This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/nND7jF-o9OkvAL1phsl_cTtcTB0.roa File: nND7jF-o9OkvAL1phsl_cTtcTB0.roa (raw, json) Hash identifier: AQ6W42SUBOPzvlMA3LCx6a7jc2ujNqo1gbFLMnC35vc= Subject key identifier: 9C:D0:FB:8C:5F:A8:F4:E9:2F:00:BD:69:86:C9:7F:71:3B:5C:4C:1D Certificate issuer: /CN=978f41e290285473c2a1e2be7f66f63452ed4644 Certificate serial: 019B7F8378B0B2AFA369D3EFBF692206CA17 Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/nND7jF-o9OkvAL1phsl_cTtcTB0.roa Signing time: Fri 02 Jan 2026 16:21:21 +0000 ROA not before: Fri 02 Jan 2026 16:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39452 IP address blocks: 89.150.0.0/23 maxlen: 23 89.150.0.0/24 maxlen: 24 89.150.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:78:b0:b2:af:a3:69:d3:ef:bf:69:22:06:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644 Validity Not Before: Jan 2 16:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd0fb8c5fa8f4e92f00bd6986c97f713b5c4c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:57:b0:f3:cc:4d:c6:8d:56:a2:36:1c:b4: 41:e3:80:78:3e:81:23:2e:3f:8d:96:79:b0:66:eb: 84:0f:49:fa:f0:1f:f2:9c:7b:ed:a3:8e:cf:f3:84: e6:7f:df:2f:3a:a0:66:09:ab:9d:c1:ee:3a:0c:3c: 78:8e:6c:ac:b1:b1:c2:25:b8:0b:8c:aa:7c:12:49: e5:f3:8c:42:ab:97:ee:45:c2:1e:4f:54:4a:03:e2: 47:4a:e3:3a:97:01:5c:68:ac:8a:ca:ba:13:b6:5d: b1:f8:13:9f:2a:73:fa:ed:43:1e:23:ae:d3:f5:7c: 96:92:30:03:08:a2:a6:cd:37:bb:0c:70:f1:ef:1c: 86:21:75:7b:9f:63:ce:a5:aa:7f:4a:39:15:ee:02: 4e:ed:08:ec:cc:c3:a1:02:b6:67:13:1e:31:bc:b0: 0a:97:26:ab:a6:53:92:69:0a:85:77:9d:74:60:72: 6c:86:8d:dd:14:8e:51:4d:2f:da:6d:64:3d:97:22: 6d:76:0d:22:cb:ec:2b:76:46:93:cc:93:c1:2c:91: 40:a4:ea:e6:f4:90:ef:0e:ea:92:1e:6b:ee:bf:85: aa:86:d3:90:93:f5:eb:d9:26:10:28:aa:96:9f:ce: 07:63:49:cd:69:51:a4:0b:db:ef:2b:98:ee:67:72: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:FB:8C:5F:A8:F4:E9:2F:00:BD:69:86:C9:7F:71:3B:5C:4C:1D X509v3 Authority Key Identifier: keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/nND7jF-o9OkvAL1phsl_cTtcTB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.0.0/23 Signature Algorithm: sha256WithRSAEncryption 31:32:34:f0:f7:bc:2a:03:b7:2d:29:e8:a4:40:fa:77:8f:f0: a2:ca:13:55:eb:16:be:c0:3f:36:00:44:58:c4:6a:72:17:34: 81:9f:59:9c:ad:11:f7:6c:cc:de:53:7a:4c:85:2d:bb:b5:19: a7:39:75:8d:ed:b8:b8:42:0f:b4:5b:82:6d:80:61:a2:4c:db: fe:83:c0:f2:c4:28:a7:97:ab:3b:ef:d8:ab:92:02:64:ac:67: 08:57:65:b8:5a:90:f4:01:f2:f4:b6:61:c5:34:be:ec:a1:19: df:7b:4b:df:85:fb:e5:98:bd:3b:41:e7:33:82:f5:d0:ac:f0: 87:86:93:27:24:e8:10:85:aa:1a:a8:b7:dc:78:0c:2e:27:9a: f4:e9:37:22:7c:13:28:11:b2:da:92:5c:92:05:85:06:c0:93: 78:25:24:cb:eb:bd:e2:2f:f8:52:c5:44:ee:3c:d4:55:23:c9: 35:25:2d:2a:77:c7:ea:76:13:f2:5e:cc:e6:85:9e:8a:e4:38: 03:7f:3d:fa:b5:73:05:96:16:04:7e:07:1a:16:93:cb:a9:e2: d0:a2:40:dc:86:1c:b3:80:ef:c3:62:1f:4c:92:7d:84:cd:ba: 67:b8:44:59:c6:ca:fe:f6:b5:0d:a0:2d:c6:f2:87:d2:ad:42: a5:29:9e:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g3iwsq+jadPvv2kiBsoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OGY0MWUyOTAyODU0NzNjMmExZTJiZTdmNjZmNjM0NTJl ZDQ2NDQwHhcNMjYwMTAyMTYyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2QwZmI4YzVmYThmNGU5MmYwMGJkNjk4NmM5N2Y3MTNiNWM0YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEBXsPPMTcaNVqI2HLRB44B4PoEj Lj+NlnmwZuuED0n68B/ynHvto47P84Tmf98vOqBmCaudwe46DDx4jmyssbHCJbgL jKp8Eknl84xCq5fuRcIeT1RKA+JHSuM6lwFcaKyKyroTtl2x+BOfKnP67UMeI67T 9XyWkjADCKKmzTe7DHDx7xyGIXV7n2POpap/SjkV7gJO7QjszMOhArZnEx4xvLAK lyarplOSaQqFd510YHJsho3dFI5RTS/abWQ9lyJtdg0iy+wrdkaTzJPBLJFApOrm 9JDvDuqSHmvuv4WqhtOQk/Xr2SYQKKqWn84HY0nNaVGkC9vvK5juZ3JGbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzQ+4xfqPTpLwC9aYbJf3E7XEwdMB8GA1UdIwQY MBaAFJePQeKQKFRzwqHivn9m9jRS7UZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzIt MzU3N2IxZWZkYzc4LzEvbk5EN2pGLW85T2t2QUwxcGhzbF9jVHRjVEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzItMzU3N2IxZWZkYzc4 LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWZYAMA0G CSqGSIb3DQEBCwUAA4IBAQAxMjTw97wqA7ctKeikQPp3j/CiyhNV6xa+wD82AERY xGpyFzSBn1mcrRH3bMzeU3pMhS27tRmnOXWN7bi4Qg+0W4JtgGGiTNv+g8DyxCin l6s779irkgJkrGcIV2W4WpD0AfL0tmHFNL7soRnfe0vfhfvlmL07QeczgvXQrPCH hpMnJOgQhaoaqLfceAwuJ5r06TcifBMoEbLaklySBYUGwJN4JSTL673iL/hSxUTu PNRVI8k1JS0qd8fqdhPyXszmhZ6K5DgDfz36tXMFlhYEfgcaFpPLqeLQokDchhyz gO/DYh9Mkn2EzbpnuERZxsr+9rUNoC3G8ofSrUKlKZ4k -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:12 2026 by rpki-client