This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/NO_NOdGhUi5NICPHN4YOqAZOhY8.roa File: NO_NOdGhUi5NICPHN4YOqAZOhY8.roa (raw, json) Hash identifier: hIEwCBK/f7i0yd0wKuRkHoyv+CruT7SE0rJgvqMAHUw= Subject key identifier: 34:EF:CD:39:D1:A1:52:2E:4D:20:23:C7:37:86:0E:A8:06:4E:85:8F Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5 Certificate serial: 019B7F15AC1F150A566D3215476CD0350AD9 Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/NO_NOdGhUi5NICPHN4YOqAZOhY8.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48882 IP address blocks: 31.133.64.0/20 maxlen: 20 91.218.16.0/22 maxlen: 22 95.215.48.0/24 maxlen: 24 95.215.49.0/24 maxlen: 24 95.215.50.0/24 maxlen: 24 95.215.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ac:1f:15:0a:56:6d:32:15:47:6c:d0:35:0a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34efcd39d1a1522e4d2023c737860ea8064e858f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:2f:01:f4:1b:6c:34:b8:81:50:88:0d:22: b9:fd:43:7a:a8:7d:27:c8:0d:ce:fc:55:8d:2d:9c: 9b:af:d5:da:84:6f:c2:b7:e5:24:af:51:d1:55:9c: 2c:3a:05:17:19:a1:b7:ba:ac:ee:1a:08:39:34:46: 1d:b6:25:bf:91:54:6c:6e:b8:6b:f0:e2:e2:7b:8a: a0:9f:b7:85:8c:34:ac:2f:59:17:44:2b:09:f3:14: 7b:4d:f1:41:ab:b2:1a:03:a2:31:e5:08:89:f1:98: f3:30:22:a7:78:cf:6d:f4:61:5a:28:df:67:47:ea: 82:00:ef:25:8f:cf:d0:29:b8:12:10:7b:b9:d8:2c: 0e:33:68:37:2a:ea:31:3e:aa:f2:00:39:00:aa:1f: ef:15:84:20:5f:c4:57:25:19:74:d5:d9:71:20:6c: 07:60:e8:d1:9a:8a:3b:93:c8:6c:dc:e6:87:64:56: 66:0c:80:21:f5:37:b5:84:c4:01:70:c3:69:8f:79: a5:2f:ac:7a:8f:85:59:a4:8b:20:c1:40:d4:f8:be: b2:fe:b3:bd:36:da:cb:5d:c3:38:d7:84:a4:f4:b3: 93:db:04:e4:44:5f:05:6c:38:4d:e2:c9:f4:99:c6: 7a:87:a9:9a:4f:3d:32:9a:c8:9e:10:4b:9b:7a:9f: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EF:CD:39:D1:A1:52:2E:4D:20:23:C7:37:86:0E:A8:06:4E:85:8F X509v3 Authority Key Identifier: keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/NO_NOdGhUi5NICPHN4YOqAZOhY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.64.0/20 91.218.16.0/22 95.215.48.0/22 Signature Algorithm: sha256WithRSAEncryption c1:02:50:02:67:66:df:c3:4e:8d:9f:de:f6:a6:f5:18:8c:13: c5:db:09:b0:c3:69:25:54:84:86:ee:78:6e:24:12:b3:3f:46: 6b:12:56:4f:26:3b:e5:af:9f:26:e1:97:e2:76:55:db:8a:ee: 61:7e:92:97:df:22:14:91:d8:26:e8:d5:6f:a7:17:e7:ac:ec: a4:7f:5b:09:71:1b:94:74:d0:5a:94:2d:43:63:cf:b2:da:48: 11:b1:ea:5c:1b:9a:89:97:9b:95:07:ac:e0:1f:74:50:54:f2: 7d:10:86:47:b6:dc:41:21:83:32:26:9d:29:e2:aa:98:94:46: 9b:3d:76:4c:01:93:56:ed:4c:36:02:80:1f:cd:e7:c3:28:bd: 0f:b9:7d:e0:83:2b:23:2e:d0:ae:60:98:37:6e:56:37:00:9d: b8:1f:57:84:21:da:c1:58:1e:19:26:7e:c4:90:04:e4:24:58: c1:80:93:56:4a:86:c6:33:c4:72:58:b1:2b:48:41:0e:dc:3b: ca:1f:bc:35:1c:c7:c1:d1:2a:1c:3f:ec:7e:f5:f0:64:db:94: ec:81:45:af:61:d7:5a:35:82:8e:65:95:69:c5:3f:1d:c6:17: c8:70:0b:67:ca:cb:5e:6e:67:cb:ad:22:94:30:00:8b:f2:91: aa:bb:70:7e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FawfFQpWbTIVR2zQNQrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YjRkM2U4OTcxMzIyYzY0ZDdhMDQ1OGJhYjc0NWE4OWFk ZTRkZTUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGVmY2QzOWQxYTE1MjJlNGQyMDIzYzczNzg2MGVhODA2NGU4NThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqgvAfQbbDS4gVCIDSK5/UN6qH0n yA3O/FWNLZybr9XahG/Ct+Ukr1HRVZwsOgUXGaG3uqzuGgg5NEYdtiW/kVRsbrhr 8OLie4qgn7eFjDSsL1kXRCsJ8xR7TfFBq7IaA6Ix5QiJ8ZjzMCKneM9t9GFaKN9n R+qCAO8lj8/QKbgSEHu52CwOM2g3KuoxPqryADkAqh/vFYQgX8RXJRl01dlxIGwH YOjRmoo7k8hs3OaHZFZmDIAh9Te1hMQBcMNpj3mlL6x6j4VZpIsgwUDU+L6y/rO9 NtrLXcM414Sk9LOT2wTkRF8FbDhN4sn0mcZ6h6maTz0ymsieEEubep9P6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDTvzTnRoVIuTSAjxzeGDqgGToWPMB8GA1UdIwQY MBaAFHa00+iXEyLGTXoEWLq3Raia3k3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMt YjYyNmYzMzE0OTJmLzEvTk9fTk9kR2hVaTVOSUNQSE40WU9xQVpPaFk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMtYjYyNmYzMzE0OTJm LzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEH4VAAwQC W9oQAwQCX9cwMA0GCSqGSIb3DQEBCwUAA4IBAQDBAlACZ2bfw06Nn972pvUYjBPF 2wmww2klVISG7nhuJBKzP0ZrElZPJjvlr58m4ZfidlXbiu5hfpKX3yIUkdgm6NVv pxfnrOykf1sJcRuUdNBalC1DY8+y2kgRsepcG5qJl5uVB6zgH3RQVPJ9EIZHttxB IYMyJp0p4qqYlEabPXZMAZNW7Uw2AoAfzefDKL0PuX3ggysjLtCuYJg3blY3AJ24 H1eEIdrBWB4ZJn7EkATkJFjBgJNWSobGM8RyWLErSEEO3DvKH7w1HMfB0SocP+x+ 9fBk25TsgUWvYddaNYKOZZVpxT8dxhfIcAtnystebmfLrSKUMACL8pGqu3B+ -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:21 2026 by rpki-client