This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa File: NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa (raw, json) Hash identifier: CfqYoJORgk50J8/a4wFc3Mw6td5sedXHYSUR5haXaCE= Subject key identifier: 37:34:40:DC:3E:0A:9F:94:C8:CC:C6:DD:78:14:59:8F:CF:B7:4C:F2 Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Certificate serial: 019B79ED6488651232D0DF11A0FE99EC43C8 Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59511 IP address blocks: 91.212.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:88:65:12:32:d0:df:11:a0:fe:99:ec:43:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373440dc3e0a9f94c8ccc6dd7814598fcfb74cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:93:b2:c9:09:95:4e:42:1b:8a:90:de:3f: b9:6c:58:ef:a3:6f:4f:1d:b2:92:1c:d9:a8:b5:1b: e0:d7:12:8d:53:f4:a6:1f:f2:1c:17:cd:e3:56:9a: 9d:e8:61:f1:c9:a2:0e:4f:2c:55:12:55:1f:d5:5e: 7e:84:a3:f7:4f:39:e0:19:86:d2:7b:4b:01:ab:74: 0f:be:85:da:ed:a4:15:c6:d2:9c:6d:04:3d:0c:56: f7:ee:14:98:61:4d:2d:fb:ef:e1:1f:84:bb:70:40: eb:ac:10:aa:d9:ed:bf:6f:85:62:6e:0e:00:74:0b: ff:07:c2:09:c9:bb:51:40:f3:a7:e1:dc:99:f6:f9: 9d:6e:e5:ab:71:d1:0c:cd:87:15:e6:68:dc:1e:75: e8:7d:f1:0c:be:d7:bc:26:b9:c2:44:56:d9:e0:e5: 0e:b5:5e:eb:d6:1a:61:dc:de:f5:56:d1:bf:26:b6: 61:66:9a:67:3c:47:29:e0:9b:a5:cb:32:9d:b7:d0: f6:9f:37:9e:86:24:14:85:9a:65:52:f2:b1:40:ab: 45:6a:1a:65:bd:2d:ed:4a:72:a8:28:e8:be:7d:22: f6:92:db:7e:18:0c:25:91:64:88:c5:8d:3d:02:16: d8:1e:a2:02:e7:ab:0b:88:ba:59:51:aa:47:93:21: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:40:DC:3E:0A:9F:94:C8:CC:C6:DD:78:14:59:8F:CF:B7:4C:F2 X509v3 Authority Key Identifier: keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.148.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ae:a8:9d:8b:33:d4:ef:84:69:20:e2:23:a1:4a:4c:59:74: e6:05:64:d5:68:68:0e:72:ae:12:9d:c2:14:cb:53:96:d7:2c: 6c:4d:04:d3:88:bd:d1:2f:2f:6d:54:4a:77:3c:3f:73:50:e8: 4b:2c:49:09:cc:0c:43:b7:51:1b:a9:da:cd:9d:09:d1:94:37: 1e:0a:4d:30:9f:cf:fc:e3:a7:bf:2c:d4:ed:6b:e5:ce:27:7d: 36:3a:bb:56:fa:26:0a:7d:4e:65:8a:55:91:5b:31:f2:94:3d: 8d:c5:61:5b:c6:8b:82:9d:63:c5:01:4b:62:f8:b5:ab:da:e7: 2c:95:1f:a5:00:3f:39:9e:da:3e:19:dd:17:e2:0f:27:1b:1b: 34:80:a2:ba:e6:07:92:78:7a:6c:3b:77:c5:82:f1:b9:5e:8f: a7:f1:11:91:ab:e5:dc:c0:87:f4:2f:44:cd:90:89:43:81:e6: 11:4b:2d:5d:b9:d8:fa:a4:2e:b8:79:4f:41:66:c0:ad:62:71: 36:8c:f7:e5:4b:ee:dc:ae:0d:67:54:e6:59:a1:98:9f:8c:2e: 9f:64:2c:d3:cf:3e:46:5b:2b:eb:3e:66:47:e7:ea:77:ac:05: 28:34:ad:69:14:ca:a8:63:e5:ac:3d:f2:65:8a:2c:50:d6:f6: dc:0d:f4:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WSIZRIy0N8RoP6Z7EPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5 Y2RmYjYwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzM0NDBkYzNlMGE5Zjk0YzhjY2M2ZGQ3ODE0NTk4ZmNmYjc0Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW2TsskJlU5CG4qQ3j+5bFjvo29P HbKSHNmotRvg1xKNU/SmH/IcF83jVpqd6GHxyaIOTyxVElUf1V5+hKP3TzngGYbS e0sBq3QPvoXa7aQVxtKcbQQ9DFb37hSYYU0t++/hH4S7cEDrrBCq2e2/b4Vibg4A dAv/B8IJybtRQPOn4dyZ9vmdbuWrcdEMzYcV5mjcHnXoffEMvte8JrnCRFbZ4OUO tV7r1hph3N71VtG/JrZhZppnPEcp4JulyzKdt9D2nzeehiQUhZplUvKxQKtFahpl vS3tSnKoKOi+fSL2ktt+GAwlkWSIxY09AhbYHqIC56sLiLpZUapHkyEMEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDc0QNw+Cp+UyMzG3XgUWY/Pt0zyMB8GA1UdIwQY MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct OGJiYzNhOWU0ZjQzLzEvTnpSQTNENEtuNVRJek1iZGVCUlpqOC0zVFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SUMA0G CSqGSIb3DQEBCwUAA4IBAQBHrqidizPU74RpIOIjoUpMWXTmBWTVaGgOcq4SncIU y1OW1yxsTQTTiL3RLy9tVEp3PD9zUOhLLEkJzAxDt1EbqdrNnQnRlDceCk0wn8/8 46e/LNTta+XOJ302OrtW+iYKfU5lilWRWzHylD2NxWFbxouCnWPFAUti+LWr2ucs lR+lAD85nto+Gd0X4g8nGxs0gKK65geSeHpsO3fFgvG5Xo+n8RGRq+XcwIf0L0TN kIlDgeYRSy1dudj6pC64eU9BZsCtYnE2jPflS+7crg1nVOZZoZifjC6fZCzTzz5G WyvrPmZH5+p3rAUoNK1pFMqoY+WsPfJliixQ1vbcDfQr -----END CERTIFICATE-----Generated at Mon Jan 26 09:41:08 2026 by rpki-client