This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NyIiuEXJirTqlsk3yPZdXObuiek.roa File: NyIiuEXJirTqlsk3yPZdXObuiek.roa (raw, json) Hash identifier: 7u58tctM2zYpKKo7FBvVkw1742St/0ThLKzxee4fE48= Subject key identifier: 37:22:22:B8:45:C9:8A:B4:EA:96:C9:37:C8:F6:5D:5C:E6:EE:89:E9 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F967D553621E0868A46A64627C74 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NyIiuEXJirTqlsk3yPZdXObuiek.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213858 IP address blocks: 84.44.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f9:67:d5:53:62:1e:08:68:a4:6a:64:62:7c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372222b845c98ab4ea96c937c8f65d5ce6ee89e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:59:69:b8:d3:99:b9:ad:3a:0c:cf:3d:ff: 80:02:20:ca:da:83:3d:8a:45:65:0f:8b:0d:a4:ec: 3c:a3:6a:7f:5e:a6:59:f9:07:7f:49:45:4d:e8:da: 09:45:b8:de:06:57:e9:20:35:48:74:ef:e9:9d:9e: 98:40:c3:cb:9d:88:95:19:12:d2:91:4a:60:7f:1b: ed:c2:df:5e:25:3f:58:97:b7:f4:81:87:f7:9c:c8: c9:18:94:ec:91:d0:23:2f:fe:77:4c:6b:ed:f0:df: 22:a9:58:79:e3:ca:78:c1:2f:c4:c6:47:14:f5:54: 93:a1:ef:db:fa:9d:20:49:2b:59:9a:f4:10:e6:6f: 90:1c:ae:9d:3a:ef:d7:74:d4:5c:4b:08:2e:be:56: 5a:ca:46:6b:f1:37:b9:b7:79:76:03:ff:d8:0a:a3: 84:da:50:5c:78:4e:71:68:03:8a:f4:ef:61:21:5a: be:32:62:e2:4d:6b:df:03:52:08:2a:bf:05:b2:bb: d4:ac:9a:38:7c:a5:f3:d9:3f:a9:c0:28:d3:ed:d2: d7:2d:eb:5b:e6:14:1b:30:55:26:4d:97:2c:3a:ad: 94:92:c1:62:ae:e0:ab:78:f5:fb:44:5b:8c:98:38: 3a:c2:3a:18:61:d5:ae:95:68:f6:0c:fc:03:10:a5: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:22:B8:45:C9:8A:B4:EA:96:C9:37:C8:F6:5D:5C:E6:EE:89:E9 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NyIiuEXJirTqlsk3yPZdXObuiek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.44.113.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a7:e1:12:66:3f:62:1e:70:13:8a:aa:1f:67:0a:a2:9c:7f: 3b:bd:30:39:0d:79:77:39:53:21:42:8e:23:82:75:52:ba:67: 43:0b:2c:bc:81:5a:9a:56:c4:81:75:eb:2f:86:79:5c:24:1d: 62:2c:7c:df:d2:6b:6a:d5:c8:6e:75:01:9f:c8:07:a7:a4:09: 0c:3f:4c:10:66:c1:fd:c2:2a:bf:e4:ac:5d:c5:f7:38:98:99: cf:d7:45:8a:cd:3a:65:25:9a:d8:da:87:bf:db:ce:8e:cf:34: 6a:05:81:03:96:92:aa:b7:fa:be:c7:20:25:61:f6:b4:81:f1: b3:cd:26:58:49:10:59:94:e7:64:91:78:34:65:0d:80:f9:b7: 4f:26:d8:70:76:5a:b6:81:fb:76:0a:ab:33:3e:21:ea:dc:b4: d5:7a:80:b9:95:5d:1a:6d:a4:70:89:46:61:0a:f2:26:26:97: e1:81:b8:9a:d2:6a:f5:41:47:9a:a8:1c:59:0b:61:66:73:93: b6:38:d0:ad:96:06:1b:c5:32:6b:b8:cb:62:50:c7:e2:c1:b7: 62:41:e8:df:a7:b6:d8:cd:a3:87:4b:b8:16:1e:86:f5:c4:b6: 35:0b:02:a8:97:27:d2:7c:ba:ff:21:13:03:00:0c:8b:e1:42: 4a:bc:74:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/ln1VNiHghopGpkYnx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzIyMjJiODQ1Yzk4YWI0ZWE5NmM5MzdjOGY2NWQ1Y2U2ZWU4OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP1ZabjTmbmtOgzPPf+AAiDK2oM9 ikVlD4sNpOw8o2p/XqZZ+Qd/SUVN6NoJRbjeBlfpIDVIdO/pnZ6YQMPLnYiVGRLS kUpgfxvtwt9eJT9Yl7f0gYf3nMjJGJTskdAjL/53TGvt8N8iqVh548p4wS/ExkcU 9VSToe/b+p0gSStZmvQQ5m+QHK6dOu/XdNRcSwguvlZaykZr8Te5t3l2A//YCqOE 2lBceE5xaAOK9O9hIVq+MmLiTWvfA1IIKr8FsrvUrJo4fKXz2T+pwCjT7dLXLetb 5hQbMFUmTZcsOq2UksFiruCrePX7RFuMmDg6wjoYYdWulWj2DPwDEKUR4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDciIrhFyYq06pbJN8j2XVzm7onpMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvTnlJaXVFWEppclRxbHNrM3lQWmRYT2J1aWVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCxxMA0G CSqGSIb3DQEBCwUAA4IBAQAzp+ESZj9iHnATiqofZwqinH87vTA5DXl3OVMhQo4j gnVSumdDCyy8gVqaVsSBdesvhnlcJB1iLHzf0mtq1chudQGfyAenpAkMP0wQZsH9 wiq/5Kxdxfc4mJnP10WKzTplJZrY2oe/286OzzRqBYEDlpKqt/q+xyAlYfa0gfGz zSZYSRBZlOdkkXg0ZQ2A+bdPJthwdlq2gft2CqszPiHq3LTVeoC5lV0abaRwiUZh CvImJpfhgbia0mr1QUeaqBxZC2Fmc5O2ONCtlgYbxTJruMtiUMfiwbdiQejfp7bY zaOHS7gWHob1xLY1CwKolyfSfLr/IRMDAAyL4UJKvHQe -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:26 2026 by rpki-client