This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NNiwaj9pmCsBL41hRA5_lW0bcs8.roa File: NNiwaj9pmCsBL41hRA5_lW0bcs8.roa (raw, json) Hash identifier: w/RBI1r9bHXl9Kj8FTIGKx+KdMvLAfkBn5V4cDqG4ig= Subject key identifier: 34:D8:B0:6A:3F:69:98:2B:01:2F:8D:61:44:0E:7F:95:6D:1B:72:CF Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFEFDDC8E9DB4022A78C66E79A258 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NNiwaj9pmCsBL41hRA5_lW0bcs8.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2285 IP address blocks: 90.84.160.0/24 maxlen: 24 90.84.161.0/24 maxlen: 24 90.84.162.0/24 maxlen: 24 90.84.163.0/24 maxlen: 24 90.84.164.0/24 maxlen: 24 90.84.165.0/24 maxlen: 24 90.84.248.0/24 maxlen: 24 90.84.249.0/24 maxlen: 24 90.84.250.0/24 maxlen: 24 2a01:c9c0:8010::/48 maxlen: 64 2a01:c9c0:8012::/48 maxlen: 64 2a01:c9c0:8014::/48 maxlen: 64 2a01:c9c0:8016::/48 maxlen: 64 2a01:c9c0:8018::/48 maxlen: 64 2a01:c9c0:801a::/48 maxlen: 64 2a01:c9c0:801c::/48 maxlen: 64 2a01:c9c0:801e::/48 maxlen: 64 2a01:c9c0:8030::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fe:fd:dc:8e:9d:b4:02:2a:78:c6:6e:79:a2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34d8b06a3f69982b012f8d61440e7f956d1b72cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:fa:af:4a:10:53:fe:62:cb:a1:26:33:61: 43:67:b0:b6:b6:0f:01:09:a9:69:d5:55:e8:32:97: 27:92:a9:ab:f1:04:f6:21:c3:36:bf:b0:cc:f5:90: 92:0f:c0:59:2a:66:86:9a:f7:bd:86:23:fd:13:b8: 19:3a:0c:b4:c9:de:8d:42:98:9e:6d:19:cf:23:46: 77:61:53:8e:23:58:aa:c9:7e:1c:66:39:d8:7b:18: 95:db:86:25:36:7d:50:d5:c5:be:25:8e:76:42:fb: 53:73:ab:6d:71:94:e6:17:77:fe:f3:29:15:cc:7f: d8:d5:f8:8a:12:1b:19:0b:4a:c9:24:08:af:82:e2: cb:1a:54:b3:16:50:0b:0e:e8:ea:a6:e2:a3:81:36: e0:d6:5f:91:6a:e7:8f:e0:df:00:c0:ef:c2:f4:da: e4:39:32:0d:1a:2e:c3:b8:bf:e9:06:02:76:20:15: d5:dd:54:bc:69:fc:6b:10:18:50:50:8a:ca:90:d7: 5f:54:62:db:29:95:c3:93:17:3f:e7:ee:65:e9:fc: bc:d5:64:6b:0a:39:62:9e:c5:62:ae:db:c5:ad:15: 18:03:8f:45:cf:69:4f:7b:33:3c:8d:ee:c6:21:64: 25:46:60:77:24:4e:31:c0:cb:10:9e:25:99:1a:0e: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:B0:6A:3F:69:98:2B:01:2F:8D:61:44:0E:7F:95:6D:1B:72:CF X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/NNiwaj9pmCsBL41hRA5_lW0bcs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.160.0-90.84.165.255 90.84.248.0-90.84.250.255 IPv6: 2a01:c9c0:8010::/48 2a01:c9c0:8012::/48 2a01:c9c0:8014::/48 