This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Nsb-TSjxtTQA1uBCsttquJoSfRU.roa File: Nsb-TSjxtTQA1uBCsttquJoSfRU.roa (raw, json) Hash identifier: R6wmkfwFLXIRhJaMYSpGuURGDfpeYuEc6NF/0JtkABU= Subject key identifier: 36:C6:FE:4D:28:F1:B5:34:00:D6:E0:42:B2:DB:6A:B8:9A:12:7D:15 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A7C51F76E6B81A2DD60CCC4FB2E629A4C Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Nsb-TSjxtTQA1uBCsttquJoSfRU.roa Signing time: Thu 13 Nov 2025 08:25:37 +0000 ROA not before: Thu 13 Nov 2025 08:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205840 IP address blocks: 87.229.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:51:f7:6e:6b:81:a2:dd:60:cc:c4:fb:2e:62:9a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 13 08:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36c6fe4d28f1b53400d6e042b2db6ab89a127d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:70:29:43:5c:8a:a3:a8:05:d1:e4:98:57: cc:b3:8c:90:10:1a:6f:2b:14:65:c6:84:12:df:19: fe:37:cb:d0:84:38:3e:7a:d4:2c:90:77:3a:a4:e5: f5:b5:cc:c6:94:0f:b2:56:5a:3b:49:95:07:f9:dd: 72:52:80:8d:13:d2:09:25:28:bd:fe:89:82:e5:cf: 48:56:8d:0d:e1:97:95:d7:cd:11:a6:e8:b5:6d:c2: 9a:58:fb:85:51:76:90:d5:9f:3c:7b:c3:f1:d1:0c: 44:49:84:3a:95:03:2b:68:20:c5:01:74:89:00:94: 08:6e:0b:4c:b3:3a:f2:e1:2e:b0:83:05:10:58:9b: 57:9c:63:c3:3b:89:d2:36:43:a3:f0:23:7a:15:d3: f6:27:c7:2e:46:03:be:55:58:91:df:09:3a:4a:eb: 87:3e:b5:fd:19:97:71:bf:e5:78:64:d2:e8:1a:78: 55:32:b5:54:a7:ea:ec:3c:b2:60:85:1a:2c:14:1c: 7d:c4:c0:8e:ef:8f:68:cd:b4:bd:3c:57:52:c2:7e: c2:fa:86:12:09:3c:b1:35:ae:ec:5c:b1:de:d4:ae: ae:be:f5:f9:e7:d5:c1:0a:24:08:b5:a4:cb:1d:f7: 9a:26:37:1d:d5:0b:a6:cf:32:e3:4b:71:46:39:b7: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:FE:4D:28:F1:B5:34:00:D6:E0:42:B2:DB:6A:B8:9A:12:7D:15 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Nsb-TSjxtTQA1uBCsttquJoSfRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.80.0/24 Signature Algorithm: sha256WithRSAEncryption 00:6c:a8:5b:e5:20:35:02:56:64:45:48:bd:28:6d:3c:8e:f2: c5:04:53:21:e9:23:e3:f3:2f:59:e7:da:2e:4c:d2:f4:47:c1: a5:56:cc:01:12:dd:80:dc:13:4e:99:5d:53:be:73:77:5e:61: 84:99:2e:10:be:df:ea:93:73:d8:67:95:69:14:2c:39:df:4f: 0e:d1:7c:50:41:41:5f:94:f6:6c:9a:00:7a:c8:03:34:33:b9: 39:bd:d3:d5:b2:2e:15:0b:2c:ea:1b:83:39:1c:f9:ed:cf:b6: 83:94:35:32:52:b6:54:12:fe:5d:57:af:d0:61:35:32:88:8f: 0e:b9:00:e5:9f:e8:19:4d:e3:56:94:54:57:a1:36:50:0f:f7: a4:ee:1f:29:1a:60:a5:55:b3:b4:5b:ea:40:71:ac:6f:f3:74: 17:4d:75:bf:23:43:d7:9c:66:5c:b8:66:68:b8:38:a6:b1:3c: f6:9c:c7:06:1f:20:f3:fe:08:12:a8:c4:c2:9c:c9:02:53:7e: 23:da:e2:8c:64:15:0b:43:c2:15:d9:53:0c:d2:8e:7a:d4:eb: e5:03:ee:cf:a0:87:ad:40:d5:1b:7d:68:b5:4d:da:c0:72:6a: 60:3f:dd:8d:27:75:ca:09:33:db:70:3b:fb:83:53:bf:ed:bd: 00:09:ad:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp8Ufdua4Gi3WDMxPsuYppMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTEzMDgyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmM2ZmU0ZDI4ZjFiNTM0MDBkNmUwNDJiMmRiNmFiODlhMTI3ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwhwKUNciqOoBdHkmFfMs4yQEBpv KxRlxoQS3xn+N8vQhDg+etQskHc6pOX1tczGlA+yVlo7SZUH+d1yUoCNE9IJJSi9 /omC5c9IVo0N4ZeV180Rpui1bcKaWPuFUXaQ1Z88e8Px0QxESYQ6lQMraCDFAXSJ AJQIbgtMszry4S6wgwUQWJtXnGPDO4nSNkOj8CN6FdP2J8cuRgO+VViR3wk6SuuH PrX9GZdxv+V4ZNLoGnhVMrVUp+rsPLJghRosFBx9xMCO749ozbS9PFdSwn7C+oYS CTyxNa7sXLHe1K6uvvX559XBCiQItaTLHfeaJjcd1QumzzLjS3FGObfv0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbG/k0o8bU0ANbgQrLbariaEn0VMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTnNiLVRTanh0VFFBMXVCQ3N0dHF1Sm9TZlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VQMA0G CSqGSIb3DQEBCwUAA4IBAQAAbKhb5SA1AlZkRUi9KG08jvLFBFMh6SPj8y9Z59ou TNL0R8GlVswBEt2A3BNOmV1TvnN3XmGEmS4Qvt/qk3PYZ5VpFCw5308O0XxQQUFf lPZsmgB6yAM0M7k5vdPVsi4VCyzqG4M5HPntz7aDlDUyUrZUEv5dV6/QYTUyiI8O uQDln+gZTeNWlFRXoTZQD/ek7h8pGmClVbO0W+pAcaxv83QXTXW/I0PXnGZcuGZo uDimsTz2nMcGHyDz/ggSqMTCnMkCU34j2uKMZBULQ8IV2VMM0o561OvlA+7PoIet QNUbfWi1TdrAcmpgP92NJ3XKCTPbcDv7g1O/7b0ACa0A -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:35 2025 by rpki-client