This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/nSDdOSHCspVYpleIhOXCb9rtFXU.roa File: nSDdOSHCspVYpleIhOXCb9rtFXU.roa (raw, json) Hash identifier: DP5yiwIDcmmdgoi5MgA6ERsteJ2t3mRoP7VsaFCdpY0= Subject key identifier: 9D:20:DD:39:21:C2:B2:95:58:A6:57:88:84:E5:C2:6F:DA:ED:15:75 Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc Certificate serial: 019B7CEDADA67B1AB14F27277FA70AFD9E75 Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/nSDdOSHCspVYpleIhOXCb9rtFXU.roa Signing time: Fri 02 Jan 2026 04:18:29 +0000 ROA not before: Fri 02 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64413 IP address blocks: 91.209.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ad:a6:7b:1a:b1:4f:27:27:7f:a7:0a:fd:9e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d20dd3921c2b29558a6578884e5c26fdaed1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:e4:7d:3e:76:8b:7a:5a:8e:42:50:8f:32: 37:b8:7d:5d:53:84:b1:7b:22:00:9e:73:84:e1:77: 25:cd:33:a2:a9:ca:ac:a3:10:60:cd:38:28:02:c5: 99:d8:ec:fd:69:38:c8:de:6e:99:ce:9a:23:89:32: 86:cf:03:b0:53:0c:0d:fa:e9:c6:c6:01:92:d4:4f: 0e:14:15:c2:75:c9:20:9d:87:7c:cc:99:06:c3:54: 91:a2:8f:bd:d0:99:00:34:d6:a0:91:ab:6c:12:a7: f6:cc:f9:17:cf:b7:18:6f:92:e8:b7:18:31:bf:67: 03:63:a3:5c:05:1a:47:18:fe:4b:bc:ea:36:65:94: 9c:24:01:46:a1:25:35:c8:be:88:78:98:76:a5:87: 2c:a1:0c:a8:58:28:af:28:c1:fc:d4:df:12:b8:78: 87:26:c1:70:9a:04:61:bc:4f:72:fc:c7:a8:4b:aa: f5:27:f2:29:75:38:d0:21:a5:2e:fb:0c:54:ed:57: c2:09:6e:71:44:34:fc:2d:a0:ab:2b:62:03:d1:59: da:a5:31:84:70:7e:7b:dd:97:7d:dd:2c:0f:c8:08: c1:6f:3c:fb:70:4a:90:8f:64:67:3c:06:c7:90:e0: 08:3d:77:c1:8b:64:2e:24:1b:d3:e4:b2:bb:94:20: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:DD:39:21:C2:B2:95:58:A6:57:88:84:E5:C2:6F:DA:ED:15:75 X509v3 Authority Key Identifier: keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/nSDdOSHCspVYpleIhOXCb9rtFXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.96.0/24 Signature Algorithm: sha256WithRSAEncryption 77:13:3c:24:44:3b:78:2d:45:91:ea:1a:7b:c2:11:b2:bf:8a: 52:a7:ee:7a:02:c7:f1:66:8b:1b:c4:ff:6f:ce:8c:e2:4a:a4: d2:fd:f5:10:db:2f:55:43:ba:71:12:6c:e0:f9:0e:fd:1d:ed: 05:89:74:4b:10:82:2f:0e:b2:ce:44:01:71:61:30:0d:72:be: 99:56:e5:24:75:f3:f0:09:f8:1a:94:aa:c2:81:74:94:ad:8a: 8d:ba:9a:8e:0d:66:e1:99:f7:e7:ad:2a:e8:68:1f:d0:e8:c2: 90:f0:de:a3:c5:65:82:9b:96:4f:06:21:ec:57:de:1a:6e:a5: 03:d9:f8:f2:ad:c6:f5:d8:44:55:8e:fe:13:02:bb:eb:b6:d4: 4e:61:a7:e1:80:05:f1:f1:4d:da:42:a6:9f:cb:66:d9:c9:85: 18:65:e2:4e:44:4f:f1:7d:5b:93:11:c1:4f:61:a1:c8:7d:52: 22:9b:86:10:10:ce:3f:bc:29:5a:3d:e1:0b:3b:d7:1d:af:dc: 03:33:a1:83:47:6a:87:2c:1f:d5:12:5e:f8:07:58:71:e7:37: ac:02:16:bb:e2:5d:99:6e:81:51:4a:a9:65:36:ee:7a:c2:09: ef:a7:b2:2e:de:0c:e8:6a:12:aa:e3:2a:b5:f3:01:0d:9c:92: 95:5d:45:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87a2mexqxTycnf6cK/Z51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNWU2ZmQ2MjRmZWMwNjkyZmU3MDY5ZTM3OTIzMWU1MjRk ODBmYmMwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDIwZGQzOTIxYzJiMjk1NThhNjU3ODg4NGU1YzI2ZmRhZWQxNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAzkfT52i3pajkJQjzI3uH1dU4Sx eyIAnnOE4XclzTOiqcqsoxBgzTgoAsWZ2Oz9aTjI3m6ZzpojiTKGzwOwUwwN+unG xgGS1E8OFBXCdckgnYd8zJkGw1SRoo+90JkANNagkatsEqf2zPkXz7cYb5Lotxgx v2cDY6NcBRpHGP5LvOo2ZZScJAFGoSU1yL6IeJh2pYcsoQyoWCivKMH81N8SuHiH JsFwmgRhvE9y/MeoS6r1J/IpdTjQIaUu+wxU7VfCCW5xRDT8LaCrK2ID0VnapTGE cH573Zd93SwPyAjBbzz7cEqQj2RnPAbHkOAIPXfBi2QuJBvT5LK7lCAFjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0g3TkhwrKVWKZXiITlwm/a7RV1MB8GA1UdIwQY MBaAFMteb9Yk/sBpL+cGnjeSMeUk2A+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTE1djFpVC13R2t2NXdhZU41SXg1U1RZRDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82YmE2NTYtZTI1ZS00OWFiLWE0YmYt NjgyNmUyNWI4MDdmLzEvblNEZE9TSENzcFZZcGxlSWhPWENiOXJ0RlhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82YmE2NTYtZTI1ZS00OWFiLWE0YmYtNjgyNmUyNWI4MDdm LzEveTE1djFpVC13R2t2NXdhZU41SXg1U1RZRDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FgMA0G CSqGSIb3DQEBCwUAA4IBAQB3EzwkRDt4LUWR6hp7whGyv4pSp+56AsfxZosbxP9v zoziSqTS/fUQ2y9VQ7pxEmzg+Q79He0FiXRLEIIvDrLORAFxYTANcr6ZVuUkdfPw CfgalKrCgXSUrYqNupqODWbhmffnrSroaB/Q6MKQ8N6jxWWCm5ZPBiHsV94abqUD 2fjyrcb12ERVjv4TArvrttROYafhgAXx8U3aQqafy2bZyYUYZeJORE/xfVuTEcFP YaHIfVIim4YQEM4/vClaPeELO9cdr9wDM6GDR2qHLB/VEl74B1hx5zesAha74l2Z boFRSqllNu56wgnvp7Iu3gzoahKq4yq18wENnJKVXUV0 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:40 2026 by rpki-client