This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa File: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (raw, json) Hash identifier: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s= Subject key identifier: 36:71:5D:FD:61:20:C1:6E:6F:FD:0E:17:9F:3A:A0:1D:CE:F7:01:45 Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Certificate serial: 019B7910DBA5553BE80E26361923AD68CF95 Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59531 IP address blocks: 91.242.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:db:a5:55:3b:e8:0e:26:36:19:23:ad:68:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36715dfd6120c16e6ffd0e179f3aa01dcef70145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:26:b7:46:35:65:5f:91:a8:e9:80:18:a8: 7f:bf:c3:e9:b5:7f:c6:73:9c:b5:3a:35:e7:c7:fe: c8:e9:09:0e:a8:bc:57:f6:cd:2c:0d:d0:a3:53:1a: 0d:6a:c3:64:d9:e3:04:78:2b:21:41:6b:31:97:a7: 40:67:d6:68:ea:e2:ca:a3:78:5d:8b:5c:54:73:c4: bf:88:91:5a:76:5c:c9:c4:0a:2a:d4:5b:05:04:ae: d6:ee:6f:9a:69:92:ed:0b:9f:1f:c3:82:c9:08:5a: 9c:7c:fc:fd:60:89:25:27:5e:36:e1:0c:6e:ba:d1: d9:72:1b:eb:2e:b7:72:7e:a0:5d:fc:a4:6c:05:22: 27:b8:c9:f7:87:64:fc:e1:2d:36:7c:da:64:75:de: c4:68:c9:7e:8a:1d:2e:04:f5:43:61:af:a6:e7:05: 78:59:03:10:8c:41:02:95:e4:52:9d:4b:36:a2:43: 47:4b:67:59:d7:05:48:80:3e:e0:48:c0:c3:8e:8f: ba:3e:ef:95:55:50:3f:16:22:1e:cd:51:3b:8e:66: 03:90:fe:6d:a1:5a:80:f8:97:68:d5:22:0e:5d:60: 9b:22:a4:0d:a9:7e:94:0e:4e:37:bb:20:a8:37:81: 15:5c:8b:28:b0:df:cb:3d:55:90:52:0f:14:b1:d7: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:5D:FD:61:20:C1:6E:6F:FD:0E:17:9F:3A:A0:1D:CE:F7:01:45 X509v3 Authority Key Identifier: keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.208.0/22 Signature Algorithm: sha256WithRSAEncryption 70:bb:a4:12:2a:47:1d:ae:78:67:d2:29:34:bc:f3:d1:9e:50: b2:c9:59:d7:d1:b8:ea:5d:8e:20:e4:63:c7:b8:41:51:f9:22: 71:e3:88:d4:9d:d8:14:27:ce:d8:fe:fa:4b:92:7b:7f:7d:6d: c2:76:e5:7c:28:f0:83:3d:fb:ab:62:5f:bc:00:75:41:7a:1a: a2:66:4e:60:9d:a6:b9:69:dc:21:0a:45:8a:71:98:12:06:61: f5:9f:5a:48:e2:fc:85:da:42:33:15:72:83:c4:a0:30:24:a3: 72:bd:67:39:88:69:fe:27:d2:0b:17:c6:43:f4:f6:8a:78:2a: 74:e7:49:d8:a8:1d:0f:a5:73:b1:21:54:e8:4d:2f:df:78:a2: e2:27:5a:2a:3a:b8:cf:6f:35:eb:76:37:2c:b5:a1:62:f3:08: 73:07:8f:c3:26:ef:02:71:0b:71:c0:7b:6a:51:20:47:5f:4c: fd:1a:95:e5:14:5c:e7:78:9a:ab:ac:21:f8:9f:49:de:0e:69: 07:02:bf:71:f5:56:75:17:83:fd:2f:a9:11:5d:59:02:5e:52: 1c:a8:8f:76:84:c6:58:ba:30:a8:21:44:12:04:21:6d:28:63: ca:4b:54:f3:9c:14:2d:5c:56:8d:3c:71:af:86:e0:f4:32:71: 60:31:12:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENulVTvoDiY2GSOtaM+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl OTMyOWYwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjcxNWRmZDYxMjBjMTZlNmZmZDBlMTc5ZjNhYTAxZGNlZjcwMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTEmt0Y1ZV+RqOmAGKh/v8PptX/G c5y1OjXnx/7I6QkOqLxX9s0sDdCjUxoNasNk2eMEeCshQWsxl6dAZ9Zo6uLKo3hd i1xUc8S/iJFadlzJxAoq1FsFBK7W7m+aaZLtC58fw4LJCFqcfPz9YIklJ1424Qxu utHZchvrLrdyfqBd/KRsBSInuMn3h2T84S02fNpkdd7EaMl+ih0uBPVDYa+m5wV4 WQMQjEECleRSnUs2okNHS2dZ1wVIgD7gSMDDjo+6Pu+VVVA/FiIezVE7jmYDkP5t oVqA+Jdo1SIOXWCbIqQNqX6UDk43uyCoN4EVXIsosN/LPVWQUg8UsdctdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZxXf1hIMFub/0OF586oB3O9wFFMB8GA1UdIwQY MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt NmM3NjdiOTJjOWE1LzEvTm5GZF9XRWd3VzV2X1E0WG56cWdIYzczQVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1 LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/LQMA0G CSqGSIb3DQEBCwUAA4IBAQBwu6QSKkcdrnhn0ik0vPPRnlCyyVnX0bjqXY4g5GPH uEFR+SJx44jUndgUJ87Y/vpLknt/fW3CduV8KPCDPfurYl+8AHVBehqiZk5gnaa5 adwhCkWKcZgSBmH1n1pI4vyF2kIzFXKDxKAwJKNyvWc5iGn+J9ILF8ZD9PaKeCp0 50nYqB0PpXOxIVToTS/feKLiJ1oqOrjPbzXrdjcstaFi8whzB4/DJu8CcQtxwHtq USBHX0z9GpXlFFzneJqrrCH4n0neDmkHAr9x9VZ1F4P9L6kRXVkCXlIcqI92hMZY ujCoIUQSBCFtKGPKS1TznBQtXFaNPHGvhuD0MnFgMRKi -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:11 2026 by rpki-client