This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa File: NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa (raw, json) Hash identifier: x5vufpHlYAUdkIPewVIu2Kz4yUhsko+l9KK+oarRKKQ= Subject key identifier: 37:09:27:4F:D2:3A:1B:23:EF:FB:F4:53:65:EA:99:E0:94:D0:CE:B7 Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599 Certificate serial: 019B7F8387875518292228CD2B2CE1B64D75 Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 91.199.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:87:87:55:18:29:22:28:cd:2b:2c:e1:b6:4d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599 Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3709274fd23a1b23effbf45365ea99e094d0ceb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:b9:c8:da:2b:7c:43:45:0d:90:1f:2f:58: 19:51:45:39:fa:98:57:d3:5a:5f:ec:86:dd:d9:84: 2f:d4:03:ef:a0:d0:6b:7a:7d:3b:2f:02:c8:fd:8e: 73:12:0a:69:d3:e2:42:d3:bf:a8:45:64:57:3d:07: d1:16:95:2b:07:3a:6b:6f:66:db:18:3b:36:c8:74: 75:20:ff:e9:bb:7f:b2:35:2c:56:76:49:0d:70:68: de:ff:49:f5:d8:1b:f7:55:13:04:7c:e7:51:fc:ef: aa:dc:ca:43:70:3c:dd:ec:35:7d:a4:bc:c4:56:60: bc:3d:df:d5:b8:6b:15:c8:4c:29:37:38:13:09:5e: ca:1f:02:f6:70:9f:f9:29:1a:c5:57:ac:44:58:8f: 46:c4:37:a5:96:23:95:d1:d8:61:d2:99:57:06:81: a9:81:92:a9:67:d2:03:9c:19:1a:71:77:e2:61:ea: 43:d4:f1:7f:ef:1a:04:87:4d:0b:58:1a:0c:d3:96: 8e:22:14:3c:db:ee:b1:4a:9f:c8:c1:90:78:bb:88: 24:39:d3:38:f8:ef:a9:ab:86:1b:ed:d6:d7:63:10: f9:22:69:44:d9:07:11:2c:b4:1b:33:f4:60:97:0a: 42:66:6c:85:c0:d3:49:3c:0d:4d:9a:9f:71:9d:8b: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:27:4F:D2:3A:1B:23:EF:FB:F4:53:65:EA:99:E0:94:D0:CE:B7 X509v3 Authority Key Identifier: keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:af:78:55:42:b9:c3:a5:03:70:20:28:c9:23:73:c1:86:0c: c3:67:86:a2:c9:8d:01:79:c0:82:03:3b:e6:3a:c3:95:e0:e5: fd:02:cd:30:f1:a4:81:4d:f4:37:71:6e:20:22:c7:23:37:ca: a0:9b:a0:46:e2:63:73:d7:1e:89:32:62:8e:27:94:97:94:75: b8:c7:53:a5:1b:83:9c:21:5e:b5:b8:e9:6d:c2:dd:97:43:7b: 9d:eb:c5:a8:90:8e:8b:f1:1a:7b:69:3c:c4:6f:35:3e:5d:a9: 27:fc:2f:af:30:b7:64:e5:e6:ea:18:8e:fd:c8:74:1f:d4:32: 52:3d:f5:5c:ad:be:09:e4:1d:b5:84:d6:9b:07:54:ac:01:92: e3:46:7e:32:e1:01:b7:62:21:e5:b1:94:31:49:14:a7:e0:cc: e7:99:da:99:69:fc:03:e0:79:72:a8:50:a6:5a:07:cd:f6:f9: 16:3b:c1:66:e0:b6:31:c6:06:3b:38:f1:fe:13:b9:6f:b7:34: 52:5f:01:76:a3:13:d1:2f:d9:e5:89:f0:da:a1:67:3f:32:9d: 78:65:cf:32:9f:c3:2e:93:f4:3c:c3:5e:15:f7:6f:a3:ab:b6: db:24:4a:85:5e:d0:1f:45:79:8f:1c:9f:f8:42:a6:2b:4c:89: 00:17:c7:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4eHVRgpIijNKyzhtk11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OGM4ZjIwYzkzOWFhYTljODBjY2U2YTBkMTU2NzE4M2Nh MWM1OTkwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzA5Mjc0ZmQyM2ExYjIzZWZmYmY0NTM2NWVhOTllMDk0ZDBjZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPy5yNorfENFDZAfL1gZUUU5+phX 01pf7Ibd2YQv1APvoNBren07LwLI/Y5zEgpp0+JC07+oRWRXPQfRFpUrBzprb2bb GDs2yHR1IP/pu3+yNSxWdkkNcGje/0n12Bv3VRMEfOdR/O+q3MpDcDzd7DV9pLzE VmC8Pd/VuGsVyEwpNzgTCV7KHwL2cJ/5KRrFV6xEWI9GxDelliOV0dhh0plXBoGp gZKpZ9IDnBkacXfiYepD1PF/7xoEh00LWBoM05aOIhQ82+6xSp/IwZB4u4gkOdM4 +O+pq4Yb7dbXYxD5ImlE2QcRLLQbM/RglwpCZmyFwNNJPA1Nmp9xnYubAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcJJ0/SOhsj7/v0U2XqmeCU0M63MB8GA1UdIwQY MBaAFBeMjyDJOaqpyAzOag0VZxg8ocWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTIt NGNkMTFlOGI3NDk3LzEvTndrblQ5STZHeVB2LV9SVFplcVo0SlRRenJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83ZWRkOWEtZmI3Mi00M2Q3LWIyNTItNGNkMTFlOGI3NDk3 LzEvRjR5UElNazVxcW5JRE01cURSVm5HRHloeFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dKMA0G CSqGSIb3DQEBCwUAA4IBAQANr3hVQrnDpQNwICjJI3PBhgzDZ4aiyY0BecCCAzvm OsOV4OX9As0w8aSBTfQ3cW4gIscjN8qgm6BG4mNz1x6JMmKOJ5SXlHW4x1OlG4Oc IV61uOltwt2XQ3ud68WokI6L8Rp7aTzEbzU+Xakn/C+vMLdk5ebqGI79yHQf1DJS PfVcrb4J5B21hNabB1SsAZLjRn4y4QG3YiHlsZQxSRSn4MznmdqZafwD4HlyqFCm WgfN9vkWO8Fm4LYxxgY7OPH+E7lvtzRSXwF2oxPRL9nlifDaoWc/Mp14Zc8yn8Mu k/Q8w14V92+jq7bbJEqFXtAfRXmPHJ/4QqYrTIkAF8ek -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:46 2026 by rpki-client