This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nsnRZZ5UgU4nturs7FMoshPdFAM.roa File: nsnRZZ5UgU4nturs7FMoshPdFAM.roa (raw, json) Hash identifier: lfSa5qe52PT3D79fqPG37Oc3eWHqJQxAnGN5KIlOQ/0= Subject key identifier: 9E:C9:D1:65:9E:54:81:4E:27:B6:EA:EC:EC:53:28:B2:13:DD:14:03 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A9F911086B3ED93F36EFD7F73CA46A4E0 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nsnRZZ5UgU4nturs7FMoshPdFAM.roa Signing time: Thu 20 Nov 2025 04:41:15 +0000 ROA not before: Thu 20 Nov 2025 04:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44547 IP address blocks: 45.87.120.0/24 maxlen: 24 91.132.49.0/24 maxlen: 24 128.0.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:91:10:86:b3:ed:93:f3:6e:fd:7f:73:ca:46:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 20 04:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ec9d1659e54814e27b6eaecec5328b213dd1403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:fc:0a:11:02:71:f9:05:ae:5a:82:ec:d4: d4:b5:29:5d:1b:d9:20:05:05:89:fa:ae:a2:39:9a: c4:fc:24:e6:10:35:8e:84:95:3d:53:6d:37:6b:68: ce:70:67:26:7b:ce:db:64:d0:05:9d:c4:e8:d2:50: 60:ae:81:dc:4f:53:d7:cd:d5:d8:e2:5f:1b:4e:aa: 11:c8:7c:41:6a:7d:2f:93:e7:34:06:3e:44:3b:bb: 3a:36:f6:1e:99:32:45:2e:f6:8a:fd:13:77:6d:ca: d7:35:52:9b:70:86:58:e1:3a:96:3a:ec:d5:b2:bf: ef:bb:87:c7:d8:39:fb:69:a2:d2:25:04:7c:c1:58: 84:c3:5c:ce:5d:77:92:e9:af:60:a6:3f:54:64:bf: b1:65:ff:ec:12:b9:4f:0e:8f:a5:e0:17:b1:f8:98: b3:4d:7a:54:96:4e:d0:db:9c:4b:34:39:01:53:5a: 63:40:4d:ff:c8:79:b8:32:60:d3:df:7a:49:01:a6: bd:79:88:41:9c:9c:86:65:93:49:83:f3:22:0c:ff: ef:1b:54:0a:21:a5:ea:b1:a5:6d:73:ae:48:21:e3: 4d:2a:b8:dc:37:48:f2:18:3b:de:d7:c4:5a:4a:36: 77:1a:d6:46:a2:d4:6b:ca:85:c3:e1:32:86:c7:8a: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:D1:65:9E:54:81:4E:27:B6:EA:EC:EC:53:28:B2:13:DD:14:03 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nsnRZZ5UgU4nturs7FMoshPdFAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.120.0/24 91.132.49.0/24 128.0.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b7:91:bc:ec:ec:40:29:2c:c2:0f:b4:0d:5e:3f:8c:81:00: aa:9c:f3:dd:37:29:46:20:38:07:48:70:65:67:95:2c:d9:3b: 85:f1:a3:80:a9:01:5a:6b:b7:2f:14:b9:a2:3a:d3:1e:e1:e5: 09:c0:8d:7a:0b:14:68:53:da:e7:86:3a:6c:d5:a3:7e:e5:86: 0c:6a:c3:cb:5a:c6:9f:ab:cc:cc:84:e6:dd:c5:86:04:7c:9d: 0b:93:25:bb:0e:63:fd:61:e9:37:41:f3:9c:8f:b8:90:69:09: 13:d3:f4:58:5b:df:da:d6:55:80:d0:cb:55:48:39:73:48:7a: 88:b2:0e:74:79:34:a8:71:0e:b9:11:57:4c:1c:39:11:29:3a: 3f:42:cb:39:74:2e:35:dd:7a:b5:0b:2e:70:ce:61:82:8b:f9: ec:fb:9b:0e:27:43:df:a7:f3:34:60:3f:c4:5c:09:3f:e7:43: 56:ec:b0:a5:60:44:6b:ab:59:7d:4d:90:b9:ed:87:41:6f:d4: 2b:c2:72:cc:01:88:28:28:1e:98:75:c6:37:fa:d9:57:01:43: f8:97:0b:ef:76:72:46:d6:e4:5a:e0:11:cc:6f:15:14:e2:14: 2a:e3:df:17:2c:94:53:8e:c6:22:43:03:79:12:97:28:9d:dc: 27:b1:01:62 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqfkRCGs+2T8279f3PKRqTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTIwMDQ0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWM5ZDE2NTllNTQ4MTRlMjdiNmVhZWNlYzUzMjhiMjEzZGQxNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOf8ChECcfkFrlqC7NTUtSldG9kg BQWJ+q6iOZrE/CTmEDWOhJU9U203a2jOcGcme87bZNAFncTo0lBgroHcT1PXzdXY 4l8bTqoRyHxBan0vk+c0Bj5EO7s6NvYemTJFLvaK/RN3bcrXNVKbcIZY4TqWOuzV sr/vu4fH2Dn7aaLSJQR8wViEw1zOXXeS6a9gpj9UZL+xZf/sErlPDo+l4Bex+Jiz TXpUlk7Q25xLNDkBU1pjQE3/yHm4MmDT33pJAaa9eYhBnJyGZZNJg/MiDP/vG1QK IaXqsaVtc65IIeNNKrjcN0jyGDve18RaSjZ3GtZGotRryoXD4TKGx4rMhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ7J0WWeVIFOJ7bq7OxTKLIT3RQDMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbnNuUlpaNVVnVTRudHVyczdGTW9zaFBkRkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVd4AwQA W4QxAwQAgAABMA0GCSqGSIb3DQEBCwUAA4IBAQAat5G87OxAKSzCD7QNXj+MgQCq nPPdNylGIDgHSHBlZ5Us2TuF8aOAqQFaa7cvFLmiOtMe4eUJwI16CxRoU9rnhjps 1aN+5YYMasPLWsafq8zMhObdxYYEfJ0LkyW7DmP9Yek3QfOcj7iQaQkT0/RYW9/a 1lWA0MtVSDlzSHqIsg50eTSocQ65EVdMHDkRKTo/Qss5dC413Xq1Cy5wzmGCi/ns +5sOJ0Pfp/M0YD/EXAk/50NW7LClYERrq1l9TZC57YdBb9QrwnLMAYgoKB6YdcY3 +tlXAUP4lwvvdnJG1uRa4BHMbxUU4hQq498XLJRTjsYiQwN5EpcondwnsQFi -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:53 2025 by rpki-client