This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/NiGyen5sRKPPy9T8u3ygDrmXuQo.roa File: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (raw, json) Hash identifier: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU= Subject key identifier: 36:21:B2:7A:7E:6C:44:A3:CF:CB:D4:FC:BB:7C:A0:0E:B9:97:B9:0A Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC1C9139945DC821C2301951BC2FA Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/NiGyen5sRKPPy9T8u3ygDrmXuQo.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44682 IP address blocks: 86.107.68.0/23 maxlen: 23 89.35.33.0/24 maxlen: 24 89.35.50.0/24 maxlen: 24 89.42.28.0/24 maxlen: 24 89.42.59.0/24 maxlen: 24 89.43.194.0/23 maxlen: 23 89.45.163.0/24 maxlen: 24 89.46.220.0/23 maxlen: 23 93.113.156.0/24 maxlen: 24 93.114.172.0/22 maxlen: 22 188.210.88.0/24 maxlen: 24 188.213.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c1:c9:13:99:45:dc:82:1c:23:01:95:1b:c2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3621b27a7e6c44a3cfcbd4fcbb7ca00eb997b90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:bb:db:92:88:5b:9b:17:c6:56:49:60:86: 0b:cf:e4:e9:ba:95:04:b1:fd:d9:be:d8:ed:0b:57: 15:37:de:f5:11:3c:a4:bc:40:5d:f1:16:98:f7:4c: d0:54:e5:fc:cd:89:23:d8:86:ba:52:36:c0:19:94: 8d:9d:36:4a:7d:53:ca:8f:06:1a:15:54:14:48:93: 97:ab:0b:ac:f3:13:78:e5:f5:5e:3f:b2:10:f5:3a: d8:0c:55:a2:91:6f:9e:83:2a:1d:49:67:e4:5b:7c: 8d:f7:e1:b2:7a:7b:1c:42:a2:14:26:e3:80:3c:de: f6:4f:52:60:4b:d7:33:19:85:95:0a:96:83:08:2d: 0d:91:ac:b1:a3:5d:54:70:62:b1:f0:36:21:3d:61: a6:71:cf:43:35:bd:b9:63:16:34:2f:05:5a:dc:ff: 7e:ec:19:c9:71:2c:b4:47:58:e9:e9:c5:09:dc:a9: e4:e0:6d:a1:e7:25:67:91:e4:6c:8c:14:76:e8:4a: 31:55:d6:6c:c3:92:99:43:dd:a8:a6:76:5c:5b:1c: 9b:76:f8:5f:ed:bf:8d:9c:57:bb:6f:03:1c:73:7c: bc:a1:c0:94:a8:83:82:43:6d:0f:6e:3c:95:98:5f: ab:b8:74:41:dd:b9:73:08:6a:92:cf:06:60:c2:7d: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:B2:7A:7E:6C:44:A3:CF:CB:D4:FC:BB:7C:A0:0E:B9:97:B9:0A X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/NiGyen5sRKPPy9T8u3ygDrmXuQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.68.0/23 89.35.33.0/24 89.35.50.0/24 89.42.28.0/24 89.42.59.0/24 89.43.194.0/23 89.45.163.0/24 89.46.220.0/23 93.113.156.0/24 93.114.172.0/22 188.210.88.0/24 188.213.2.0/23 Signature Algorithm: sha256WithRSAEncryption 79:86:9a:c8:96:81:61:d6:46:e0:e1:d5:3b:81:ad:53:c5:9b: 19:47:b4:52:ec:4f:99:aa:d7:f9:25:9d:93:6f:9b:6b:58:39: 29:89:d2:d9:be:07:2b:09:6b:54:72:86:cf:78:5c:00:1d:55: 00:8d:70:9f:b7:2d:5c:7c:1b:be:e8:ea:49:a6:9f:63:6f:e8: 62:96:6d:fb:95:b6:a0:c8:f3:3b:df:b7:22:c8:e6:a1:3d:8e: 26:70:f8:d1:26:17:22:93:f3:15:c0:e7:fd:51:99:18:f1:14: 28:b6:bc:8e:85:af:40:f2:5d:ff:3a:8c:fb:33:ef:5e:3f:34: ce:13:2b:d8:85:60:4a:17:5f:94:4a:90:43:5e:24:76:60:27: 7c:cf:12:ea:62:78:bd:ed:0b:e8:95:47:38:a0:87:d2:b2:5b: 8b:1e:a8:e0:89:92:ef:a2:6d:28:78:dd:b8:9e:dd:0a:09:b5: 95:ce:a3:74:e1:e9:c4:7f:04:1a:39:24:7b:48:ec:2d:6c:cc: 6d:34:61:61:8c:8f:7f:ea:19:20:17:48:da:34:1a:a6:fe:51: d9:75:23:57:66:83:d9:3a:cb:75:d1:25:3f:0b:83:eb:7e:6e: 07:0a:85:ea:f7:c9:89:aa:c3:cb:2e:6e:eb:62:de:0a:c0:2c: 49:c1:56:b1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt568HJE5lF3IIcIwGVG8L6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjIxYjI3YTdlNmM0NGEzY2ZjYmQ0ZmNiYjdjYTAwZWI5OTdiOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wK725KIW5sXxlZJYIYLz+TpupUE sf3ZvtjtC1cVN971ETykvEBd8RaY90zQVOX8zYkj2Ia6UjbAGZSNnTZKfVPKjwYa FVQUSJOXqwus8xN45fVeP7IQ9TrYDFWikW+egyodSWfkW3yN9+GyenscQqIUJuOA PN72T1JgS9czGYWVCpaDCC0Nkayxo11UcGKx8DYhPWGmcc9DNb25YxY0LwVa3P9+ 7BnJcSy0R1jp6cUJ3Knk4G2h5yVnkeRsjBR26EoxVdZsw5KZQ92opnZcWxybdvhf 7b+NnFe7bwMcc3y8ocCUqIOCQ20PbjyVmF+ruHRB3blzCGqSzwZgwn187wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDYhsnp+bESjz8vU/Lt8oA65l7kKMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvTmlHeWVuNXNSS1BQeTlUOHUzeWdEcm1YdVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBVmtEAwQA WSMhAwQAWSMyAwQAWSocAwQAWSo7AwQBWSvCAwQAWS2jAwQBWS7cAwQAXXGcAwQC XXKsAwQAvNJYAwQBvNUCMA0GCSqGSIb3DQEBCwUAA4IBAQB5hprIloFh1kbg4dU7 ga1TxZsZR7RS7E+Zqtf5JZ2Tb5trWDkpidLZvgcrCWtUcobPeFwAHVUAjXCfty1c fBu+6OpJpp9jb+hilm37lbagyPM737ciyOahPY4mcPjRJhcik/MVwOf9UZkY8RQo tryOha9A8l3/Ooz7M+9ePzTOEyvYhWBKF1+USpBDXiR2YCd8zxLqYni97QvolUc4 oIfSsluLHqjgiZLvom0oeN24nt0KCbWVzqN04enEfwQaOSR7SOwtbMxtNGFhjI9/ 6hkgF0jaNBqm/lHZdSNXZoPZOst10SU/C4Prfm4HCoXq98mJqsPLLm7rYt4KwCxJ wVax -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:34 2026 by rpki-client