This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/NBS3MDGzYGIADNWFbZYjYkdUa9s.roa File: NBS3MDGzYGIADNWFbZYjYkdUa9s.roa (raw, json) Hash identifier: v7XG+TXBJYETx2VmTgwzwAMvOODuFSiHzEpsJiItnm4= Subject key identifier: 34:14:B7:30:31:B3:60:62:00:0C:D5:85:6D:96:23:62:47:54:6B:DB Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213 Certificate serial: 019C43B183BE8BDA4F7D4FC5505EB93002E2 Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/NBS3MDGzYGIADNWFbZYjYkdUa9s.roa Signing time: Mon 09 Feb 2026 18:37:12 +0000 ROA not before: Mon 09 Feb 2026 18:37:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216154 IP address blocks: 95.81.96.0/22 maxlen: 22 95.81.100.0/22 maxlen: 22 157.22.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:b1:83:be:8b:da:4f:7d:4f:c5:50:5e:b9:30:02:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb500c9002321f03964583710b7baa4597341213 Validity Not Before: Feb 9 18:37:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3414b73031b36062000cd5856d96236247546bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:0f:c2:c8:54:f3:fd:61:d9:86:3e:93:ac: 8e:be:95:07:40:c7:ed:18:2e:ce:4f:c4:58:2a:35: de:78:4b:a1:23:58:8c:7c:ce:11:8e:a3:7b:3c:e5: ad:4f:b4:0d:dd:47:8a:39:00:54:e2:66:c7:e3:f9: 1f:77:29:35:d6:54:35:b1:5c:18:9e:56:14:5d:56: d1:f5:5b:23:29:5f:da:bd:b8:7c:0a:5e:6a:ac:1e: 94:cb:0e:f4:cc:7e:bc:ab:8d:7a:7c:08:ed:d7:e9: c0:e2:e2:07:b8:ce:e5:67:da:63:02:93:db:3d:0f: 15:de:be:bc:46:df:84:f9:ef:4e:4f:17:f6:d6:47: d9:db:12:21:0f:f2:57:04:a9:f0:02:f2:98:a2:0a: 6a:af:46:cf:42:a5:be:32:ef:4d:65:26:92:81:af: eb:85:1a:55:96:50:c5:fe:0d:21:61:83:b7:ec:94: 5b:11:a9:d3:fc:e5:8f:63:f5:95:50:ce:33:92:5b: 0c:7e:a8:75:b3:f1:f4:48:fb:9e:8e:1d:c0:00:82: f7:05:a9:d6:37:1b:21:e7:a5:87:cb:f9:49:b3:97: 8e:5e:c8:b2:1d:4b:a8:28:5e:8b:5e:55:57:af:4f: e2:1f:27:77:49:33:53:4c:d0:98:d7:a4:9e:22:d6: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:B7:30:31:B3:60:62:00:0C:D5:85:6D:96:23:62:47:54:6B:DB X509v3 Authority Key Identifier: keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/NBS3MDGzYGIADNWFbZYjYkdUa9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.81.96.0/21 157.22.176.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:31:73:de:97:53:6a:99:dd:9f:92:cf:fc:7e:33:a9:7b:cc: 70:0e:a4:51:8e:7d:ba:20:84:04:78:e4:d7:ba:8c:69:33:a3: 4f:96:5c:81:32:c7:6f:d5:6b:e6:8d:1c:e4:fd:d6:54:97:b5: 4e:b3:73:9c:6f:cd:25:a7:a3:8f:22:04:69:bc:c3:33:c0:65: 93:ef:f2:82:a2:d5:a5:a0:3a:16:9b:f4:49:41:78:9c:99:1f: 68:d9:83:72:69:46:90:5b:01:72:7a:ca:c6:b8:a3:61:77:b3: 26:83:18:07:f6:2b:61:f6:5b:aa:9e:73:d5:dd:86:38:ee:7e: 45:f1:8e:85:a4:a4:90:96:68:2d:39:75:76:fe:94:d1:14:cc: e8:b6:69:8d:3b:7a:9b:9e:e6:09:71:89:9f:05:f1:8d:e1:42: ee:f4:b8:5a:25:09:1c:00:d3:8d:f8:b4:a8:ef:a0:d6:b8:1a: 0c:cf:ad:f3:bc:d9:1e:01:cf:08:fe:76:5f:be:d1:e7:72:d0: 42:71:1d:e8:64:87:d6:d1:da:87:92:66:ff:10:76:5d:9c:13: 41:f0:a2:29:b8:4c:07:bd:59:0c:68:b0:43:4e:6e:7d:2b:6b: 32:d5:9e:a9:09:d6:42:28:1c:79:30:9f:13:cf:dd:05:1f:7a: 9c:4d:ae:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZxDsYO+i9pPfU/FUF65MALiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz NDEyMTMwHhcNMjYwMjA5MTgzNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDE0YjczMDMxYjM2MDYyMDAwY2Q1ODU2ZDk2MjM2MjQ3NTQ2YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAPwshU8/1h2YY+k6yOvpUHQMft GC7OT8RYKjXeeEuhI1iMfM4RjqN7POWtT7QN3UeKOQBU4mbH4/kfdyk11lQ1sVwY nlYUXVbR9VsjKV/avbh8Cl5qrB6Uyw70zH68q416fAjt1+nA4uIHuM7lZ9pjApPb PQ8V3r68Rt+E+e9OTxf21kfZ2xIhD/JXBKnwAvKYogpqr0bPQqW+Mu9NZSaSga/r hRpVllDF/g0hYYO37JRbEanT/OWPY/WVUM4zklsMfqh1s/H0SPuejh3AAIL3BanW Nxsh56WHy/lJs5eOXsiyHUuoKF6LXlVXr0/iHyd3STNTTNCY16SeItb9aQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDQUtzAxs2BiAAzVhW2WI2JHVGvbMB8GA1UdIwQY MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt NGE2ODU5NjJmM2U4LzEvTkJTM01ER3pZR0lBRE5XRmJaWWpZa2RVYTlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4 LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX1FgAwQD nRawMA0GCSqGSIb3DQEBCwUAA4IBAQB7MXPel1Nqmd2fks/8fjOpe8xwDqRRjn26 IIQEeOTXuoxpM6NPllyBMsdv1WvmjRzk/dZUl7VOs3Ocb80lp6OPIgRpvMMzwGWT 7/KCotWloDoWm/RJQXicmR9o2YNyaUaQWwFyesrGuKNhd7MmgxgH9ith9luqnnPV 3YY47n5F8Y6FpKSQlmgtOXV2/pTRFMzotmmNO3qbnuYJcYmfBfGN4ULu9LhaJQkc ANON+LSo76DWuBoMz63zvNkeAc8I/nZfvtHnctBCcR3oZIfW0dqHkmb/EHZdnBNB 8KIpuEwHvVkMaLBDTm59K2sy1Z6pCdZCKBx5MJ8Tz90FH3qcTa7s -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:22 2026 by rpki-client