29:6f:f4:d1:56:f4:d4:1b:eb:29:8b:f6: a7:23:d8:98:23:42:dc:d6:9b:8e:f7:4d:ca:48:45:a8:2e:ac: 21:c9:e5:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x5w6wK7X93LNFOz29jgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTEwOTEwNzYxMTliZjJlYTVhNGRlYjViMzdjOTY5Nzc2MTY5OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7844YcfXHBpNx4j0UJr4jJbPrKRL j4/jMm8yHoJ13WVh83kbb0r3rywKpQ1hS0VTdWZ+aIYOdHGxVjYbGt06047od6a4 g9pUS3P8wWAf4fyhZkAPUTzsyAKqZA/ozyxpBqH27hGj1Z+TU1Dsi1PhV8ESrddn 7gzW3KfKRo7QwxNEXywJDnTk795RFnq5io39MDkh93MpzsjUW+UEAcM94q4iPerM +8LwJB166pT1OmfOtmdq9sGBOOgOJqT6urGxGUwPQGdxu1azdxeOHF9GbwZOAYtp TfzfmOlB7qi+Ac9ls7XAUos3lEN4mJbrfuDojmnjWHVzwzr/8WspAgq2pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ4QkQdhGb8upaTetbN8lpd2Fpn9MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvbmhDUkIyRVp2eTZscE42MXMzeVdsM1lXbWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZMDAwQA W8iSMA0GCSqGSIb3DQEBCwUAA4IBAQAwu1FdVHcqZnP3tIleOXnvRQLXqZNVuYZ8 GIpcaqWtzG1wIzLYCAFq55eV/HVTbhiqGLRb5mYIRwdjba4NFKsCxVnwOqlUFIGa YTnvtZ1VCKpFqW1bbnQvIybO1BdGB+5nEWcxq8JDAHLX3uslVlDtfm1UmQPL0w1U Sh4X3t7RhGhrtRE6RIM2HUvEL30zxECCrTW7rBnjYS+PC/E5eRjPnpaZAragjhIj rcDsu5X775IJj5A8LgUL8Szl48xHmcNziHmkgqZF5jALN6XYXMUpDFSKC0dU2Gzm pUI3uO4pb/TRVvTUG+spi/anI9iYI0Lc1puO903KSEWoLqwhyeUG -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:30 2026 by rpki-client