This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa File: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (raw, json) Hash identifier: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA= Subject key identifier: 9D:FF:7E:A8:E9:C9:3E:67:09:B0:46:B9:C6:70:AF:E1:0C:B8:2C:8C Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019B7EA70E3567037619DBDA66CFE7187909 Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206853 IP address blocks: 185.174.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0e:35:67:03:76:19:db:da:66:cf:e7:18:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dff7ea8e9c93e6709b046b9c670afe10cb82c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:e8:b3:dd:79:2f:55:ed:68:73:90:ed:bc: 4c:1e:8d:2e:e1:aa:2a:a9:8c:f1:80:2c:1e:a7:f3: 15:bf:dd:b3:1c:f6:57:41:e4:bf:1c:79:69:69:db: b8:0d:1a:4d:76:5a:1e:1e:b1:c6:86:b4:53:c3:e1: 3a:87:7d:f5:c1:48:bd:44:3b:37:77:d5:7f:15:42: 46:e6:71:fe:db:31:93:23:68:14:d5:8f:e7:d2:5b: 11:5d:83:0d:e0:b1:77:6c:1a:f9:54:5f:3f:7d:39: 6d:c2:40:d4:5e:87:39:82:31:e2:ea:9e:ea:95:be: 1d:76:d6:83:b9:c4:cf:82:82:64:ab:84:68:6f:ea: 2a:fe:cb:d9:90:a5:e4:47:bd:63:69:7c:85:47:60: 7a:34:d2:c1:2f:4a:59:ae:68:7d:e3:58:d7:be:1b: 65:5f:80:4d:95:71:16:7a:31:f7:f9:84:f9:6e:5c: 17:c9:fd:73:b6:89:53:5e:48:e4:91:e5:ea:3d:dc: 98:15:f2:d4:aa:45:e1:97:68:56:10:07:73:b0:0c: 42:b7:ca:75:23:01:2b:60:e3:95:9d:64:da:22:8d: fe:d8:65:19:d7:6c:45:28:0d:9c:d8:86:5b:fb:b6: 18:b1:96:9e:e4:42:42:85:2e:1b:33:2a:3f:75:57: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FF:7E:A8:E9:C9:3E:67:09:B0:46:B9:C6:70:AF:E1:0C:B8:2C:8C X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:7d:34:c8:76:b3:c5:75:66:b8:f7:bf:d8:70:91:bb:ba:07: a7:68:ce:c7:65:70:ed:1f:bb:79:d8:d3:03:30:2a:2e:8b:c2: bb:54:69:7e:73:9a:7a:00:8f:8c:eb:ae:3b:7a:b3:0c:03:cf: da:b0:52:5b:54:2e:52:c9:2d:c4:40:f6:4a:a5:88:56:73:1a: d7:e2:6e:24:ec:0a:87:f0:49:a7:d9:d7:fd:e0:73:75:ef:ec: 7d:ab:72:e7:e1:9b:51:5c:c1:c9:8a:9f:31:8d:77:4f:33:7b: 8e:df:0e:c2:ac:c1:3d:10:bd:b0:b5:d0:55:38:5e:a7:f4:50: 44:d4:5f:3a:7c:c7:a0:24:70:84:4d:e4:70:4c:2e:c4:56:a8: 83:00:79:57:a4:05:b4:f7:98:1e:ac:76:cf:40:30:f5:ee:7f: e0:c8:0a:e8:06:af:72:bf:b6:b1:10:b2:48:ef:e8:e6:00:56: 4d:f3:8b:f7:10:4f:c4:04:04:19:3a:e0:2c:f5:12:16:f0:f0: 84:15:53:91:5f:51:b4:e1:bd:b0:fe:e5:dc:b2:67:22:f4:f7: 0d:11:9d:93:c6:0f:77:0a:04:2d:01:6b:6f:e9:25:bb:6a:bd: c7:cf:27:50:41:a6:7a:f3:82:0f:cb:24:91:71:bc:8d:23:10: 6e:d1:0c:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pw41ZwN2GdvaZs/nGHkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZmN2VhOGU5YzkzZTY3MDliMDQ2YjljNjcwYWZlMTBjYjgyYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37Dos915L1XtaHOQ7bxMHo0u4aoq qYzxgCwep/MVv92zHPZXQeS/HHlpadu4DRpNdloeHrHGhrRTw+E6h331wUi9RDs3 d9V/FUJG5nH+2zGTI2gU1Y/n0lsRXYMN4LF3bBr5VF8/fTltwkDUXoc5gjHi6p7q lb4ddtaDucTPgoJkq4Rob+oq/svZkKXkR71jaXyFR2B6NNLBL0pZrmh941jXvhtl X4BNlXEWejH3+YT5blwXyf1ztolTXkjkkeXqPdyYFfLUqkXhl2hWEAdzsAxCt8p1 IwErYOOVnWTaIo3+2GUZ12xFKA2c2IZb+7YYsZae5EJChS4bMyo/dVfiVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3/fqjpyT5nCbBGucZwr+EMuCyMMB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvbmY5LXFPbkpQbWNKc0VhNXhuQ3Y0UXk0TEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua5QMA0G CSqGSIb3DQEBCwUAA4IBAQBKfTTIdrPFdWa497/YcJG7ugenaM7HZXDtH7t52NMD MCoui8K7VGl+c5p6AI+M6647erMMA8/asFJbVC5SyS3EQPZKpYhWcxrX4m4k7AqH 8Emn2df94HN17+x9q3Ln4ZtRXMHJip8xjXdPM3uO3w7CrME9EL2wtdBVOF6n9FBE 1F86fMegJHCETeRwTC7EVqiDAHlXpAW095gerHbPQDD17n/gyAroBq9yv7axELJI 7+jmAFZN84v3EE/EBAQZOuAs9RIW8PCEFVORX1G04b2w/uXcsmci9PcNEZ2Txg93 CgQtAWtv6SW7ar3HzydQQaZ684IPyySRcbyNIxBu0QwE -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client