This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/nbgsIdOFr6eSTX9n5mSxnK56XVU.roa File: nbgsIdOFr6eSTX9n5mSxnK56XVU.roa (raw, json) Hash identifier: BbmjDJDvgmASQXcqB1mf/02nh+XMUKFVlhCTg+r8w7E= Subject key identifier: 9D:B8:2C:21:D3:85:AF:A7:92:4D:7F:67:E6:64:B1:9C:AE:7A:5D:55 Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420 Certificate serial: 019B76EBA738F62DA558257CB10FAEAB11D0 Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/nbgsIdOFr6eSTX9n5mSxnK56XVU.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211119 IP address blocks: 185.126.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a7:38:f6:2d:a5:58:25:7c:b1:0f:ae:ab:11:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db82c21d385afa7924d7f67e664b19cae7a5d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:7e:2e:53:d2:f8:0b:8b:95:6e:d3:e2:61: d3:b9:a5:37:50:39:4a:2e:15:66:4f:26:e0:f5:2d: 8f:7d:c4:72:c4:51:9d:41:d6:09:fb:61:be:ed:a4: 2c:1b:14:a8:0b:a6:85:bf:59:8b:8c:cf:55:a8:a7: 66:fe:c0:86:e6:6b:cd:25:f0:17:f3:ea:0c:83:55: 3c:71:a5:27:78:f4:e2:d4:2d:84:11:88:cf:61:fd: dd:b7:42:ec:a1:a5:3c:35:40:fc:f1:67:f2:48:42: d5:11:7f:e4:e3:1f:49:c5:49:87:b3:59:bf:00:7f: 13:81:dc:97:ee:11:f2:5b:18:d7:49:4a:9e:84:7b: 6f:12:a2:69:c1:f6:92:f0:0f:fd:ea:9a:68:34:16: c8:41:07:c3:7c:69:cd:1f:fc:8e:02:d0:0e:78:df: 18:da:37:b4:18:10:d6:12:c6:ae:e3:80:a7:90:dc: d9:b2:8c:3e:d6:79:86:7f:cd:d1:45:fd:88:6f:92: 89:54:5a:6a:50:26:c8:a4:d6:60:25:23:59:20:e1: c8:9a:92:8f:47:2d:7e:60:04:e2:7e:49:2d:3c:20: 1c:f7:71:9d:e6:eb:cc:8a:dd:89:e6:10:cf:58:b9: 0d:59:a9:32:65:02:f2:9b:b5:ee:e1:83:0d:5d:77: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:2C:21:D3:85:AF:A7:92:4D:7F:67:E6:64:B1:9C:AE:7A:5D:55 X509v3 Authority Key Identifier: keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/nbgsIdOFr6eSTX9n5mSxnK56XVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.24.0/23 Signature Algorithm: sha256WithRSAEncryption 89:03:0d:13:8a:f1:4e:0e:45:d1:fc:06:dd:c4:cc:ae:ef:10: 33:b8:11:9c:1b:c6:36:47:63:4a:fe:c4:a7:d9:0e:99:d7:56: 19:26:2e:1d:63:ae:ee:d0:b4:da:9e:bc:90:96:fb:13:f8:f9: 85:24:62:21:d5:42:d2:33:47:3c:4a:ac:f0:de:03:a9:38:8a: 53:17:84:47:6c:39:0b:00:d2:e7:ac:4f:a0:d0:48:78:19:40: 82:e8:9e:1a:8b:a5:9b:e4:ff:39:be:a2:b9:f3:3a:b2:fd:e9: 17:7b:a1:e8:ab:00:a3:47:43:7f:20:1a:67:31:6b:9b:2a:e0: a6:65:ed:6a:61:f5:92:76:3d:79:20:15:14:15:0f:8f:04:c0: 2a:4f:0c:87:74:db:a5:f4:85:01:19:6d:a7:e4:9c:ad:49:f4: e8:4d:2c:99:49:b9:9a:0a:3d:60:06:e0:cf:05:13:80:b4:76: 88:19:78:5d:5b:bd:56:27:60:14:c7:be:35:22:d0:83:1e:b7: de:c7:89:c0:9b:4a:10:4c:da:fa:91:e7:53:97:c5:c2:96:51: 80:43:86:a2:be:c3:36:b3:c9:ce:4e:87:74:e8:80:9e:e9:8a: a3:58:b0:23:8d:b0:b6:59:97:e5:d0:98:56:10:cd:91:a1:16: e7:e8:93:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266c49i2lWCV8sQ+uqxHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWZlYmQxNWZiYzY1MTQ4N2FjYWY2NzQyNGY0NzgzZDQz ZWI0MjAwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGI4MmMyMWQzODVhZmE3OTI0ZDdmNjdlNjY0YjE5Y2FlN2E1ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIF+LlPS+AuLlW7T4mHTuaU3UDlK LhVmTybg9S2PfcRyxFGdQdYJ+2G+7aQsGxSoC6aFv1mLjM9VqKdm/sCG5mvNJfAX 8+oMg1U8caUnePTi1C2EEYjPYf3dt0LsoaU8NUD88WfySELVEX/k4x9JxUmHs1m/ AH8TgdyX7hHyWxjXSUqehHtvEqJpwfaS8A/96ppoNBbIQQfDfGnNH/yOAtAOeN8Y 2je0GBDWEsau44CnkNzZsow+1nmGf83RRf2Ib5KJVFpqUCbIpNZgJSNZIOHImpKP Ry1+YATifkktPCAc93Gd5uvMit2J5hDPWLkNWakyZQLym7Xu4YMNXXcggQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ24LCHTha+nkk1/Z+ZksZyuel1VMB8GA1UdIwQY MBaAFH/v69FfvGUUh6yvZ0JPR4PUPrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMt MmJjODQ1MTkyMjdhLzEvbmJnc0lkT0ZyNmVTVFg5bjVtU3huSzU2WFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMtMmJjODQ1MTkyMjdh LzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX4YMA0G CSqGSIb3DQEBCwUAA4IBAQCJAw0TivFODkXR/AbdxMyu7xAzuBGcG8Y2R2NK/sSn 2Q6Z11YZJi4dY67u0LTanryQlvsT+PmFJGIh1ULSM0c8Sqzw3gOpOIpTF4RHbDkL ANLnrE+g0Eh4GUCC6J4ai6Wb5P85vqK58zqy/ekXe6HoqwCjR0N/IBpnMWubKuCm Ze1qYfWSdj15IBUUFQ+PBMAqTwyHdNul9IUBGW2n5JytSfToTSyZSbmaCj1gBuDP BROAtHaIGXhdW71WJ2AUx741ItCDHrfex4nAm0oQTNr6kedTl8XCllGAQ4aivsM2 s8nOTod06ICe6YqjWLAjjbC2WZfl0JhWEM2RoRbn6JMR -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:50 2026 by rpki-client