This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa File: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (raw, json) Hash identifier: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s= Subject key identifier: 36:13:BF:20:3B:2E:9F:50:E1:48:90:B4:9C:EC:22:27:36:7A:23:26 Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Certificate serial: 019B7A5AB4B1F848967B884955995416DA3B Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51200 IP address blocks: 92.241.15.0/24 maxlen: 24 92.241.17.0/24 maxlen: 24 92.241.19.0/24 maxlen: 24 92.241.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:b1:f8:48:96:7b:88:49:55:99:54:16:da:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3613bf203b2e9f50e14890b49cec2227367a2326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:ed:0a:57:0f:d2:05:6e:99:63:51:60:ee: 8f:08:a8:03:32:08:1c:21:3b:b6:8f:bc:20:63:15: 85:52:b5:56:4f:c5:82:77:29:a1:e4:24:94:0b:e1: 5f:d2:a3:32:3d:d3:e5:26:35:79:db:18:8b:2d:be: 8d:c0:fd:b7:78:83:68:ae:33:94:60:1d:5b:1b:29: 46:86:d6:30:5b:fe:4e:17:78:fc:08:95:94:f4:03: 9b:ab:0e:87:81:2e:ac:29:5d:1e:6f:72:e3:fa:86: 03:06:68:0a:3f:36:21:5e:c3:36:89:f7:46:8d:4a: 86:b0:f4:c7:ab:8a:0d:b1:e7:d6:7e:ea:8c:fc:d9: 5e:b2:76:7e:c0:8b:3a:33:c9:7c:33:7b:df:21:4a: cb:85:fc:7a:d1:98:c5:7a:6e:8f:8e:04:59:15:68: 02:f3:bd:88:fd:c6:17:4e:25:78:0f:84:46:91:b1: b7:49:49:df:ef:f6:ce:7c:b8:a9:85:b9:29:1a:14: 13:86:64:bf:25:80:50:3c:1b:8f:99:01:ba:2e:4b: 50:e7:43:97:3d:05:83:3f:f0:a6:ac:ce:44:1e:7b: 39:ab:8e:2c:49:5d:24:54:62:c6:23:a8:2b:da:d5: c7:5a:6b:81:40:89:13:48:2b:f8:52:66:86:2e:aa: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:BF:20:3B:2E:9F:50:E1:48:90:B4:9C:EC:22:27:36:7A:23:26 X509v3 Authority Key Identifier: keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.241.15.0/24 92.241.17.0/24 92.241.19.0-92.241.20.255 Signature Algorithm: sha256WithRSAEncryption 76:64:0d:8a:a2:e9:3c:ea:d0:ab:d6:7b:8a:07:4b:1d:3a:a4: 42:64:5f:23:59:9f:8b:82:12:52:c6:46:6c:70:fc:51:9a:fb: d1:4b:88:10:df:5c:90:d4:24:6a:9f:2c:56:9f:be:f5:01:06: 7e:99:56:80:55:ba:67:d0:41:68:11:00:74:3f:af:84:3d:14: 9c:46:ed:15:1d:06:7b:cb:8f:77:56:00:8e:c2:14:4b:7f:d6: 22:ae:5a:6f:a5:61:c4:7c:5e:90:6a:0a:b4:81:c9:ce:5f:32: bf:24:7f:b0:51:a6:2a:a2:4b:ed:db:2d:f0:fa:4d:12:d5:f9: e3:55:57:64:cd:b7:00:6f:f2:b3:f7:37:63:90:90:e8:e6:9c: f2:bc:19:97:d7:a5:f9:18:5e:2c:e0:b2:7c:e4:ee:ef:9e:d5: 5a:33:fb:ed:81:66:67:3d:de:c9:56:39:1b:4a:85:26:03:e9: bb:35:36:1c:4d:5b:d7:d1:6e:8f:bc:c7:99:28:57:17:1c:bc: 66:fb:ec:cf:43:e1:4d:65:2e:ad:b1:9a:6c:01:eb:47:c4:5d: 08:24:0d:08:3f:d0:ad:e8:19:28:ff:ce:a1:95:6f:95:60:20: 0c:39:51:93:58:05:ba:23:28:29:bf:42:07:a8:8a:d6:83:f5: 25:6e:2a:1f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WrSx+EiWe4hJVZlUFto7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj MmFhMDcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjEzYmYyMDNiMmU5ZjUwZTE0ODkwYjQ5Y2VjMjIyNzM2N2EyMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N3tClcP0gVumWNRYO6PCKgDMggc ITu2j7wgYxWFUrVWT8WCdymh5CSUC+Ff0qMyPdPlJjV52xiLLb6NwP23eINorjOU YB1bGylGhtYwW/5OF3j8CJWU9AObqw6HgS6sKV0eb3Lj+oYDBmgKPzYhXsM2ifdG jUqGsPTHq4oNsefWfuqM/NlesnZ+wIs6M8l8M3vfIUrLhfx60ZjFem6PjgRZFWgC 872I/cYXTiV4D4RGkbG3SUnf7/bOfLiphbkpGhQThmS/JYBQPBuPmQG6LktQ50OX PQWDP/CmrM5EHns5q44sSV0kVGLGI6gr2tXHWmuBQIkTSCv4UmaGLqoDsQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDYTvyA7Lp9Q4UiQtJzsIic2eiMmMB8GA1UdIwQY MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt MjcxYTk1NzZlYWU3LzEvTmhPX0lEc3VuMURoU0pDMG5Pd2lKelo2SXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3 LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXPEPAwQA XPERMAwDBABc8RMDBABc8RQwDQYJKoZIhvcNAQELBQADggEBAHZkDYqi6Tzq0KvW e4oHSx06pEJkXyNZn4uCElLGRmxw/FGa+9FLiBDfXJDUJGqfLFafvvUBBn6ZVoBV umfQQWgRAHQ/r4Q9FJxG7RUdBnvLj3dWAI7CFEt/1iKuWm+lYcR8XpBqCrSByc5f Mr8kf7BRpiqiS+3bLfD6TRLV+eNVV2TNtwBv8rP3N2OQkOjmnPK8GZfXpfkYXizg snzk7u+e1Voz++2BZmc93slWORtKhSYD6bs1NhxNW9fRbo+8x5koVxccvGb77M9D 4U1lLq2xmmwB60fEXQgkDQg/0K3oGSj/zqGVb5VgIAw5UZNYBbojKCm/QgeoitaD 9SVuKh8= -----END CERTIFICATE-----Generated at Tue Jan 20 07:31:45 2026 by rpki-client