This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/npLxbCkBfsvzh12Sr2_JC_OdCbc.roa File: npLxbCkBfsvzh12Sr2_JC_OdCbc.roa (raw, json) Hash identifier: F8mcnlSRs2fM48WMAEjA+peBFWEIlebDFAmNFUnpLxw= Subject key identifier: 9E:92:F1:6C:29:01:7E:CB:F3:87:5D:92:AF:6F:C9:0B:F3:9D:09:B7 Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Certificate serial: 019B79ECFF641EC274FCE0E7938DFFA655E1 Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/npLxbCkBfsvzh12Sr2_JC_OdCbc.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.208.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ff:64:1e:c2:74:fc:e0:e7:93:8d:ff:a6:55:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e92f16c29017ecbf3875d92af6fc90bf39d09b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:06:3a:3f:ea:7d:7a:e6:6f:69:39:47:8d: 5f:86:dc:35:bf:27:97:62:bb:f9:f8:39:8a:d3:1f: da:21:a1:64:3f:01:dc:51:89:8c:11:03:54:58:1e: be:6e:ec:29:e1:0c:10:da:f1:aa:67:68:14:a9:20: fd:e5:e6:c1:0f:6d:5e:71:d3:d9:7a:ba:8b:4a:d2: 4b:e3:73:05:5d:43:31:8b:52:6b:a3:d5:cb:bf:e1: 6a:7a:31:5a:bc:44:e0:d1:62:60:4c:a7:d5:14:21: 47:a7:00:a1:72:d7:8e:be:15:8d:62:53:7a:a5:45: f3:1c:b4:87:50:46:c6:f7:77:c4:65:03:31:9e:18: 96:54:d8:ec:b3:1b:35:ec:b4:7a:5c:af:4c:ec:a3: 3e:4e:12:03:b1:b5:7f:de:d0:7e:41:a4:1b:61:f3: e6:89:b3:24:0b:4f:6a:31:88:e1:1a:fa:68:cd:16: 18:49:7e:25:02:20:b6:38:0d:5d:a9:eb:0d:7d:fb: 09:d2:c6:e7:c2:43:cf:a1:1f:0b:3b:22:1a:76:0d: be:b1:2e:24:43:a0:db:2f:fa:af:30:42:62:67:9b: fd:5c:d2:e7:f7:ef:28:25:0c:cf:a0:df:2a:32:ed: 00:6e:37:fa:29:90:fe:85:2d:1c:b1:19:23:1e:2b: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:92:F1:6C:29:01:7E:CB:F3:87:5D:92:AF:6F:C9:0B:F3:9D:09:B7 X509v3 Authority Key Identifier: keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/npLxbCkBfsvzh12Sr2_JC_OdCbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.21.0/24 Signature Algorithm: sha256WithRSAEncryption 05:8a:36:c8:29:17:4d:fa:25:38:71:6c:54:86:86:36:ea:cb: ef:38:01:d1:f7:5a:d0:39:81:36:a2:80:33:f8:08:e1:8f:3e: 9f:7c:2f:98:b8:2b:19:15:bb:04:cf:7c:cb:1a:a7:85:3e:74: 17:1e:d1:01:d4:9b:85:5f:8f:f1:19:3f:e9:a1:75:2f:2e:02: a2:78:4a:35:56:72:77:15:4b:ac:bc:31:e5:ab:eb:58:82:14: 31:f8:5c:a8:b3:8a:8b:73:ce:73:75:9c:9c:51:6a:f4:44:a1: ec:46:ce:a0:0e:09:83:54:52:08:98:65:87:cb:0e:5d:fd:53: 9f:ac:05:17:31:55:b7:ac:0e:c7:6b:84:3a:84:e0:1c:7e:b4: 81:5f:47:14:78:7e:c1:c0:e8:d6:28:70:0b:b9:79:69:e7:9b: e1:c7:2b:08:12:0a:df:9f:ca:1b:4b:ac:3d:fc:b5:5f:09:51: 72:bd:30:53:a6:24:29:20:c4:e6:b8:27:31:d4:8d:eb:76:85: bb:b9:35:ab:f7:de:db:ef:8a:2d:f6:02:01:49:e4:1c:bf:b6: 38:e4:d2:3f:e8:77:3e:eb:c0:c0:8b:7d:86:2e:a3:cb:97:92: 20:fd:0d:b0:5d:9a:52:21:3e:3b:f6:f2:40:86:7a:d5:a9:4c: a3:8e:b3:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57P9kHsJ0/ODnk43/plXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZGJhYTFiNTJmM2E3MzI4OWZmNzY4YWNiN2JhYTdmMzg3 Zjk1NWYwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTkyZjE2YzI5MDE3ZWNiZjM4NzVkOTJhZjZmYzkwYmYzOWQwOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM8GOj/qfXrmb2k5R41fhtw1vyeX Yrv5+DmK0x/aIaFkPwHcUYmMEQNUWB6+buwp4QwQ2vGqZ2gUqSD95ebBD21ecdPZ erqLStJL43MFXUMxi1Jro9XLv+FqejFavETg0WJgTKfVFCFHpwChcteOvhWNYlN6 pUXzHLSHUEbG93fEZQMxnhiWVNjssxs17LR6XK9M7KM+ThIDsbV/3tB+QaQbYfPm ibMkC09qMYjhGvpozRYYSX4lAiC2OA1dqesNffsJ0sbnwkPPoR8LOyIadg2+sS4k Q6DbL/qvMEJiZ5v9XNLn9+8oJQzPoN8qMu0Abjf6KZD+hS0csRkjHisypQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6S8WwpAX7L84ddkq9vyQvznQm3MB8GA1UdIwQY MBaAFNbbqhtS86cyif92ist7qn84f5VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQt ZmFiODNkNDAzNTU4LzEvbnBMeGJDa0Jmc3Z6aDEyU3IyX0pDX09kQ2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQtZmFiODNkNDAzNTU4 LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AVMA0G CSqGSIb3DQEBCwUAA4IBAQAFijbIKRdN+iU4cWxUhoY26svvOAHR91rQOYE2ooAz +Ajhjz6ffC+YuCsZFbsEz3zLGqeFPnQXHtEB1JuFX4/xGT/poXUvLgKieEo1VnJ3 FUusvDHlq+tYghQx+Fyos4qLc85zdZycUWr0RKHsRs6gDgmDVFIImGWHyw5d/VOf rAUXMVW3rA7Ha4Q6hOAcfrSBX0cUeH7BwOjWKHALuXlp55vhxysIEgrfn8obS6w9 /LVfCVFyvTBTpiQpIMTmuCcx1I3rdoW7uTWr997b74ot9gIBSeQcv7Y45NI/6Hc+ 68DAi32GLqPLl5Ig/Q2wXZpSIT479vJAhnrVqUyjjrNB -----END CERTIFICATE-----Generated at Sat Jan 3 01:33:21 2026 by rpki-client