This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/Nppx-_HytezaO7OOnUHi3r0aYuY.roa File: Nppx-_HytezaO7OOnUHi3r0aYuY.roa (raw, json) Hash identifier: EooK0hyWHN5rfWystpxx1iBOSlykoNCoHvC6SpxnsDQ= Subject key identifier: 36:9A:71:FB:F1:F2:B5:EC:DA:3B:B3:8E:9D:41:E2:DE:BD:1A:62:E6 Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e Certificate serial: 019B7C12D5039ACAE8C7FB6166071CA66FAB Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/Nppx-_HytezaO7OOnUHi3r0aYuY.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213206 IP address blocks: 91.239.145.0/24 maxlen: 24 2a07:e0c0::/30 maxlen: 30 2a07:e0c0:1::/48 maxlen: 48 2a07:e0c0:2::/48 maxlen: 48 2a07:e0c0:3::/48 maxlen: 48 2a07:e0c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d5:03:9a:ca:e8:c7:fb:61:66:07:1c:a6:6f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=369a71fbf1f2b5ecda3bb38e9d41e2debd1a62e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:0d:57:02:8a:89:0c:70:d9:f3:11:13:1b: 6e:b9:4f:83:bf:a9:14:a0:e1:65:2b:6c:8a:68:da: a2:de:74:80:79:a6:89:51:25:22:9c:0d:fa:b9:f2: 6a:d6:9b:5a:1d:96:43:22:dd:ef:2a:52:6e:1b:3e: 66:19:73:e9:da:f6:d0:4c:79:4e:ff:a8:d9:ae:f3: 1a:95:fe:1a:cb:56:e4:fe:7a:5d:15:10:6b:eb:25: a3:fe:08:5a:f2:ef:64:e6:4a:58:c7:c3:2f:47:e4: 26:3c:84:06:49:e8:26:c2:12:60:d8:dd:ee:32:4d: 5c:9e:d2:67:c3:c0:43:d0:4a:6a:c3:76:0b:9d:62: 2e:89:dc:f1:b5:0d:36:83:dd:9a:4a:4e:57:fc:01: d4:16:96:a2:49:22:59:9a:65:b0:d2:ea:23:68:db: c7:48:5d:b1:c6:f8:39:be:55:5c:5d:c4:2e:85:f3: de:17:63:46:36:6c:ca:bc:39:87:16:85:78:82:2f: 10:36:84:2a:2d:1e:78:73:54:92:5c:6c:92:d9:b8: 9f:5c:a5:13:1b:3d:99:20:a4:f7:47:88:2d:87:f1: 02:87:cf:c9:d5:ff:28:03:3a:32:95:8b:11:55:e0: 70:b7:8d:55:1b:66:53:e8:0c:83:08:67:2d:48:52: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:71:FB:F1:F2:B5:EC:DA:3B:B3:8E:9D:41:E2:DE:BD:1A:62:E6 X509v3 Authority Key Identifier: keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/Nppx-_HytezaO7OOnUHi3r0aYuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.145.0/24 IPv6: 2a07:e0c0::/30 Signature Algorithm: sha256WithRSAEncryption 35:5b:d4:b2:7d:37:c3:ab:56:86:c5:48:9d:ed:97:b6:c2:17: ab:ce:95:d1:b9:dd:5e:b8:1e:1f:85:3b:f3:42:59:26:f4:f5: 33:bc:de:ac:21:6a:53:0c:36:af:60:61:d6:74:5a:d1:28:5f: 07:7f:6c:c4:2d:aa:13:b2:9a:41:a6:5f:1d:5b:06:d3:ca:ff: c1:b1:7f:73:92:b3:30:f1:e4:bf:ea:44:bc:63:4e:fe:0b:c0: 76:c7:de:03:c6:e3:43:92:88:3c:2a:9e:bb:04:5f:8d:56:70: 29:83:97:54:cc:aa:06:0a:9b:70:ed:4a:e5:06:5e:41:54:c5: a3:64:a5:57:e6:d8:ed:95:b6:bc:f4:ba:d7:a7:f0:00:67:bb: bb:f5:0d:bf:97:cd:72:9c:0e:6c:b9:62:63:44:a3:82:5b:7a: 88:61:31:94:4a:36:ba:36:0a:c8:5d:7d:76:12:a4:fc:d0:bf: 5c:e9:96:f9:15:d8:33:00:c3:01:25:66:d3:28:24:55:db:5e: e7:15:0e:e8:58:68:1f:b2:e1:9e:79:ee:72:c7:3d:6a:cb:54: bb:6b:61:e5:18:fc:8d:71:5a:75:38:7c:61:fa:03:e2:96:20: 27:11:00:a5:69:5a:47:06:e2:9c:e9:56:58:a3:08:62:e2:0e: 7c:b1:be:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EtUDmsrox/thZgccpm+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODQwYmY4ZjJlYTQ0NmE0N2RiNmM2MzM5MDY2NjdjNjNl ZDg4NmUwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjlhNzFmYmYxZjJiNWVjZGEzYmIzOGU5ZDQxZTJkZWJkMWE2MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A4NVwKKiQxw2fMRExtuuU+Dv6kU oOFlK2yKaNqi3nSAeaaJUSUinA36ufJq1ptaHZZDIt3vKlJuGz5mGXPp2vbQTHlO /6jZrvMalf4ay1bk/npdFRBr6yWj/gha8u9k5kpYx8MvR+QmPIQGSegmwhJg2N3u Mk1cntJnw8BD0Epqw3YLnWIuidzxtQ02g92aSk5X/AHUFpaiSSJZmmWw0uojaNvH SF2xxvg5vlVcXcQuhfPeF2NGNmzKvDmHFoV4gi8QNoQqLR54c1SSXGyS2bifXKUT Gz2ZIKT3R4gth/ECh8/J1f8oAzoylYsRVeBwt41VG2ZT6AyDCGctSFIq5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDaacfvx8rXs2juzjp1B4t69GmLmMB8GA1UdIwQY MBaAFG2EC/jy6kRqR9tsYzkGZnxj7YhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMt YzNlOGVhZGQwMGJhLzEvTnBweC1fSHl0ZXphTzdPT25VSGkzcjBhWXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMtYzNlOGVhZGQwMGJh LzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW++RMA0E AgACMAcDBQIqB+DAMA0GCSqGSIb3DQEBCwUAA4IBAQA1W9SyfTfDq1aGxUid7Ze2 wherzpXRud1euB4fhTvzQlkm9PUzvN6sIWpTDDavYGHWdFrRKF8Hf2zELaoTsppB pl8dWwbTyv/BsX9zkrMw8eS/6kS8Y07+C8B2x94DxuNDkog8Kp67BF+NVnApg5dU zKoGCptw7UrlBl5BVMWjZKVX5tjtlba89LrXp/AAZ7u79Q2/l81ynA5suWJjRKOC W3qIYTGUSja6NgrIXX12EqT80L9c6Zb5FdgzAMMBJWbTKCRV217nFQ7oWGgfsuGe ee5yxz1qy1S7a2HlGPyNcVp1OHxh+gPiliAnEQClaVpHBuKc6VZYowhi4g58sb4g -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:11 2026 by rpki-client