This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa File: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (raw, json) Hash identifier: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk= Subject key identifier: 9C:16:92:6E:6B:59:BB:83:6B:16:17:E0:B2:0A:E6:C1:46:58:05:B8 Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Certificate serial: 019B7C80CEEB31D36821729D6CE5A9CF8B21 Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 91.222.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ce:eb:31:d3:68:21:72:9d:6c:e5:a9:cf:8b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c16926e6b59bb836b1617e0b20ae6c1465805b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:40:11:e9:c3:bd:7b:11:03:98:0a:fb:d0: d1:8f:10:e6:e8:ea:ca:96:57:f0:24:1b:d5:b4:5a: bf:4b:c2:91:21:ef:6e:0c:cd:70:d3:e1:1a:5d:a6: a0:5c:cc:90:4a:91:10:d6:70:e4:c8:28:b4:d1:1e: 54:91:14:b4:1c:a6:0d:e7:fd:9b:a2:25:66:ad:97: 36:77:47:58:a5:66:32:ed:fb:0e:58:a4:81:84:c9: 4f:21:2d:b8:e7:92:09:4c:b5:19:7d:0a:e6:42:36: 0e:da:61:7e:62:1b:52:07:44:f5:c5:83:3f:dd:db: 1b:2d:40:ec:bc:35:48:af:0f:93:96:fa:6b:42:7e: eb:12:34:37:d9:73:a5:59:28:67:06:99:f2:a6:db: 74:bc:0f:97:23:63:7d:35:1c:3e:6d:c7:dc:c0:0a: e9:b7:04:9d:c1:af:50:fc:3a:fa:c4:f2:7a:7d:a6: e4:6b:48:60:61:1d:ac:bc:24:57:b6:3f:93:fc:e2: 34:00:f5:1f:79:32:1e:d0:9d:26:83:06:6f:d4:2d: d6:aa:9d:9e:96:4f:f9:eb:50:c4:6d:04:4d:b2:d7: a4:0d:3d:0c:c9:c1:ac:fe:bf:ad:2c:94:24:be:5a: 5c:98:45:0f:ac:c8:e0:d0:16:91:86:65:14:fe:17: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:16:92:6E:6B:59:BB:83:6B:16:17:E0:B2:0A:E6:C1:46:58:05:B8 X509v3 Authority Key Identifier: keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.220.0/22 Signature Algorithm: sha256WithRSAEncryption 85:6f:7e:40:e8:8a:a1:af:d7:7b:cf:f1:41:2b:c0:4a:d9:88: 79:fe:96:00:3b:4d:3a:06:03:e9:84:8b:f7:31:30:0b:68:d4: 8f:d6:9b:80:5d:07:39:28:12:f7:86:d9:b6:73:c5:39:5d:b7: 96:bd:ea:13:73:08:89:fc:70:c8:7b:fc:09:31:fe:a2:89:2e: 4b:f8:06:b9:f3:c7:7f:f8:4d:d4:cf:e0:64:7f:72:4d:90:4b: 3c:ec:d1:3b:09:f5:97:14:cb:c6:ac:df:58:bd:d4:27:dc:dc: 90:f0:8e:55:bb:2f:91:39:6b:a4:8e:54:87:9c:52:ce:0a:cd: 83:71:a8:88:84:62:ea:8e:de:a5:58:44:80:95:e1:b1:1c:1b: a0:a6:cc:2e:b2:a9:6e:30:ef:76:c8:8d:bf:ba:aa:b3:ef:c0: 68:f9:2e:07:f5:57:a6:84:cb:44:b4:63:29:64:07:ea:bc:fb: 95:ad:f6:bb:fa:2e:2f:c6:27:76:6b:9e:b5:48:4e:bc:d2:df: 5a:7a:57:86:44:60:b0:6c:ea:ec:60:39:67:2b:c4:b7:36:cf: 0d:cb:ba:3c:f2:e9:91:7e:fc:25:67:f1:03:df:d2:4a:d6:c4: c9:4d:b0:8d:df:0e:d2:87:78:c6:45:60:99:e4:ef:94:fd:ec: 30:2c:d7:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gM7rMdNoIXKdbOWpz4shMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5 NWJlYTIwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzE2OTI2ZTZiNTliYjgzNmIxNjE3ZTBiMjBhZTZjMTQ2NTgwNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMFAEenDvXsRA5gK+9DRjxDm6OrK llfwJBvVtFq/S8KRIe9uDM1w0+EaXaagXMyQSpEQ1nDkyCi00R5UkRS0HKYN5/2b oiVmrZc2d0dYpWYy7fsOWKSBhMlPIS2455IJTLUZfQrmQjYO2mF+YhtSB0T1xYM/ 3dsbLUDsvDVIrw+TlvprQn7rEjQ32XOlWShnBpnyptt0vA+XI2N9NRw+bcfcwArp twSdwa9Q/Dr6xPJ6fabka0hgYR2svCRXtj+T/OI0APUfeTIe0J0mgwZv1C3Wqp2e lk/561DEbQRNstekDT0MycGs/r+tLJQkvlpcmEUPrMjg0BaRhmUU/hdF3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJwWkm5rWbuDaxYX4LIK5sFGWAW4MB8GA1UdIwQY MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt YmY5MjRhODI1ZjU4LzEvbkJhU2JtdFp1NE5yRmhmZ3Nncm13VVpZQmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4 LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW97cMA0G CSqGSIb3DQEBCwUAA4IBAQCFb35A6Iqhr9d7z/FBK8BK2Yh5/pYAO006BgPphIv3 MTALaNSP1puAXQc5KBL3htm2c8U5XbeWveoTcwiJ/HDIe/wJMf6iiS5L+Aa588d/ +E3Uz+Bkf3JNkEs87NE7CfWXFMvGrN9YvdQn3NyQ8I5Vuy+ROWukjlSHnFLOCs2D caiIhGLqjt6lWESAleGxHBugpswusqluMO92yI2/uqqz78Bo+S4H9VemhMtEtGMp ZAfqvPuVrfa7+i4vxid2a561SE680t9aeleGRGCwbOrsYDlnK8S3Ns8Ny7o88umR fvwlZ/ED39JK1sTJTbCN3w7Sh3jGRWCZ5O+U/ewwLNdR -----END CERTIFICATE-----Generated at Fri Jan 2 16:27:20 2026 by rpki-client