This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/nix55ZdCy-jiAbM3kDENoOmV2r4.roa File: nix55ZdCy-jiAbM3kDENoOmV2r4.roa (raw, json) Hash identifier: fKHyNV7ttM6SvsWUs2Vebt6bVnHYHxU06lD/LcUsbsI= Subject key identifier: 9E:2C:79:E5:97:42:CB:E8:E2:01:B3:37:90:31:0D:A0:E9:95:DA:BE Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Certificate serial: 019B797F0527F59211262B2B26D92A379A38 Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/nix55ZdCy-jiAbM3kDENoOmV2r4.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 85.92.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:27:f5:92:11:26:2b:2b:26:d9:2a:37:9a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2c79e59742cbe8e201b33790310da0e995dabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:44:20:5b:11:41:ff:35:40:0c:ee:50:93: d9:25:8b:fd:86:b5:73:ea:cf:4c:4e:93:e8:16:27: 88:83:b1:75:42:cf:62:96:11:f0:d3:0e:3d:ca:0b: a0:24:a8:4c:cc:88:01:66:d5:3b:99:ff:29:6b:68: 90:fe:ef:55:0a:aa:5d:fb:0a:9d:21:81:68:cc:51: 29:ae:85:f1:13:fb:e0:1d:ed:02:ef:4f:28:a8:2d: af:e8:3f:fe:28:b6:fb:61:d8:35:36:df:d1:92:16: 69:c6:42:d2:4d:2a:29:37:25:2c:a4:6c:ba:a3:2c: 96:30:77:dc:e4:5e:30:c4:8d:fe:ba:5f:a4:96:94: f8:e6:4f:86:3f:15:27:14:57:2e:25:40:0b:84:d5: a3:a6:55:3b:82:6a:a6:59:1d:6b:7f:e2:ec:3e:d6: 72:54:86:f6:f9:46:97:14:de:ac:f5:d5:8b:b3:40: 03:b4:05:17:76:df:ea:99:58:de:3d:e1:53:20:ae: 71:e8:01:31:b8:55:52:a7:ee:69:68:20:21:dd:7d: 7d:67:69:79:c5:88:0b:33:d8:a7:5b:ae:c8:73:13: b5:19:98:30:a7:02:9a:49:48:12:c7:6a:02:1c:fc: 4a:17:0f:17:08:2c:dc:36:1e:cd:6c:62:d9:cf:4c: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:79:E5:97:42:CB:E8:E2:01:B3:37:90:31:0D:A0:E9:95:DA:BE X509v3 Authority Key Identifier: keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/nix55ZdCy-jiAbM3kDENoOmV2r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.101.0/24 Signature Algorithm: sha256WithRSAEncryption 89:71:09:6e:26:76:59:28:46:eb:b5:37:f7:c2:db:2f:5b:26: 98:78:d4:49:5e:dc:9a:44:6b:cc:2f:ff:6e:ba:03:b3:a4:9a: 23:40:67:d3:95:bc:72:9f:b6:66:82:02:2e:21:8a:31:a6:e0: c0:f3:d4:3a:37:4d:a4:de:22:32:24:4b:2d:d1:4d:4a:e7:d7: c9:21:57:4e:4f:d0:db:b9:14:f2:73:bc:68:de:be:bb:62:f6: 47:cc:e7:07:52:3c:d5:30:2e:f1:64:c6:d8:cd:60:bc:83:fe: 71:0e:6e:8e:34:74:98:31:1a:90:5c:5f:f6:60:07:4c:91:11: e2:c7:1b:d9:da:3b:de:04:71:02:1c:d7:c3:1f:93:1c:d4:2a: a0:8a:bc:5f:fe:46:9c:28:58:f5:4b:e7:83:e5:e4:4c:2b:34: d2:ef:2a:07:00:7b:bd:08:19:5b:a7:63:91:71:eb:94:b4:7a: ce:2f:81:79:93:e0:53:92:38:a4:34:59:47:d1:01:1e:35:95: e9:dc:00:5f:dd:d4:d1:2b:80:67:12:ca:58:ee:01:dd:cf:4b: 45:e3:6c:12:1d:1d:a8:fc:c8:57:f2:7a:0e:07:21:eb:f3:7b: 7c:8a:c5:18:40:39:e5:e5:e3:f7:12:cd:22:9f:c5:1f:ba:41: 8f:71:df:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwUn9ZIRJisrJtkqN5o4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj MTZkZDAwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJjNzllNTk3NDJjYmU4ZTIwMWIzMzc5MDMxMGRhMGU5OTVkYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZFEIFsRQf81QAzuUJPZJYv9hrVz 6s9MTpPoFieIg7F1Qs9ilhHw0w49ygugJKhMzIgBZtU7mf8pa2iQ/u9VCqpd+wqd IYFozFEproXxE/vgHe0C708oqC2v6D/+KLb7Ydg1Nt/RkhZpxkLSTSopNyUspGy6 oyyWMHfc5F4wxI3+ul+klpT45k+GPxUnFFcuJUALhNWjplU7gmqmWR1rf+LsPtZy VIb2+UaXFN6s9dWLs0ADtAUXdt/qmVjePeFTIK5x6AExuFVSp+5paCAh3X19Z2l5 xYgLM9inW67IcxO1GZgwpwKaSUgSx2oCHPxKFw8XCCzcNh7NbGLZz0z/hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4seeWXQsvo4gGzN5AxDaDpldq+MB8GA1UdIwQY MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt NjJkNDJmZTZmZDNjLzEvbml4NTVaZEN5LWppQWJNM2tERU5vT21WMnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxlMA0G CSqGSIb3DQEBCwUAA4IBAQCJcQluJnZZKEbrtTf3wtsvWyaYeNRJXtyaRGvML/9u ugOzpJojQGfTlbxyn7ZmggIuIYoxpuDA89Q6N02k3iIyJEst0U1K59fJIVdOT9Db uRTyc7xo3r67YvZHzOcHUjzVMC7xZMbYzWC8g/5xDm6ONHSYMRqQXF/2YAdMkRHi xxvZ2jveBHECHNfDH5Mc1Cqgirxf/kacKFj1S+eD5eRMKzTS7yoHAHu9CBlbp2OR ceuUtHrOL4F5k+BTkjikNFlH0QEeNZXp3ABf3dTRK4BnEspY7gHdz0tF42wSHR2o /MhX8noOByHr83t8isUYQDnl5eP3Es0in8UfukGPcd/X -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:48 2026 by rpki-client