This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa File: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (raw, json) Hash identifier: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU= Subject key identifier: 36:B8:7E:61:CE:7F:98:1C:8A:47:CF:D3:21:09:5C:75:2C:91:08:9B Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Certificate serial: 019B7E3812DD9B948C0ED1B8BADCB0331089 Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12741 IP address blocks: 195.85.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:12:dd:9b:94:8c:0e:d1:b8:ba:dc:b0:33:10:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b87e61ce7f981c8a47cfd321095c752c91089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:3d:1e:80:14:2e:36:c8:0e:da:7b:fd:25: 6c:e9:98:85:ab:d6:82:70:3e:6f:7e:80:30:ab:7d: 0c:7d:2d:39:82:52:52:27:5c:fc:8d:a8:3c:9a:af: 60:e1:43:0d:53:a7:43:03:ab:66:11:53:88:70:aa: 1e:d2:2d:fd:3c:3b:3a:e0:ca:b6:8e:fb:63:5a:c0: 3f:82:78:e9:61:72:2c:9e:4a:3f:a8:a6:13:dd:fc: 8a:c7:aa:dc:0d:34:db:8b:8a:42:8d:22:1b:76:72: 45:83:ef:1d:42:14:b9:2d:5f:34:cf:31:5a:b5:02: 66:c2:eb:7d:c2:cd:2b:b8:f7:69:c7:d6:5a:fa:6a: 94:40:ef:e9:55:5c:fc:80:3a:29:cc:15:bc:05:1f: 02:6d:11:c3:8b:cf:88:7d:0a:bf:86:de:34:6a:4f: a3:b7:9b:83:0d:be:d1:6b:5e:c1:a6:6a:74:a2:58: 64:07:44:42:1c:75:09:a2:21:fa:8f:fd:2b:f9:bf: 3a:a3:07:28:be:f4:1d:d3:7b:8c:38:57:ac:d1:f7: 60:93:fd:9c:6f:3a:cc:3c:f6:da:5e:ec:8c:6f:03: 8a:4c:3d:a9:ae:77:02:a8:7a:b7:a7:97:2e:2e:9c: 60:29:fb:3a:0d:21:08:cb:6a:69:2a:e3:4a:ff:5a: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:7E:61:CE:7F:98:1C:8A:47:CF:D3:21:09:5C:75:2C:91:08:9B X509v3 Authority Key Identifier: keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.241.0/24 Signature Algorithm: sha256WithRSAEncryption 90:24:cc:24:ec:32:e6:2e:2f:b5:fc:d2:cf:99:41:3e:e1:95: 0c:c3:d3:e6:78:32:c0:21:fa:11:7f:b3:ae:aa:f9:86:b9:ed: 32:e3:b8:c1:81:6a:81:76:1a:f4:af:d6:6c:81:e1:bb:7b:08: 71:47:a3:df:f5:13:9c:be:2a:f1:d2:af:a0:38:4a:76:da:70: cf:8d:64:d6:82:79:69:70:bc:de:17:53:12:80:21:95:52:c5: 46:15:6e:ef:aa:5b:cc:6d:0d:8e:7f:ab:6a:75:df:d2:3e:99: f6:8c:21:2b:d6:2f:d8:6e:e4:39:32:be:04:4e:10:18:63:54: 4e:13:a1:36:dd:b1:d9:2c:ec:d6:7f:79:e4:dc:16:22:3f:80: ba:fe:1c:b4:5f:68:7b:cf:c0:7f:f9:3a:b0:ab:cf:4e:8b:c2: a8:0c:69:79:41:a4:ec:ac:b7:ba:e2:c8:3e:66:17:f3:d7:38: 1d:1e:b2:10:82:e4:ac:90:dc:75:85:6a:44:bd:1b:56:b3:a6: f7:dd:66:3e:55:22:ac:03:e3:56:88:5f:ec:b8:0b:09:52:4b: d9:4f:ca:99:df:80:cc:51:80:ce:67:7b:eb:56:d0:71:43:2b: 20:3e:55:f7:13:29:ef:4c:7f:08:8d:96:0c:cf:29:90:1e:47: 85:e4:0a:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBLdm5SMDtG4utywMxCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk ZjMxZTcwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmI4N2U2MWNlN2Y5ODFjOGE0N2NmZDMyMTA5NWM3NTJjOTEwODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02o9HoAULjbIDtp7/SVs6ZiFq9aC cD5vfoAwq30MfS05glJSJ1z8jag8mq9g4UMNU6dDA6tmEVOIcKoe0i39PDs64Mq2 jvtjWsA/gnjpYXIsnko/qKYT3fyKx6rcDTTbi4pCjSIbdnJFg+8dQhS5LV80zzFa tQJmwut9ws0ruPdpx9Za+mqUQO/pVVz8gDopzBW8BR8CbRHDi8+IfQq/ht40ak+j t5uDDb7Ra17Bpmp0olhkB0RCHHUJoiH6j/0r+b86owcovvQd03uMOFes0fdgk/2c bzrMPPbaXuyMbwOKTD2prncCqHq3p5cuLpxgKfs6DSEIy2ppKuNK/1puhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDa4fmHOf5gcikfP0yEJXHUskQibMB8GA1UdIwQY MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt MmU5NjdhNGNkZGUxLzEvTnJoLVljNV9tQnlLUjhfVElRbGNkU3lSQ0pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XxMA0G CSqGSIb3DQEBCwUAA4IBAQCQJMwk7DLmLi+1/NLPmUE+4ZUMw9PmeDLAIfoRf7Ou qvmGue0y47jBgWqBdhr0r9ZsgeG7ewhxR6Pf9ROcvirx0q+gOEp22nDPjWTWgnlp cLzeF1MSgCGVUsVGFW7vqlvMbQ2Of6tqdd/SPpn2jCEr1i/YbuQ5Mr4EThAYY1RO E6E23bHZLOzWf3nk3BYiP4C6/hy0X2h7z8B/+Tqwq89Oi8KoDGl5QaTsrLe64sg+ Zhfz1zgdHrIQguSskNx1hWpEvRtWs6b33WY+VSKsA+NWiF/suAsJUkvZT8qZ34DM UYDOZ3vrVtBxQysgPlX3EynvTH8IjZYMzymQHkeF5Aoq -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:25 2026 by rpki-client