This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NgInVtAHMreH53P9jHmt7vV8ROI.roa File: NgInVtAHMreH53P9jHmt7vV8ROI.roa (raw, json) Hash identifier: 3o6J8Rv7A+CtaTLXPKzNamZNxxA0DNgBYBZMGeJZkT0= Subject key identifier: 36:02:27:56:D0:07:32:B7:87:E7:73:FD:8C:79:AD:EE:F5:7C:44:E2 Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Certificate serial: 019B7B362388368F701056B7B655DC93E715 Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NgInVtAHMreH53P9jHmt7vV8ROI.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13026 IP address blocks: 91.222.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:23:88:36:8f:70:10:56:b7:b6:55:dc:93:e7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36022756d00732b787e773fd8c79adeef57c44e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:e8:79:b1:97:ff:f0:3b:fe:2e:f9:df:27: cb:23:7d:3a:47:94:58:f4:d9:de:53:a1:3a:f2:ed: 83:56:88:f3:c8:2e:9a:a4:ec:40:4f:4a:61:06:1e: 31:59:bb:af:b8:05:65:6a:ff:f0:9d:27:b7:55:d1: ec:c2:e4:ee:0c:4f:e1:5f:60:e0:5c:1c:0c:a0:79: ae:88:04:94:4d:10:63:97:19:4e:df:6f:9a:a1:4a: 5d:00:62:85:b1:27:57:f4:96:95:0f:4d:c5:8e:26: 89:b0:9c:94:b2:49:58:85:00:b3:8e:4e:87:cf:ac: d2:eb:c8:c9:41:9b:1d:68:62:33:ba:55:a5:28:92: 54:90:5e:ca:1b:78:e8:76:a8:ad:be:2c:0d:8f:a6: 79:19:ef:21:88:2b:af:66:52:4c:5c:e8:56:12:f5: 9b:fc:7d:6e:61:be:ec:fe:b8:fc:11:3d:67:13:20: 47:ad:36:c4:6e:d2:98:68:5e:a4:f3:d4:27:b1:b7: 2e:8e:da:4d:c2:0a:6d:b3:34:16:39:64:6d:5b:bb: ab:cc:78:93:7b:a7:0b:c5:c6:5d:8e:5f:1d:3a:68: b3:8e:ba:66:6f:dd:c5:26:2f:fd:ef:12:8b:0f:fd: 60:ae:69:c8:6a:5b:ff:10:03:46:8b:07:2b:6d:b1: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:02:27:56:D0:07:32:B7:87:E7:73:FD:8C:79:AD:EE:F5:7C:44:E2 X509v3 Authority Key Identifier: keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NgInVtAHMreH53P9jHmt7vV8ROI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.92.0/22 Signature Algorithm: sha256WithRSAEncryption 44:15:46:cb:e5:e3:44:56:f4:c8:a2:11:1c:61:46:cb:d5:2e: ad:2b:44:2b:19:e5:a9:16:25:96:65:d4:5f:c5:a2:8b:a0:06: c6:23:eb:cb:48:e2:a9:af:cf:b3:0e:f3:11:4e:48:75:89:77: c2:b8:d5:46:16:c2:6b:86:ef:61:8c:c6:9b:bc:a8:75:b4:c5: b6:92:04:0a:b5:ee:a1:10:11:75:91:55:2f:81:f6:3f:2e:e3: b6:fa:8a:56:d3:10:b3:df:0b:6a:59:99:5d:10:e9:32:67:e2: 18:d6:c5:d5:8f:b2:e3:61:a0:e8:a1:90:1f:b3:6a:95:2f:18: fc:c9:da:8b:3a:0c:fe:cd:9b:bf:ef:e0:98:5c:dd:bb:d7:bc: db:04:97:20:a2:c3:13:3b:ef:02:ac:72:13:aa:81:3c:0a:7f: 29:79:9d:d1:43:5e:a5:8f:ae:6b:60:e4:f5:43:09:70:3b:a5: c7:91:64:dc:c1:2f:c9:da:0f:ca:bd:af:a7:03:48:8e:b6:9a: c8:5c:96:27:a5:8f:15:b2:cd:31:32:11:ba:e8:c6:52:04:6a: 16:32:e3:3e:58:4f:24:ef:ba:70:3c:63:26:7a:5c:0f:99:41: cb:82:31:a7:b9:ae:c9:fc:ba:4d:c6:cb:ac:69:e5:04:ed:9a: 15:10:e9:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiOINo9wEFa3tlXck+cVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy YzBlMzYwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjAyMjc1NmQwMDczMmI3ODdlNzczZmQ4Yzc5YWRlZWY1N2M0NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW3oebGX//A7/i753yfLI306R5RY 9NneU6E68u2DVojzyC6apOxAT0phBh4xWbuvuAVlav/wnSe3VdHswuTuDE/hX2Dg XBwMoHmuiASUTRBjlxlO32+aoUpdAGKFsSdX9JaVD03FjiaJsJyUsklYhQCzjk6H z6zS68jJQZsdaGIzulWlKJJUkF7KG3jodqitviwNj6Z5Ge8hiCuvZlJMXOhWEvWb /H1uYb7s/rj8ET1nEyBHrTbEbtKYaF6k89QnsbcujtpNwgptszQWOWRtW7urzHiT e6cLxcZdjl8dOmizjrpmb93FJi/97xKLD/1grmnIalv/EANGiwcrbbHSSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYCJ1bQBzK3h+dz/Yx5re71fETiMB8GA1UdIwQY MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct MDM1MzIxNDBlZjUyLzEvTmdJblZ0QUhNcmVINTNQOWpIbXQ3dlY4Uk9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW95cMA0G CSqGSIb3DQEBCwUAA4IBAQBEFUbL5eNEVvTIohEcYUbL1S6tK0QrGeWpFiWWZdRf xaKLoAbGI+vLSOKpr8+zDvMRTkh1iXfCuNVGFsJrhu9hjMabvKh1tMW2kgQKte6h EBF1kVUvgfY/LuO2+opW0xCz3wtqWZldEOkyZ+IY1sXVj7LjYaDooZAfs2qVLxj8 ydqLOgz+zZu/7+CYXN2717zbBJcgosMTO+8CrHITqoE8Cn8peZ3RQ16lj65rYOT1 QwlwO6XHkWTcwS/J2g/Kva+nA0iOtprIXJYnpY8Vss0xMhG66MZSBGoWMuM+WE8k 77pwPGMmelwPmUHLgjGnua7J/LpNxsusaeUE7ZoVEOkN -----END CERTIFICATE-----Generated at Tue Jan 27 01:41:46 2026 by rpki-client