This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NKWWb9ql8tebRo5vBNtcDSlFkIU.roa File: NKWWb9ql8tebRo5vBNtcDSlFkIU.roa (raw, json) Hash identifier: CxqQ2ZHeyUOzMznPWs0D+lmE5l42YSk+7lHBE+L9fIc= Subject key identifier: 34:A5:96:6F:DA:A5:F2:D7:9B:46:8E:6F:04:DB:5C:0D:29:45:90:85 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B07A33EA0C0D64D86C2BA0D6F6D77 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NKWWb9ql8tebRo5vBNtcDSlFkIU.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211180 IP address blocks: 93.119.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:07:a3:3e:a0:c0:d6:4d:86:c2:ba:0d:6f:6d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34a5966fdaa5f2d79b468e6f04db5c0d29459085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:45:7d:c9:3f:a4:fb:c7:dc:43:68:78:58: 9f:2c:8d:12:f7:66:7b:68:aa:2f:cf:ad:82:ec:96: b9:4d:ad:b1:5e:ec:d6:dd:ad:c4:cf:da:84:44:ea: 59:1f:87:18:40:ac:e3:ac:a7:67:55:86:b4:30:6c: 2c:e8:a9:cc:7e:00:1e:e4:b1:55:48:e2:46:f5:5d: a0:bc:68:86:63:09:ee:ca:6c:7d:29:74:6b:38:6f: 0e:80:13:7b:44:2e:97:40:d5:a6:6c:1a:f1:ca:31: 91:b4:80:97:91:b1:75:66:70:13:cd:f3:4b:f2:fd: e8:8e:ca:42:0d:43:bc:b4:52:01:e4:2a:5a:75:65: 51:69:6c:fe:da:0b:f0:45:d0:a2:19:1c:b5:e9:96: 33:75:4f:76:d8:07:f4:f5:43:68:4c:92:35:28:01: 81:f8:af:6f:c4:21:d4:e8:78:c3:98:74:73:1f:d0: e5:23:34:b7:5e:e4:e7:03:85:e1:d2:43:99:43:19: 4f:5e:f3:1e:02:6e:78:fd:7d:d0:2b:a8:02:14:75: d2:4d:2d:d0:2f:2f:24:98:8f:17:d2:9e:aa:cd:fd: d0:5d:71:65:6a:9b:f0:ca:52:71:5a:48:39:92:4b: c9:8e:25:0d:d7:d2:c0:a5:80:b4:a9:61:47:73:95: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A5:96:6F:DA:A5:F2:D7:9B:46:8E:6F:04:DB:5C:0D:29:45:90:85 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NKWWb9ql8tebRo5vBNtcDSlFkIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.119.104.0/24 Signature Algorithm: sha256WithRSAEncryption 54:33:b1:22:07:da:f4:6b:53:21:30:1e:f0:04:f5:0d:12:a4: 82:a0:ce:af:a8:79:3e:a7:7b:06:18:9f:a9:63:6e:a0:ae:78: 52:f4:70:96:18:39:26:e9:bb:72:82:8a:96:0a:7b:bd:78:91: 60:9f:27:99:ae:79:a7:8e:b6:34:89:13:02:1c:a8:f1:b0:2f: 62:f3:a7:03:f4:33:f3:16:00:0f:d7:d9:43:b5:05:32:5f:c8: 4c:67:8f:d9:75:0c:2d:29:13:1c:f2:d5:83:b7:64:b0:3f:87: 50:a3:f6:72:f3:67:eb:87:23:51:14:15:26:ed:24:d9:dc:9c: d4:61:60:90:5b:50:39:b1:7f:3c:7d:4f:ad:72:bf:63:32:1b: 29:bf:a5:39:90:b8:69:74:be:ed:95:3d:ef:e5:5c:15:df:3b: 5b:ba:e4:1e:a3:09:98:74:8a:ed:77:eb:fa:14:67:8c:7b:ac: d8:5e:d9:41:f5:63:4c:c6:a1:02:1e:5e:46:66:7d:95:4d:48: a5:fb:16:05:2b:80:b3:7c:94:f4:be:78:27:84:f7:81:58:2c: dc:6a:7a:9b:19:5c:f6:92:1f:02:2c:b6:29:c1:f3:ce:60:d7: b9:e9:cd:dd:4c:bc:41:67:87:61:f9:ce:8e:f1:2e:35:9b:4a: 03:b2:ae:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwejPqDA1k2GwroNb213MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGE1OTY2ZmRhYTVmMmQ3OWI0NjhlNmYwNGRiNWMwZDI5NDU5MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd1Ffck/pPvH3ENoeFifLI0S92Z7 aKovz62C7Ja5Ta2xXuzW3a3Ez9qEROpZH4cYQKzjrKdnVYa0MGws6KnMfgAe5LFV SOJG9V2gvGiGYwnuymx9KXRrOG8OgBN7RC6XQNWmbBrxyjGRtICXkbF1ZnATzfNL 8v3ojspCDUO8tFIB5CpadWVRaWz+2gvwRdCiGRy16ZYzdU922Af09UNoTJI1KAGB +K9vxCHU6HjDmHRzH9DlIzS3XuTnA4Xh0kOZQxlPXvMeAm54/X3QK6gCFHXSTS3Q Ly8kmI8X0p6qzf3QXXFlapvwylJxWkg5kkvJjiUN19LApYC0qWFHc5WvQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSllm/apfLXm0aObwTbXA0pRZCFMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvTktXV2I5cWw4dGViUm81dkJOdGNEU2xGa0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXdoMA0G CSqGSIb3DQEBCwUAA4IBAQBUM7EiB9r0a1MhMB7wBPUNEqSCoM6vqHk+p3sGGJ+p Y26grnhS9HCWGDkm6btygoqWCnu9eJFgnyeZrnmnjrY0iRMCHKjxsC9i86cD9DPz FgAP19lDtQUyX8hMZ4/ZdQwtKRMc8tWDt2SwP4dQo/Zy82frhyNRFBUm7STZ3JzU YWCQW1A5sX88fU+tcr9jMhspv6U5kLhpdL7tlT3v5VwV3ztbuuQeowmYdIrtd+v6 FGeMe6zYXtlB9WNMxqECHl5GZn2VTUil+xYFK4CzfJT0vngnhPeBWCzcanqbGVz2 kh8CLLYpwfPOYNe56c3dTLxBZ4dh+c6O8S41m0oDsq4F -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:16 2026 by rpki-client