This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa File: Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa (raw, json) Hash identifier: EGFj0yiGNTXuSH8wwtjUjE+9yF5opQRMwl047u2UKFM= Subject key identifier: 36:59:B4:8A:CA:8D:AE:98:C3:0B:E5:6D:88:C0:CC:69:8F:99:E5:24 Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Certificate serial: 019B7911233C6ACC9363676718DAB86F417B Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29410 IP address blocks: 192.118.0.0/24 maxlen: 24 192.118.1.0/24 maxlen: 24 192.118.2.0/24 maxlen: 24 192.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:23:3c:6a:cc:93:63:67:67:18:da:b8:6f:41:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3659b48aca8dae98c30be56d88c0cc698f99e524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:ef:0d:9d:9b:eb:a7:14:8b:52:b5:a6:8a: e9:ad:5a:af:76:2c:ef:e2:13:e5:03:c2:ba:4d:e9: 06:20:68:0c:37:4e:0c:e6:35:eb:00:b8:50:67:6a: cb:04:3d:77:7f:02:bc:09:e2:8e:9c:a8:1e:8d:2a: 5f:8f:fa:57:73:a7:79:a2:ef:c6:c4:37:55:5c:cc: 2e:02:be:2c:9f:25:9a:a3:28:d7:ff:28:40:75:28: 84:1a:35:b4:5d:40:ce:91:70:63:2c:21:13:37:b5: 98:60:a2:29:2f:44:4b:2a:9b:bd:31:66:e3:86:93: 02:0a:c8:4b:21:f4:8f:14:fd:70:a8:4c:f0:d8:bb: 8c:da:c9:8b:fc:4c:10:39:d7:f7:06:0e:4f:60:3a: 90:97:a3:2d:b2:bc:7a:b0:a6:64:15:37:ea:53:da: 5d:c9:8b:24:f5:b6:b1:4e:a9:ca:a1:c8:44:03:ae: 56:17:84:b1:6e:2e:dd:ae:87:1c:4d:43:da:c2:82: 99:e4:ad:10:f9:b1:f2:78:0c:b8:aa:df:f3:b7:a7: fc:f6:c0:01:03:08:3e:a0:2c:94:47:c5:3b:40:6e: 01:68:3e:ff:c1:82:56:27:97:3b:1e:12:3f:8b:30: ca:f2:82:4c:b9:18:b8:b3:fa:9c:72:75:37:f4:35: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:B4:8A:CA:8D:AE:98:C3:0B:E5:6D:88:C0:CC:69:8F:99:E5:24 X509v3 Authority Key Identifier: keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.0.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:e1:e2:09:01:63:4d:71:15:60:82:6e:53:7c:9c:0f:ef:1a: c6:0c:fb:c0:42:e8:fb:71:1c:81:4d:6a:8a:2e:5d:f3:30:40: 06:ad:24:d8:c5:60:c5:5c:7e:df:74:e0:8b:03:e5:a5:7d:90: 95:bb:f5:fd:4b:38:5e:3b:1b:89:0d:d1:3e:d5:18:c9:3d:d0: 6b:56:1c:ec:98:5f:9a:28:e2:1e:d5:ac:63:fd:3b:6f:e2:06: 50:56:aa:24:49:70:0b:b5:25:d9:7f:e1:91:97:b5:24:6e:d9: dc:28:d2:09:a0:ca:55:4f:16:52:c1:38:2c:0e:b5:2d:47:23: 52:82:14:e8:db:6d:76:f1:a2:20:cf:b7:ae:b7:30:fe:97:c2: 9a:8c:b9:94:6a:4a:e1:ca:8e:c3:c1:35:36:01:2c:e2:45:18: 4f:e8:b8:55:d0:77:dc:d0:20:ae:86:2c:0e:6e:91:b4:67:c2: c8:ca:c9:d8:6e:fa:d6:65:d2:38:c1:26:5f:16:ba:d0:8c:b7: f8:ac:96:1d:61:42:ff:03:14:b9:f9:44:f8:d3:db:75:71:1b: 65:84:fc:08:d2:a3:01:27:4f:45:68:0a:4b:3f:da:2c:54:03: 8f:4f:cd:06:1c:d1:7d:ec:89:45:d9:c4:1a:ba:c4:9d:a7:ff: a6:be:5b:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESM8asyTY2dnGNq4b0F7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw YzE5M2YwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjU5YjQ4YWNhOGRhZTk4YzMwYmU1NmQ4OGMwY2M2OThmOTllNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm3vDZ2b66cUi1K1porprVqvdizv 4hPlA8K6TekGIGgMN04M5jXrALhQZ2rLBD13fwK8CeKOnKgejSpfj/pXc6d5ou/G xDdVXMwuAr4snyWaoyjX/yhAdSiEGjW0XUDOkXBjLCETN7WYYKIpL0RLKpu9MWbj hpMCCshLIfSPFP1wqEzw2LuM2smL/EwQOdf3Bg5PYDqQl6Mtsrx6sKZkFTfqU9pd yYsk9baxTqnKochEA65WF4Sxbi7droccTUPawoKZ5K0Q+bHyeAy4qt/zt6f89sAB Awg+oCyUR8U7QG4BaD7/wYJWJ5c7HhI/izDK8oJMuRi4s/qccnU39DUgsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZZtIrKja6YwwvlbYjAzGmPmeUkMB8GA1UdIwQY MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut YjFkNGY4YTg2ZDA5LzEvTmxtMGlzcU5ycGpEQy1WdGlNRE1hWS1aNVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5 LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHYAMA0G CSqGSIb3DQEBCwUAA4IBAQB+4eIJAWNNcRVggm5TfJwP7xrGDPvAQuj7cRyBTWqK Ll3zMEAGrSTYxWDFXH7fdOCLA+WlfZCVu/X9SzheOxuJDdE+1RjJPdBrVhzsmF+a KOIe1axj/Ttv4gZQVqokSXALtSXZf+GRl7UkbtncKNIJoMpVTxZSwTgsDrUtRyNS ghTo22128aIgz7eutzD+l8KajLmUakrhyo7DwTU2ASziRRhP6LhV0Hfc0CCuhiwO bpG0Z8LIysnYbvrWZdI4wSZfFrrQjLf4rJYdYUL/AxS5+UT409t1cRtlhPwI0qMB J09FaApLP9osVAOPT80GHNF97IlF2cQausSdp/+mvluU -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:11 2026 by rpki-client