This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa File: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (raw, json) Hash identifier: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU= Subject key identifier: 35:7F:8E:31:73:83:CC:B4:32:39:F6:F5:43:DC:0D:78:42:F6:3C:70 Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019B7758FBE852DBB8FEB04927862680736D Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 89.39.124.0/24 maxlen: 24 185.88.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:e8:52:db:b8:fe:b0:49:27:86:26:80:73:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=357f8e317383ccb43239f6f543dc0d7842f63c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:27:c3:f7:c1:f5:33:c4:44:e1:9e:2d:db: a5:7e:c8:75:6c:73:c9:b1:d8:63:8f:66:f3:83:93: dc:37:a8:a3:94:aa:76:cd:3f:c5:40:46:2e:4e:54: b2:6b:57:76:7e:6a:3e:5b:3d:ac:fb:ae:6e:be:45: a6:e3:10:92:d3:7d:1a:fa:79:36:4b:27:e9:06:be: 86:e8:f5:6c:61:0e:00:bd:41:8c:f4:a3:a1:7b:2b: 03:cd:b4:ad:94:db:c6:10:4c:48:35:72:e2:d9:4b: 1e:14:9e:b8:c4:49:06:94:e7:19:91:a3:7c:4b:e1: ad:94:2f:be:9a:8e:3f:5b:46:f6:a8:e8:91:a5:ed: a0:20:a2:98:07:34:84:d2:33:56:11:4d:ce:69:5b: 32:9b:e4:1b:a4:94:f3:21:0d:ea:cf:3a:15:2e:00: d2:71:dd:94:93:34:05:49:67:e1:0a:8d:21:b1:1a: ce:74:ab:07:17:cb:d3:53:42:f5:e9:92:ca:09:66: eb:20:b6:9f:b9:ed:1d:f0:fa:40:e9:0f:13:fe:53: 48:cb:db:49:a7:ac:40:a8:be:63:f9:02:36:cf:d6: ef:32:12:b9:14:2f:85:19:fc:ad:70:e2:3e:45:10: a7:e2:cc:55:c0:45:84:c2:92:08:c8:c9:4e:50:46: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7F:8E:31:73:83:CC:B4:32:39:F6:F5:43:DC:0D:78:42:F6:3C:70 X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.124.0/24 185.88.68.0/22 Signature Algorithm: sha256WithRSAEncryption 57:fc:05:cd:c6:98:54:bf:db:3a:fe:bc:46:ef:b7:cb:56:69: 91:45:00:f4:cb:50:2f:4a:61:0e:e8:53:4f:f2:21:ad:22:86: 94:4e:b4:77:45:d9:36:bd:75:93:44:a1:07:9a:c6:05:42:3f: a9:cd:fa:80:a1:1d:d1:91:fb:68:e6:3d:06:ba:c0:f8:40:24: 42:68:80:c5:b1:ae:01:d8:99:9f:9e:ad:ce:34:10:e1:2c:b6: 08:e5:c8:73:82:b9:54:0d:21:b3:bd:7f:d2:fe:e5:2a:fd:9b: 18:c4:16:db:68:52:7e:13:2c:ac:94:33:0c:ea:af:8d:6c:61: 2b:68:fe:63:1f:d4:c5:7f:03:27:5c:bc:31:6c:39:af:d1:8f: cc:1c:77:23:42:91:20:29:72:62:f0:bc:ad:fe:27:8a:b0:0e: bb:c4:f8:10:13:38:d7:e3:b5:7d:1f:c5:f5:8c:dc:35:78:19: 0b:31:49:3d:ed:8f:6f:cd:d7:7e:43:0d:f2:22:45:a6:64:e6: 1f:47:91:ab:ee:01:1d:fd:5a:7d:a4:33:ea:6c:d0:49:0e:9e: 82:f9:4b:71:df:7a:82:69:6e:2d:05:f9:35:2c:22:92:47:12: d4:11:44:bf:6c:dc:07:38:49:0f:51:af:08:bc:10:f4:4d:16: 56:5d:6f:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WPvoUtu4/rBJJ4YmgHNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTdmOGUzMTczODNjY2I0MzIzOWY2ZjU0M2RjMGQ3ODQyZjYzYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnAnw/fB9TPEROGeLdulfsh1bHPJ sdhjj2bzg5PcN6ijlKp2zT/FQEYuTlSya1d2fmo+Wz2s+65uvkWm4xCS030a+nk2 SyfpBr6G6PVsYQ4AvUGM9KOheysDzbStlNvGEExINXLi2UseFJ64xEkGlOcZkaN8 S+GtlC++mo4/W0b2qOiRpe2gIKKYBzSE0jNWEU3OaVsym+QbpJTzIQ3qzzoVLgDS cd2UkzQFSWfhCo0hsRrOdKsHF8vTU0L16ZLKCWbrILafue0d8PpA6Q8T/lNIy9tJ p6xAqL5j+QI2z9bvMhK5FC+FGfytcOI+RRCn4sxVwEWEwpIIyMlOUEYCRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDV/jjFzg8y0Mjn29UPcDXhC9jxwMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvTlgtT01YT0R6TFF5T2ZiMVE5d05lRUwyUEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSd8AwQC uVhEMA0GCSqGSIb3DQEBCwUAA4IBAQBX/AXNxphUv9s6/rxG77fLVmmRRQD0y1Av SmEO6FNP8iGtIoaUTrR3Rdk2vXWTRKEHmsYFQj+pzfqAoR3Rkfto5j0GusD4QCRC aIDFsa4B2Jmfnq3ONBDhLLYI5chzgrlUDSGzvX/S/uUq/ZsYxBbbaFJ+EyyslDMM 6q+NbGEraP5jH9TFfwMnXLwxbDmv0Y/MHHcjQpEgKXJi8Lyt/ieKsA67xPgQEzjX 47V9H8X1jNw1eBkLMUk97Y9vzdd+Qw3yIkWmZOYfR5Gr7gEd/Vp9pDPqbNBJDp6C +Utx33qCaW4tBfk1LCKSRxLUEUS/bNwHOEkPUa8IvBD0TRZWXW+/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:50 2026 by rpki-client