This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/NOlO128QAjjmRe6Qnn3gOA1oSVE.roa File: NOlO128QAjjmRe6Qnn3gOA1oSVE.roa (raw, json) Hash identifier: 67bJFnELYE8fKPufA6ehqlhNoFQm0l5AN/KQyh1V7KY= Subject key identifier: 34:E9:4E:D7:6F:10:02:38:E6:45:EE:90:9E:7D:E0:38:0D:68:49:51 Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135 Certificate serial: 019B7D5BA0AA5F4227FC1F2A8B66AD25026E Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/NOlO128QAjjmRe6Qnn3gOA1oSVE.roa Signing time: Fri 02 Jan 2026 06:18:35 +0000 ROA not before: Fri 02 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.237.84.0/24 maxlen: 24 87.237.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a0:aa:5f:42:27:fc:1f:2a:8b:66:ad:25:02:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Validity Not Before: Jan 2 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e94ed76f100238e645ee909e7de0380d684951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:e4:6c:95:e5:4e:84:8c:da:9e:75:13:9c: 4b:1a:4d:6f:8a:33:b8:32:02:3f:b7:4c:3a:e6:09: 96:94:48:4d:9e:d4:5f:b8:e9:ea:29:14:9a:f9:94: 52:c1:cf:47:fb:6e:d0:5a:5d:43:07:e2:f4:9a:fc: e5:e5:d8:41:a5:93:ba:7c:62:39:d1:19:28:bd:bb: 9f:d5:87:3e:38:f2:7f:31:a5:24:37:38:54:41:a9: 15:e0:0a:2c:25:e5:ad:de:ef:30:b0:77:fa:fe:93: 3f:cf:8c:7b:27:20:29:24:8c:e5:8d:4b:2e:0f:b6: fa:c7:f8:ae:97:b9:93:91:67:44:42:5b:be:88:de: 64:3c:5c:bb:0d:e0:54:d8:04:7e:79:2e:e7:6f:a6: 0d:35:34:92:e0:96:a6:5f:39:5e:87:8e:96:4c:63: 8b:70:c7:2d:bc:af:1c:5c:b2:9f:23:d1:b3:a6:b6: ee:b7:03:45:53:61:32:01:1b:58:56:e4:93:39:a9: ef:e7:84:de:0f:e9:f7:a8:3a:90:af:bb:da:82:db: 22:b8:d8:18:2e:5c:67:f3:2d:dc:0a:c8:6b:d0:e3: 3a:d1:d1:ad:27:2c:3f:cb:d2:bd:bc:0e:1e:15:74: 83:03:96:31:58:c1:96:bb:7e:66:93:d4:b4:08:40: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:4E:D7:6F:10:02:38:E6:45:EE:90:9E:7D:E0:38:0D:68:49:51 X509v3 Authority Key Identifier: keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/NOlO128QAjjmRe6Qnn3gOA1oSVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.84.0/24 87.237.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d2:86:37:26:f7:85:c9:89:34:2d:a7:65:e8:49:20:a7:1b: 0a:bd:0a:66:ef:ed:6e:c4:5e:c9:8a:c5:05:42:b2:15:d5:89: 99:1d:ec:83:2c:43:7e:a0:5d:a5:63:8f:28:9f:48:07:e7:f9: 2b:7d:1c:5d:ae:c6:10:96:9c:fc:dc:7b:78:b6:82:f4:80:e2: ac:de:56:80:2b:79:4b:e8:00:63:7a:74:7e:aa:3c:da:78:6d: 10:5d:3a:4b:04:fd:e5:b1:f4:c2:ba:c7:0c:6e:ab:f7:e8:c9: 36:e3:b1:52:59:23:96:67:6c:82:4b:ed:ff:ef:1a:fc:f8:fe: 28:45:44:29:0d:f1:d2:54:4c:ba:af:ca:8f:33:59:03:67:03: 82:a7:be:79:2f:d2:f2:4c:ca:81:eb:0c:1a:a9:14:cf:9c:08: 5a:4d:0f:01:75:6e:30:04:a5:a7:32:8f:53:0c:3a:f7:96:ad: ba:b0:8e:35:06:92:22:ec:93:7e:0f:d7:14:72:45:1d:db:26: cf:e2:14:e7:97:64:bf:36:31:20:48:26:30:52:42:2c:92:40: b0:38:af:89:8b:d4:b0:ef:15:98:11:98:b5:ad:43:ef:8e:3e: b2:7f:ba:b8:64:fd:15:58:68:65:8a:63:9b:4f:ac:52:93:71: 49:ac:a7:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W6CqX0In/B8qi2atJQJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5 ZTQxMzUwHhcNMjYwMTAyMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU5NGVkNzZmMTAwMjM4ZTY0NWVlOTA5ZTdkZTAzODBkNjg0OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7bkbJXlToSM2p51E5xLGk1vijO4 MgI/t0w65gmWlEhNntRfuOnqKRSa+ZRSwc9H+27QWl1DB+L0mvzl5dhBpZO6fGI5 0Rkovbuf1Yc+OPJ/MaUkNzhUQakV4AosJeWt3u8wsHf6/pM/z4x7JyApJIzljUsu D7b6x/iul7mTkWdEQlu+iN5kPFy7DeBU2AR+eS7nb6YNNTSS4JamXzleh46WTGOL cMctvK8cXLKfI9GzprbutwNFU2EyARtYVuSTOanv54TeD+n3qDqQr7vagtsiuNgY Llxn8y3cCshr0OM60dGtJyw/y9K9vA4eFXSDA5YxWMGWu35mk9S0CEDMZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDTpTtdvEAI45kXukJ594DgNaElRMB8GA1UdIwQY MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt NGU4NWRhYmQ2NDc0LzEvTk9sTzEyOFFBamptUmU2UW5uM2dPQTFvU1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0 LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+1UAwQA V+1WMA0GCSqGSIb3DQEBCwUAA4IBAQCc0oY3JveFyYk0Ladl6EkgpxsKvQpm7+1u xF7JisUFQrIV1YmZHeyDLEN+oF2lY48on0gH5/krfRxdrsYQlpz83Ht4toL0gOKs 3laAK3lL6ABjenR+qjzaeG0QXTpLBP3lsfTCuscMbqv36Mk247FSWSOWZ2yCS+3/ 7xr8+P4oRUQpDfHSVEy6r8qPM1kDZwOCp755L9LyTMqB6wwaqRTPnAhaTQ8BdW4w BKWnMo9TDDr3lq26sI41BpIi7JN+D9cUckUd2ybP4hTnl2S/NjEgSCYwUkIskkCw OK+Ji9Sw7xWYEZi1rUPvjj6yf7q4ZP0VWGhlimObT6xSk3FJrKdC -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:13 2026 by rpki-client