This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa File: nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa (raw, json) Hash identifier: Rxp3n+E0mBpZW+sjoLUEVlF4FRUu+OtPU6hBGL/IMhQ= Subject key identifier: 9D:85:C3:7D:4B:2A:7B:99:E6:21:D6:F6:1C:5F:FD:5B:43:A8:FE:F6 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B23A49E87CC887101A040AC3C038F9A96 Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa Signing time: Mon 15 Dec 2025 20:12:29 +0000 ROA not before: Mon 15 Dec 2025 20:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197421 IP address blocks: 91.217.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:a4:9e:87:cc:88:71:01:a0:40:ac:3c:03:8f:9a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Dec 15 20:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d85c37d4b2a7b99e621d6f61c5ffd5b43a8fef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:47:ee:ce:8b:f7:82:0d:45:49:e1:bb:83: 6b:c3:42:52:a7:81:79:10:05:6a:73:25:1b:a3:9a: 0b:58:28:05:56:47:8b:ee:e1:bf:cf:42:4d:db:1c: db:45:cf:d0:28:15:52:f2:53:a6:a1:5c:1e:41:1e: f6:fb:59:9e:39:7b:25:fb:48:b6:b8:aa:ac:d1:18: 01:24:26:f3:9a:e3:4e:ee:be:2a:a0:3f:b4:8d:9d: 84:55:b2:94:3b:b3:3f:6d:0a:90:e0:d3:10:2b:cb: 62:c9:bc:99:3e:a5:86:3f:77:40:e0:9d:50:2e:e4: 10:c4:ff:6c:15:08:e6:1e:67:d6:70:3d:97:48:86: b2:02:04:c3:86:21:80:e0:8b:c2:46:7a:67:14:92: e4:16:e3:a7:f4:41:9c:1f:a2:dd:cc:fd:b2:02:58: a7:0d:61:b8:cb:97:be:36:e5:c8:d6:2d:f6:f5:5c: ec:7d:48:cf:32:01:f7:e4:31:97:f8:81:f1:95:ce: 06:4e:24:26:9d:c2:ce:3b:4b:04:09:da:e0:c5:8c: 96:d0:1c:69:45:2a:99:23:23:57:56:39:e4:77:ef: cf:ee:0c:46:d1:58:e6:a3:04:b1:11:9f:61:77:60: 9e:06:e8:c0:b0:6a:a1:e6:ea:4f:03:8b:23:7f:92: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:C3:7D:4B:2A:7B:99:E6:21:D6:F6:1C:5F:FD:5B:43:A8:FE:F6 X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.133.0/24 Signature Algorithm: sha256WithRSAEncryption 33:23:67:c9:02:74:a9:c3:44:68:3b:a2:fc:ba:5a:df:24:ab: f6:e8:b1:09:e0:4c:5b:fb:2f:8a:ef:8d:96:6d:08:49:c4:c0: 5c:35:30:3d:a0:fb:25:71:51:9f:8a:52:0a:fe:5f:66:03:b8: d5:52:17:97:c9:1b:9a:1e:8d:55:04:91:1d:33:0c:50:3a:bb: 9e:f1:cc:a5:25:3d:60:4b:a6:96:cd:cb:d4:a0:ee:28:1d:a5: 31:6f:b9:d6:9e:d6:fa:90:96:86:05:e0:6c:fa:00:95:a8:22: 22:a3:38:db:3b:86:be:51:71:2c:d5:27:35:a7:1c:e6:b9:18: 07:49:7b:10:fe:92:8e:7e:08:ef:e3:5d:3d:86:f2:b7:e9:71: 66:f7:82:c7:bf:8a:02:ec:8f:39:0e:2f:42:91:ef:9a:5a:04: e9:ad:fa:03:62:85:cd:68:1b:35:e4:d1:03:ba:4a:fd:48:7f: 7a:1f:cb:76:20:0a:0b:b5:88:79:cd:48:75:e7:9f:78:2e:f2: 78:5d:73:c4:33:c3:3e:a2:1d:f4:12:ca:25:b8:17:74:8f:a4: fd:9c:cc:53:31:55:47:8b:79:47:9a:3f:2a:5d:79:d3:0f:95: 1e:46:01:dd:01:45:a9:8e:8c:67:2e:ac:c1:4a:02:3b:55:96: f0:27:a7:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsjpJ6HzIhxAaBArDwDj5qWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjUxMjE1MjAxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDg1YzM3ZDRiMmE3Yjk5ZTYyMWQ2ZjYxYzVmZmQ1YjQzYThmZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3adH7s6L94INRUnhu4Nrw0JSp4F5 EAVqcyUbo5oLWCgFVkeL7uG/z0JN2xzbRc/QKBVS8lOmoVweQR72+1meOXsl+0i2 uKqs0RgBJCbzmuNO7r4qoD+0jZ2EVbKUO7M/bQqQ4NMQK8tiybyZPqWGP3dA4J1Q LuQQxP9sFQjmHmfWcD2XSIayAgTDhiGA4IvCRnpnFJLkFuOn9EGcH6LdzP2yAlin DWG4y5e+NuXI1i329VzsfUjPMgH35DGX+IHxlc4GTiQmncLOO0sECdrgxYyW0Bxp RSqZIyNXVjnkd+/P7gxG0VjmowSxEZ9hd2CeBujAsGqh5upPA4sjf5I66wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2Fw31LKnuZ5iHW9hxf/VtDqP72MB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvbllYRGZVc3FlNW5tSWRiMkhGXzlXME9vX3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mFMA0G CSqGSIb3DQEBCwUAA4IBAQAzI2fJAnSpw0RoO6L8ulrfJKv26LEJ4Exb+y+K742W bQhJxMBcNTA9oPslcVGfilIK/l9mA7jVUheXyRuaHo1VBJEdMwxQOrue8cylJT1g S6aWzcvUoO4oHaUxb7nWntb6kJaGBeBs+gCVqCIiozjbO4a+UXEs1Sc1pxzmuRgH SXsQ/pKOfgjv4109hvK36XFm94LHv4oC7I85Di9Cke+aWgTprfoDYoXNaBs15NED ukr9SH96H8t2IAoLtYh5zUh15594LvJ4XXPEM8M+oh30EsoluBd0j6T9nMxTMVVH i3lHmj8qXXnTD5UeRgHdAUWpjoxnLqzBSgI7VZbwJ6di -----END CERTIFICATE-----Generated at Tue Dec 16 11:32:45 2025 by rpki-client