This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/NejKy8jZv7LHCtY85OZ0XTQsrYw.roa File: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (raw, json) Hash identifier: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0= Subject key identifier: 35:E8:CA:CB:C8:D9:BF:B2:C7:0A:D6:3C:E4:E6:74:5D:34:2C:AD:8C Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Certificate serial: 019B7EA57428733B27CB5F8915026DCB50B1 Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/NejKy8jZv7LHCtY85OZ0XTQsrYw.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8792 IP address blocks: 91.220.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:74:28:73:3b:27:cb:5f:89:15:02:6d:cb:50:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35e8cacbc8d9bfb2c70ad63ce4e6745d342cad8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:11:f8:0f:b7:63:ba:92:78:75:2b:22:be: 47:ce:e4:16:60:95:d0:ce:70:37:19:c3:87:67:4c: 21:fd:94:c6:67:14:7b:aa:b3:43:61:d6:99:4a:58: 31:2b:8e:72:3e:40:f6:b9:94:be:44:5b:3b:c7:c4: 77:34:82:55:e6:64:1a:5d:6e:b2:9c:41:b1:42:9d: 3a:c7:02:f0:70:36:4a:32:52:3c:e1:4d:8e:83:65: e7:e3:56:cb:1c:41:d0:f0:b2:85:96:bf:6e:ed:5b: 55:91:e9:da:a3:30:ee:61:e3:42:ec:e5:83:66:78: 4b:cd:1b:f6:cd:91:aa:96:b6:1f:5b:a6:b5:53:c5: ae:85:6b:ee:31:da:2a:66:e5:45:0e:5a:26:f5:97: 72:a6:62:5e:0b:e9:26:52:29:da:e4:48:5d:41:85: 0c:01:ea:95:b8:23:0c:ba:02:b8:e3:d2:95:5a:d2: 50:46:cc:38:23:ef:dc:5a:b8:84:d7:af:c9:3d:ee: 8b:ff:e9:dd:22:51:fa:1e:83:8c:9c:46:49:a3:f9: 00:44:07:aa:e7:9d:52:ae:22:c0:b9:0b:82:35:75: 54:30:8f:b0:ba:b2:31:ab:36:a4:fb:d9:31:48:b1: 06:6e:69:91:16:e0:b7:3a:a3:4f:2f:b8:ac:e0:6b: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:CA:CB:C8:D9:BF:B2:C7:0A:D6:3C:E4:E6:74:5D:34:2C:AD:8C X509v3 Authority Key Identifier: keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/NejKy8jZv7LHCtY85OZ0XTQsrYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.134.0/24 Signature Algorithm: sha256WithRSAEncryption 18:18:19:78:49:8a:a3:67:6c:6e:83:89:f5:89:e9:2d:30:36: 1e:fe:7c:23:93:a9:1d:86:fc:58:28:68:25:d2:b4:bb:a1:a0: 34:9b:43:f1:1d:72:09:9b:ec:d7:7f:7a:7e:7d:bd:48:34:c3: eb:17:75:80:c6:f5:12:1e:08:3d:54:f5:45:fc:b1:39:69:f1: 39:29:6c:1b:5c:55:80:1c:70:10:d6:7a:0c:8e:88:15:7d:d7: 5d:f1:a2:3f:f4:57:39:d8:62:f6:ac:82:7d:e2:b5:04:b0:f9: ac:23:c0:6d:ec:2f:79:5b:7a:04:ec:73:67:15:a9:f0:fc:46: ee:56:e3:55:04:0b:ca:2a:a6:43:97:b0:bb:4b:18:33:21:73: 17:be:ba:14:93:5e:c4:dc:0a:c9:28:18:21:91:21:b1:9d:26: 1b:e9:82:88:33:97:67:e8:cd:a5:bd:ca:1b:73:8e:b7:64:39: ff:00:f9:9e:82:b2:8b:22:71:7f:37:53:6c:78:15:ce:ed:e5: d0:11:ee:0a:a9:53:73:c2:6b:c8:09:8c:a3:6f:b4:17:e0:c0: 3d:d3:b8:dc:a6:9d:57:e5:ab:ce:36:d7:85:98:3f:fb:d1:50: 06:86:04:84:b3:13:7c:bf:da:93:c9:e3:1d:92:13:2d:2c:10: a5:53:8d:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pXQoczsny1+JFQJty1CxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTZiMWMzMWZkZGUyYmQ1ZTk4ZjhmYmI3Nzk4YWJjNDc0 OTNjZjIwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWU4Y2FjYmM4ZDliZmIyYzcwYWQ2M2NlNGU2NzQ1ZDM0MmNhZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UR+A+3Y7qSeHUrIr5HzuQWYJXQ znA3GcOHZ0wh/ZTGZxR7qrNDYdaZSlgxK45yPkD2uZS+RFs7x8R3NIJV5mQaXW6y nEGxQp06xwLwcDZKMlI84U2Og2Xn41bLHEHQ8LKFlr9u7VtVkenaozDuYeNC7OWD ZnhLzRv2zZGqlrYfW6a1U8WuhWvuMdoqZuVFDlom9ZdypmJeC+kmUina5EhdQYUM AeqVuCMMugK449KVWtJQRsw4I+/cWriE16/JPe6L/+ndIlH6HoOMnEZJo/kARAeq 551SriLAuQuCNXVUMI+wurIxqzak+9kxSLEGbmmRFuC3OqNPL7is4GsJCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXoysvI2b+yxwrWPOTmdF00LK2MMB8GA1UdIwQY MBaAFIeWscMf3eK9Xpj4+7d5irxHSTzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQt NGFlMzMwNmRhNzkzLzEvTmVqS3k4alp2N0xIQ3RZODVPWjBYVFFzcll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQtNGFlMzMwNmRhNzkz LzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9yGMA0G CSqGSIb3DQEBCwUAA4IBAQAYGBl4SYqjZ2xug4n1iektMDYe/nwjk6kdhvxYKGgl 0rS7oaA0m0PxHXIJm+zXf3p+fb1INMPrF3WAxvUSHgg9VPVF/LE5afE5KWwbXFWA HHAQ1noMjogVfddd8aI/9Fc52GL2rIJ94rUEsPmsI8Bt7C95W3oE7HNnFanw/Ebu VuNVBAvKKqZDl7C7SxgzIXMXvroUk17E3ArJKBghkSGxnSYb6YKIM5dn6M2lvcob c463ZDn/APmegrKLInF/N1NseBXO7eXQEe4KqVNzwmvICYyjb7QX4MA907jcpp1X 5avONteFmD/70VAGhgSEsxN8v9qTyeMdkhMtLBClU43Q -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:24 2026 by rpki-client