This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/nLdNc3uBYqXuQWe74YmK5T849LY.roa File: nLdNc3uBYqXuQWe74YmK5T849LY.roa (raw, json) Hash identifier: zK1HUD0p8PZSAAAocDxVA//Y+SMHbXms/tkLOsNaqAk= Subject key identifier: 9C:B7:4D:73:7B:81:62:A5:EE:41:67:BB:E1:89:8A:E5:3F:38:F4:B6 Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3 Certificate serial: 019B76EB267CE41F2A46663CFB6578831BDF Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/nLdNc3uBYqXuQWe74YmK5T849LY.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56674 IP address blocks: 91.226.148.0/24 maxlen: 24 91.226.149.0/24 maxlen: 24 91.226.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:26:7c:e4:1f:2a:46:66:3c:fb:65:78:83:1b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cb74d737b8162a5ee4167bbe1898ae53f38f4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:8c:5a:a2:1b:63:e7:08:4b:8e:22:d0:34: e5:2f:ca:e9:95:c4:d7:00:2e:55:0b:0e:6c:2d:3c: d4:51:92:09:a8:e5:2c:c4:76:84:d4:e7:03:f9:8a: 52:56:91:f4:00:15:4e:98:e7:ea:56:6e:35:af:88: 15:c0:2e:0d:b7:0a:73:91:a4:9c:10:c6:c3:11:d6: 6e:9f:3e:e8:8c:a8:a4:69:b0:9b:f9:54:97:b7:da: fa:5f:e2:cc:e1:16:92:d6:73:e2:e8:3f:43:6d:b8: 71:4e:99:0a:d1:f9:4c:bf:0f:e6:71:81:3a:55:b8: a0:ed:23:f0:33:e3:8e:ed:81:70:30:26:7b:6e:65: f1:71:7c:82:3c:0e:0c:5f:e9:4c:04:3f:20:59:53: 21:93:d7:cb:9a:5d:f4:b3:7a:a8:2b:c6:f6:61:8b: ee:1e:a4:f2:ef:ff:5f:f3:5c:cf:58:8a:a5:ab:4f: 8f:eb:e0:bc:f2:8a:f3:8e:13:1f:63:07:26:85:52: e7:d8:f3:d0:c0:c7:2a:f2:f0:82:8d:5a:6d:24:f4: 5b:87:41:c7:c0:bd:85:65:4c:3e:69:a3:94:cb:91: 51:a7:54:47:5e:85:b3:81:de:59:04:e1:45:ff:77: c6:70:5e:4b:a8:eb:12:69:9e:7f:1a:7f:14:72:66: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:4D:73:7B:81:62:A5:EE:41:67:BB:E1:89:8A:E5:3F:38:F4:B6 X509v3 Authority Key Identifier: keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/nLdNc3uBYqXuQWe74YmK5T849LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.148.0-91.226.150.255 Signature Algorithm: sha256WithRSAEncryption 1c:fe:ab:5f:9a:e6:40:51:24:2a:b3:c6:2f:21:55:2a:a2:8a: cf:86:4d:72:72:cb:8c:4c:21:1e:73:cc:0e:2f:74:90:97:81: 27:16:2c:3c:41:4a:c3:3d:6f:5e:b2:b4:0f:0e:0e:25:99:9a: a2:d2:9e:65:b4:1f:52:c3:d4:87:d6:39:f3:d7:9a:53:18:9c: 47:0e:8d:ba:54:1d:32:3b:40:84:c8:5a:45:52:2f:07:ba:1d: d3:68:06:db:c2:1e:cf:01:40:f4:48:18:88:d6:bf:20:cb:d8: cd:af:31:26:6c:67:b4:ed:7c:dd:db:9f:38:bb:f9:57:69:a1: 9d:5d:88:91:0b:85:89:9e:34:00:fc:30:3e:29:0b:95:9d:04: 35:8a:ea:b2:d4:ab:db:e4:4f:5c:79:12:2b:41:48:57:c3:e2: 23:bc:65:8a:06:fb:22:34:6d:44:a5:48:50:95:52:7f:0b:1c: 12:73:96:22:6b:6c:cc:dd:20:98:18:57:10:a5:60:3f:86:13: a3:1f:10:68:8c:2b:16:d1:dd:fd:97:84:e8:32:d8:cb:bd:1b: d5:8b:e2:a6:8e:7c:76:14:c6:ae:43:46:b6:b5:d7:88:db:f0: bf:25:96:c7:88:40:21:8b:4a:8b:0d:32:94:44:69:86:02:54: b4:c9:bd:56 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26yZ85B8qRmY8+2V4gxvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWMwMmIzMGFkYmYxMGY3MWY5YmUwZjQ2NDQ0MjQ0OTgy NjNkZjMwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I3NGQ3MzdiODE2MmE1ZWU0MTY3YmJlMTg5OGFlNTNmMzhmNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgyMWqIbY+cIS44i0DTlL8rplcTX AC5VCw5sLTzUUZIJqOUsxHaE1OcD+YpSVpH0ABVOmOfqVm41r4gVwC4NtwpzkaSc EMbDEdZunz7ojKikabCb+VSXt9r6X+LM4RaS1nPi6D9DbbhxTpkK0flMvw/mcYE6 Vbig7SPwM+OO7YFwMCZ7bmXxcXyCPA4MX+lMBD8gWVMhk9fLml30s3qoK8b2YYvu HqTy7/9f81zPWIqlq0+P6+C88orzjhMfYwcmhVLn2PPQwMcq8vCCjVptJPRbh0HH wL2FZUw+aaOUy5FRp1RHXoWzgd5ZBOFF/3fGcF5LqOsSaZ5/Gn8UcmbzQwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJy3TXN7gWKl7kFnu+GJiuU/OPS2MB8GA1UdIwQY MBaAFDScArMK2/EPcfm+D0ZEQkSYJj3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGIt NDMzNDAzZDMwYTgzLzEvbkxkTmMzdUJZcVh1UVdlNzRZbUs1VDg0OUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGItNDMzNDAzZDMwYTgz LzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb4pQD BABb4pYwDQYJKoZIhvcNAQELBQADggEBABz+q1+a5kBRJCqzxi8hVSqiis+GTXJy y4xMIR5zzA4vdJCXgScWLDxBSsM9b16ytA8ODiWZmqLSnmW0H1LD1IfWOfPXmlMY nEcOjbpUHTI7QITIWkVSLwe6HdNoBtvCHs8BQPRIGIjWvyDL2M2vMSZsZ7TtfN3b nzi7+VdpoZ1diJELhYmeNAD8MD4pC5WdBDWK6rLUq9vkT1x5EitBSFfD4iO8ZYoG +yI0bUSlSFCVUn8LHBJzliJrbMzdIJgYVxClYD+GE6MfEGiMKxbR3f2XhOgy2Mu9 G9WL4qaOfHYUxq5DRra114jb8L8llseIQCGLSosNMpREaYYCVLTJvVY= -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:07 2026 by rpki-client