This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Nix8jafe-yHU6lwXvzKE9EQw3wk.roa File: Nix8jafe-yHU6lwXvzKE9EQw3wk.roa (raw, json) Hash identifier: rw7Tq5Dg9OqJclDjs+h7Ri4uglwyXVWiZkap7DwUkuU= Subject key identifier: 36:2C:7C:8D:A7:DE:FB:21:D4:EA:5C:17:BF:32:84:F4:44:30:DF:09 Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5 Certificate serial: 019B77C68E9A88B2BE0A8C98FEB7B047A1E9 Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Nix8jafe-yHU6lwXvzKE9EQw3wk.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50419 IP address blocks: 109.95.184.0/24 maxlen: 24 109.95.185.0/24 maxlen: 24 2001:67c:118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:9a:88:b2:be:0a:8c:98:fe:b7:b0:47:a1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=362c7c8da7defb21d4ea5c17bf3284f44430df09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:02:52:15:b5:2c:3b:cc:5a:4d:32:54:42: 9a:4d:3b:30:22:3a:12:15:9f:9c:69:23:91:c9:39: 5e:6f:a7:1f:41:52:d4:88:45:a3:c7:7f:06:a8:cf: 7a:20:1d:85:85:8d:7a:2e:d2:db:82:28:a1:bf:95: be:7b:ee:42:41:02:de:ff:58:4f:4c:e5:8a:23:fa: b0:fe:aa:6a:ea:71:55:b2:fc:8b:4e:cf:55:ac:81: dd:bc:95:c1:b8:0c:6a:3f:e9:6d:10:8b:70:d7:23: 27:70:3e:a4:24:ba:9b:5f:c8:62:3d:d6:4f:c2:fa: f3:c3:4f:4e:1c:8a:fc:26:23:1e:c7:25:49:41:7c: 28:2a:5b:ae:4c:ce:99:f8:34:e4:f2:9f:14:30:1e: c0:ae:93:97:25:e3:3a:ba:8c:08:9d:56:7d:69:de: ac:c5:ad:8c:fd:3c:4a:34:9a:0f:d5:62:97:70:eb: 3e:c9:2d:2f:6e:9e:1f:30:aa:9f:fa:f2:bf:61:bb: a4:cb:49:b5:f1:45:9d:c0:0c:5d:29:16:18:88:de: 68:6b:b1:6d:ce:92:98:cf:a0:ff:70:07:19:da:2a: aa:81:a8:b7:05:2e:9b:40:6d:18:5e:bd:1b:85:0d: df:57:13:15:4a:72:2b:10:03:0b:6e:52:b7:a5:5f: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:7C:8D:A7:DE:FB:21:D4:EA:5C:17:BF:32:84:F4:44:30:DF:09 X509v3 Authority Key Identifier: keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Nix8jafe-yHU6lwXvzKE9EQw3wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.184.0/23 IPv6: 2001:67c:118::/48 Signature Algorithm: sha256WithRSAEncryption 91:f2:61:3e:65:0b:19:86:6c:1d:8d:a0:8c:5b:65:1f:0c:8a: f1:b2:cf:1f:5e:07:bc:e2:30:bb:3f:74:92:ca:40:08:94:a6: b3:53:12:79:2d:1e:6f:51:10:11:88:7b:17:a8:8a:e9:15:6e: f5:eb:f2:d4:d5:92:3b:7c:2e:69:b2:e9:93:9f:12:88:aa:14: bf:b8:78:2c:17:1c:fe:7c:e3:bb:d5:42:ff:02:6f:9b:fb:6a: 97:3f:05:17:79:87:07:4b:ee:2b:7e:03:95:03:f8:20:9a:1b: dc:61:a2:ad:d7:7e:cf:8e:78:0f:18:46:f0:2f:56:30:45:6e: 7a:4c:32:5c:90:36:9e:68:08:83:96:e9:96:b6:f8:d2:8f:4a: b2:af:e8:59:45:96:b5:18:73:41:cb:e3:b4:76:bb:16:cd:39: b8:cc:fd:83:10:10:15:42:3c:5e:20:4e:be:27:c7:81:56:e7: f5:87:2a:be:fa:4a:2a:b6:34:0b:66:ee:43:73:17:9f:d9:76: 73:2d:fb:cd:bb:12:95:3a:63:81:13:94:a0:2d:d4:86:06:c5: 24:12:ba:dc:71:36:04:32:f2:cd:cb:5b:93:ab:f8:ad:b1:b0: dc:25:6c:84:10:81:e5:27:42:c7:ed:ad:15:32:66:ff:88:37: 29:0a:9e:2b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xo6aiLK+CoyY/rewR6HpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5 ZWMwYjUwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjJjN2M4ZGE3ZGVmYjIxZDRlYTVjMTdiZjMyODRmNDQ0MzBkZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzgCUhW1LDvMWk0yVEKaTTswIjoS FZ+caSORyTleb6cfQVLUiEWjx38GqM96IB2FhY16LtLbgiihv5W+e+5CQQLe/1hP TOWKI/qw/qpq6nFVsvyLTs9VrIHdvJXBuAxqP+ltEItw1yMncD6kJLqbX8hiPdZP wvrzw09OHIr8JiMexyVJQXwoKluuTM6Z+DTk8p8UMB7ArpOXJeM6uowInVZ9ad6s xa2M/TxKNJoP1WKXcOs+yS0vbp4fMKqf+vK/Ybuky0m18UWdwAxdKRYYiN5oa7Ft zpKYz6D/cAcZ2iqqgai3BS6bQG0YXr0bhQ3fVxMVSnIrEAMLblK3pV/LswIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDYsfI2n3vsh1OpcF78yhPREMN8JMB8GA1UdIwQY MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt MTlkZjViNGQxMDE0LzEvTml4OGphZmUteUhVNmx3WHZ6S0U5RVF3M3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0 LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBbV+4MA8E AgACMAkDBwAgAQZ8ARgwDQYJKoZIhvcNAQELBQADggEBAJHyYT5lCxmGbB2NoIxb ZR8MivGyzx9eB7ziMLs/dJLKQAiUprNTEnktHm9REBGIexeoiukVbvXr8tTVkjt8 Lmmy6ZOfEoiqFL+4eCwXHP5847vVQv8Cb5v7apc/BRd5hwdL7it+A5UD+CCaG9xh oq3Xfs+OeA8YRvAvVjBFbnpMMlyQNp5oCIOW6Za2+NKPSrKv6FlFlrUYc0HL47R2 uxbNObjM/YMQEBVCPF4gTr4nx4FW5/WHKr76Siq2NAtm7kNzF5/ZdnMt+827EpU6 Y4ETlKAt1IYGxSQSutxxNgQy8s3LW5Or+K2xsNwlbIQQgeUnQsftrRUyZv+INykK nis= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:06 2026 by rpki-client