This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/niWwJ70S55g4rP0yo6YBn3XoZ8g.roa File: niWwJ70S55g4rP0yo6YBn3XoZ8g.roa (raw, json) Hash identifier: ljucsy9pycOjqLq4VhNwYVUNxufmcBtCP5G41NfTLro= Subject key identifier: 9E:25:B0:27:BD:12:E7:98:38:AC:FD:32:A3:A6:01:9F:75:E8:67:C8 Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2 Certificate serial: 019B7A5AC822EE932B1D5A76863D803C9181 Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/niWwJ70S55g4rP0yo6YBn3XoZ8g.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215898 IP address blocks: 91.232.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c8:22:ee:93:2b:1d:5a:76:86:3d:80:3c:91:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e25b027bd12e79838acfd32a3a6019f75e867c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:a9:4a:7a:df:90:44:fa:b7:3a:67:35:ee: 16:47:10:11:25:0f:8a:8b:fb:08:e7:a5:0d:1f:6c: 95:94:68:c5:52:ba:b5:0f:64:f7:fb:02:a6:cb:dd: 25:5b:a0:a0:01:57:f4:70:9b:1d:61:76:5b:9d:df: db:0d:df:59:81:15:aa:53:0d:b4:46:c3:11:2f:ba: ca:6d:1d:f5:70:89:cc:4f:92:6e:6d:e9:f8:66:e4: 7b:d3:73:7d:68:a2:e8:ea:73:2a:b5:c5:6e:82:4b: 17:7a:44:f3:70:dd:66:54:3d:ae:8e:39:c8:7d:10: c7:fd:46:3b:c2:3f:37:42:f4:51:c3:79:60:5b:50: ea:f8:4b:b7:15:02:e3:c0:f7:6e:25:28:17:a0:98: 04:5d:7a:b3:fe:2f:76:2c:6d:54:67:69:06:20:4c: 04:8d:69:b4:e4:73:f0:7f:e1:a5:06:97:8b:ec:ae: a5:28:d1:2b:a0:f0:1c:7c:fe:7b:56:ec:87:73:da: 6b:66:84:84:5c:47:16:23:ba:86:a3:04:de:55:e7: b9:46:32:4c:73:03:bf:00:7f:f3:85:15:98:58:25: 21:ac:6c:12:0e:46:1f:b0:b4:92:92:b4:5f:23:4e: 84:2a:d9:1e:35:e3:4c:ad:f1:6a:9f:bf:82:bd:b0: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:B0:27:BD:12:E7:98:38:AC:FD:32:A3:A6:01:9F:75:E8:67:C8 X509v3 Authority Key Identifier: keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/niWwJ70S55g4rP0yo6YBn3XoZ8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.103.0/24 Signature Algorithm: sha256WithRSAEncryption 06:04:31:32:26:2c:89:39:31:ee:d5:de:26:ac:36:44:e6:23: a8:3b:81:e7:51:83:4c:0a:d8:70:4d:e3:d9:a7:d2:ce:1c:e3: 01:ad:a7:eb:e9:f7:33:e9:1f:f7:c8:74:ae:e7:6e:a9:d7:02: b0:26:8c:5b:cc:c9:30:24:1f:ef:3b:90:99:1a:20:a1:22:27: 38:f5:f1:48:c1:b8:0b:c0:69:de:65:80:3e:62:16:45:c5:be: 7e:97:da:80:9e:9b:b5:06:9f:a6:31:6d:0c:0e:3c:f7:a0:99: 71:1f:02:67:ed:99:fe:80:18:2d:3c:11:a9:5a:0f:a9:58:8e: 95:d4:f5:8c:30:3d:11:39:f1:b1:f8:85:fb:6f:7b:05:5d:9b: f5:ec:e7:0e:c6:ec:b5:75:c6:41:e1:f1:60:fa:5b:4c:19:bb: 26:78:05:25:29:81:6b:42:a0:8d:4d:82:65:67:b8:46:98:9b: ea:f7:5c:6a:56:e7:f1:11:5d:1f:27:c2:05:1e:c7:86:a5:61: 66:f1:76:a2:3b:9f:b2:bc:0e:0d:17:61:ea:b0:4d:29:f1:de: 33:62:a1:dd:b1:15:aa:50:9b:b2:e8:a8:8a:4a:e5:ce:e7:62: 00:5d:f8:95:36:cc:ce:40:07:1b:23:a4:8f:52:91:10:2b:30: a8:12:dc:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wsgi7pMrHVp2hj2APJGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi NDg2ZjIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTI1YjAyN2JkMTJlNzk4MzhhY2ZkMzJhM2E2MDE5Zjc1ZTg2N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HipSnrfkET6tzpnNe4WRxARJQ+K i/sI56UNH2yVlGjFUrq1D2T3+wKmy90lW6CgAVf0cJsdYXZbnd/bDd9ZgRWqUw20 RsMRL7rKbR31cInMT5Juben4ZuR703N9aKLo6nMqtcVugksXekTzcN1mVD2ujjnI fRDH/UY7wj83QvRRw3lgW1Dq+Eu3FQLjwPduJSgXoJgEXXqz/i92LG1UZ2kGIEwE jWm05HPwf+GlBpeL7K6lKNEroPAcfP57VuyHc9prZoSEXEcWI7qGowTeVee5RjJM cwO/AH/zhRWYWCUhrGwSDkYfsLSSkrRfI06EKtkeNeNMrfFqn7+CvbC6RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4lsCe9EueYOKz9MqOmAZ916GfIMB8GA1UdIwQY MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt ZWMyODdlMWQzN2U1LzEvbmlXd0o3MFM1NWc0clAweW82WUJuM1hvWjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1 LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hnMA0G CSqGSIb3DQEBCwUAA4IBAQAGBDEyJiyJOTHu1d4mrDZE5iOoO4HnUYNMCthwTePZ p9LOHOMBrafr6fcz6R/3yHSu526p1wKwJoxbzMkwJB/vO5CZGiChIic49fFIwbgL wGneZYA+YhZFxb5+l9qAnpu1Bp+mMW0MDjz3oJlxHwJn7Zn+gBgtPBGpWg+pWI6V 1PWMMD0ROfGx+IX7b3sFXZv17OcOxuy1dcZB4fFg+ltMGbsmeAUlKYFrQqCNTYJl Z7hGmJvq91xqVufxEV0fJ8IFHseGpWFm8XaiO5+yvA4NF2HqsE0p8d4zYqHdsRWq UJuy6KiKSuXO52IAXfiVNszOQAcbI6SPUpEQKzCoEtyF -----END CERTIFICATE-----Generated at Tue Jan 20 20:07:31 2026 by rpki-client