This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa File: nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa (raw, json) Hash identifier: eXjfHEORSrmx9j/3/AZZ7XF2KyD0yfbFG3RfIuUBXFk= Subject key identifier: 9E:18:B9:3D:1F:64:90:68:C9:53:C4:C4:B9:0F:31:2F:6D:26:ED:70 Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808 Certificate serial: 019B79ED20CEE7FC7B7A6891836CEBD907D3 Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48694 IP address blocks: 91.193.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:20:ce:e7:fc:7b:7a:68:91:83:6c:eb:d9:07:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e18b93d1f649068c953c4c4b90f312f6d26ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:95:19:e2:53:80:cc:43:03:25:f4:48:ff: 0a:fe:46:19:21:62:0e:58:6d:c5:05:92:c2:0f:77: 22:24:73:41:36:f6:71:55:96:64:7c:4f:e2:63:45: 1f:f3:a9:4e:74:43:bb:d9:da:de:f5:03:40:f7:f9: 3e:d1:fa:17:77:33:47:5b:42:cd:cb:a1:84:c9:a5: 93:28:f2:ee:b5:ca:a4:e4:5c:eb:e6:e4:36:53:28: a3:6d:64:af:7f:de:19:8f:5c:df:2b:07:c6:42:bf: b8:8b:fb:53:1a:04:cf:46:07:01:67:6e:08:39:9f: 46:56:1e:3a:f2:34:f1:04:83:63:41:83:5f:59:2e: ee:1c:6f:ef:bb:57:35:1a:f2:82:04:0e:49:78:d6: ff:3a:47:61:32:ee:21:c4:ee:3b:ad:ab:6c:c8:75: 2e:53:7f:6e:00:cd:42:1a:cb:d6:f1:cc:c8:e4:4a: 3e:aa:e5:78:14:9b:e1:cf:89:f5:ac:83:f2:50:4e: 2b:c0:9f:0d:c2:79:9f:c9:97:5b:c7:3b:6f:37:f5: b3:65:98:d6:1d:1b:fa:22:70:77:d3:19:d0:f9:b9: 49:79:d4:60:85:32:27:8c:f8:c6:c1:ad:22:10:4f: 42:5c:b4:bf:32:f6:44:f2:5f:69:9e:38:d7:c8:43: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:B9:3D:1F:64:90:68:C9:53:C4:C4:B9:0F:31:2F:6D:26:ED:70 X509v3 Authority Key Identifier: keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.40.0/23 Signature Algorithm: sha256WithRSAEncryption 10:68:3d:b5:c8:35:bc:13:6e:8a:c9:53:d2:42:f9:d8:db:21: ca:a2:33:c2:4d:b4:8d:7d:02:0d:4a:5d:13:82:91:47:00:e9: 45:66:28:25:a0:ec:ee:ce:7a:d5:23:63:12:fb:2c:6e:66:7a: ee:2d:45:6c:83:bf:9d:f5:54:cf:c1:69:d0:ee:43:b0:99:bd: 15:16:f3:53:50:0f:30:8d:94:9b:64:3e:2f:54:a0:4f:56:e8: 37:d4:fd:82:b5:1f:aa:11:70:cc:5d:65:4c:7c:02:0b:32:df: d0:f7:36:5d:70:05:5b:a0:c6:da:b3:d5:90:b8:8f:3a:e9:b4: d2:6a:82:20:35:99:22:b4:04:cf:b9:d3:70:e2:96:98:19:12: f2:7e:8e:c7:3f:ef:5e:bd:c9:6f:50:84:4b:8a:b0:44:5c:ab: f6:e7:b7:f1:68:65:38:56:ea:9d:29:54:d2:af:4a:fd:a9:fc: 11:f6:0d:17:31:f4:6c:a0:8a:ff:7e:d2:04:94:f6:c9:7d:d3: 29:10:bb:43:9d:6e:63:19:48:6f:1a:32:bc:50:09:1b:bf:9e: 9d:de:78:de:88:12:d6:ab:32:b6:e2:9f:28:a6:b2:39:aa:4f: d1:82:1c:17:ef:74:42:d0:6d:c7:ed:7d:4b:c1:d2:10:ca:0f: f1:f4:e4:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SDO5/x7emiRg2zr2QfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWQwODE4NjQzMzkwMzA2OWI1ZDZiYjY1MmY5ODQyOGY1 M2M4MDgwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTE4YjkzZDFmNjQ5MDY4Yzk1M2M0YzRiOTBmMzEyZjZkMjZlZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjKVGeJTgMxDAyX0SP8K/kYZIWIO WG3FBZLCD3ciJHNBNvZxVZZkfE/iY0Uf86lOdEO72dre9QNA9/k+0foXdzNHW0LN y6GEyaWTKPLutcqk5Fzr5uQ2UyijbWSvf94Zj1zfKwfGQr+4i/tTGgTPRgcBZ24I OZ9GVh468jTxBINjQYNfWS7uHG/vu1c1GvKCBA5JeNb/OkdhMu4hxO47ratsyHUu U39uAM1CGsvW8czI5Eo+quV4FJvhz4n1rIPyUE4rwJ8NwnmfyZdbxztvN/WzZZjW HRv6InB30xnQ+blJedRghTInjPjGwa0iEE9CXLS/MvZE8l9pnjjXyEPBVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4YuT0fZJBoyVPExLkPMS9tJu1wMB8GA1UdIwQY MBaAFMEdCBhkM5AwabXWu2UvmEKPU8gIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAt YWViNWNkOGRlMTVkLzEvbmhpNVBSOWtrR2pKVThURXVROHhMMjBtN1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAtYWViNWNkOGRlMTVk LzEvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8EoMA0G CSqGSIb3DQEBCwUAA4IBAQAQaD21yDW8E26KyVPSQvnY2yHKojPCTbSNfQINSl0T gpFHAOlFZigloOzuznrVI2MS+yxuZnruLUVsg7+d9VTPwWnQ7kOwmb0VFvNTUA8w jZSbZD4vVKBPVug31P2CtR+qEXDMXWVMfAILMt/Q9zZdcAVboMbas9WQuI866bTS aoIgNZkitATPudNw4paYGRLyfo7HP+9evclvUIRLirBEXKv257fxaGU4VuqdKVTS r0r9qfwR9g0XMfRsoIr/ftIElPbJfdMpELtDnW5jGUhvGjK8UAkbv56d3njeiBLW qzK24p8oprI5qk/RghwX73RC0G3H7X1LwdIQyg/x9OT+ -----END CERTIFICATE-----Generated at Tue Feb 10 08:39:16 2026 by rpki-client