This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa File: Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa (raw, json) Hash identifier: BVab2XNwE2ZXRd9MBFxThBMKzLFk2UlGtjU1oHSue9k= Subject key identifier: 36:CD:41:81:74:B5:A2:75:43:7B:11:0E:6F:57:CC:D1:6F:E7:C5:B4 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC88146F41FCDE94FFCAA71894C076C Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa Signing time: Fri 02 Jan 2026 08:17:30 +0000 ROA not before: Fri 02 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43106 IP address blocks: 91.108.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:81:46:f4:1f:cd:e9:4f:fc:aa:71:89:4c:07:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36cd418174b5a275437b110e6f57ccd16fe7c5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:55:b3:a0:c6:5a:a0:f2:d9:b8:ab:18:0a: ae:df:1f:db:8d:a2:a7:78:3b:24:82:dd:0b:aa:c9: ca:54:5f:79:a4:d8:4b:b9:fa:f0:00:c6:9f:b0:1f: 25:b8:ac:99:8b:27:35:a4:84:12:9a:eb:ca:dd:ef: 99:dc:2d:52:4b:90:18:5b:9d:4a:b7:03:01:ad:f4: c9:fb:41:fd:06:7a:34:2d:cb:18:e7:a5:ce:77:17: 94:4c:7c:34:c5:b2:d5:4e:4c:a2:8f:45:e6:28:c0: de:16:ba:d9:7f:52:24:d4:5c:99:7f:11:4b:25:01: 8a:35:20:d2:d1:9d:6c:ec:75:21:81:5b:ed:27:0a: 98:f4:0d:a9:33:79:57:92:ff:58:ec:fb:32:7d:9f: 6e:61:c2:fa:74:b6:54:13:36:68:91:0d:d7:f5:bc: 83:24:b1:2c:4a:6f:7e:33:13:51:ab:5f:f4:a3:02: fe:fa:be:fc:cc:e9:2d:87:86:ef:81:cf:ff:3d:72: 8e:ea:01:f5:2c:2d:cc:42:2c:70:d4:c7:4a:12:df: 59:62:ba:30:39:bf:55:5a:97:4e:e8:88:43:a2:d9: b9:2b:b6:6b:05:5f:d3:21:58:6e:0c:46:36:64:1d: 4f:cc:dd:ed:d1:48:ac:90:33:e0:af:aa:f5:16:28: d8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CD:41:81:74:B5:A2:75:43:7B:11:0E:6F:57:CC:D1:6F:E7:C5:B4 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Ns1BgXS1onVDexEOb1fM0W_nxbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.44.0/22 Signature Algorithm: sha256WithRSAEncryption c1:e7:1e:34:cf:a8:58:34:e5:45:b0:09:83:b6:3b:a6:51:1b: 34:a3:c9:3d:0c:9b:bf:2a:d9:73:18:b1:d0:0b:c5:c0:7a:47: 8d:70:14:24:e2:39:59:6e:70:ac:16:7f:1b:1d:b7:01:fd:0a: 46:f7:de:f2:4d:fe:09:d6:b9:21:3a:3e:17:dc:9c:2b:b8:f4: 75:59:07:a0:36:93:78:7b:a2:53:4f:9a:e7:7f:e1:56:a2:84: b6:ac:4a:d1:bf:37:82:a9:49:8f:f3:62:91:19:a4:16:9d:c4: e8:d7:d3:53:2c:e6:3e:97:2f:0b:0d:5e:e6:cb:7d:bc:db:9e: 68:8d:47:2e:78:7e:ac:d4:92:dd:1e:f5:a2:1b:83:df:2f:ba: 84:05:f6:07:ca:92:01:f6:8b:6d:c1:4f:06:54:38:7b:eb:76: 1f:bb:45:1c:49:e4:f1:6a:bb:b3:84:6a:22:57:6f:ab:e9:07: 8b:56:50:ed:74:f7:70:e9:82:27:d3:20:ff:fb:58:aa:1a:14: 2c:44:d6:26:68:93:08:3d:b7:fe:06:fd:2d:ae:4e:74:5e:08: 7c:e4:c9:f2:bb:b3:26:b0:d6:22:1b:a1:66:da:8c:db:a3:0f: 4e:c1:d8:c4:5a:d0:bf:da:38:16:58:08:1f:cb:fb:b4:d6:01: 65:a1:03:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yIFG9B/N6U/8qnGJTAdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmNkNDE4MTc0YjVhMjc1NDM3YjExMGU2ZjU3Y2NkMTZmZTdjNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZVs6DGWqDy2birGAqu3x/bjaKn eDskgt0LqsnKVF95pNhLufrwAMafsB8luKyZiyc1pIQSmuvK3e+Z3C1SS5AYW51K twMBrfTJ+0H9Bno0LcsY56XOdxeUTHw0xbLVTkyij0XmKMDeFrrZf1Ik1FyZfxFL JQGKNSDS0Z1s7HUhgVvtJwqY9A2pM3lXkv9Y7PsyfZ9uYcL6dLZUEzZokQ3X9byD JLEsSm9+MxNRq1/0owL++r78zOkth4bvgc//PXKO6gH1LC3MQixw1MdKEt9ZYrow Ob9VWpdO6IhDotm5K7ZrBV/TIVhuDEY2ZB1PzN3t0UiskDPgr6r1FijYfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbNQYF0taJ1Q3sRDm9XzNFv58W0MB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvTnMxQmdYUzFvblZEZXhFT2IxZk0wV19ueGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2wsMA0G CSqGSIb3DQEBCwUAA4IBAQDB5x40z6hYNOVFsAmDtjumURs0o8k9DJu/KtlzGLHQ C8XAekeNcBQk4jlZbnCsFn8bHbcB/QpG997yTf4J1rkhOj4X3JwruPR1WQegNpN4 e6JTT5rnf+FWooS2rErRvzeCqUmP82KRGaQWncTo19NTLOY+ly8LDV7my328255o jUcueH6s1JLdHvWiG4PfL7qEBfYHypIB9ottwU8GVDh763Yfu0UcSeTxaruzhGoi V2+r6QeLVlDtdPdw6YIn0yD/+1iqGhQsRNYmaJMIPbf+Bv0trk50Xgh85Mnyu7Mm sNYiG6Fm2ozbow9OwdjEWtC/2jgWWAgfy/u01gFloQO5 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:46 2026 by rpki-client