This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa File: NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa (raw, json) Hash identifier: frkQB7jrq/YhMcxvQw0JdD7plHmO9jmXrctMInTruNM= Subject key identifier: 35:B3:9D:1C:22:DF:0F:FF:52:03:4A:CD:F7:15:53:DA:CF:10:76:50 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E69D92574292C377814BD0694B49 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49011 IP address blocks: 95.174.160.0/19 maxlen: 19 178.19.0.0/20 maxlen: 20 2a00:cc80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e6:9d:92:57:42:92:c3:77:81:4b:d0:69:4b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b39d1c22df0fff52034acdf71553dacf107650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:c8:28:41:75:d6:0e:bb:25:90:75:35:0b: ef:ea:6a:4c:c5:d2:bd:52:1e:68:f0:75:86:3f:fe: e3:6f:df:f7:be:f9:6e:06:03:78:43:06:09:41:b1: c3:8d:86:3e:7f:8d:9c:25:6f:d3:f8:8e:ac:cc:1c: 97:9f:ac:84:23:19:07:25:fb:03:ad:64:b2:8e:5b: 38:6a:04:65:db:b0:ae:51:3a:1d:b3:8f:4d:c5:0d: 46:c1:5d:73:fe:78:f1:9a:52:d0:bf:8e:1b:7b:4b: d4:2c:86:b3:7a:2a:2d:49:4c:26:2f:5e:9e:01:c8: 6c:16:80:e3:6d:9f:e0:99:fa:f5:a1:39:fa:03:89: 73:54:ea:22:c8:7a:b8:ae:76:89:28:2a:6f:8b:ae: c4:8b:4a:42:ef:4b:76:a3:6e:b6:d7:5b:42:3a:83: 20:6d:31:ed:4d:87:3c:27:89:85:22:68:cd:a7:0f: 16:79:f5:c5:0d:5f:31:50:b8:29:f3:b4:7e:dc:f0: 7f:bf:5c:62:61:c8:85:d7:40:e4:3c:56:be:0b:b3: 47:b8:af:e0:e1:69:cd:8c:c7:82:c4:78:3f:c6:d8: 94:75:c8:af:2e:22:2c:ad:d9:c5:cb:66:4b:65:79: 37:b7:12:28:ba:61:dc:18:2d:72:65:ee:ed:bc:9d: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:9D:1C:22:DF:0F:FF:52:03:4A:CD:F7:15:53:DA:CF:10:76:50 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.160.0/19 178.19.0.0/20 IPv6: 2a00:cc80::/32 Signature Algorithm: sha256WithRSAEncryption 78:46:b2:5a:be:f9:26:95:64:94:bd:12:16:06:2e:75:fc:f2: d8:e8:d0:05:9b:72:4a:e5:7b:6e:a6:35:64:c6:d1:1c:e2:1b: 13:44:75:16:52:de:40:97:8e:3e:95:bd:a1:0e:d6:18:a4:6a: 63:8d:3d:47:13:28:14:fb:8a:48:20:e8:71:f8:b4:14:51:6f: 46:7f:d1:33:0e:e1:64:82:62:27:04:7e:63:3b:71:fa:79:0a: 69:54:f0:ff:3e:2f:c8:73:25:a4:11:50:a3:f7:09:9a:39:71: b2:ff:b3:fc:b5:77:1f:90:5e:a2:75:21:3b:12:cb:3b:b7:2b: 5c:16:2a:76:13:72:94:02:cd:97:ef:12:46:cb:11:13:6e:e2: bd:a8:8e:72:3d:72:ef:73:5e:ff:9f:31:98:82:c8:58:55:44: da:a9:32:21:17:ca:0e:db:2d:1c:13:dc:c0:54:27:46:b0:2f: 20:d8:ad:97:5f:ba:00:76:ea:11:95:61:94:11:f2:33:f3:1a: b5:fb:0e:a4:80:40:63:a9:4b:26:33:fe:7d:e0:c8:b6:39:72: 47:7a:28:d3:d3:33:91:f3:bf:e9:68:a7:87:e5:e4:03:29:36: 6f:fc:b3:a8:8e:64:82:a8:8b:85:02:fd:52:78:9c:81:19:1f: 02:8c:0e:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yOadkldCksN3gUvQaUtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWIzOWQxYzIyZGYwZmZmNTIwMzRhY2RmNzE1NTNkYWNmMTA3NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XzIKEF11g67JZB1NQvv6mpMxdK9 Uh5o8HWGP/7jb9/3vvluBgN4QwYJQbHDjYY+f42cJW/T+I6szByXn6yEIxkHJfsD rWSyjls4agRl27CuUTods49NxQ1GwV1z/njxmlLQv44be0vULIazeiotSUwmL16e AchsFoDjbZ/gmfr1oTn6A4lzVOoiyHq4rnaJKCpvi67Ei0pC70t2o26211tCOoMg bTHtTYc8J4mFImjNpw8WefXFDV8xULgp87R+3PB/v1xiYciF10DkPFa+C7NHuK/g 4WnNjMeCxHg/xtiUdcivLiIsrdnFy2ZLZXk3txIoumHcGC1yZe7tvJ2o/QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDWznRwi3w//UgNKzfcVU9rPEHZQMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvTmJPZEhDTGZEXzlTQTByTjl4VlQyczhRZGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFX66gAwQE shMAMA0EAgACMAcDBQAqAMyAMA0GCSqGSIb3DQEBCwUAA4IBAQB4RrJavvkmlWSU vRIWBi51/PLY6NAFm3JK5XtupjVkxtEc4hsTRHUWUt5Al44+lb2hDtYYpGpjjT1H EygU+4pIIOhx+LQUUW9Gf9EzDuFkgmInBH5jO3H6eQppVPD/Pi/IcyWkEVCj9wma OXGy/7P8tXcfkF6idSE7Ess7tytcFip2E3KUAs2X7xJGyxETbuK9qI5yPXLvc17/ nzGYgshYVUTaqTIhF8oO2y0cE9zAVCdGsC8g2K2XX7oAduoRlWGUEfIz8xq1+w6k gEBjqUsmM/594Mi2OXJHeijT0zOR87/paKeH5eQDKTZv/LOojmSCqIuFAv1SeJyB GR8CjA53 -----END CERTIFICATE-----Generated at Mon Jan 26 20:58:14 2026 by rpki-client