This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa File: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (raw, json) Hash identifier: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0= Subject key identifier: 34:85:44:33:C6:B8:FA:26:C7:AF:90:55:2F:DC:73:A6:61:45:93:F4 Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419 Certificate serial: 019B77C70ABE5738BA94E7101ED81562DC38 Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42791 IP address blocks: 91.213.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:be:57:38:ba:94:e7:10:1e:d8:15:62:dc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34854433c6b8fa26c7af90552fdc73a6614593f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:fc:be:52:bd:ba:bc:d7:66:54:f2:59:ef: 30:6a:21:fe:24:ca:b1:97:68:f0:ed:fb:0c:1d:1b: 56:5e:46:95:5b:73:13:92:a3:bb:d1:82:58:21:c1: f0:e6:89:b0:49:a2:77:a1:b4:09:8f:15:3f:ec:01: b9:a9:f7:cc:e2:4e:c1:70:05:cc:67:c1:eb:33:e0: d6:9f:dd:37:f3:8a:37:a1:be:7c:86:21:c3:36:be: f1:cc:6e:fb:30:5e:7e:55:aa:e6:bd:f8:eb:22:d1: 54:f4:84:0e:4b:43:3f:0a:b6:d1:7c:ee:fd:9a:5e: 1c:54:d9:b1:a8:b8:d2:1f:4a:e0:7a:73:b3:b1:60: 89:85:75:12:86:0b:dc:77:83:5b:89:85:c0:1c:2b: 39:2f:6b:59:af:4a:45:a5:2f:a2:d1:8e:80:93:ee: f5:a9:5e:ed:f7:94:3f:f6:7c:87:66:35:a5:4d:9b: 17:c9:8d:49:64:ad:79:76:5a:76:9f:fd:59:69:41: c7:5e:e3:0f:27:84:1d:26:88:8b:3e:d5:b4:2f:a3: 90:37:02:0d:69:1d:84:29:ed:0a:a0:99:57:99:89: ee:51:f1:0d:10:6a:b2:8e:92:6a:08:17:f5:50:41: cc:2c:fa:b4:28:61:29:2c:70:5c:86:d0:17:1e:e1: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:44:33:C6:B8:FA:26:C7:AF:90:55:2F:DC:73:A6:61:45:93:F4 X509v3 Authority Key Identifier: keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.131.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:28:04:21:9b:1c:83:44:79:35:72:a4:d0:d2:93:d4:2b:95: b5:ae:3f:42:fe:46:2f:ac:73:7a:53:5b:05:56:7b:11:94:c0: d7:c5:be:cf:59:6c:0f:a2:2c:eb:86:23:61:22:f4:92:3d:f6: 8b:77:d2:d8:d8:47:a5:eb:c6:8a:0f:a4:37:fa:4f:2d:40:06: 47:2e:a3:51:a3:80:53:74:f2:34:33:02:ea:27:ef:1f:a2:01: e0:dc:f0:16:cb:6c:f6:3c:94:2d:bb:7a:2b:da:1b:b0:58:b1: 9b:14:a9:ca:e7:71:ae:80:b4:9e:6c:dc:8f:4d:4d:34:1c:44: 15:cf:b6:86:0b:d5:2f:9b:23:62:13:c6:22:38:81:09:61:ec: 5d:81:7d:df:70:ed:b5:da:aa:de:7a:33:04:2f:74:e4:89:dd: cf:38:02:eb:b9:8b:73:ab:32:cc:ea:6d:e8:28:86:3e:48:ba: 0b:5a:73:02:a5:ac:75:46:06:d9:77:d6:ee:29:72:17:2f:58: 5d:ad:c4:14:ef:a3:d0:7e:b0:cd:94:53:91:59:92:fe:3c:95: 3a:06:b3:c4:68:5b:f0:34:fe:36:53:a5:30:58:8e:d5:4c:b7: c5:4c:e9:8b:c3:05:b1:d6:c5:a3:30:5d:c9:cb:b2:e5:5e:42: ed:3b:5f:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwq+Vzi6lOcQHtgVYtw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjdkZDU0ZGFiMDJmZThjZGU4YTg1ZTU2OWY4MjcwODg5 Nzk0MTkwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg1NDQzM2M2YjhmYTI2YzdhZjkwNTUyZmRjNzNhNjYxNDU5M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi/8vlK9urzXZlTyWe8waiH+JMqx l2jw7fsMHRtWXkaVW3MTkqO70YJYIcHw5omwSaJ3obQJjxU/7AG5qffM4k7BcAXM Z8HrM+DWn90384o3ob58hiHDNr7xzG77MF5+VarmvfjrItFU9IQOS0M/CrbRfO79 ml4cVNmxqLjSH0rgenOzsWCJhXUShgvcd4NbiYXAHCs5L2tZr0pFpS+i0Y6Ak+71 qV7t95Q/9nyHZjWlTZsXyY1JZK15dlp2n/1ZaUHHXuMPJ4QdJoiLPtW0L6OQNwIN aR2EKe0KoJlXmYnuUfENEGqyjpJqCBf1UEHMLPq0KGEpLHBchtAXHuHVwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSFRDPGuPomx6+QVS/cc6ZhRZP0MB8GA1UdIwQY MBaAFPO33VTasC/ozeioXlafgnCIl5QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUt MTkzOTg4M2JiMWY4LzEvTklWRU04YTQtaWJIcjVCVkw5eHpwbUZGa19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUtMTkzOTg4M2JiMWY4 LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WDMA0G CSqGSIb3DQEBCwUAA4IBAQCKKAQhmxyDRHk1cqTQ0pPUK5W1rj9C/kYvrHN6U1sF VnsRlMDXxb7PWWwPoizrhiNhIvSSPfaLd9LY2Eel68aKD6Q3+k8tQAZHLqNRo4BT dPI0MwLqJ+8fogHg3PAWy2z2PJQtu3or2huwWLGbFKnK53GugLSebNyPTU00HEQV z7aGC9UvmyNiE8YiOIEJYexdgX3fcO212qreejMEL3Tkid3POALruYtzqzLM6m3o KIY+SLoLWnMCpax1RgbZd9buKXIXL1hdrcQU76PQfrDNlFORWZL+PJU6BrPEaFvw NP42U6UwWI7VTLfFTOmLwwWx1sWjMF3Jy7LlXkLtO18r -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:12 2026 by rpki-client