This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa File: nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa (raw, json) Hash identifier: VwaGIZ+yf1ZIOUOKEz3bZkTWkr43RISg2q2l8GV2Ibo= Subject key identifier: 9C:4E:EA:E5:C5:90:B2:DD:4F:4A:A5:43:B0:B9:4E:53:AC:9E:E0:1A Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Certificate serial: 019B7E374EE63E016249464C06D5B1A2379F Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa Signing time: Fri 02 Jan 2026 10:18:32 +0000 ROA not before: Fri 02 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39864 IP address blocks: 91.232.94.0/24 maxlen: 24 91.232.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4e:e6:3e:01:62:49:46:4c:06:d5:b1:a2:37:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c4eeae5c590b2dd4f4aa543b0b94e53ac9ee01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:95:13:9b:78:d0:fa:d0:92:94:3d:13:fd: 61:01:c7:cb:97:e8:e1:b0:b6:81:62:e2:a5:56:c3: 00:5e:4e:d6:f0:c9:27:67:ff:ba:a3:ec:9b:99:90: a5:1e:e6:4f:d3:09:88:07:4c:6d:8f:e8:79:70:dc: 02:b3:97:13:9d:71:3e:a4:ae:a8:2b:ea:7a:39:dc: 14:28:33:ed:ea:33:52:f7:da:9a:da:ff:e8:82:3c: 52:af:32:ec:7d:77:32:a0:b8:77:f9:75:40:ab:68: 4c:3e:79:3a:7a:bf:10:dc:53:c4:af:5c:79:63:e4: 20:01:b1:ea:ed:48:13:ed:c2:33:d1:c2:1b:12:08: 4c:fd:50:96:90:91:ec:b0:a0:86:b1:56:46:22:a0: 65:1f:83:0b:36:71:07:02:b5:bc:6c:c4:97:4d:53: 1a:9f:c0:24:3e:5f:84:c0:66:26:b2:f9:72:f3:9c: c1:75:67:0b:39:90:27:6f:ef:a5:89:15:de:c9:d5: 7d:a2:bc:5f:d3:29:da:74:7b:f8:93:d8:c4:43:7e: 14:3e:b4:1c:44:93:6b:c6:99:01:9c:7b:d9:bb:09: 6d:0b:d3:fa:64:e4:38:b5:0c:35:1a:58:06:8c:fd: 41:67:95:57:a1:29:35:f3:39:00:23:cb:58:2f:d5: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:EA:E5:C5:90:B2:DD:4F:4A:A5:43:B0:B9:4E:53:AC:9E:E0:1A X509v3 Authority Key Identifier: keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.94.0/23 Signature Algorithm: sha256WithRSAEncryption 55:e3:70:8d:86:a1:f9:82:ca:f4:23:f5:bc:8b:d2:17:a6:1b: e4:1d:43:ec:75:0f:b9:3f:be:67:83:fa:e8:21:48:28:21:2f: b8:21:90:7e:df:5c:38:fa:53:d4:f8:d2:35:1c:34:40:69:05: b6:6c:d7:e2:df:bb:02:ec:70:88:f6:9b:3f:42:6d:7d:06:3f: da:6f:0a:6a:97:ce:a3:b7:57:4d:c4:11:b0:a6:30:87:c8:97: 2f:05:a5:62:e5:32:66:a5:a2:6b:44:03:27:c0:48:96:7d:3e: be:eb:b6:a8:95:69:4b:4c:fb:90:6c:58:00:c0:e3:7b:8d:23: 29:fd:ed:cc:56:2c:8e:17:3e:9d:1a:10:7b:8c:e9:c6:b7:85: 73:ba:b8:3f:54:29:dc:8c:be:2b:5e:71:75:42:32:ed:d0:42: db:18:25:1a:f1:e1:b7:cb:de:e4:c8:1c:cd:97:d5:5a:0c:af: 77:8a:8a:6a:6a:7b:5e:6a:ec:9a:34:2b:b9:dc:33:47:58:1a: 5b:77:c8:1e:39:33:ca:66:9a:dc:f8:b8:1e:ea:0a:c9:5f:0f: b1:87:08:9c:e2:be:1c:4a:00:04:c3:b1:5d:a6:a5:15:93:0d: 06:43:a5:be:03:8f:69:13:35:59:ca:b2:12:a2:0b:af:41:28: 9b:e2:f5:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N07mPgFiSUZMBtWxojefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi MTRjZGEwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzRlZWFlNWM1OTBiMmRkNGY0YWE1NDNiMGI5NGU1M2FjOWVlMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxSVE5t40PrQkpQ9E/1hAcfLl+jh sLaBYuKlVsMAXk7W8MknZ/+6o+ybmZClHuZP0wmIB0xtj+h5cNwCs5cTnXE+pK6o K+p6OdwUKDPt6jNS99qa2v/ogjxSrzLsfXcyoLh3+XVAq2hMPnk6er8Q3FPEr1x5 Y+QgAbHq7UgT7cIz0cIbEghM/VCWkJHssKCGsVZGIqBlH4MLNnEHArW8bMSXTVMa n8AkPl+EwGYmsvly85zBdWcLOZAnb++liRXeydV9orxf0ynadHv4k9jEQ34UPrQc RJNrxpkBnHvZuwltC9P6ZOQ4tQw1GlgGjP1BZ5VXoSk18zkAI8tYL9WYswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxO6uXFkLLdT0qlQ7C5TlOsnuAaMB8GA1UdIwQY MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt YmNhMjM0ODI5ZjQ4LzEvbkU3cTVjV1FzdDFQU3FWRHNMbE9VNnllNEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4 LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+heMA0G CSqGSIb3DQEBCwUAA4IBAQBV43CNhqH5gsr0I/W8i9IXphvkHUPsdQ+5P75ng/ro IUgoIS+4IZB+31w4+lPU+NI1HDRAaQW2bNfi37sC7HCI9ps/Qm19Bj/abwpql86j t1dNxBGwpjCHyJcvBaVi5TJmpaJrRAMnwEiWfT6+67aolWlLTPuQbFgAwON7jSMp /e3MViyOFz6dGhB7jOnGt4Vzurg/VCncjL4rXnF1QjLt0ELbGCUa8eG3y97kyBzN l9VaDK93iopqanteauyaNCu53DNHWBpbd8geOTPKZprc+Lge6grJXw+xhwic4r4c SgAEw7FdpqUVkw0GQ6W+A49pEzVZyrISoguvQSib4vW/ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:29 2026 by rpki-client