This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/X2hmI0ITvkol3ThHFEh2esp_nlo.roa File: X2hmI0ITvkol3ThHFEh2esp_nlo.roa (raw, json) Hash identifier: 5A42CZM5REZ7GUpO8TgAL25VLRWEXA8JbRN9OjEDwOA= Subject key identifier: 5F:68:66:23:42:13:BE:4A:25:DD:38:47:14:48:76:7A:CA:7F:9E:5A Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338 Certificate serial: 019B7CED68613A3B4E35BC67D0A11D7A0457 Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/X2hmI0ITvkol3ThHFEh2esp_nlo.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201664 IP address blocks: 91.108.190.0/24 maxlen: 24 91.215.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:68:61:3a:3b:4e:35:bc:67:d0:a1:1d:7a:04:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6866234213be4a25dd38471448767aca7f9e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:65:aa:af:df:e7:9d:e4:70:d6:9c:cb:81: c1:2b:71:af:93:21:8b:54:3a:cf:a9:76:f7:f2:42: 4f:4e:21:75:66:0b:e0:eb:00:ea:80:64:d7:6a:9a: 71:c2:8c:ce:16:d5:55:5b:ea:6b:f2:33:c9:3c:62: 5a:c2:ac:d4:a1:24:54:6b:2c:b7:4a:05:ac:9b:e2: 56:8d:4e:38:64:c2:b7:6f:bc:29:9b:11:cc:17:de: 53:75:c7:24:db:98:7a:65:30:47:4c:dc:ae:e2:4e: 39:d9:83:ab:66:89:8d:2b:69:e5:d3:5f:31:4a:50: 83:fa:d6:1b:27:0c:c1:51:12:dc:a4:3f:3d:63:c4: e7:57:70:91:17:bb:c1:4a:44:0c:8c:c3:fe:ab:7d: 3f:da:66:0f:81:09:f0:40:72:c3:b3:2f:ad:f9:1a: f3:d7:8b:34:80:d5:32:80:21:58:ec:13:44:18:93: a1:2b:c5:b9:08:0b:02:d8:f7:2c:eb:bd:3d:62:83: 55:7f:6c:25:7f:54:ad:00:05:af:4e:e5:c6:2d:26: f4:96:dc:20:80:03:17:3e:a4:54:28:b5:fa:a9:97: b0:f0:fe:0b:d7:5c:c4:08:59:0f:ee:59:d0:de:07: 83:3f:e3:99:88:d0:4e:9b:f1:96:65:54:98:b7:ee: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:66:23:42:13:BE:4A:25:DD:38:47:14:48:76:7A:CA:7F:9E:5A X509v3 Authority Key Identifier: keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/X2hmI0ITvkol3ThHFEh2esp_nlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.190.0/24 91.215.86.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d3:2f:4d:38:6c:cf:59:f5:7f:37:c0:37:71:89:b2:c7:e8: 83:47:33:81:e3:3a:e7:44:94:d7:21:c1:43:38:12:2a:51:89: 03:03:ac:81:ab:58:e5:22:0f:87:59:b7:41:78:4d:0a:63:89: 4a:f0:e5:34:ed:61:56:8e:ae:7d:20:2e:e9:68:e6:36:29:ec: 44:41:86:25:d3:59:74:c3:b6:46:9f:3a:7a:8b:bb:4c:83:f0: 7d:cd:bb:63:b3:08:4b:f9:71:59:5c:1c:1d:09:73:7d:18:3a: 92:9c:4b:27:50:2f:f8:7c:6d:48:72:6f:b4:19:5d:79:9a:21: bd:90:1d:58:a4:4a:df:a0:fc:46:78:b7:20:3c:db:75:05:f9: 9b:6d:35:52:22:72:60:61:20:24:3a:22:fb:70:87:a8:c9:ee: 9d:fd:47:81:64:c2:3a:49:36:3f:ab:9e:3c:61:a2:7b:c6:ba: f4:14:0a:72:e7:73:02:4f:98:f9:d5:bc:a7:79:df:0d:a2:14: f0:bd:f4:3c:4d:f6:1b:aa:94:0d:5a:21:d4:ae:91:43:75:5b: d4:d5:0e:ad:d9:b2:aa:08:7f:12:5a:b5:8e:75:91:cd:19:e1: 4a:da:f9:6c:ed:12:d5:ab:42:7c:9b:7d:75:a4:1e:df:47:db: cc:e9:e5:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87WhhOjtONbxn0KEdegRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx MWMzMzgwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjY4NjYyMzQyMTNiZTRhMjVkZDM4NDcxNDQ4NzY3YWNhN2Y5ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WNlqq/f553kcNacy4HBK3GvkyGL VDrPqXb38kJPTiF1Zgvg6wDqgGTXappxwozOFtVVW+pr8jPJPGJawqzUoSRUayy3 SgWsm+JWjU44ZMK3b7wpmxHMF95Tdcck25h6ZTBHTNyu4k452YOrZomNK2nl018x SlCD+tYbJwzBURLcpD89Y8TnV3CRF7vBSkQMjMP+q30/2mYPgQnwQHLDsy+t+Rrz 14s0gNUygCFY7BNEGJOhK8W5CAsC2Pcs6709YoNVf2wlf1StAAWvTuXGLSb0ltwg gAMXPqRUKLX6qZew8P4L11zECFkP7lnQ3geDP+OZiNBOm/GWZVSYt+6/qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF9oZiNCE75KJd04RxRIdnrKf55aMB8GA1UdIwQY MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt NWE5MjJhNjJjNTcxLzEvWDJobUkwSVR2a29sM1RoSEZFaDJlc3BfbmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2y+AwQA W9dWMA0GCSqGSIb3DQEBCwUAA4IBAQBW0y9NOGzPWfV/N8A3cYmyx+iDRzOB4zrn RJTXIcFDOBIqUYkDA6yBq1jlIg+HWbdBeE0KY4lK8OU07WFWjq59IC7paOY2KexE QYYl01l0w7ZGnzp6i7tMg/B9zbtjswhL+XFZXBwdCXN9GDqSnEsnUC/4fG1Icm+0 GV15miG9kB1YpErfoPxGeLcgPNt1BfmbbTVSInJgYSAkOiL7cIeoye6d/UeBZMI6 STY/q548YaJ7xrr0FApy53MCT5j51byned8NohTwvfQ8TfYbqpQNWiHUrpFDdVvU 1Q6t2bKqCH8SWrWOdZHNGeFK2vls7RLVq0J8m311pB7fR9vM6eWX -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:06 2026 by rpki-client