This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/NMnvxW-fHpjvFBsGgVuK7nkogkE.roa File: NMnvxW-fHpjvFBsGgVuK7nkogkE.roa (raw, json) Hash identifier: cyPa61O40P16PWh/kNq0rEwVyVEH58xoXbBkkVu4NPA= Subject key identifier: 34:C9:EF:C5:6F:9F:1E:98:EF:14:1B:06:81:5B:8A:EE:79:28:82:41 Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Certificate serial: 019B7C11D96D3D371583EC485447591A031E Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/NMnvxW-fHpjvFBsGgVuK7nkogkE.roa Signing time: Fri 02 Jan 2026 00:18:22 +0000 ROA not before: Fri 02 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34390 IP address blocks: 81.95.195.0/24 maxlen: 24 81.95.197.0/24 maxlen: 24 81.95.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d9:6d:3d:37:15:83:ec:48:54:47:59:1a:03:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Validity Not Before: Jan 2 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34c9efc56f9f1e98ef141b06815b8aee79288241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:52:c0:3a:ba:02:7f:05:4b:99:2a:08:65: 7b:02:bc:c8:fb:bd:7a:b1:37:96:33:ae:29:af:a5: de:17:7a:9a:b9:d1:00:32:ed:cc:af:bb:68:ae:54: 67:8e:c0:e4:21:53:3c:53:7c:58:59:52:f5:ba:31: f6:69:0f:bf:eb:44:c2:63:f6:15:3d:62:99:71:d6: a6:2b:43:18:2a:bb:8a:55:cc:e6:a5:b0:8d:18:8c: 2d:91:7d:85:a0:3d:1e:84:ea:04:3a:1d:e7:ed:2d: be:6c:8c:79:2a:bf:29:69:8c:8d:19:ab:e9:36:15: 8f:9b:7e:eb:79:37:59:9b:a1:83:36:9e:1f:de:2c: 90:ca:95:0b:f1:cb:e6:a5:35:27:08:9d:66:fd:db: 0a:7d:b7:c9:da:8b:f4:8e:27:20:1c:e5:01:4b:41: 31:97:7b:6c:0d:49:e4:a9:f2:79:d6:9b:19:dc:ef: c3:00:31:bd:7b:f0:35:b6:7a:8d:b8:e9:b1:b4:47: 81:75:9b:e7:df:e6:b6:05:de:3c:0a:ed:fc:94:e8: b2:1d:b2:19:7b:26:7b:b9:f5:f5:66:a2:05:24:b6: 00:8d:d3:21:ae:4f:c3:8b:b9:aa:45:f0:b6:bd:08: b3:69:89:4d:80:8f:0a:b7:ab:b7:09:71:ad:47:14: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:EF:C5:6F:9F:1E:98:EF:14:1B:06:81:5B:8A:EE:79:28:82:41 X509v3 Authority Key Identifier: keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/NMnvxW-fHpjvFBsGgVuK7nkogkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.195.0/24 81.95.197.0-81.95.198.255 Signature Algorithm: sha256WithRSAEncryption a6:26:f6:4f:70:6c:18:86:ec:c0:ae:ab:d6:18:22:72:1e:40: aa:57:61:91:a6:7a:69:fb:8f:7d:66:f2:3f:f9:61:a8:42:ac: e2:9b:98:e4:60:bd:bb:c3:7d:fc:86:76:42:1b:b8:d7:68:ed: 77:64:c3:5d:8c:68:fb:1d:ac:1c:aa:67:32:ca:5f:5a:3f:cb: 70:b8:10:af:f7:64:3a:f4:6e:f3:29:eb:e6:f0:65:fa:a1:36: 8e:b3:47:58:b7:a4:d7:44:78:8c:91:c6:c5:7f:97:0f:c6:b7: 23:88:20:52:0a:b3:4e:66:2c:cf:a7:36:22:cf:68:23:19:76: 49:ff:df:40:b3:29:14:58:1c:e1:d7:11:53:4d:62:29:2a:2c: aa:4d:37:b3:b9:ea:cc:7b:f8:62:e6:64:8e:0b:c3:f7:cd:f6: 03:c8:57:4a:c2:a3:55:2f:ae:31:2b:97:dc:18:57:c9:ab:db: 78:27:08:4d:30:57:2d:46:76:ba:6d:6d:be:85:20:e5:2f:35: aa:11:13:4c:4a:ed:c0:7e:c1:05:2b:e1:8d:c4:87:15:d3:8e: 96:76:f8:0b:0d:e1:80:98:98:4b:d7:dc:97:0c:b2:ec:30:b1: 57:14:35:c1:b0:17:57:d4:c8:03:bb:62:b3:d5:08:a6:37:e3: b9:05:0f:04 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8EdltPTcVg+xIVEdZGgMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw Y2Q0NGEwHhcNMjYwMTAyMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGM5ZWZjNTZmOWYxZTk4ZWYxNDFiMDY4MTViOGFlZTc5Mjg4MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9JSwDq6An8FS5kqCGV7ArzI+716 sTeWM64pr6XeF3qaudEAMu3Mr7torlRnjsDkIVM8U3xYWVL1ujH2aQ+/60TCY/YV PWKZcdamK0MYKruKVczmpbCNGIwtkX2FoD0ehOoEOh3n7S2+bIx5Kr8paYyNGavp NhWPm37reTdZm6GDNp4f3iyQypUL8cvmpTUnCJ1m/dsKfbfJ2ov0jicgHOUBS0Ex l3tsDUnkqfJ51psZ3O/DADG9e/A1tnqNuOmxtEeBdZvn3+a2Bd48Cu38lOiyHbIZ eyZ7ufX1ZqIFJLYAjdMhrk/Di7mqRfC2vQizaYlNgI8Kt6u3CXGtRxRU0wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDTJ78Vvnx6Y7xQbBoFbiu55KIJBMB8GA1UdIwQY MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt MTk2ZTZmMzc1ZmQ2LzEvTk1udnhXLWZIcGp2RkJzR2dWdUs3bmtvZ2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2 LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUV/DMAwD BABRX8UDBABRX8YwDQYJKoZIhvcNAQELBQADggEBAKYm9k9wbBiG7MCuq9YYInIe QKpXYZGmemn7j31m8j/5YahCrOKbmORgvbvDffyGdkIbuNdo7Xdkw12MaPsdrByq ZzLKX1o/y3C4EK/3ZDr0bvMp6+bwZfqhNo6zR1i3pNdEeIyRxsV/lw/GtyOIIFIK s05mLM+nNiLPaCMZdkn/30CzKRRYHOHXEVNNYikqLKpNN7O56sx7+GLmZI4Lw/fN 9gPIV0rCo1UvrjErl9wYV8mr23gnCE0wVy1Gdrptbb6FIOUvNaoRE0xK7cB+wQUr 4Y3EhxXTjpZ2+AsN4YCYmEvX3JcMsuwwsVcUNcGwF1fUyAO7YrPVCKY347kFDwQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:48 2026 by rpki-client