This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/Nmcc09Xt79K0jETaPBL1LxCEW6o.roa File: Nmcc09Xt79K0jETaPBL1LxCEW6o.roa (raw, json) Hash identifier: 5YHh9vd/uVykgxuhDt7Fxzyb5DssF7KZ7qdP7IjIZZU= Subject key identifier: 36:67:1C:D3:D5:ED:EF:D2:B4:8C:44:DA:3C:12:F5:2F:10:84:5B:AA Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Certificate serial: 019B79EC8E0893A89A882F3B239DE215A530 Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/Nmcc09Xt79K0jETaPBL1LxCEW6o.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43394 IP address blocks: 91.194.242.0/23 maxlen: 23 91.194.242.0/24 maxlen: 24 91.194.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8e:08:93:a8:9a:88:2f:3b:23:9d:e2:15:a5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36671cd3d5edefd2b48c44da3c12f52f10845baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:f2:6b:6a:fe:8a:e3:56:e0:b6:86:93:ad: 30:ed:43:a8:68:da:11:11:5e:a1:c6:84:ae:46:97: 2e:aa:14:49:e9:7a:97:6b:49:96:3e:f5:4e:6d:90: e4:4f:85:80:6e:67:78:1f:b8:18:36:18:d5:27:e3: a8:91:af:df:1e:a4:d4:7b:fc:8c:2b:e0:98:94:a0: f7:a2:b4:b1:a8:3e:b0:9d:6f:83:e6:69:39:98:00: 27:cb:b8:9f:c9:d8:a0:c3:a0:ea:7e:4c:d1:45:31: b5:c7:6b:61:e7:a7:52:2c:7c:1f:09:ef:e2:18:2b: 5f:a6:d2:32:66:da:05:da:fd:06:2c:1a:87:f8:87: 18:1b:b2:54:5c:de:5f:e8:9a:55:3d:03:d0:66:69: 03:7a:94:f9:75:27:9a:19:62:da:fb:06:95:35:93: ff:98:ef:d2:f3:5d:b8:cc:22:53:c3:bf:9e:45:9a: b5:b9:28:55:18:6d:3a:79:b9:0c:b1:22:5c:6f:18: bf:83:a3:13:72:06:f4:98:b9:3e:98:21:23:4a:aa: 4f:4d:87:86:1a:87:c1:ca:75:26:06:82:07:89:b6: 47:6d:9c:6e:8d:d2:33:8e:50:dc:79:79:a1:1b:17: 16:36:6e:2d:19:e7:fc:84:6e:05:26:73:24:ac:37: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:67:1C:D3:D5:ED:EF:D2:B4:8C:44:DA:3C:12:F5:2F:10:84:5B:AA X509v3 Authority Key Identifier: keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/Nmcc09Xt79K0jETaPBL1LxCEW6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.242.0/23 Signature Algorithm: sha256WithRSAEncryption 60:6c:5b:09:56:f5:8c:7e:e6:e1:72:14:31:34:97:b7:f7:69: 71:55:76:36:ac:54:14:2b:f8:ba:f1:4c:33:d1:d5:0d:61:7c: 05:8e:57:c0:c7:54:3b:e1:58:e1:58:df:14:07:4b:20:c5:82: 4e:c2:81:7c:23:55:4e:84:a3:8d:4f:95:17:75:ed:33:5d:60: 3f:f0:44:7c:27:3d:37:11:08:8a:6f:bf:6e:9b:a7:41:4b:eb: 56:f5:42:f4:0f:3b:be:f7:28:c4:b7:33:71:cd:13:f4:d9:38: 79:29:4e:19:b3:c4:1d:a5:f1:ef:27:ab:5a:ad:f1:10:49:02: 5e:f0:9b:f8:a8:f0:e4:ad:5b:f5:e3:cc:e1:65:5f:de:80:f1: 59:30:f4:98:bb:f2:3b:ff:71:8f:40:ca:b6:f4:25:a2:b1:76: c6:94:ba:18:6a:c1:df:e9:ad:5b:8a:dc:9c:29:6c:b1:3b:73: fb:73:36:77:6f:5c:b2:98:2c:63:b9:61:9e:fa:10:dd:e6:00: 68:fc:b0:fd:21:1f:62:f4:14:8a:20:e0:ca:a6:16:4e:3e:2c: 7d:66:93:86:3a:f8:1f:6a:c3:a1:3a:cd:ca:71:d3:6a:02:9b: 55:11:64:d9:91:e4:6d:88:ce:6b:4f:77:de:58:ec:98:ce:a4: ae:14:30:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57I4Ik6iaiC87I53iFaUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk MmI5ZGQwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjY3MWNkM2Q1ZWRlZmQyYjQ4YzQ0ZGEzYzEyZjUyZjEwODQ1YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu7ya2r+iuNW4LaGk60w7UOoaNoR EV6hxoSuRpcuqhRJ6XqXa0mWPvVObZDkT4WAbmd4H7gYNhjVJ+Ooka/fHqTUe/yM K+CYlKD3orSxqD6wnW+D5mk5mAAny7ifydigw6DqfkzRRTG1x2th56dSLHwfCe/i GCtfptIyZtoF2v0GLBqH+IcYG7JUXN5f6JpVPQPQZmkDepT5dSeaGWLa+waVNZP/ mO/S8124zCJTw7+eRZq1uShVGG06ebkMsSJcbxi/g6MTcgb0mLk+mCEjSqpPTYeG GofBynUmBoIHibZHbZxujdIzjlDceXmhGxcWNm4tGef8hG4FJnMkrDc9ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZnHNPV7e/StIxE2jwS9S8QhFuqMB8GA1UdIwQY MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt MDU0MjQyN2IwMmI5LzEvTm1jYzA5WHQ3OUswakVUYVBCTDFMeENFVzZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5 LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8LyMA0G CSqGSIb3DQEBCwUAA4IBAQBgbFsJVvWMfubhchQxNJe392lxVXY2rFQUK/i68Uwz 0dUNYXwFjlfAx1Q74VjhWN8UB0sgxYJOwoF8I1VOhKONT5UXde0zXWA/8ER8Jz03 EQiKb79um6dBS+tW9UL0Dzu+9yjEtzNxzRP02Th5KU4Zs8QdpfHvJ6tarfEQSQJe 8Jv4qPDkrVv148zhZV/egPFZMPSYu/I7/3GPQMq29CWisXbGlLoYasHf6a1bityc KWyxO3P7czZ3b1yymCxjuWGe+hDd5gBo/LD9IR9i9BSKIODKphZOPix9ZpOGOvgf asOhOs3KcdNqAptVEWTZkeRtiM5rT3feWOyYzqSuFDA6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:34 2026 by rpki-client