This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/NGSRZ0UFf37oBgMflKRqMJVzu1A.roa File: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (raw, json) Hash identifier: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q= Subject key identifier: 34:64:91:67:45:05:7F:7E:E8:06:03:1F:94:A4:6A:30:95:73:BB:50 Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Certificate serial: 019B7EA584E2453FCAA324141764107D2BD1 Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/NGSRZ0UFf37oBgMflKRqMJVzu1A.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12437 IP address blocks: 81.89.224.0/23 maxlen: 24 84.201.96.0/24 maxlen: 24 212.62.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:84:e2:45:3f:ca:a3:24:14:17:64:10:7d:2b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3464916745057f7ee806031f94a46a309573bb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:51:37:6a:6e:04:d0:0c:7e:77:e5:db:b7: 87:9c:99:f0:c6:98:34:9a:77:b6:9b:57:2e:7d:3b: f0:a0:8c:ff:29:6d:b1:f7:fd:f5:94:c2:c9:63:c1: e4:86:7e:1c:43:2b:be:d8:82:5c:57:f1:5a:3e:e6: 01:04:d0:af:3b:12:16:30:c6:be:1e:16:3f:90:7e: 93:fd:d3:20:6a:e8:8d:3b:30:a7:39:87:ff:24:52: 27:d2:6b:2b:29:6d:ec:a4:dd:ae:5b:c9:b5:6e:af: 9e:72:9f:99:6f:44:fa:69:33:e3:46:e2:05:86:55: d6:8c:62:fc:b4:c2:0c:bf:aa:fd:c8:84:07:08:be: 17:18:fb:80:32:00:c0:a6:40:ec:b8:de:1f:d4:cf: 56:88:ee:57:3c:d1:12:b8:91:b6:fe:11:ed:78:2c: a0:22:89:24:e8:65:a2:f2:21:73:d3:b1:4d:4d:ad: 0c:c1:3b:4e:ac:0c:46:69:ac:d7:61:c9:c8:e0:f1: 6b:be:d4:73:8f:4d:99:de:f2:aa:8f:ae:39:e9:49: 38:bf:c2:80:58:b5:52:df:65:fa:b1:82:e7:74:1b: 9a:5e:55:0e:9b:12:f5:ea:96:cf:ce:08:08:8b:db: 95:4a:bc:16:ab:a1:dd:a3:2d:d3:8d:bf:a5:6f:a5: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:91:67:45:05:7F:7E:E8:06:03:1F:94:A4:6A:30:95:73:BB:50 X509v3 Authority Key Identifier: keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/NGSRZ0UFf37oBgMflKRqMJVzu1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.224.0/23 84.201.96.0/24 212.62.79.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2c:9b:fd:da:b2:34:56:ec:1c:37:eb:45:fa:02:6d:1a:89: f1:53:14:b9:7c:b7:c0:ba:4a:8f:f5:a8:85:b7:3e:d5:76:d1: 69:43:25:3f:ee:cc:5c:5a:2c:cb:22:64:6e:10:1e:63:ae:e6: 61:0e:e3:5e:cf:5a:0e:22:1b:b3:a5:c8:3c:4e:b5:e7:12:4e: 2b:1a:ab:65:a5:0c:e5:e4:cb:ec:28:3b:6a:06:a1:c2:4c:7d: 51:cd:d4:8e:0b:cf:3b:a5:d4:2f:3b:d2:9a:c7:69:bd:77:b9: ab:b2:28:3a:b3:ce:ba:db:b6:e3:46:1d:a9:1e:2b:c7:82:d0: 56:5d:59:82:a7:e4:a3:ea:ff:21:5c:64:7e:78:e2:36:b9:fa: 39:f2:81:1e:d4:c2:f9:06:37:75:bc:8a:fa:0c:7a:cc:5a:4c: 1c:cb:ef:8a:28:73:78:78:44:4a:86:f8:c4:d8:ed:a9:65:dc: 21:05:4e:7c:41:b1:d8:a8:4c:ee:dd:a9:ad:f6:71:12:02:7e: b1:a4:ea:57:8a:49:30:0b:5a:94:9b:1e:50:0c:5d:f9:95:18: ea:ef:6b:36:98:b8:fa:24:71:d9:10:9f:3c:de:3a:8f:07:0e: 8d:1a:c5:59:96:00:38:fc:71:08:1a:70:da:8d:c3:93:4e:89: 22:c5:6e:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pYTiRT/KoyQUF2QQfSvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5 NTgwYmIwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDY0OTE2NzQ1MDU3ZjdlZTgwNjAzMWY5NGE0NmEzMDk1NzNiYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZJRN2puBNAMfnfl27eHnJnwxpg0 mne2m1cufTvwoIz/KW2x9/31lMLJY8Hkhn4cQyu+2IJcV/FaPuYBBNCvOxIWMMa+ HhY/kH6T/dMgauiNOzCnOYf/JFIn0msrKW3spN2uW8m1bq+ecp+Zb0T6aTPjRuIF hlXWjGL8tMIMv6r9yIQHCL4XGPuAMgDApkDsuN4f1M9WiO5XPNESuJG2/hHteCyg Iokk6GWi8iFz07FNTa0MwTtOrAxGaazXYcnI4PFrvtRzj02Z3vKqj6456Uk4v8KA WLVS32X6sYLndBuaXlUOmxL16pbPzggIi9uVSrwWq6Hdoy3Tjb+lb6Xv9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDRkkWdFBX9+6AYDH5SkajCVc7tQMB8GA1UdIwQY MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt ZThjOWFkNWYwNTFhLzEvTkdTUlowVUZmMzdvQmdNZmxLUnFNSlZ6dTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUVngAwQA VMlgAwQA1D5PMA0GCSqGSIb3DQEBCwUAA4IBAQBlLJv92rI0VuwcN+tF+gJtGonx UxS5fLfAukqP9aiFtz7VdtFpQyU/7sxcWizLImRuEB5jruZhDuNez1oOIhuzpcg8 TrXnEk4rGqtlpQzl5MvsKDtqBqHCTH1RzdSOC887pdQvO9Kax2m9d7mrsig6s866 27bjRh2pHivHgtBWXVmCp+Sj6v8hXGR+eOI2ufo58oEe1ML5Bjd1vIr6DHrMWkwc y++KKHN4eERKhvjE2O2pZdwhBU58QbHYqEzu3amt9nESAn6xpOpXikkwC1qUmx5Q DF35lRjq72s2mLj6JHHZEJ883jqPBw6NGsVZlgA4/HEIGnDajcOTTokixW7P -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:52 2026 by rpki-client