This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/NmgrOBcP0tgFCTOWcRYJnixwDJY.roa File: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (raw, json) Hash identifier: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU= Subject key identifier: 36:68:2B:38:17:0F:D2:D8:05:09:33:96:71:16:09:9E:2C:70:0C:96 Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Certificate serial: 019B78A3674393DE7EC7E9B64CF8358678E0 Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/NmgrOBcP0tgFCTOWcRYJnixwDJY.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51972 IP address blocks: 91.222.60.0/22 maxlen: 22 91.222.60.0/24 maxlen: 24 91.222.61.0/24 maxlen: 24 91.222.62.0/24 maxlen: 24 91.222.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:67:43:93:de:7e:c7:e9:b6:4c:f8:35:86:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36682b38170fd2d8050933967116099e2c700c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:54:65:bb:e8:2f:c4:36:00:c5:b5:a7:73: c4:c4:e8:cf:5c:98:91:64:19:70:7b:3f:38:e2:1e: ff:df:ba:73:ab:c5:26:f7:32:cc:f2:f0:49:f8:3b: 79:32:8f:8d:4e:04:19:5f:60:16:43:ff:54:b2:f4: 58:6b:34:ef:ed:d7:e8:d8:99:b3:d4:1c:5e:29:c0: 10:9c:8e:44:db:8d:c3:f7:0f:65:23:96:82:af:72: 80:04:85:57:47:cb:32:dd:56:10:85:a4:60:29:70: 66:2d:ab:ad:11:1a:a2:f7:0d:ee:49:5b:d8:5e:49: 51:f7:b3:93:49:42:ad:04:22:99:38:84:76:bd:e9: 52:15:8b:90:57:7b:b7:2a:74:92:18:0a:b4:0e:b4: 87:f5:80:02:61:15:b1:db:e5:f4:82:61:80:e7:ce: c3:17:73:1d:b8:71:f8:57:13:30:ed:17:dd:fb:8a: 7f:46:84:f1:be:4f:bb:60:15:51:3d:1c:55:7c:3d: 85:2d:35:b8:82:48:55:4d:34:9a:d7:5d:20:9b:4d: 66:1c:fa:c4:4d:e3:e6:3c:d5:05:31:4f:8e:53:df: a2:16:d2:9c:bc:e7:76:21:94:2c:fe:df:6d:66:e1: 44:38:1d:2c:0b:6e:90:5c:f2:4d:18:9f:b1:3c:21: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:68:2B:38:17:0F:D2:D8:05:09:33:96:71:16:09:9E:2C:70:0C:96 X509v3 Authority Key Identifier: keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/NmgrOBcP0tgFCTOWcRYJnixwDJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.60.0/22 Signature Algorithm: sha256WithRSAEncryption 15:32:30:5f:b8:a4:d2:8e:03:0a:1a:ee:2b:9a:ec:5f:59:3b: 16:51:81:0c:7c:03:44:e5:26:e2:89:ef:d0:27:51:3e:53:3e: 09:72:aa:29:37:90:a0:c2:ce:85:e4:b7:74:20:db:7e:97:23: 9a:72:26:5a:73:66:94:de:0c:90:17:e6:ba:7d:a2:bd:8d:99: 51:20:46:af:21:ef:14:1a:79:b1:74:6b:12:2c:d0:69:2f:84: 9f:05:2b:c6:f3:94:7c:80:fe:3a:3c:4e:e2:4b:fa:76:cf:78: 1a:15:c5:ba:03:de:0f:65:26:c7:a0:4c:27:79:67:9e:fb:9e: 54:ba:49:a7:89:3c:86:1b:01:49:6c:35:e5:21:c7:7b:7d:c8: f4:de:df:be:56:01:56:15:93:3a:f9:55:d0:67:20:e5:2c:9a: 7c:f2:f8:74:2f:8c:fb:92:21:7f:d5:55:e2:2c:ec:1e:d3:57: 7f:71:fa:6d:52:c1:cc:52:40:43:93:be:ed:2d:0f:10:c3:0e: f7:24:3c:84:7f:d8:a7:87:16:e9:44:8a:b5:b7:90:17:d5:e9: ac:05:58:45:24:c0:66:91:69:44:d5:92:bb:c8:bf:84:8d:6a: d3:0c:c0:74:29:3c:a9:33:03:5a:5b:ba:52:aa:68:5e:9d:e2: a5:9e:a1:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2dDk95+x+m2TPg1hnjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm ZGNmNmQwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjY4MmIzODE3MGZkMmQ4MDUwOTMzOTY3MTE2MDk5ZTJjNzAwYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthJUZbvoL8Q2AMW1p3PExOjPXJiR ZBlwez844h7/37pzq8Um9zLM8vBJ+Dt5Mo+NTgQZX2AWQ/9UsvRYazTv7dfo2Jmz 1BxeKcAQnI5E243D9w9lI5aCr3KABIVXR8sy3VYQhaRgKXBmLautERqi9w3uSVvY XklR97OTSUKtBCKZOIR2velSFYuQV3u3KnSSGAq0DrSH9YACYRWx2+X0gmGA587D F3MduHH4VxMw7Rfd+4p/RoTxvk+7YBVRPRxVfD2FLTW4gkhVTTSa110gm01mHPrE TePmPNUFMU+OU9+iFtKcvOd2IZQs/t9tZuFEOB0sC26QXPJNGJ+xPCF2mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZoKzgXD9LYBQkzlnEWCZ4scAyWMB8GA1UdIwQY MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt MDlmNzNjMzU0ZTdjLzEvTm1nck9CY1AwdGdGQ1RPV2NSWUpuaXh3REpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW948MA0G CSqGSIb3DQEBCwUAA4IBAQAVMjBfuKTSjgMKGu4rmuxfWTsWUYEMfANE5Sbiie/Q J1E+Uz4JcqopN5Cgws6F5Ld0INt+lyOaciZac2aU3gyQF+a6faK9jZlRIEavIe8U GnmxdGsSLNBpL4SfBSvG85R8gP46PE7iS/p2z3gaFcW6A94PZSbHoEwneWee+55U ukmniTyGGwFJbDXlIcd7fcj03t++VgFWFZM6+VXQZyDlLJp88vh0L4z7kiF/1VXi LOwe01d/cfptUsHMUkBDk77tLQ8Qww73JDyEf9inhxbpRIq1t5AX1emsBVhFJMBm kWlE1ZK7yL+EjWrTDMB0KTypMwNaW7pSqmheneKlnqEZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:25 2026 by rpki-client