This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa File: Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa (raw, json) Hash identifier: znYnyo3jsEa5JPCdrns9UrjveBbD2qT9TL2pzWDyjTo= Subject key identifier: 36:AD:14:4C:3F:D2:72:52:06:F4:71:4C:3A:C0:31:05:C5:80:07:D5 Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Certificate serial: 019B7C11A65B8E7A3D28B1FCFF1BA90ECDDE Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa Signing time: Fri 02 Jan 2026 00:18:09 +0000 ROA not before: Fri 02 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47961 IP address blocks: 91.207.34.0/24 maxlen: 24 91.207.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a6:5b:8e:7a:3d:28:b1:fc:ff:1b:a9:0e:cd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Validity Not Before: Jan 2 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36ad144c3fd2725206f4714c3ac03105c58007d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:4c:ec:67:d3:52:0e:2c:06:6d:80:18:60: 4b:61:2c:40:13:be:39:f4:bf:00:0f:e0:40:12:5c: 13:e5:7d:27:72:d4:9a:ce:5a:a4:9d:36:cc:23:2f: 4a:e5:7c:4f:43:21:4a:63:14:7e:4d:fe:3b:43:30: 87:76:0a:c0:3e:cf:d7:77:1d:e5:0e:ab:ed:2b:11: 4c:c1:61:cc:dc:f3:d1:8a:20:8b:d9:0f:bd:fe:a8: 7a:b4:03:a8:1d:18:18:10:e5:9b:a7:2d:a6:35:44: 7b:59:bc:fe:bf:5f:70:72:f5:21:41:ea:34:28:10: 9f:ef:8a:30:6f:f7:a7:d7:e1:1d:c9:9e:66:54:71: f2:37:81:09:85:b6:b9:9e:a6:10:df:fe:97:52:c8: 42:fd:6a:3f:02:8f:fd:6c:3a:16:ac:11:76:b6:f2: 6e:b7:3e:59:17:be:5c:16:c4:57:be:17:f4:5e:3f: bf:ac:ae:5f:fd:1d:4e:08:9d:3f:e2:37:3d:e4:04: e5:95:03:6c:05:64:e6:28:4f:6d:51:d4:ec:b1:24: ca:bf:71:cd:5c:a2:d1:d7:2a:51:49:f9:bc:4f:c0: 3c:2f:80:20:94:80:a0:b6:f4:fe:83:bd:b0:22:1d: bd:dd:39:86:88:35:3b:24:11:10:64:66:b5:e0:a8: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:14:4C:3F:D2:72:52:06:F4:71:4C:3A:C0:31:05:C5:80:07:D5 X509v3 Authority Key Identifier: keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.34.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:19:82:ca:6e:33:58:da:70:f3:f5:c1:4a:55:12:01:77:eb: c1:ef:fe:14:0d:36:81:71:3d:27:2f:d5:15:4d:a1:e9:9b:ff: 70:36:bf:51:df:44:04:a4:dc:e4:03:1e:4a:74:aa:17:d6:bf: 6f:53:59:54:de:28:47:6d:1b:69:6d:a7:c3:5a:df:ea:68:49: 2c:0d:c9:b2:1d:2a:8e:c9:7f:b2:55:2d:64:fe:6b:fd:b3:2e: ef:f2:12:e4:92:0f:f6:8c:a4:6f:5a:4b:a9:ae:e8:fd:97:33: e9:ec:ef:16:7a:b4:01:21:d8:55:cd:81:fd:4e:b5:b7:61:c6: 7e:de:42:79:6e:fd:68:7e:a7:70:8f:ad:e3:1d:d9:a9:bf:02: aa:a2:47:f8:be:e7:ae:0a:5e:40:a9:5a:31:df:32:5d:6e:e2: 9b:7a:01:e7:68:3d:93:2f:d8:f4:cc:10:5c:f6:f9:40:01:40: b9:a1:8f:36:10:02:ee:28:08:f5:37:c3:dc:fd:ce:01:09:3e: 5e:73:c5:01:1d:3e:6f:20:59:f3:11:95:5d:aa:00:24:51:c2: 08:fe:34:06:c1:fc:8f:70:2d:00:bf:cb:af:7d:5f:b8:33:9f: ae:f4:f0:7e:59:29:1b:e4:71:73:9c:e2:51:44:ba:35:75:d5: 80:c8:b6:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EaZbjno9KLH8/xupDs3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw MDgyZTMwHhcNMjYwMTAyMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmFkMTQ0YzNmZDI3MjUyMDZmNDcxNGMzYWMwMzEwNWM1ODAwN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWhM7GfTUg4sBm2AGGBLYSxAE745 9L8AD+BAElwT5X0nctSazlqknTbMIy9K5XxPQyFKYxR+Tf47QzCHdgrAPs/Xdx3l DqvtKxFMwWHM3PPRiiCL2Q+9/qh6tAOoHRgYEOWbpy2mNUR7Wbz+v19wcvUhQeo0 KBCf74owb/en1+EdyZ5mVHHyN4EJhba5nqYQ3/6XUshC/Wo/Ao/9bDoWrBF2tvJu tz5ZF75cFsRXvhf0Xj+/rK5f/R1OCJ0/4jc95ATllQNsBWTmKE9tUdTssSTKv3HN XKLR1ypRSfm8T8A8L4AglICgtvT+g72wIh293TmGiDU7JBEQZGa14Kjn4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDatFEw/0nJSBvRxTDrAMQXFgAfVMB8GA1UdIwQY MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt MGNhZGQ4NDc0NDhiLzEvTnEwVVREX1NjbElHOUhGTU9zQXhCY1dBQjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW88iMA0G CSqGSIb3DQEBCwUAA4IBAQAcGYLKbjNY2nDz9cFKVRIBd+vB7/4UDTaBcT0nL9UV TaHpm/9wNr9R30QEpNzkAx5KdKoX1r9vU1lU3ihHbRtpbafDWt/qaEksDcmyHSqO yX+yVS1k/mv9sy7v8hLkkg/2jKRvWkupruj9lzPp7O8WerQBIdhVzYH9TrW3YcZ+ 3kJ5bv1ofqdwj63jHdmpvwKqokf4vueuCl5AqVox3zJdbuKbegHnaD2TL9j0zBBc 9vlAAUC5oY82EALuKAj1N8Pc/c4BCT5ec8UBHT5vIFnzEZVdqgAkUcII/jQGwfyP cC0Av8uvfV+4M5+u9PB+WSkb5HFznOJRRLo1ddWAyLZr -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:56 2026 by rpki-client