This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/nkcqRqm6JxltUVOst-8A4bjg-Yw.roa File: nkcqRqm6JxltUVOst-8A4bjg-Yw.roa (raw, json) Hash identifier: XaEc/XtzoivAIb5D2Y8YGEKADIQDianztAx7Av77swM= Subject key identifier: 9E:47:2A:46:A9:BA:27:19:6D:51:53:AC:B7:EF:00:E1:B8:E0:F9:8C Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d Certificate serial: 019B7C80487351C39CBD025ACEAF99BFE285 Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/nkcqRqm6JxltUVOst-8A4bjg-Yw.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49964 IP address blocks: 91.220.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:48:73:51:c3:9c:bd:02:5a:ce:af:99:bf:e2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e472a46a9ba27196d5153acb7ef00e1b8e0f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:90:96:46:65:23:0e:83:9d:0f:4b:08:81: 72:c3:0d:44:dd:73:dc:d0:b3:75:d3:4c:b8:1d:30: 20:f3:9f:84:ae:a9:cd:23:a7:31:4f:ed:b3:fa:96: 2a:b8:2a:e0:ec:f9:7d:0a:8f:f6:43:43:ee:78:8d: 26:8e:1a:7d:38:93:bf:bb:f3:1c:bb:19:17:13:27: 65:c5:5b:15:37:c4:50:6e:af:a4:db:b2:0a:00:7c: 43:54:72:d5:36:e1:f9:a7:f4:6a:38:42:5f:b4:e7: 08:26:99:54:78:ab:cc:46:ea:de:16:55:07:c4:7d: 34:29:82:1a:cd:31:d4:b9:19:60:6b:f6:e5:58:5a: 98:8b:97:c2:cc:02:3a:1e:17:dc:3d:ab:9c:e4:63: 71:ff:d6:79:0b:f6:4d:6c:4a:f1:d4:d6:5b:cd:69: 10:d7:8c:13:f7:3c:b1:5d:3c:69:07:79:cd:3e:b3: e4:c1:a4:ce:1e:3a:74:2e:ce:58:e3:40:7e:6e:bb: 42:51:95:bf:7b:97:b3:99:70:a1:50:5d:e7:8e:29: d1:72:6c:22:d5:e8:00:b8:64:0c:cc:fa:de:06:d6: 35:90:e8:ab:47:95:ef:2f:51:ff:56:5d:56:00:0e: 72:a3:4a:85:95:05:28:9d:b1:4a:73:22:44:a1:74: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:2A:46:A9:BA:27:19:6D:51:53:AC:B7:EF:00:E1:B8:E0:F9:8C X509v3 Authority Key Identifier: keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/nkcqRqm6JxltUVOst-8A4bjg-Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.102.0/24 Signature Algorithm: sha256WithRSAEncryption 35:b2:e0:2b:be:39:75:65:78:3d:4b:96:2c:3a:c3:2e:08:6a: ef:1c:7b:6d:c6:87:9a:94:7b:fb:93:6d:34:1d:d3:7c:f2:93: 53:54:41:80:f4:3c:23:9a:d4:e6:df:b8:ee:9d:4b:49:ee:b2: 4d:78:bf:f9:84:c4:de:f4:00:01:fb:d4:34:55:bc:1a:d0:18: ee:f4:4a:f1:13:93:e9:9a:20:0c:53:24:c9:c0:d5:ea:52:c8: 8b:1b:3e:df:03:e3:8d:bb:bf:3b:97:4b:27:77:3a:f0:b2:d3: b1:93:96:47:57:34:27:9f:f3:48:7d:4d:6b:c5:b5:4b:39:17: 9f:3d:fa:10:c3:40:87:44:5c:29:b6:e6:5d:e2:60:f6:16:e5: ff:12:0f:b1:de:d5:c9:03:99:ad:65:be:6d:a4:32:06:35:ba: 53:57:c7:63:f7:a9:41:33:fd:48:22:06:e6:10:3a:1b:39:68: 47:af:42:02:60:fe:86:e2:ac:0b:2c:74:db:53:99:bc:86:d7: 89:b5:bc:9e:73:0c:e6:5c:ba:af:f2:97:b3:8f:78:d5:95:96: ca:11:76:71:bd:68:42:c4:f3:cd:b7:44:2f:67:e5:83:8b:08: 04:b4:31:fb:df:e1:9d:27:6b:98:5f:9e:1e:46:a5:c6:33:1f: 34:66:52:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEhzUcOcvQJazq+Zv+KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzA1NjE3OThlNWM4YTI2NzA3NjIwZGYwODJlZjM3Nzhk NzE2M2QwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQ3MmE0NmE5YmEyNzE5NmQ1MTUzYWNiN2VmMDBlMWI4ZTBmOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3mQlkZlIw6DnQ9LCIFyww1E3XPc 0LN100y4HTAg85+ErqnNI6cxT+2z+pYquCrg7Pl9Co/2Q0PueI0mjhp9OJO/u/Mc uxkXEydlxVsVN8RQbq+k27IKAHxDVHLVNuH5p/RqOEJftOcIJplUeKvMRureFlUH xH00KYIazTHUuRlga/blWFqYi5fCzAI6HhfcPauc5GNx/9Z5C/ZNbErx1NZbzWkQ 14wT9zyxXTxpB3nNPrPkwaTOHjp0Ls5Y40B+brtCUZW/e5ezmXChUF3njinRcmwi 1egAuGQMzPreBtY1kOirR5XvL1H/Vl1WAA5yo0qFlQUonbFKcyJEoXRPQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5HKkapuicZbVFTrLfvAOG44PmMMB8GA1UdIwQY MBaAFHhwVheY5ciiZwdiDfCC7zd41xY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhCV0Y1amx5S0puQjJJTjhJTHZOM2pYRmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZWVlODktMTgwNS00YmJlLWE3ZGQt ZGFjZmJmMzY3YjFhLzEvbmtjcVJxbTZKeGx0VVZPc3QtOEE0YmpnLVl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZWVlODktMTgwNS00YmJlLWE3ZGQtZGFjZmJmMzY3YjFh LzEvZUhCV0Y1amx5S0puQjJJTjhJTHZOM2pYRmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xmMA0G CSqGSIb3DQEBCwUAA4IBAQA1suArvjl1ZXg9S5YsOsMuCGrvHHttxoealHv7k200 HdN88pNTVEGA9DwjmtTm37junUtJ7rJNeL/5hMTe9AAB+9Q0Vbwa0Bju9ErxE5Pp miAMUyTJwNXqUsiLGz7fA+ONu787l0sndzrwstOxk5ZHVzQnn/NIfU1rxbVLORef PfoQw0CHRFwptuZd4mD2FuX/Eg+x3tXJA5mtZb5tpDIGNbpTV8dj96lBM/1IIgbm EDobOWhHr0ICYP6G4qwLLHTbU5m8hteJtbyecwzmXLqv8pezj3jVlZbKEXZxvWhC xPPNt0QvZ+WDiwgEtDH73+GdJ2uYX54eRqXGMx80ZlLu -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:44 2026 by rpki-client