This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nfM87_cNIFSFao4mBuo9ap5n_Ds.roa File: nfM87_cNIFSFao4mBuo9ap5n_Ds.roa (raw, json) Hash identifier: clZcRSa2WjMsc93x5iPKZEXkrsa/Ap2DM4NOqed4YYQ= Subject key identifier: 9D:F3:3C:EF:F7:0D:20:54:85:6A:8E:26:06:EA:3D:6A:9E:67:FC:3B Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Certificate serial: 019B791105CC4318E2E66BED6F02AFC36FA7 Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nfM87_cNIFSFao4mBuo9ap5n_Ds.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41828 IP address blocks: 195.191.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:05:cc:43:18:e2:e6:6b:ed:6f:02:af:c3:6f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9df33ceff70d2054856a8e2606ea3d6a9e67fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:28:35:fd:71:65:7d:c9:98:52:2d:b1:56: 78:c8:42:73:79:a2:09:f5:cf:91:13:0a:66:73:6b: d8:ad:e4:b2:6f:0a:6b:3f:66:0a:27:7d:cc:92:34: 96:4b:4d:12:ab:be:87:67:62:e2:84:d1:a6:83:af: 19:d9:eb:48:c6:37:2d:91:0b:69:b9:b6:56:87:9d: 0e:62:0b:69:a7:dd:aa:47:b4:fc:06:a2:da:da:9e: 7a:2f:2a:80:ca:93:0a:20:f4:53:a3:de:6f:58:59: 83:05:63:b5:f2:64:c4:79:1e:d6:62:dc:15:ff:c0: 0f:33:b5:a7:90:84:bd:de:44:98:10:ba:92:3b:5d: f0:98:69:1e:bd:a7:ef:ff:f6:44:78:36:ec:1b:f5: 6e:c9:0a:7c:ef:41:58:e8:c8:41:47:2a:6d:98:5e: 7f:9f:71:f7:dd:c9:5f:de:a0:c9:7d:0b:07:0e:01: d9:3d:ea:72:2d:1c:10:ed:9a:cc:fc:42:66:34:a9: d3:7d:b0:7d:e9:f1:4b:b4:e8:9f:e7:24:ab:ac:d9: 5e:b7:66:b2:f3:14:db:5b:65:08:67:a5:f9:c2:f2: 3e:0d:9c:cf:fa:42:47:d4:33:03:3c:b4:10:97:a1: a1:14:1f:41:ee:c7:55:fb:e2:b2:20:00:aa:c1:fa: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:3C:EF:F7:0D:20:54:85:6A:8E:26:06:EA:3D:6A:9E:67:FC:3B X509v3 Authority Key Identifier: keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/nfM87_cNIFSFao4mBuo9ap5n_Ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.96.0/24 Signature Algorithm: sha256WithRSAEncryption 48:94:a3:ab:d2:77:ef:76:0f:8d:6e:bc:b6:ec:7f:c4:37:31: fe:40:2a:c4:0b:af:d6:0a:8d:31:a1:ed:ba:63:4b:d1:54:d4: a4:b1:94:a6:e8:eb:f7:dc:43:65:c1:a6:a0:c5:f0:e2:37:72: b2:80:8b:fc:7e:31:78:07:4a:e0:44:cd:ce:a1:43:79:40:c7: 61:33:a5:e2:dc:60:0f:d4:6c:51:a5:81:03:03:e6:cc:de:9f: 4a:7a:eb:50:fa:9a:1f:a7:d0:9a:b6:42:9a:c5:71:9a:c7:f4: 27:1f:8f:ce:bf:f4:78:0f:45:cc:53:7e:c2:6b:f7:08:85:b3: ef:d7:19:37:27:b6:9d:f3:ea:0b:26:29:28:2e:0b:65:92:1f: c5:58:42:39:b4:d1:77:95:e8:e7:f6:12:d0:25:09:60:01:ac: de:e3:fe:32:65:4f:84:04:82:18:95:7a:88:ff:19:80:54:d0: f9:5a:c5:19:c9:24:e5:be:6f:35:ed:16:8d:fe:09:ce:5d:26: 81:44:ab:65:fb:b0:28:eb:14:c6:9f:a2:df:9b:92:7b:b3:32: 79:90:04:21:a0:52:7d:e1:49:06:42:ba:c8:37:71:78:13:a9: 01:a1:4f:36:7d:0b:1c:27:20:95:5a:3d:31:ac:c2:71:2c:ef: 68:3a:21:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQXMQxji5mvtbwKvw2+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NjIzYWM1ZGY5ZWVmY2Y3ZDI0ZjMxN2M3YjY5NDI5N2U0 ZjM2MmEwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGYzM2NlZmY3MGQyMDU0ODU2YThlMjYwNmVhM2Q2YTllNjdmYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNAoNf1xZX3JmFItsVZ4yEJzeaIJ 9c+REwpmc2vYreSybwprP2YKJ33MkjSWS00Sq76HZ2LihNGmg68Z2etIxjctkQtp ubZWh50OYgtpp92qR7T8BqLa2p56LyqAypMKIPRTo95vWFmDBWO18mTEeR7WYtwV /8APM7WnkIS93kSYELqSO13wmGkevafv//ZEeDbsG/VuyQp870FY6MhBRyptmF5/ n3H33clf3qDJfQsHDgHZPepyLRwQ7ZrM/EJmNKnTfbB96fFLtOif5ySrrNlet2ay 8xTbW2UIZ6X5wvI+DZzP+kJH1DMDPLQQl6GhFB9B7sdV++KyIACqwfq1ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3zPO/3DSBUhWqOJgbqPWqeZ/w7MB8GA1UdIwQY MBaAFEZiOsXfnu/PfSTzF8e2lCl+TzYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUt N2E1OGJhM2RkZjQzLzEvbmZNODdfY05JRlNGYW80bUJ1bzlhcDVuX0RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUtN2E1OGJhM2RkZjQz LzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw79gMA0G CSqGSIb3DQEBCwUAA4IBAQBIlKOr0nfvdg+Nbry27H/ENzH+QCrEC6/WCo0xoe26 Y0vRVNSksZSm6Ov33ENlwaagxfDiN3KygIv8fjF4B0rgRM3OoUN5QMdhM6Xi3GAP 1GxRpYEDA+bM3p9KeutQ+pofp9CatkKaxXGax/QnH4/Ov/R4D0XMU37Ca/cIhbPv 1xk3J7ad8+oLJikoLgtlkh/FWEI5tNF3lejn9hLQJQlgAaze4/4yZU+EBIIYlXqI /xmAVND5WsUZySTlvm817RaN/gnOXSaBRKtl+7Ao6xTGn6Lfm5J7szJ5kAQhoFJ9 4UkGQrrIN3F4E6kBoU82fQscJyCVWj0xrMJxLO9oOiEv -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:37 2026 by rpki-client