This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/NSaVqXW-BYNVKVrMtAdLzttEo10.roa File: NSaVqXW-BYNVKVrMtAdLzttEo10.roa (raw, json) Hash identifier: KZjofyx19Ipt9TS6sfl4V56sa17bROc+lLGgg3vy/tg= Subject key identifier: 35:26:95:A9:75:BE:05:83:55:29:5A:CC:B4:07:4B:CE:DB:44:A3:5D Certificate issuer: /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67 Certificate serial: 019B79EBBB6639CB5C002036E527B9784A91 Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/NSaVqXW-BYNVKVrMtAdLzttEo10.roa Signing time: Thu 01 Jan 2026 14:17:30 +0000 ROA not before: Thu 01 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199080 IP address blocks: 91.198.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bb:66:39:cb:5c:00:20:36:e5:27:b9:78:4a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=352695a975be058355295accb4074bcedb44a35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:e6:16:b8:78:a6:0a:9c:31:bf:ad:b7:8d: 54:ad:f3:51:fa:72:f7:f0:10:16:50:ef:fd:69:60: a0:d7:99:86:5b:1a:ed:d2:7c:4d:3c:23:0a:3b:eb: 7c:ba:73:07:f2:d6:02:cf:4d:91:13:f3:a3:7a:89: 6d:53:ff:f2:e0:e8:b2:39:ca:a6:e8:b9:50:fb:cf: d2:ea:2e:56:62:63:1a:95:07:77:d6:d4:16:20:a6: b8:26:3b:64:b2:06:0c:00:05:06:71:94:aa:33:98: 52:a9:a2:e5:bd:44:8d:2d:11:a4:e5:3c:44:57:f8: cd:d5:8f:5c:de:f8:0d:89:e7:61:26:b3:5a:af:00: 3e:69:d0:05:9a:69:c6:61:6e:f9:34:8c:4b:85:22: 54:5f:00:ef:86:c4:52:28:bd:2b:ce:7c:96:0f:e1: f5:0f:1f:8b:c6:9e:c2:9f:da:16:bb:d2:5b:9c:93: 71:38:d4:87:75:87:e4:1e:43:30:17:e5:25:60:55: b9:71:83:b8:05:c3:1f:7d:86:a8:52:d4:89:7a:5e: a8:03:93:8d:db:8e:1b:19:2f:11:97:ad:4c:ef:46: 63:4c:78:a9:9e:56:b5:6e:ab:02:90:f8:0e:1c:dd: 10:d0:b2:cf:20:7f:a6:0a:8b:5a:ea:a5:70:15:5a: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:26:95:A9:75:BE:05:83:55:29:5A:CC:B4:07:4B:CE:DB:44:A3:5D X509v3 Authority Key Identifier: keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/NSaVqXW-BYNVKVrMtAdLzttEo10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:22:39:80:a5:99:2b:41:c9:37:57:58:1d:8e:ab:f6:4e:c1: 5a:ae:52:ee:aa:7e:4a:d2:81:a6:a2:48:12:b3:42:40:20:1a: 3d:e6:e1:94:54:3e:01:a5:09:e8:84:c4:6e:17:37:de:fe:5f: eb:66:4b:7b:09:15:1e:a8:93:26:8a:86:e4:8c:92:78:c5:02: 70:fa:c1:99:d8:fa:0f:a1:24:16:e8:a0:60:11:38:20:9c:88: 5a:60:13:d0:27:21:e3:8c:a2:b0:99:4c:8c:ef:18:e8:a5:3c: 7a:8b:19:5c:4d:d9:54:97:b8:31:ab:f5:9a:eb:ff:97:4a:d8: e9:f6:ad:7d:64:da:8d:a2:f1:20:13:5f:bc:e9:a6:4a:df:36: 32:5e:fe:c9:65:1b:9e:dc:79:2b:76:0a:65:2c:b0:33:72:45: f7:28:3f:be:cd:9b:c9:94:d2:97:df:bf:50:8c:1f:20:02:99: b8:22:0d:2f:e2:fa:c8:82:69:19:fd:84:38:a2:eb:c9:c8:6f: c1:e2:e9:52:34:5a:a3:08:4a:99:8e:5b:3f:cd:5f:20:1e:c6: 35:bd:71:f0:21:20:d2:4b:3a:a6:55:21:2e:cd:d9:32:c0:28: cd:71:b6:cb:1e:5b:5e:a9:d3:93:80:58:3a:be:d5:86:ed:1e: 1e:87:2f:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567tmOctcACA25Se5eEqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NWE4Y2VmNWZkMmE4ZjE4NWFmZjU5YThjNmViZGQ5ODM2 M2FjNjcwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTI2OTVhOTc1YmUwNTgzNTUyOTVhY2NiNDA3NGJjZWRiNDRhMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobvmFrh4pgqcMb+tt41UrfNR+nL3 8BAWUO/9aWCg15mGWxrt0nxNPCMKO+t8unMH8tYCz02RE/OjeoltU//y4OiyOcqm 6LlQ+8/S6i5WYmMalQd31tQWIKa4JjtksgYMAAUGcZSqM5hSqaLlvUSNLRGk5TxE V/jN1Y9c3vgNiedhJrNarwA+adAFmmnGYW75NIxLhSJUXwDvhsRSKL0rznyWD+H1 Dx+Lxp7Cn9oWu9JbnJNxONSHdYfkHkMwF+UlYFW5cYO4BcMffYaoUtSJel6oA5ON 244bGS8Rl61M70ZjTHipnla1bqsCkPgOHN0Q0LLPIH+mCota6qVwFVpNJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUmlal1vgWDVSlazLQHS87bRKNdMB8GA1UdIwQY MBaAFOdajO9f0qjxha/1moxuvdmDY6xnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFxTTcxX1NxUEdGcl9XYWpHNjkyWU5qckdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNGUyYjMtYWZmOC00OWNkLTljN2Ut OTdkOGQ0NGUxMGNlLzEvTlNhVnFYVy1CWU5WS1ZyTXRBZEx6dHRFbzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kNGUyYjMtYWZmOC00OWNkLTljN2UtOTdkOGQ0NGUxMGNl LzEvNTFxTTcxX1NxUEdGcl9XYWpHNjkyWU5qckdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8bVMA0G CSqGSIb3DQEBCwUAA4IBAQB/IjmApZkrQck3V1gdjqv2TsFarlLuqn5K0oGmokgS s0JAIBo95uGUVD4BpQnohMRuFzfe/l/rZkt7CRUeqJMmiobkjJJ4xQJw+sGZ2PoP oSQW6KBgETggnIhaYBPQJyHjjKKwmUyM7xjopTx6ixlcTdlUl7gxq/Wa6/+XStjp 9q19ZNqNovEgE1+86aZK3zYyXv7JZRue3HkrdgplLLAzckX3KD++zZvJlNKX379Q jB8gApm4Ig0v4vrIgmkZ/YQ4ouvJyG/B4ulSNFqjCEqZjls/zV8gHsY1vXHwISDS SzqmVSEuzdkywCjNcbbLHlteqdOTgFg6vtWG7R4ehy8U -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:22 2026 by rpki-client