This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/nwAF_VA7b5QLJBmqxWMgeg05ev8.roa File: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (raw, json) Hash identifier: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA= Subject key identifier: 9F:00:05:FD:50:3B:6F:94:0B:24:19:AA:C5:63:20:7A:0D:39:7A:FF Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf Certificate serial: 019B7C808CECC0453E91596431174490A2B9 Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/nwAF_VA7b5QLJBmqxWMgeg05ev8.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209120 IP address blocks: 91.213.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8c:ec:c0:45:3e:91:59:64:31:17:44:90:a2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f0005fd503b6f940b2419aac563207a0d397aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:81:eb:2f:89:cf:1a:e8:39:17:52:27:96: 40:11:0d:4e:60:83:dd:ec:ce:ab:52:ea:88:95:91: 30:0c:de:c3:02:c3:79:43:ad:39:9e:bc:9d:e7:44: 1a:1c:5c:17:a1:e0:ee:aa:d4:5d:8e:94:cf:03:d9: ff:c7:68:ca:ad:c7:d0:d3:7f:4f:a4:be:01:92:bf: 15:c5:54:5e:01:8f:e2:ba:fc:2f:57:c0:a0:d8:6e: 4a:18:c1:26:d2:1a:3c:a9:18:bd:1b:e0:86:8c:62: 9e:da:a6:c8:c9:e2:e9:c6:d0:87:04:0b:2e:ea:b1: b7:bb:ae:d6:38:74:f2:fc:1d:a8:5f:db:fd:5a:11: 4d:d6:0a:cf:c3:b8:3e:a5:a9:fb:62:9f:00:f6:9d: ca:5f:b5:e4:24:1b:e4:2c:cd:16:e1:c1:df:f2:87: 17:bc:5e:74:21:a3:2c:0b:ad:81:c1:9c:f8:ef:9b: 37:51:87:f6:ac:40:4a:6d:be:1a:ce:4d:ae:e0:f9: e1:46:2c:6a:47:4d:af:e4:7c:60:4a:4f:03:7b:1a: 80:bf:16:c6:8a:07:81:07:33:f8:a0:5f:fb:bc:17: 21:45:d1:9c:8b:46:39:14:31:16:24:97:0e:4b:c0: e7:f3:86:01:f2:ab:a2:37:76:31:cd:dc:71:d1:98: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:00:05:FD:50:3B:6F:94:0B:24:19:AA:C5:63:20:7A:0D:39:7A:FF X509v3 Authority Key Identifier: keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/nwAF_VA7b5QLJBmqxWMgeg05ev8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.247.0/24 Signature Algorithm: sha256WithRSAEncryption c5:35:a4:27:02:a9:c9:ae:b2:0d:dc:a0:d8:1d:27:6f:af:70: 69:b3:62:c6:f4:e4:1a:4c:4c:c1:d6:91:3e:87:dc:59:67:29: 38:b2:34:e8:d3:59:51:78:67:e2:b6:51:9e:1a:b6:7f:1f:d9: 37:e8:da:d6:9a:5c:8b:64:3e:d6:cb:65:5f:ef:e0:3d:80:e3: fa:59:6c:c7:af:e3:1c:10:ac:2b:07:c0:3f:52:74:a0:8a:7a: 9d:55:0a:9c:08:a3:98:47:11:c3:59:b7:84:e8:90:1c:cd:5c: 9e:b8:4b:71:bd:54:bc:3a:28:5f:8f:2b:17:39:a7:e6:1c:85: e8:7d:ee:26:a5:c1:d4:a7:20:9d:0a:c6:43:ab:3a:a7:a3:30: d2:e8:f2:d0:9f:8d:68:f8:2f:c0:ae:65:bd:12:55:c6:80:48: 7c:5f:e6:df:32:3b:47:76:f2:45:4b:11:18:ac:70:40:b7:6f: 7b:12:7d:a2:34:58:ac:4d:f4:cf:91:b3:95:3c:5d:84:93:45: c1:bd:a8:67:62:29:0e:d5:f1:d4:35:ab:63:a3:20:44:ca:51: 5a:c0:c5:83:6c:6a:22:cb:59:ba:00:c1:b4:48:43:c8:bf:83: 6d:f9:ba:8d:eb:fb:60:5d:9c:cb:73:64:10:ce:ab:3a:d7:a3: 77:26:b9:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIzswEU+kVlkMRdEkKK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTExMjcxMDQzNGU4NWFlNWZlNmZiZjQxZTc2YmRkZjkz ODE4Y2YwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjAwMDVmZDUwM2I2Zjk0MGIyNDE5YWFjNTYzMjA3YTBkMzk3YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8aB6y+JzxroORdSJ5ZAEQ1OYIPd 7M6rUuqIlZEwDN7DAsN5Q605nryd50QaHFwXoeDuqtRdjpTPA9n/x2jKrcfQ039P pL4Bkr8VxVReAY/iuvwvV8Cg2G5KGMEm0ho8qRi9G+CGjGKe2qbIyeLpxtCHBAsu 6rG3u67WOHTy/B2oX9v9WhFN1grPw7g+pan7Yp8A9p3KX7XkJBvkLM0W4cHf8ocX vF50IaMsC62BwZz475s3UYf2rEBKbb4azk2u4PnhRixqR02v5HxgSk8DexqAvxbG igeBBzP4oF/7vBchRdGci0Y5FDEWJJcOS8Dn84YB8quiN3Yxzdxx0Zj74QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ8ABf1QO2+UCyQZqsVjIHoNOXr/MB8GA1UdIwQY MBaAFPChEnEENOha5f5vv0Hna935OBjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWIt YTg4YTRkMDk0YWYwLzEvbndBRl9WQTdiNVFMSkJtcXhXTWdlZzA1ZXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWItYTg4YTRkMDk0YWYw LzEvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9X3MA0G CSqGSIb3DQEBCwUAA4IBAQDFNaQnAqnJrrIN3KDYHSdvr3Bps2LG9OQaTEzB1pE+ h9xZZyk4sjTo01lReGfitlGeGrZ/H9k36NrWmlyLZD7Wy2Vf7+A9gOP6WWzHr+Mc EKwrB8A/UnSginqdVQqcCKOYRxHDWbeE6JAczVyeuEtxvVS8OihfjysXOafmHIXo fe4mpcHUpyCdCsZDqzqnozDS6PLQn41o+C/ArmW9ElXGgEh8X+bfMjtHdvJFSxEY rHBAt297En2iNFisTfTPkbOVPF2Ek0XBvahnYikO1fHUNatjoyBEylFawMWDbGoi y1m6AMG0SEPIv4Nt+bqN6/tgXZzLc2QQzqs616N3JrnF -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:03 2026 by rpki-client