This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/nmFsMibkUkc4eLEyHsZSOh33hiM.roa File: nmFsMibkUkc4eLEyHsZSOh33hiM.roa (raw, json) Hash identifier: UIbhcnO6tinapdLdEyBhk1W1C6XNYeMhFMwzbq1oLUE= Subject key identifier: 9E:61:6C:32:26:E4:52:47:38:78:B1:32:1E:C6:52:3A:1D:F7:86:23 Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890 Certificate serial: 019B7DCB582F3A28D472ABECE56B3305EA03 Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/nmFsMibkUkc4eLEyHsZSOh33hiM.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25321 IP address blocks: 193.201.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:2f:3a:28:d4:72:ab:ec:e5:6b:33:05:ea:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e616c3226e452473878b1321ec6523a1df78623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:1f:93:eb:9b:57:51:42:ca:f2:ec:c4:f9: 05:c6:9c:9a:bc:9d:d1:ea:e2:be:6d:ae:73:c7:3c: 89:5b:4e:77:2e:a0:0f:79:c6:e0:18:96:a0:41:2b: a3:e1:61:b1:3c:85:8e:1b:29:81:d4:71:4e:f2:fc: d9:47:02:ae:c5:46:49:1f:98:3a:30:da:dc:0d:4f: 1b:79:45:a8:1e:95:33:05:f4:50:cd:1c:e4:e1:06: 5d:88:93:d9:a6:9f:00:f9:d8:d6:0b:3f:fb:cc:38: b8:44:4a:67:6d:5e:b6:15:91:3a:df:7f:00:9c:54: 8b:3e:f7:c7:66:6d:8b:92:7c:bd:a3:89:97:78:32: 34:46:c4:90:ff:28:c9:83:59:c2:ce:95:61:9c:fc: 2e:71:a6:09:1a:26:7a:2c:cc:14:d9:74:9b:0d:d5: a5:78:fb:e5:74:9b:8b:d8:5f:3a:73:d4:72:69:82: 6c:f3:f6:46:40:ea:6c:f2:8e:13:10:8c:a3:25:e3: e3:66:39:d1:e4:72:44:63:53:3e:78:af:24:28:b7: e7:a9:15:25:1a:1c:b1:01:9d:01:16:ce:2b:84:89: 2f:4e:40:f6:83:f7:5d:45:05:05:c9:6c:b5:94:ba: 95:ff:dc:b3:8e:6c:fa:82:89:79:93:01:af:34:e1: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:6C:32:26:E4:52:47:38:78:B1:32:1E:C6:52:3A:1D:F7:86:23 X509v3 Authority Key Identifier: keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/nmFsMibkUkc4eLEyHsZSOh33hiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.78.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:f3:de:de:17:b6:87:f0:46:e4:b9:81:e1:fc:11:43:0b:e3: 37:3b:50:6d:e2:9f:c2:49:2d:51:b2:fd:ed:6f:77:13:a0:af: 34:3a:ea:c7:e7:ed:af:28:67:1a:99:60:47:a6:65:b2:8d:de: fb:48:72:fd:d2:bd:08:24:09:f1:c9:bb:bf:5e:30:12:b2:31: e3:b0:33:cd:eb:92:07:53:c2:9b:fd:58:d2:26:cc:71:86:dc: c3:16:90:db:f4:78:bd:81:20:f4:a6:61:86:3b:79:00:85:5d: d4:db:a2:ee:52:3b:8e:34:fc:64:cc:e5:7a:c3:90:f5:78:14: fa:04:f8:d0:4f:89:7f:0e:7e:19:ab:f7:3c:31:22:1d:d7:b3: 8d:8c:49:5b:b7:ed:f6:48:68:1d:ca:db:45:f5:82:57:f5:92: bb:33:cf:d7:42:ba:28:e0:04:a7:dd:4c:bd:69:de:ea:0d:cb: d2:98:16:78:b4:25:27:b7:08:34:f2:03:03:89:22:9e:2a:23: e3:52:03:e4:cc:2f:35:e9:e1:52:4b:77:00:d7:72:c6:c4:d7: f9:eb:cd:4e:8c:d9:48:fe:77:a9:c2:c0:38:ac:51:71:5f:fd: 7b:17:f9:05:3d:9d:2c:82:8d:87:30:9c:fd:cc:44:22:b3:79: 76:64:74:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1gvOijUcqvs5WszBeoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTg5OGJhMTI1MGM4OTg5Y2M3NmQ5ZjhiNTNkMWRiYzYy YjI4OTAwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTYxNmMzMjI2ZTQ1MjQ3Mzg3OGIxMzIxZWM2NTIzYTFkZjc4NjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYYfk+ubV1FCyvLsxPkFxpyavJ3R 6uK+ba5zxzyJW053LqAPecbgGJagQSuj4WGxPIWOGymB1HFO8vzZRwKuxUZJH5g6 MNrcDU8beUWoHpUzBfRQzRzk4QZdiJPZpp8A+djWCz/7zDi4REpnbV62FZE6338A nFSLPvfHZm2Lkny9o4mXeDI0RsSQ/yjJg1nCzpVhnPwucaYJGiZ6LMwU2XSbDdWl ePvldJuL2F86c9RyaYJs8/ZGQOps8o4TEIyjJePjZjnR5HJEY1M+eK8kKLfnqRUl GhyxAZ0BFs4rhIkvTkD2g/ddRQUFyWy1lLqV/9yzjmz6gol5kwGvNOHvLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5hbDIm5FJHOHixMh7GUjod94YjMB8GA1UdIwQY MBaAFOOomLoSUMiYnMdtn4tT0dvGKyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMt NzMwMzgzMjExZjI1LzEvbm1Gc01pYmtVa2M0ZUxFeUhzWlNPaDMzaGlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMtNzMwMzgzMjExZjI1 LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwclOMA0G CSqGSIb3DQEBCwUAA4IBAQB8897eF7aH8EbkuYHh/BFDC+M3O1Bt4p/CSS1Rsv3t b3cToK80OurH5+2vKGcamWBHpmWyjd77SHL90r0IJAnxybu/XjASsjHjsDPN65IH U8Kb/VjSJsxxhtzDFpDb9Hi9gSD0pmGGO3kAhV3U26LuUjuONPxkzOV6w5D1eBT6 BPjQT4l/Dn4Zq/c8MSId17ONjElbt+32SGgdyttF9YJX9ZK7M8/XQroo4ASn3Uy9 ad7qDcvSmBZ4tCUntwg08gMDiSKeKiPjUgPkzC816eFSS3cA13LGxNf5681OjNlI /nepwsA4rFFxX/17F/kFPZ0sgo2HMJz9zEQis3l2ZHQa -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:34 2026 by rpki-client