This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/N0sDm-EFGV2amFYWHwErrX3Dbus.roa File: N0sDm-EFGV2amFYWHwErrX3Dbus.roa (raw, json) Hash identifier: Xmo1dvVrCIWSNTaeVoMmKU+6tNLC/YtQosQjQwiD/3c= Subject key identifier: 37:4B:03:9B:E1:05:19:5D:9A:98:56:16:1F:01:2B:AD:7D:C3:6E:EB Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F157199E77C6DD7B7256B7512E37 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/N0sDm-EFGV2amFYWHwErrX3Dbus.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29390 IP address blocks: 91.198.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:57:19:9e:77:c6:dd:7b:72:56:b7:51:2e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=374b039be105195d9a9856161f012bad7dc36eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:ce:1b:93:4d:2c:84:cc:1d:97:9b:d3:de: 4e:39:dd:4e:3a:3d:c2:c4:eb:bf:ac:01:d8:fa:bd: a4:c8:ac:38:5e:c8:ed:3f:05:b0:f6:f0:e3:46:a6: 4a:62:bc:fd:71:39:c1:d8:43:b8:7f:fb:1f:ec:bc: 43:58:db:08:3f:94:c0:03:71:86:6b:ef:f3:6c:37: a8:95:f2:90:78:c9:15:eb:8f:e1:04:13:95:b3:ca: 6a:29:a9:6e:28:83:ce:87:cd:f5:7c:79:d6:03:c3: 82:0f:ef:0e:fa:69:d9:87:39:2d:c3:33:b1:1a:fc: 8b:26:ce:5b:fd:8b:52:db:76:0d:9d:3a:49:22:71: d7:77:6e:93:12:59:b8:71:32:22:ad:89:6b:e7:6d: 9d:bd:4e:7e:51:56:55:70:56:1c:e5:35:7b:a3:ff: a7:1c:b1:0a:18:e8:b8:76:a1:8c:a7:53:d1:ae:c5: be:92:27:c5:fb:5f:3a:e0:38:c6:84:18:0b:79:cd: 5d:3d:7d:20:36:5d:c8:37:83:22:11:d7:7f:43:6d: f6:94:c8:c6:4c:6b:5e:2b:65:99:d2:3b:35:6a:33: f5:09:27:9b:ee:bc:62:b3:68:8b:db:f1:ad:b2:07: d6:f1:7a:0f:27:c5:17:c8:43:33:f2:5c:4d:7f:a5: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:03:9B:E1:05:19:5D:9A:98:56:16:1F:01:2B:AD:7D:C3:6E:EB X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/N0sDm-EFGV2amFYWHwErrX3Dbus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.133.0/24 Signature Algorithm: sha256WithRSAEncryption 14:44:85:b9:0c:22:47:49:f2:34:2b:0d:a5:40:95:f6:53:e4: fd:e7:31:31:ed:a0:98:b8:16:76:3d:ca:fb:03:16:b4:ad:c8: 2c:ea:b6:af:c7:2a:71:04:5d:e2:17:65:2e:66:6d:23:9b:81: 6a:f8:83:11:5b:3c:67:d8:3e:b6:d2:89:6a:1f:23:f3:fe:6d: 35:4e:56:80:16:0b:1c:d0:56:36:ef:e4:88:dc:9b:06:5d:2a: 65:40:03:cb:63:75:67:d4:e6:d7:c9:47:2b:70:b2:e9:99:ac: c7:a0:0d:67:0a:da:61:0b:e2:cd:a6:56:01:ff:8b:ce:7c:cd: 2b:14:d9:a0:f1:2f:73:5e:78:d6:81:d3:97:f8:99:4c:97:e5: 4d:ea:31:47:2c:94:ad:a5:01:1a:ea:c4:aa:02:eb:80:bd:0a: 1c:b3:a3:a7:f0:1c:00:a3:c0:49:dd:b1:20:e7:2b:ea:14:5d: 57:9e:d5:b1:0b:a9:73:8b:53:cb:8c:9d:81:36:77:69:c4:ad: e2:61:56:b5:7b:31:d9:35:04:2e:69:47:6d:48:39:3f:95:c8: 61:a0:48:f1:f9:3e:1c:af:83:fa:1d:64:5f:25:24:37:ba:15: 96:c8:3e:16:5b:99:33:8e:58:c2:47:f9:27:20:d9:f2:44:63: fb:4f:97:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvFXGZ53xt17cla3US43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzRiMDM5YmUxMDUxOTVkOWE5ODU2MTYxZjAxMmJhZDdkYzM2ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/rOG5NNLITMHZeb095OOd1OOj3C xOu/rAHY+r2kyKw4XsjtPwWw9vDjRqZKYrz9cTnB2EO4f/sf7LxDWNsIP5TAA3GG a+/zbDeolfKQeMkV64/hBBOVs8pqKaluKIPOh831fHnWA8OCD+8O+mnZhzktwzOx GvyLJs5b/YtS23YNnTpJInHXd26TElm4cTIirYlr522dvU5+UVZVcFYc5TV7o/+n HLEKGOi4dqGMp1PRrsW+kifF+1864DjGhBgLec1dPX0gNl3IN4MiEdd/Q232lMjG TGteK2WZ0js1ajP1CSeb7rxis2iL2/GtsgfW8XoPJ8UXyEMz8lxNf6VygwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdLA5vhBRldmphWFh8BK619w27rMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvTjBzRG0tRUZHVjJhbUZZV0h3RXJyWDNEYnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aFMA0G CSqGSIb3DQEBCwUAA4IBAQAURIW5DCJHSfI0Kw2lQJX2U+T95zEx7aCYuBZ2Pcr7 Axa0rcgs6ravxypxBF3iF2UuZm0jm4Fq+IMRWzxn2D620olqHyPz/m01TlaAFgsc 0FY27+SI3JsGXSplQAPLY3Vn1ObXyUcrcLLpmazHoA1nCtphC+LNplYB/4vOfM0r FNmg8S9zXnjWgdOX+JlMl+VN6jFHLJStpQEa6sSqAuuAvQocs6On8BwAo8BJ3bEg 5yvqFF1XntWxC6lzi1PLjJ2BNndpxK3iYVa1ezHZNQQuaUdtSDk/lchhoEjx+T4c r4P6HWRfJSQ3uhWWyD4WW5kzjljCR/knINnyRGP7T5dk -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:50 2026 by rpki-client