This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nhhdzRTI7InJOst94nZRYeqJTKY.roa File: nhhdzRTI7InJOst94nZRYeqJTKY.roa (raw, json) Hash identifier: zQGtgXXgIoERMqidLD4MFiMUVXkbwS5NsSZmEdSXJX8= Subject key identifier: 9E:18:5D:CD:14:C8:EC:89:C9:3A:CB:7D:E2:76:51:61:EA:89:4C:A6 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79038AAA5275B884E8EC358F6E815 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nhhdzRTI7InJOst94nZRYeqJTKY.roa Signing time: Thu 01 Jan 2026 04:18:45 +0000 ROA not before: Thu 01 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205990 IP address blocks: 81.15.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:90:38:aa:a5:27:5b:88:4e:8e:c3:58:f6:e8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e185dcd14c8ec89c93acb7de2765161ea894ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:83:2c:d4:55:7c:c1:e6:79:b8:13:c1:b2: a5:bd:56:e5:b9:37:f3:cf:38:e7:e7:d6:e3:9c:f4: 51:33:c0:e4:df:13:c0:50:bd:d5:65:b0:0a:77:cc: e2:a5:58:a1:40:07:d9:1d:f8:cf:67:f0:67:b5:7b: 65:19:4d:ed:90:9a:61:e7:ae:ae:dd:10:34:43:53: fa:34:57:bd:b9:c9:19:34:00:a4:3f:4a:3a:4d:e6: de:9b:9f:7a:90:29:51:44:04:99:d9:33:90:63:98: e7:ec:ca:9f:59:b2:8c:69:58:65:42:76:6a:65:6e: 9d:8e:f8:72:2b:15:2d:90:df:89:a0:06:ab:46:07: be:8a:79:32:32:bf:27:dd:72:dc:88:58:bc:58:46: f2:57:aa:f7:cd:26:07:5f:04:27:29:a6:49:dc:bd: 9f:49:fd:11:07:22:29:1e:3e:3c:f6:f9:81:a6:03: e8:f6:dd:48:96:4c:03:15:ad:e9:6b:69:ff:a9:99: 98:61:1b:9c:b3:6f:13:c9:70:bd:92:98:f9:b7:94: a2:3b:2c:f6:b6:2f:7e:ab:69:ef:c9:a0:a5:f4:de: a3:8c:28:90:56:d0:12:0b:47:a6:9a:71:c2:3d:b0: d2:b9:60:5a:5b:1a:14:14:ad:02:fc:f2:d3:52:7c: 27:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:5D:CD:14:C8:EC:89:C9:3A:CB:7D:E2:76:51:61:EA:89:4C:A6 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nhhdzRTI7InJOst94nZRYeqJTKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.217.0/24 Signature Algorithm: sha256WithRSAEncryption 26:b7:8b:87:3b:81:19:e3:35:3a:3d:47:a7:ec:55:2f:f8:e5: 4a:a7:0f:6e:2f:47:f4:88:dd:c7:a2:45:ae:a1:2d:6c:87:e5: 08:d5:d0:a1:03:bb:4d:7b:e1:e6:50:6f:1e:1f:8f:44:97:f3: c4:87:f9:61:2c:68:19:b5:a2:d1:ff:16:45:0a:d7:c6:a4:a9: bd:f9:55:91:22:1f:3c:fb:6f:8b:ce:b6:ed:42:15:19:2d:70: ba:2f:0e:82:69:99:27:c6:63:c4:43:e3:15:b3:4c:a5:5d:5e: b3:9e:f1:b6:5d:6b:6f:47:91:a4:50:4b:71:5f:41:03:79:03: 1c:dd:07:9e:35:79:ec:72:16:0d:02:6b:80:26:fb:f5:70:d5: fd:a2:fb:bf:35:7f:2c:90:2d:cc:83:5d:a4:a3:14:b8:39:0b: 24:d1:5c:51:52:71:ab:46:47:94:c8:23:cb:2f:c7:48:7a:db: c2:cc:c5:13:6a:d5:65:31:93:f4:2f:a5:9a:0f:08:03:16:40: b7:69:79:92:8c:99:97:9b:71:60:60:88:5f:27:ea:3f:05:b4: b4:ef:45:69:3b:61:5d:c2:1e:67:10:02:e1:32:f6:e4:ed:93: 6b:77:57:71:f6:36:a4:6e:7e:dc:9a:3c:da:e0:48:4e:eb:b2: 00:f4:27:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x5A4qqUnW4hOjsNY9ugVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTE4NWRjZDE0YzhlYzg5YzkzYWNiN2RlMjc2NTE2MWVhODk0Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQqDLNRVfMHmebgTwbKlvVbluTfz zzjn59bjnPRRM8Dk3xPAUL3VZbAKd8zipVihQAfZHfjPZ/BntXtlGU3tkJph566u 3RA0Q1P6NFe9uckZNACkP0o6Tebem596kClRRASZ2TOQY5jn7MqfWbKMaVhlQnZq ZW6djvhyKxUtkN+JoAarRge+inkyMr8n3XLciFi8WEbyV6r3zSYHXwQnKaZJ3L2f Sf0RByIpHj489vmBpgPo9t1IlkwDFa3pa2n/qZmYYRucs28TyXC9kpj5t5SiOyz2 ti9+q2nvyaCl9N6jjCiQVtASC0emmnHCPbDSuWBaWxoUFK0C/PLTUnwn3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4YXc0UyOyJyTrLfeJ2UWHqiUymMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvbmhoZHpSVEk3SW5KT3N0OTRuWlJZZXFKVEtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ/ZMA0G CSqGSIb3DQEBCwUAA4IBAQAmt4uHO4EZ4zU6PUen7FUv+OVKpw9uL0f0iN3HokWu oS1sh+UI1dChA7tNe+HmUG8eH49El/PEh/lhLGgZtaLR/xZFCtfGpKm9+VWRIh88 +2+LzrbtQhUZLXC6Lw6CaZknxmPEQ+MVs0ylXV6znvG2XWtvR5GkUEtxX0EDeQMc 3QeeNXnschYNAmuAJvv1cNX9ovu/NX8skC3Mg12koxS4OQsk0VxRUnGrRkeUyCPL L8dIetvCzMUTatVlMZP0L6WaDwgDFkC3aXmSjJmXm3FgYIhfJ+o/BbS070VpO2Fd wh5nEALhMvbk7ZNrd1dx9jakbn7cmjza4EhO67IA9Cej -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:30 2026 by rpki-client