This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa
File: NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa (raw, json)
Hash identifier: vt3QquyuzzS/PaYQOqdD/BXgViAeJkpSXJsCJnK4Cnw=
Subject key identifier: 37:2A:0F:44:A9:C8:52:EB:E8:53:7E:11:C8:94:D3:F6:30:D0:34:A4
Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial: 019B7759596AB0FADDDBCC841ECCAB104CAA
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa
Signing time: Thu 01 Jan 2026 02:18:22 +0000
ROA not before: Thu 01 Jan 2026 02:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34336
IP address blocks: 91.209.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:59:6a:b0:fa:dd:db:cc:84:1e:cc:ab:10:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Validity
Not Before: Jan 1 02:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=372a0f44a9c852ebe8537e11c894d3f630d034a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:ab:2f:61:aa:04:57:de:a5:46:ae:12:f4:
64:9b:ab:25:1d:6b:1b:32:ee:de:92:2c:32:47:75:
d0:cf:10:6d:fa:f5:5b:df:7c:39:a0:0a:13:5c:a2:
7d:52:9f:42:54:be:cb:1c:33:b1:5c:46:ff:40:c6:
16:10:6e:07:cf:73:43:7d:29:78:4f:a4:be:c3:94:
2d:34:ca:6d:5f:d3:a4:46:ab:14:79:7a:02:e6:f7:
2e:84:51:f8:3b:e5:99:b4:ce:fd:5e:02:ff:64:0c:
78:9f:4f:db:83:10:82:98:64:7f:78:1f:d7:01:5f:
27:33:e4:b2:fc:b5:a1:3d:f9:84:96:5a:f0:9a:56:
dc:e0:c3:ab:42:44:f6:ca:14:0f:cf:e6:3b:78:9c:
93:31:c5:de:c5:30:1d:51:59:04:1f:d9:06:d3:33:
b0:a8:ef:f5:37:6a:69:eb:00:e4:fc:29:ee:e4:ee:
7b:92:b3:29:51:c6:17:b2:aa:db:c2:5b:da:f3:3a:
24:57:62:90:e5:29:52:e8:22:1b:94:34:0d:30:d8:
04:4f:d0:15:fa:d0:69:f5:4a:e4:40:4a:77:7b:75:
bc:e5:3d:77:16:e3:ac:82:34:7d:a1:13:76:c3:8a:
d2:b4:d6:3a:1a:81:a6:45:74:31:e3:1b:a1:10:fe:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:0F:44:A9:C8:52:EB:E8:53:7E:11:C8:94:D3:F6:30:D0:34:A4
X509v3 Authority Key Identifier:
keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/NyoPRKnIUuvoU34RyJTT9jDQNKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:64:b7:14:c2:06:da:bc:94:e5:92:01:3f:b3:7d:15:50:3f:
6c:73:f9:fd:50:fb:01:ee:4d:46:bc:b1:e0:22:ba:fd:68:b1:
b5:75:af:f8:1b:d0:8f:33:db:c9:31:28:07:bb:19:f9:76:31:
f6:a7:92:8c:d5:33:7f:d7:e6:ab:54:66:53:34:9f:40:ba:1c:
d7:5a:3b:58:a4:e7:88:43:0c:c2:3d:a1:86:b0:3f:40:4e:48:
8c:7e:7c:d8:ce:8c:0b:7e:73:c4:4a:96:a1:7e:ee:23:c8:c2:
ab:16:52:d4:a9:34:0a:9e:09:01:dc:24:80:76:61:10:4a:79:
0f:0e:29:db:d5:13:30:51:ed:12:fd:7a:ec:9c:81:71:ff:59:
f4:86:70:54:2b:16:7d:ef:e9:13:fc:1b:f7:32:ca:39:e1:28:
00:da:a8:7b:56:a3:27:88:24:15:df:90:a2:c6:c5:32:ac:2f:
b6:0d:00:4d:17:8c:ce:98:80:c7:72:eb:d1:31:0b:98:70:64:
c9:c3:ea:ff:4e:c2:14:49:61:44:c3:a5:2a:e6:2b:ea:6e:79:
b2:f7:55:1b:5f:76:6e:86:0b:56:b6:4e:75:eb:93:d6:d2:2f:
19:97:bd:8d:35:43:9f:56:ed:91:36:8e:e1:ee:22:3d:5f:d6:
c5:fe:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:26 2026 by rpki-client