This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NbOSHl-maqtSswfVh22N2HzFBks.roa File: NbOSHl-maqtSswfVh22N2HzFBks.roa (raw, json) Hash identifier: B+1iWPfnnXvEUNfYtxq3DMNfsrMFykPwhCyoIYzPDmM= Subject key identifier: 35:B3:92:1E:5F:A6:6A:AB:52:B3:07:D5:87:6D:8D:D8:7C:C5:06:4B Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117959E5A728175FA94E6746D655AC Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NbOSHl-maqtSswfVh22N2HzFBks.roa Signing time: Fri 02 Jan 2026 00:17:58 +0000 ROA not before: Fri 02 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 88.218.172.0/22 maxlen: 22 185.121.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:79:59:e5:a7:28:17:5f:a9:4e:67:46:d6:55:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b3921e5fa66aab52b307d5876d8dd87cc5064b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:38:e4:a1:48:9f:15:6f:eb:87:78:4c:be: 1c:56:22:80:4d:54:76:49:47:0b:d4:e6:bf:4c:a2: f0:b2:03:d7:a7:73:2b:dd:e9:14:e2:5f:f5:fa:c8: fd:1a:8f:72:47:23:14:fe:e0:b2:1a:d6:9d:b6:7b: c9:68:fd:05:d3:40:8b:1d:9b:b5:1d:7d:84:7c:33: 41:2d:90:83:e0:98:fc:fd:ee:bb:8a:dd:67:f1:f7: b9:09:76:87:76:c8:e0:55:8d:ca:c3:f4:18:82:88: 4c:be:53:db:ec:1d:72:0f:c4:cb:73:d3:92:d3:a7: 61:08:c6:ab:4e:1f:cf:8d:e1:5d:07:8f:23:11:77: f7:57:ef:4b:e6:6e:a1:15:54:6d:9c:96:0d:2f:98: ff:fa:aa:4d:2d:44:c5:b3:20:53:cc:86:ff:0a:73: f0:2c:98:d6:e0:21:15:d7:24:a5:42:92:61:86:d9: 0f:6d:bb:8e:c0:14:e8:90:c6:76:62:f3:54:05:0e: 0b:09:bf:23:d5:55:a3:60:00:6f:1c:09:ae:26:46: 0a:9b:a8:57:6e:8c:ec:c4:5d:1b:ab:a9:8b:18:5c: c2:59:5b:d1:04:46:77:4e:b4:38:5a:66:56:71:10: bd:1c:53:d9:13:96:31:91:47:59:95:69:08:c1:c7: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:92:1E:5F:A6:6A:AB:52:B3:07:D5:87:6D:8D:D8:7C:C5:06:4B X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/NbOSHl-maqtSswfVh22N2HzFBks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.172.0/22 185.121.108.0/24 Signature Algorithm: sha256WithRSAEncryption 16:31:c9:2e:38:00:e2:24:fb:4a:3e:27:23:5f:f3:e5:30:9a: 03:fd:8f:c6:4b:b9:3d:2e:87:94:2e:a7:e4:b4:94:1c:d0:41: f3:72:6d:28:33:48:45:e6:59:10:fb:4c:ad:b6:19:b1:37:3e: 0c:ee:2b:e8:9e:45:75:65:d8:4a:99:00:18:94:6f:d5:05:ff: 26:1e:9e:c6:d8:58:73:01:00:c8:2f:9b:54:44:cc:4b:fb:1b: 58:4a:f5:78:a3:81:60:25:95:1b:6c:be:92:c0:cd:48:df:53: 3c:13:5d:a0:c2:5d:d4:b2:fd:f7:75:d8:10:5f:dc:10:bf:9b: 11:29:e8:36:e8:8c:00:1d:f1:fe:d2:a4:f8:76:3c:6f:77:2b: d7:fe:53:cf:17:34:69:55:49:e9:e0:54:eb:99:1e:9b:9a:ce: 8d:e0:f9:7c:a6:89:07:38:88:c4:d6:52:2d:07:db:52:7c:f9: e4:70:b9:6a:3a:1e:97:f4:e5:3f:78:aa:65:a6:ea:5e:ee:78: 93:0e:35:7f:0f:4e:27:a4:48:f5:91:94:d1:97:8d:df:78:36: 89:60:98:15:a5:c8:e5:ad:5e:1a:5c:7a:11:02:34:81:11:35: 60:8d:02:9b:e3:1d:0a:f3:0a:8b:8f:52:5e:a4:dc:62:8a:ed: 49:42:1c:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EXlZ5acoF1+pTmdG1lWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWIzOTIxZTVmYTY2YWFiNTJiMzA3ZDU4NzZkOGRkODdjYzUwNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQ45KFInxVv64d4TL4cViKATVR2 SUcL1Oa/TKLwsgPXp3Mr3ekU4l/1+sj9Go9yRyMU/uCyGtadtnvJaP0F00CLHZu1 HX2EfDNBLZCD4Jj8/e67it1n8fe5CXaHdsjgVY3Kw/QYgohMvlPb7B1yD8TLc9OS 06dhCMarTh/PjeFdB48jEXf3V+9L5m6hFVRtnJYNL5j/+qpNLUTFsyBTzIb/CnPw LJjW4CEV1ySlQpJhhtkPbbuOwBTokMZ2YvNUBQ4LCb8j1VWjYABvHAmuJkYKm6hX bozsxF0bq6mLGFzCWVvRBEZ3TrQ4WmZWcRC9HFPZE5YxkUdZlWkIwcdUPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDWzkh5fpmqrUrMH1Ydtjdh8xQZLMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvTmJPU0hsLW1hcXRTc3dmVmgyMk4ySHpGQmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWNqsAwQA uXlsMA0GCSqGSIb3DQEBCwUAA4IBAQAWMckuOADiJPtKPicjX/PlMJoD/Y/GS7k9 LoeULqfktJQc0EHzcm0oM0hF5lkQ+0ytthmxNz4M7ivonkV1ZdhKmQAYlG/VBf8m Hp7G2FhzAQDIL5tURMxL+xtYSvV4o4FgJZUbbL6SwM1I31M8E12gwl3Usv33ddgQ X9wQv5sRKeg26IwAHfH+0qT4djxvdyvX/lPPFzRpVUnp4FTrmR6bms6N4Pl8pokH OIjE1lItB9tSfPnkcLlqOh6X9OU/eKplpupe7niTDjV/D04npEj1kZTRl43feDaJ YJgVpcjlrV4aXHoRAjSBETVgjQKb4x0K8wqLj1JepNxiiu1JQhzd -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:29 2026 by rpki-client