This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa File: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (raw, json) Hash identifier: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE= Subject key identifier: 9C:78:3C:2A:22:AE:9E:5A:F1:30:C2:31:57:DC:E0:17:49:AD:67:C0 Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Certificate serial: 019B7D5B726989FBCD12E89312356657F521 Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa Signing time: Fri 02 Jan 2026 06:18:23 +0000 ROA not before: Fri 02 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56713 IP address blocks: 91.226.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:72:69:89:fb:cd:12:e8:93:12:35:66:57:f5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c783c2a22ae9e5af130c23157dce01749ad67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:8d:99:01:da:87:64:3b:53:2d:a6:d9:d5: 42:fd:b8:64:35:9c:c4:e6:3e:da:bc:28:00:55:92: 09:4b:e1:0f:da:63:5b:1a:ad:e8:e4:78:c8:3d:59: 5a:bc:ed:7d:a9:30:9e:70:d4:85:67:0e:90:c0:e5: c8:36:a9:db:95:1c:dc:5e:40:a5:9d:01:fb:0b:e4: 85:53:18:14:59:99:c2:34:89:d9:61:b8:7f:1f:e1: 07:ce:c1:48:5e:8f:77:60:17:59:84:08:cb:5b:3f: 9f:10:4a:a0:2f:87:a0:37:3e:6d:33:60:45:9e:cf: cb:b6:0d:06:27:f4:43:69:3c:7c:4e:59:d5:a8:80: ee:81:50:2b:c6:5b:4c:37:03:e4:54:05:b8:b4:af: 9b:b7:90:0f:82:af:83:76:18:5f:6b:d1:6f:0a:12: 67:7f:3c:69:fa:82:cb:ab:d4:cc:8e:0b:4f:1b:e1: d3:1b:8d:2c:95:0b:e8:f0:7d:77:82:8b:e1:6b:34: 6e:d1:7c:e7:e9:90:02:0e:c0:1b:86:7b:25:ee:1d: 0b:9e:31:1f:01:d8:4f:d4:0e:29:fb:06:6c:e8:c6: 96:d5:b3:66:69:8a:eb:8b:cb:fc:f9:52:a2:38:2f: ba:8e:14:01:6e:e7:08:93:c1:ed:42:27:3a:a5:ef: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:3C:2A:22:AE:9E:5A:F1:30:C2:31:57:DC:E0:17:49:AD:67:C0 X509v3 Authority Key Identifier: keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:37:0f:8d:ea:2d:2c:70:c4:b3:a1:0c:01:1d:40:a3:d1:96: 06:09:55:2f:08:d6:ad:db:c3:9e:a0:b7:ff:6d:86:8d:af:64: 63:af:9b:36:7f:73:8a:11:d2:d0:e9:e8:32:c5:71:96:d2:4c: 12:7a:3c:ea:ca:f1:95:ae:86:11:ae:31:00:5a:26:78:37:f8: c9:51:a8:d3:a2:f9:54:33:84:25:b3:b3:57:90:83:59:8e:2e: 47:d2:92:d3:97:9f:4b:d7:3f:b5:6a:65:3b:3a:82:a8:ae:8a: b3:83:ca:05:44:65:61:ee:a0:13:d3:81:0f:b4:80:44:28:7f: e1:29:44:b9:42:3f:d1:d9:dd:6d:64:f7:44:1b:6f:ea:36:e3: bc:02:9b:04:2e:af:0d:70:6d:80:ca:28:11:cb:df:da:ce:2a: 4e:a0:f5:d5:07:d6:c2:8a:51:bf:c8:91:40:80:9e:2f:96:65: 30:bb:b5:18:29:0e:ee:1e:58:42:e1:c4:2e:6b:52:a0:8b:9f: 99:b8:50:f7:61:14:4d:2d:96:60:8b:35:3a:f1:38:52:76:fc: 12:3f:87:d7:35:0a:f4:1a:f6:bf:7f:72:4d:7d:28:d1:42:e2: 72:cc:dd:eb:d6:0a:ff:f1:1d:2b:af:b7:60:50:97:d1:65:1c: f1:54:ae:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3JpifvNEuiTEjVmV/UhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm MjZmNjUwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzc4M2MyYTIyYWU5ZTVhZjEzMGMyMzE1N2RjZTAxNzQ5YWQ2N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ONmQHah2Q7Uy2m2dVC/bhkNZzE 5j7avCgAVZIJS+EP2mNbGq3o5HjIPVlavO19qTCecNSFZw6QwOXINqnblRzcXkCl nQH7C+SFUxgUWZnCNInZYbh/H+EHzsFIXo93YBdZhAjLWz+fEEqgL4egNz5tM2BF ns/Ltg0GJ/RDaTx8TlnVqIDugVArxltMNwPkVAW4tK+bt5APgq+Ddhhfa9FvChJn fzxp+oLLq9TMjgtPG+HTG40slQvo8H13govhazRu0Xzn6ZACDsAbhnsl7h0LnjEf AdhP1A4p+wZs6MaW1bNmaYrri8v8+VKiOC+6jhQBbucIk8HtQic6pe/bAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJx4PCoirp5a8TDCMVfc4BdJrWfAMB8GA1UdIwQY MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt YWZiNTAwYTQ0ODJhLzEvbkhnOEtpS3VubHJ4TU1JeFY5emdGMG10WjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+L7MA0G CSqGSIb3DQEBCwUAA4IBAQB7Nw+N6i0scMSzoQwBHUCj0ZYGCVUvCNat28OeoLf/ bYaNr2Rjr5s2f3OKEdLQ6egyxXGW0kwSejzqyvGVroYRrjEAWiZ4N/jJUajTovlU M4Qls7NXkINZji5H0pLTl59L1z+1amU7OoKoroqzg8oFRGVh7qAT04EPtIBEKH/h KUS5Qj/R2d1tZPdEG2/qNuO8ApsELq8NcG2AyigRy9/azipOoPXVB9bCilG/yJFA gJ4vlmUwu7UYKQ7uHlhC4cQua1Kgi5+ZuFD3YRRNLZZgizU68ThSdvwSP4fXNQr0 Gva/f3JNfSjRQuJyzN3r1gr/8R0rr7dgUJfRZRzxVK5z -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:15 2026 by rpki-client