This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/N1jgADyUTzZVwypKV4hmJUHKrXY.roa File: N1jgADyUTzZVwypKV4hmJUHKrXY.roa (raw, json) Hash identifier: Qy4oSTgjweNPQS1JWknF5IN4kbJvVHFhsoiURw/KHeY= Subject key identifier: 37:58:E0:00:3C:94:4F:36:55:C3:2A:4A:57:88:66:25:41:CA:AD:76 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019A97AA161D291A423C9AE4156275129CAC Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/N1jgADyUTzZVwypKV4hmJUHKrXY.roa Signing time: Tue 18 Nov 2025 15:51:37 +0000 ROA not before: Tue 18 Nov 2025 15:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35319 IP address blocks: 91.195.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:aa:16:1d:29:1a:42:3c:9a:e4:15:62:75:12:9c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Nov 18 15:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3758e0003c944f3655c32a4a5788662541caad76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:99:d7:c7:5b:b2:dd:2b:2a:a6:c8:02:e6: a5:5a:d4:67:22:e9:64:b0:fe:49:d9:0f:8d:a6:b5: f4:75:b6:d6:02:d7:7d:b0:42:a0:bd:ae:24:31:0e: a8:23:0e:33:0e:1b:92:fc:f7:68:27:ff:e7:80:e3: 6d:0f:18:b9:f7:5d:a3:6b:5a:03:29:3c:62:d2:c5: 83:52:32:73:11:11:56:9f:26:bb:14:c3:ac:c3:c8: f3:63:18:cf:aa:cb:49:c4:2d:47:32:72:8f:ab:d2: ae:c2:c2:50:00:3e:36:25:f7:ca:af:b6:89:5e:4d: a2:11:b0:32:4e:4f:b3:59:a2:73:15:c4:f2:ab:2b: 9a:13:fd:47:c5:db:26:8f:f0:dd:60:97:9e:34:fc: b8:5a:1b:a4:e2:47:64:79:1b:df:08:47:de:e6:b2: c0:06:67:2d:29:4c:e2:3c:78:cc:37:34:01:0a:bd: 02:5c:3c:60:82:ad:b5:62:2c:ac:a9:01:c3:9a:cf: f2:62:60:03:e9:79:66:97:d1:e0:28:a4:fb:b7:33: da:74:fa:b3:85:21:2c:74:19:a4:87:f5:4b:41:95: 55:77:63:c5:7d:1c:ea:98:75:ad:e1:d1:fb:99:5a: cb:83:3a:a9:21:7f:d2:41:b6:76:7d:a1:05:3e:02: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:E0:00:3C:94:4F:36:55:C3:2A:4A:57:88:66:25:41:CA:AD:76 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/N1jgADyUTzZVwypKV4hmJUHKrXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:d6:f3:57:39:88:f1:75:a6:b5:2c:73:aa:f6:7c:58:bd:b9: be:5e:81:bf:2a:ce:ab:bf:fd:89:32:f2:c8:a8:68:bf:c1:30: ca:21:69:94:92:5d:11:58:bf:62:60:43:7d:e8:e8:56:4c:4e: e6:1c:64:88:fe:ab:63:39:2b:07:cd:5b:c5:85:b5:b3:29:7b: 88:45:ae:91:98:95:ce:fb:67:1a:c8:53:3f:73:48:61:c5:c3: fc:78:4e:04:db:40:fb:8d:50:51:b8:82:43:66:89:4a:e4:4e: 15:43:b1:1d:44:e2:e4:ea:f3:4c:83:75:e9:dc:95:6a:03:00: 06:dc:73:c5:e3:b6:62:25:eb:f2:8f:2e:ec:78:44:8c:f1:c5: af:ff:85:98:65:e2:1b:4b:90:3f:45:b2:78:44:63:e3:2c:06: 89:32:29:2f:7b:a0:f6:b5:12:70:ed:e4:6e:6a:0e:57:56:f7: d8:7f:21:f0:a4:3a:92:b7:12:06:4b:f5:ca:fc:09:dd:40:98: 47:95:7b:31:b7:85:b1:87:3a:8b:ca:96:b3:c2:7e:31:d0:5a: 06:3f:33:df:ea:ca:f4:9f:66:1f:3a:4f:9a:6c:6d:8f:44:96: 2d:4c:e1:b7:20:da:99:b6:82:9f:73:9e:f8:62:b2:c4:88:da: 4b:d6:b2:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXqhYdKRpCPJrkFWJ1EpysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjUxMTE4MTU1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzU4ZTAwMDNjOTQ0ZjM2NTVjMzJhNGE1Nzg4NjYyNTQxY2FhZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9yZ18dbst0rKqbIAualWtRnIulk sP5J2Q+NprX0dbbWAtd9sEKgva4kMQ6oIw4zDhuS/PdoJ//ngONtDxi5912ja1oD KTxi0sWDUjJzERFWnya7FMOsw8jzYxjPqstJxC1HMnKPq9KuwsJQAD42JffKr7aJ Xk2iEbAyTk+zWaJzFcTyqyuaE/1Hxdsmj/DdYJeeNPy4Whuk4kdkeRvfCEfe5rLA BmctKUziPHjMNzQBCr0CXDxggq21YiysqQHDms/yYmAD6Xlml9HgKKT7tzPadPqz hSEsdBmkh/VLQZVVd2PFfRzqmHWt4dH7mVrLgzqpIX/SQbZ2faEFPgKr9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdY4AA8lE82VcMqSleIZiVByq12MB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEvTjFqZ0FEeVVUelpWd3lwS1Y0aG1KVUhLclhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8N5MA0G CSqGSIb3DQEBCwUAA4IBAQAq1vNXOYjxdaa1LHOq9nxYvbm+XoG/Ks6rv/2JMvLI qGi/wTDKIWmUkl0RWL9iYEN96OhWTE7mHGSI/qtjOSsHzVvFhbWzKXuIRa6RmJXO +2cayFM/c0hhxcP8eE4E20D7jVBRuIJDZolK5E4VQ7EdROLk6vNMg3Xp3JVqAwAG 3HPF47ZiJevyjy7seESM8cWv/4WYZeIbS5A/RbJ4RGPjLAaJMikve6D2tRJw7eRu ag5XVvfYfyHwpDqStxIGS/XK/AndQJhHlXsxt4WxhzqLypazwn4x0FoGPzPf6sr0 n2YfOk+abG2PRJYtTOG3INqZtoKfc574YrLEiNpL1rIE -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:06 2025 by rpki-client