This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Nr5F-zFvBPkvGpajXkBN81saN98.roa File: Nr5F-zFvBPkvGpajXkBN81saN98.roa (raw, json) Hash identifier: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo= Subject key identifier: 36:BE:45:FB:31:6F:04:F9:2F:1A:96:A3:5E:40:4D:F3:5B:1A:37:DF Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4 Certificate serial: 019B7BA51D205D0AF790F01B461363A7A701 Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Nr5F-zFvBPkvGpajXkBN81saN98.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197055 IP address blocks: 91.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1d:20:5d:0a:f7:90:f0:1b:46:13:63:a7:a7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36be45fb316f04f92f1a96a35e404df35b1a37df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:ff:ba:7e:6f:1e:04:51:54:13:0a:94:4f: 7e:3d:f5:d4:c2:8f:ca:06:ea:09:27:73:9c:26:7f: 85:12:bd:b3:98:fe:d3:63:b3:fa:45:69:0c:3d:f6: 4e:16:d2:93:b2:d1:6c:f8:18:c2:4a:f7:a7:ef:32: d0:8f:4d:46:4e:92:14:d1:a4:90:06:96:ed:64:24: 72:12:2a:cb:f2:9b:b5:da:46:6c:65:69:8d:bc:c3: 32:95:7f:db:94:ad:d0:35:8f:ca:c4:27:79:26:b3: 1e:52:8a:32:37:4e:24:53:dc:2a:b3:60:74:87:25: 4e:8d:db:8e:82:3c:8a:48:aa:f2:18:11:68:70:da: 47:5d:5f:33:7c:02:a3:e1:dd:b1:77:6a:bb:43:06: 6c:e4:91:03:45:20:25:44:09:b6:63:2d:9c:2e:b9: 27:7c:66:01:7c:55:43:c8:63:f0:d7:12:e3:27:4a: 0a:dd:1e:f4:fe:c9:5f:da:bf:a0:a0:01:9a:dc:5b: 92:ff:56:29:de:eb:ff:4b:f9:f4:1e:fe:99:6e:19: 0e:33:72:ad:e8:ab:4e:52:2c:62:88:0f:2c:a4:23: c3:bb:17:43:ba:b4:55:92:50:ae:dc:3e:65:8c:1e: 20:2e:e8:93:62:33:e8:b3:fe:8d:08:87:21:bb:ba: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BE:45:FB:31:6F:04:F9:2F:1A:96:A3:5E:40:4D:F3:5B:1A:37:DF X509v3 Authority Key Identifier: keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Nr5F-zFvBPkvGpajXkBN81saN98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 83:fc:73:b5:0a:82:e3:96:ad:24:48:7d:e3:db:ee:07:0f:71: 35:3a:f7:87:f5:86:26:70:2e:00:2f:94:36:1c:9d:de:0e:76: 09:e0:29:ea:55:e7:82:62:5b:aa:dd:5f:23:9d:1a:8b:8b:c2: b4:dd:d5:37:fa:52:12:d4:4f:1b:ce:60:a5:05:fd:41:29:60: 5f:ce:04:6a:f7:5b:b0:45:04:13:03:4d:8f:32:82:c2:57:a7: 6e:9a:c6:be:4f:f3:14:47:92:f6:f7:75:0d:2c:58:3d:28:32: f0:f2:c2:ec:a4:59:f7:ec:a2:89:10:02:5c:29:7a:e3:02:fc: 79:4d:4f:70:b3:7b:64:e7:1c:d9:e4:0b:5d:e0:92:8c:a4:cc: a1:22:be:e2:80:81:da:76:00:4d:d2:0d:d8:3a:d4:57:6d:0c: fd:7d:fa:09:28:6f:1f:38:ab:f0:bb:2c:19:a6:b8:bd:0d:09: 07:9c:6f:07:31:ae:a6:52:91:5d:9d:ea:cc:cf:4c:40:d7:18: 8b:27:0f:75:0e:1d:a5:fe:97:4c:d8:83:7b:1a:84:e8:71:2a: 87:c8:1f:ae:8f:f1:25:3e:50:7b:d4:ab:60:27:6b:00:cd:85: 6b:ee:a5:96:64:e7:be:14:5d:94:0f:70:c5:26:7b:c6:37:f4: 2b:4a:cc:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pR0gXQr3kPAbRhNjp6cBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw Y2I2YTQwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmJlNDVmYjMxNmYwNGY5MmYxYTk2YTM1ZTQwNGRmMzViMWEzN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspH/un5vHgRRVBMKlE9+PfXUwo/K BuoJJ3OcJn+FEr2zmP7TY7P6RWkMPfZOFtKTstFs+BjCSven7zLQj01GTpIU0aSQ BpbtZCRyEirL8pu12kZsZWmNvMMylX/blK3QNY/KxCd5JrMeUooyN04kU9wqs2B0 hyVOjduOgjyKSKryGBFocNpHXV8zfAKj4d2xd2q7QwZs5JEDRSAlRAm2Yy2cLrkn fGYBfFVDyGPw1xLjJ0oK3R70/slf2r+goAGa3FuS/1Yp3uv/S/n0Hv6ZbhkOM3Kt 6KtOUixiiA8spCPDuxdDurRVklCu3D5ljB4gLuiTYjPos/6NCIchu7oELQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDa+RfsxbwT5LxqWo15ATfNbGjffMB8GA1UdIwQY MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt MmQ3ZmQwZmIyMmNlLzEvTnI1Ri16RnZCUGt2R3BhalhrQk44MXNhTjk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iuMA0G CSqGSIb3DQEBCwUAA4IBAQCD/HO1CoLjlq0kSH3j2+4HD3E1OveH9YYmcC4AL5Q2 HJ3eDnYJ4CnqVeeCYluq3V8jnRqLi8K03dU3+lIS1E8bzmClBf1BKWBfzgRq91uw RQQTA02PMoLCV6dumsa+T/MUR5L293UNLFg9KDLw8sLspFn37KKJEAJcKXrjAvx5 TU9ws3tk5xzZ5Atd4JKMpMyhIr7igIHadgBN0g3YOtRXbQz9ffoJKG8fOKvwuywZ pri9DQkHnG8HMa6mUpFdnerMz0xA1xiLJw91Dh2l/pdM2IN7GoTocSqHyB+uj/El PlB71KtgJ2sAzYVr7qWWZOe+FF2UD3DFJnvGN/QrSsxp -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client