2a01:c9c0:8016::/48 2a01:c9c0:8018::/48 2a01:c9c0:801a::/48 2a01:c9c0:801c::/48 2a01:c9c0:801e::/48 2a01:c9c0:8030::/48 Signature Algorithm: sha256WithRSAEncryption 15:c7:79:06:34:a7:82:fc:bd:d9:28:e1:e6:ae:4b:66:1c:69: e8:6b:45:41:d0:32:92:e6:80:68:b7:ff:05:a7:bd:22:4e:8b: eb:7f:2a:f7:b4:6d:f0:cd:06:d0:9f:b8:78:78:3d:d4:72:14: d6:e0:3e:30:86:a7:1f:56:57:24:98:e3:a4:f5:8f:35:11:9c: 0b:ca:1e:ca:7d:36:29:9d:4b:bd:e3:28:34:e6:2b:1e:29:25: e4:f9:82:64:e0:2f:8b:5b:20:74:1d:06:0a:aa:3b:a9:bb:96: 7d:bb:a3:2f:88:34:75:0a:80:1d:73:08:7d:65:51:a7:39:87: 33:08:df:9d:22:ad:c8:9c:f6:30:6e:85:f6:26:7d:4f:07:f4: 49:08:cb:20:d3:79:11:ed:a5:29:a2:2c:79:1b:71:19:ad:7f: 82:19:df:aa:76:12:d2:53:7c:e5:51:0e:e8:c7:8a:e2:23:d7: ef:24:98:ac:f3:d3:e5:b6:6d:c7:24:de:d6:8e:a5:c8:01:fb: ee:2a:71:0b:63:6c:c7:0e:35:80:68:a2:be:b9:f6:4d:6a:40: ea:e7:f5:e3:51:b6:18:ee:b6:68:94:94:a4:fa:be:df:28:cf: b9:23:4c:f3:c0:e6:c8:5a:3a:6e:f3:c6:70:9c:e5:6b:4a:29: 9e:2f:84:aa -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt8f/793I6dtAIqeMZueaJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQ4YjA2YTNmNjk5ODJiMDEyZjhkNjE0NDBlN2Y5NTZkMWI3MmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFr6r0oQU/5iy6EmM2FDZ7C2tg8B Calp1VXoMpcnkqmr8QT2IcM2v7DM9ZCSD8BZKmaGmve9hiP9E7gZOgy0yd6NQpie bRnPI0Z3YVOOI1iqyX4cZjnYexiV24YlNn1Q1cW+JY52QvtTc6ttcZTmF3f+8ykV zH/Y1fiKEhsZC0rJJAivguLLGlSzFlALDujqpuKjgTbg1l+RaueP4N8AwO/C9Nrk OTINGi7DuL/pBgJ2IBXV3VS8afxrEBhQUIrKkNdfVGLbKZXDkxc/5+5l6fy81WRr CjlinsVirtvFrRUYA49Fz2lPezM8je7GIWQlRmB3JE4xwMsQniWZGg5YBwIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFDTYsGo/aZgrAS+NYUQOf5VtG3LPMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvTk5pd2FqOXBtQ3NCTDQxaFJBNV9sVzBiY3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wIgQCAAEwHDAMAwQFWlSg AwQBWlSkMAwDBANaVPgDBABaVPowVwQCAAIwUQMHACoBycCAEAMHACoBycCAEgMH ACoBycCAFAMHACoBycCAFgMHACoBycCAGAMHACoBycCAGgMHACoBycCAHAMHACoB ycCAHgMHACoBycCAMDANBgkqhkiG9w0BAQsFAAOCAQEAFcd5BjSngvy92Sjh5q5L Zhxp6GtFQdAykuaAaLf/Bae9Ik6L638q97Rt8M0G0J+4eHg91HIU1uA+MIanH1ZX JJjjpPWPNRGcC8oeyn02KZ1LveMoNOYrHikl5PmCZOAvi1sgdB0GCqo7qbuWfbuj L4g0dQqAHXMIfWVRpzmHMwjfnSKtyJz2MG6F9iZ9Twf0SQjLINN5Ee2lKaIseRtx Ga1/ghnfqnYS0lN85VEO6MeK4iPX7ySYrPPT5bZtxyTe1o6lyAH77ipxC2Nsxw41 gGiivrn2TWpA6uf141G2GO62aJSUpPq+3yjPuSNM88DmyFo6bvPGcJzla0opni+E qg== -----END CERTIFICATE-----Generated at Thu Jan 22 23:34:15 2026 by rpki-client