This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nvsiCvqT5RzcAhW47sr9Q1eBNTs.roa File: nvsiCvqT5RzcAhW47sr9Q1eBNTs.roa (raw, json) Hash identifier: mR9RDQOnPhD1rKeYnjs64YxN+2EZXez9v8fgyHyG2dc= Subject key identifier: 9E:FB:22:0A:FA:93:E5:1C:DC:02:15:B8:EE:CA:FD:43:57:81:35:3B Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C133FBAF72DA06B4D9943A540611D50 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nvsiCvqT5RzcAhW47sr9Q1eBNTs.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213296 IP address blocks: 185.95.100.0/23 maxlen: 24 185.95.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3f:ba:f7:2d:a0:6b:4d:99:43:a5:40:61:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9efb220afa93e51cdc0215b8eecafd435781353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:9a:4f:e6:12:40:71:0d:52:09:75:16:4c: 5b:97:c6:10:bf:e2:ff:31:87:dc:a6:ce:4c:49:eb: 1a:88:d4:3d:40:10:10:24:0b:04:bd:6d:dc:55:ff: 74:55:c7:61:08:17:8d:49:f4:4d:66:27:f4:90:98: 09:78:23:40:a8:79:84:0b:d4:b8:1e:72:43:5f:19: d7:bb:d0:c0:c7:02:91:71:4a:40:55:5a:55:46:8a: 7c:df:9c:5f:db:e0:40:57:8f:45:29:1a:3f:e7:9b: aa:6f:7c:46:05:24:41:b4:b4:d6:ed:d0:b3:80:66: 52:98:17:fc:13:8b:9f:52:75:88:f5:a3:be:d3:ae: ad:27:fc:bf:7e:05:fa:d0:74:26:51:9a:a5:bd:a7: ee:58:bb:ae:4a:6f:e4:bc:8a:af:36:2a:25:d6:3a: a2:94:64:f1:83:de:06:1f:b7:d2:9d:77:d3:25:11: c8:27:61:06:fe:43:84:99:fa:40:40:e9:f6:58:62: 63:f0:a2:6f:47:9c:29:de:15:fd:d4:b2:4d:1e:02: ba:5e:ca:6f:1a:09:20:7a:a2:b3:d2:b4:bf:1f:2d: 8d:0b:49:c5:a2:89:ad:b9:6a:ec:50:7b:96:a7:3f: 30:39:be:11:b1:64:32:6e:cb:71:19:6c:93:a5:91: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:22:0A:FA:93:E5:1C:DC:02:15:B8:EE:CA:FD:43:57:81:35:3B X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nvsiCvqT5RzcAhW47sr9Q1eBNTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.100.0/22 Signature Algorithm: sha256WithRSAEncryption a4:fa:5f:ab:15:47:4c:7c:cc:84:a9:8f:16:c1:dc:9a:8d:64: 6d:47:4c:f1:5a:98:18:4c:4a:15:1c:0e:63:1d:cb:53:53:27: 76:85:fd:0e:2a:40:74:1b:0b:bc:8b:88:3b:1e:96:87:14:e1: 1a:82:19:3d:56:32:7b:09:d0:dd:c9:38:e4:e3:ef:55:2e:08: 35:5c:11:0a:d3:c7:71:48:39:11:8e:70:79:27:74:e7:17:48: 90:2b:22:d0:da:a0:c7:53:69:fd:23:0e:2b:36:bd:18:5a:3a: 7a:82:74:c7:05:77:cc:7d:f7:b0:38:cc:81:17:ac:d3:1a:f0: b8:de:c4:4b:19:23:1e:b3:60:9c:13:76:53:66:5e:8d:48:e5: 48:9a:1c:65:73:2c:36:63:e8:b8:24:f0:54:c4:ab:25:a6:27: fb:89:93:40:d0:e9:bf:0a:2f:16:09:85:c1:3f:36:1a:39:fa: 7a:a6:86:0b:88:00:ef:16:db:ba:07:cb:7f:fe:46:25:64:e1: 9e:31:db:5f:a9:35:e3:ab:d3:4d:5d:82:cf:48:ac:c3:88:1f: c4:d5:6a:85:bd:ae:d6:2a:e8:c1:46:ef:dd:32:15:b4:36:18: 59:87:0d:68:65:cf:d2:88:29:2c:67:5b:f8:17:34:b7:e7:d0: c5:f8:fd:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez+69y2ga02ZQ6VAYR1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWZiMjIwYWZhOTNlNTFjZGMwMjE1YjhlZWNhZmQ0MzU3ODEzNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4yaT+YSQHENUgl1Fkxbl8YQv+L/ MYfcps5MSesaiNQ9QBAQJAsEvW3cVf90VcdhCBeNSfRNZif0kJgJeCNAqHmEC9S4 HnJDXxnXu9DAxwKRcUpAVVpVRop835xf2+BAV49FKRo/55uqb3xGBSRBtLTW7dCz gGZSmBf8E4ufUnWI9aO+066tJ/y/fgX60HQmUZqlvafuWLuuSm/kvIqvNiol1jqi lGTxg94GH7fSnXfTJRHIJ2EG/kOEmfpAQOn2WGJj8KJvR5wp3hX91LJNHgK6Xspv GgkgeqKz0rS/Hy2NC0nFoomtuWrsUHuWpz8wOb4RsWQybstxGWyTpZGA5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ77Igr6k+Uc3AIVuO7K/UNXgTU7MB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvbnZzaUN2cVQ1UnpjQWhXNDdzcjlRMWVCTlRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV9kMA0G CSqGSIb3DQEBCwUAA4IBAQCk+l+rFUdMfMyEqY8WwdyajWRtR0zxWpgYTEoVHA5j HctTUyd2hf0OKkB0Gwu8i4g7HpaHFOEaghk9VjJ7CdDdyTjk4+9VLgg1XBEK08dx SDkRjnB5J3TnF0iQKyLQ2qDHU2n9Iw4rNr0YWjp6gnTHBXfMffewOMyBF6zTGvC4 3sRLGSMes2CcE3ZTZl6NSOVImhxlcyw2Y+i4JPBUxKslpif7iZNA0Om/Ci8WCYXB PzYaOfp6poYLiADvFtu6B8t//kYlZOGeMdtfqTXjq9NNXYLPSKzDiB/E1WqFva7W KujBRu/dMhW0NhhZhw1oZc/SiCksZ1v4FzS359DF+P3K -----END CERTIFICATE-----Generated at Tue Jan 20 00:54:51 2026 by rpki-client