This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/njz_gEjI-e1bjrHR1lquEOYRoMk.roa File: njz_gEjI-e1bjrHR1lquEOYRoMk.roa (raw, json) Hash identifier: Loe7LlTlzcJmOglmwSk4GVNPVZ8EbXbTEd07E/3m0ho= Subject key identifier: 9E:3C:FF:80:48:C8:F9:ED:5B:8E:B1:D1:D6:5A:AE:10:E6:11:A0:C9 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA534E47943A0AE15B8D6499DB91AFC Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/njz_gEjI-e1bjrHR1lquEOYRoMk.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39177 IP address blocks: 213.91.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:e4:79:43:a0:ae:15:b8:d6:49:9d:b9:1a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3cff8048c8f9ed5b8eb1d1d65aae10e611a0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:2e:1b:e8:6a:56:21:60:47:c1:78:32:32: c4:05:9a:5e:d1:20:f5:90:66:fb:cf:ee:bb:63:00: dc:22:cb:07:02:1b:a3:d8:91:ff:0f:07:8e:aa:ce: 99:90:df:70:be:ad:67:00:5a:e7:48:9a:5f:c1:6c: 9f:8d:e4:b6:31:c0:4e:f7:85:f1:e2:7d:89:fb:51: 8d:dd:45:dd:3c:b2:39:53:b1:f7:5b:91:eb:bb:ca: 1b:05:1d:48:fb:bd:8f:45:77:7a:03:6f:27:bd:b1: 97:bd:1c:33:4d:76:fe:58:9f:3a:b6:1b:3e:53:5b: 4c:a5:51:5c:fb:57:2d:e5:1f:57:b4:e8:24:d0:69: 07:43:14:8b:29:e9:5c:9d:58:2e:3a:00:55:11:41: ed:86:e3:a3:4b:9d:3b:48:e5:6e:54:e4:22:d7:ae: 44:87:01:2f:79:88:12:34:6d:73:8d:bb:7e:c0:b8: f7:be:74:61:9c:c9:51:3a:4f:67:b3:d7:06:36:ae: 97:dd:06:27:d8:e3:77:93:5e:f9:23:c1:b2:15:8a: 49:b5:2e:a1:f2:ff:9e:92:bf:b4:f8:3f:5c:83:0f: 7a:e0:5e:f5:85:b1:5d:ef:ad:0f:e8:ee:12:f7:b4: 40:16:c6:18:f9:38:62:d6:f4:59:cb:32:62:76:ca: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3C:FF:80:48:C8:F9:ED:5B:8E:B1:D1:D6:5A:AE:10:E6:11:A0:C9 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/njz_gEjI-e1bjrHR1lquEOYRoMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.196.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c1:18:6d:38:5b:ee:0b:56:81:b1:eb:f4:a6:bc:f3:af:76: 0b:b8:6e:5d:a5:df:8d:f8:43:ce:4c:5d:c4:b4:f2:3b:64:49: 43:04:5d:9d:2f:48:6a:b9:5a:c1:f4:16:97:60:b1:c9:42:fd: 50:b9:88:ee:b2:08:12:ad:d2:ad:5e:d5:7e:3c:b5:f4:cd:6f: 42:09:73:21:d0:6c:ed:c2:87:2b:bc:e8:e6:1b:10:64:a3:b3: 22:17:9d:c9:b4:50:38:eb:85:d8:ca:e7:84:45:98:09:1c:87: 67:3f:48:9d:64:c6:f6:3e:5b:5a:fe:a6:e4:41:99:f7:5b:25: 55:49:49:bd:a0:8c:a9:9d:0c:51:ad:38:c7:3d:8f:79:74:df: bd:5e:3a:16:22:45:8c:af:5d:d2:9c:30:50:99:a7:be:49:b8: 12:f7:a9:c8:d5:31:32:3b:a2:e4:e3:78:31:c2:cc:1f:6e:49: 56:97:10:00:84:89:e9:47:ce:74:8a:99:0f:a0:09:8a:9c:57: fd:6d:fc:3d:2e:55:fe:21:67:90:8c:1c:d0:26:4e:5c:16:d7: 9f:f0:b2:86:92:72:05:2a:31:64:2f:d2:bd:4b:2e:85:27:93: 6f:82:f4:a8:01:9f:d5:3c:63:00:98:9e:65:b6:f1:ac:7c:e7: 7e:6d:30:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTTkeUOgrhW41kmduRr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTNjZmY4MDQ4YzhmOWVkNWI4ZWIxZDFkNjVhYWUxMGU2MTFhMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H8uG+hqViFgR8F4MjLEBZpe0SD1 kGb7z+67YwDcIssHAhuj2JH/DweOqs6ZkN9wvq1nAFrnSJpfwWyfjeS2McBO94Xx 4n2J+1GN3UXdPLI5U7H3W5Hru8obBR1I+72PRXd6A28nvbGXvRwzTXb+WJ86ths+ U1tMpVFc+1ct5R9XtOgk0GkHQxSLKelcnVguOgBVEUHthuOjS507SOVuVOQi165E hwEveYgSNG1zjbt+wLj3vnRhnMlROk9ns9cGNq6X3QYn2ON3k175I8GyFYpJtS6h 8v+ekr+0+D9cgw964F71hbFd760P6O4S97RAFsYY+Thi1vRZyzJidso5SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ48/4BIyPntW46x0dZarhDmEaDJMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvbmp6X2dFakktZTFianJIUjFscXVFT1lSb01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VvEMA0G CSqGSIb3DQEBCwUAA4IBAQAywRhtOFvuC1aBsev0przzr3YLuG5dpd+N+EPOTF3E tPI7ZElDBF2dL0hquVrB9BaXYLHJQv1QuYjusggSrdKtXtV+PLX0zW9CCXMh0Gzt wocrvOjmGxBko7MiF53JtFA464XYyueERZgJHIdnP0idZMb2Plta/qbkQZn3WyVV SUm9oIypnQxRrTjHPY95dN+9XjoWIkWMr13SnDBQmae+SbgS96nI1TEyO6Lk43gx wswfbklWlxAAhInpR850ipkPoAmKnFf9bfw9LlX+IWeQjBzQJk5cFtef8LKGknIF KjFkL9K9Sy6FJ5NvgvSoAZ/VPGMAmJ5ltvGsfOd+bTAY -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:55 2026 by rpki-client