This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nr9k1CgFTONdLf6R9QxhHnNqn0s.roa File: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (raw, json) Hash identifier: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8= Subject key identifier: 9E:BF:64:D4:28:05:4C:E3:5D:2D:FE:91:F5:0C:61:1E:73:6A:9F:4B Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C42432BE408DAF1CB0C0DBEA61131 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nr9k1CgFTONdLf6R9QxhHnNqn0s.roa Signing time: Fri 02 Jan 2026 06:19:16 +0000 ROA not before: Fri 02 Jan 2026 06:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 94.131.0.0/23 maxlen: 23 94.131.0.0/24 maxlen: 24 94.131.4.0/24 maxlen: 24 94.131.6.0/24 maxlen: 24 94.131.7.0/24 maxlen: 24 94.131.21.0/24 maxlen: 24 94.131.22.0/24 maxlen: 24 94.131.124.0/24 maxlen: 24 94.131.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:42:43:2b:e4:08:da:f1:cb:0c:0d:be:a6:11:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ebf64d428054ce35d2dfe91f50c611e736a9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:05:94:e7:df:4e:69:be:96:3f:03:12:bb: 9d:4b:b7:b8:fd:f7:69:8a:f7:a0:9b:bf:b6:20:f4: 92:b5:7c:df:eb:30:54:da:da:8e:a6:0e:29:1f:e2: 81:1d:6e:29:c7:c2:d7:60:81:05:89:4b:e7:c4:26: 68:3d:ae:20:05:0d:cd:47:a9:f8:30:84:28:ae:7b: 33:3c:0d:0a:95:d1:d1:cc:4b:a7:37:ec:d4:3c:bd: e3:ea:7b:c1:12:f0:5e:f7:b1:cf:5e:03:15:8b:b0: 5c:68:01:e6:ef:9f:6e:6a:3c:3f:8e:99:e4:14:e0: dd:c2:e9:1a:74:95:ca:76:2f:c9:54:e0:37:61:37: c8:9a:2f:17:1f:47:55:a0:5b:bc:08:88:6b:58:b5: 6d:14:57:7d:ab:78:84:e7:a6:8a:61:d7:71:98:85: 3f:5a:71:07:f5:7c:a2:6c:54:8a:b4:a7:7e:f7:8e: 72:48:af:a6:69:ad:07:05:09:93:2d:4e:c5:91:92: f5:10:2a:00:31:6d:74:b1:3d:50:d7:5f:dd:4f:29: b1:71:48:27:10:35:08:86:e5:af:fe:18:e1:fb:b7: f0:f3:1f:e3:d6:17:28:a4:3b:90:23:11:a2:ee:77: 00:6f:68:8f:36:8e:5a:e4:e5:16:41:be:fb:cc:1f: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:64:D4:28:05:4C:E3:5D:2D:FE:91:F5:0C:61:1E:73:6A:9F:4B X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nr9k1CgFTONdLf6R9QxhHnNqn0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.0.0/23 94.131.4.0/24 94.131.6.0/23 94.131.21.0-94.131.22.255 94.131.124.0/24 94.131.127.0/24 Signature Algorithm: sha256WithRSAEncryption 56:04:04:4a:5a:89:8c:18:43:f0:8d:4d:31:63:8e:33:0d:39: 02:09:ad:6b:69:76:75:af:35:2d:db:92:12:53:63:98:09:e2: 6f:40:72:c5:58:5b:5b:df:81:e1:58:b0:a9:1c:c1:af:7c:c7: 3c:6f:bc:ae:74:d8:c6:e1:22:55:4e:b8:01:e2:dc:c9:ac:d6: 9e:26:0a:fc:a7:6e:29:86:93:af:6e:44:25:34:b0:56:4c:ef: 9b:78:80:41:12:39:ba:4a:4a:d6:87:1d:c3:df:af:eb:6a:f9: dd:65:28:e9:a6:4e:c9:1b:c7:63:c5:36:0f:3f:87:33:05:02: f8:7e:be:72:43:cf:a5:c5:4c:0a:e2:f3:e4:11:4d:e5:36:50: 1b:fc:0d:84:78:0d:b5:52:a9:eb:bd:e7:b4:aa:88:7a:11:c7: 18:c9:74:57:86:86:6d:fd:ae:b7:9b:f0:66:d6:f3:3f:21:a1: 52:e4:b6:31:ed:cc:39:dc:c3:17:f0:88:f7:7e:be:06:2b:24: 2a:cf:ac:9e:ee:e0:4e:b0:6a:03:af:c7:5f:23:cb:eb:f5:c5: de:b4:9d:96:98:c3:76:c8:cf:4d:43:03:16:93:7f:b4:51:cf: 86:26:36:16:ad:ec:03:f4:36:21:a5:9a:c4:cb:3d:e0:7c:9d: f4:03:b0:ee -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9XEJDK+QI2vHLDA2+phExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWJmNjRkNDI4MDU0Y2UzNWQyZGZlOTFmNTBjNjExZTczNmE5ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxEFlOffTmm+lj8DErudS7e4/fdp ivegm7+2IPSStXzf6zBU2tqOpg4pH+KBHW4px8LXYIEFiUvnxCZoPa4gBQ3NR6n4 MIQornszPA0KldHRzEunN+zUPL3j6nvBEvBe97HPXgMVi7BcaAHm759uajw/jpnk FODdwukadJXKdi/JVOA3YTfImi8XH0dVoFu8CIhrWLVtFFd9q3iE56aKYddxmIU/ WnEH9XyibFSKtKd+945ySK+maa0HBQmTLU7FkZL1ECoAMW10sT1Q11/dTymxcUgn EDUIhuWv/hjh+7fw8x/j1hcopDuQIxGi7ncAb2iPNo5a5OUWQb77zB8NsQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJ6/ZNQoBUzjXS3+kfUMYR5zap9LMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvbnI5azFDZ0ZUT05kTGY2UjlReGhIbk5xbjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBXoMAAwQA XoMEAwQBXoMGMAwDBABegxUDBABegxYDBABeg3wDBABeg38wDQYJKoZIhvcNAQEL BQADggEBAFYEBEpaiYwYQ/CNTTFjjjMNOQIJrWtpdnWvNS3bkhJTY5gJ4m9AcsVY W1vfgeFYsKkcwa98xzxvvK502MbhIlVOuAHi3Mms1p4mCvynbimGk69uRCU0sFZM 75t4gEESObpKStaHHcPfr+tq+d1lKOmmTskbx2PFNg8/hzMFAvh+vnJDz6XFTAri 8+QRTeU2UBv8DYR4DbVSqeu957SqiHoRxxjJdFeGhm39rreb8GbW8z8hoVLktjHt zDncwxfwiPd+vgYrJCrPrJ7u4E6wagOvx18jy+v1xd60nZaYw3bIz01DAxaTf7RR z4YmNhat7AP0NiGlmsTLPeB8nfQDsO4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:40 2026 by rpki-client