This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NT9woNeJwBeU42rNyb848SmBYlo.roa File: NT9woNeJwBeU42rNyb848SmBYlo.roa (raw, json) Hash identifier: DTJNFykP/BFz6g6XPdl3htlBBfn53C8lDXv1eaLG5ok= Subject key identifier: 35:3F:70:A0:D7:89:C0:17:94:E3:6A:CD:C9:BF:38:F1:29:81:62:5A Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DEC473C5B21A4ECE3EF930EC344D Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NT9woNeJwBeU42rNyb848SmBYlo.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29372 IP address blocks: 91.68.247.0/24 maxlen: 24 91.68.248.0/24 maxlen: 24 91.68.249.0/24 maxlen: 24 91.68.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:de:c4:73:c5:b2:1a:4e:ce:3e:f9:30:ec:34:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353f70a0d789c01794e36acdc9bf38f12981625a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:7f:71:2c:d9:7c:47:04:b2:5b:57:ca:09: ad:f0:ca:be:88:f6:32:98:29:76:2b:ed:31:72:69: 22:2c:33:e8:e1:50:61:45:b6:eb:bb:59:dc:57:14: 13:7c:2c:6f:9b:1a:97:16:06:8e:91:0d:6f:f6:0e: a0:88:1b:bd:df:c2:73:32:1b:f7:e4:d8:6a:31:e4: ee:7a:a8:1b:4d:43:18:ce:04:c1:48:1c:9d:30:e4: 30:61:ec:e5:a2:c4:8e:3d:46:c0:b1:8e:11:42:3e: a4:05:98:f2:0d:83:88:95:9b:50:fd:f8:f8:ad:3a: c6:31:d9:d7:78:63:e0:61:af:aa:2e:41:6b:d5:07: 53:1e:95:93:e3:5b:ce:ed:be:06:fa:69:43:e2:dd: 52:42:17:3d:2f:9f:ff:a1:5f:05:b8:d4:1a:25:17: 76:ab:6a:c3:d5:3c:da:31:d8:bb:0e:12:11:d9:3b: 0f:e4:7a:d1:85:c9:11:45:0c:b7:03:b9:98:93:38: 58:ba:10:3e:f9:0b:15:b6:5c:bb:b8:04:cc:85:31: 2a:0a:82:89:1d:92:19:40:97:5a:52:2e:8d:d9:f7: f4:8c:ab:1b:57:1b:16:64:2e:45:e3:d6:19:43:48: 05:7f:c8:f3:65:f8:9d:dc:46:50:4f:4e:e9:45:a4: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:70:A0:D7:89:C0:17:94:E3:6A:CD:C9:BF:38:F1:29:81:62:5A X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/NT9woNeJwBeU42rNyb848SmBYlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.68.247.0-91.68.250.255 Signature Algorithm: sha256WithRSAEncryption b6:62:2b:05:ba:6f:7d:90:31:da:b6:4e:ce:b7:84:d5:7f:a1: 6a:d0:1f:bb:4d:1a:ba:8d:36:4b:4c:3a:9f:7d:cb:c0:e2:1e: 45:51:8d:8e:1b:e1:23:41:3a:72:37:dc:2b:07:ed:b2:8d:3d: 45:15:b7:98:72:60:44:03:be:94:e0:5d:a4:d3:d9:ab:ae:a2: 65:c4:45:b3:9a:60:b6:2b:7d:8a:7f:8f:63:3e:a9:de:c8:19: ea:d2:50:a0:fb:02:27:fe:35:47:74:8e:d0:be:7c:e7:e9:e2: 48:3b:e4:16:42:d8:f9:fa:d8:06:9d:ab:9a:0b:9b:2b:e1:43: 2c:be:04:3d:60:29:d5:df:63:35:ac:c7:dc:f5:9a:c1:10:f3: 2e:db:8a:9b:f1:1d:f7:5f:79:7f:fb:2a:f5:c3:42:07:63:15: 75:a1:af:e9:e5:b3:f2:0d:27:ab:a6:2b:9d:7b:21:dc:bb:69: 19:ec:41:52:6e:03:b5:6f:e9:91:8c:fc:61:3a:62:77:da:f8: 54:18:f6:7c:92:34:13:a9:f6:a0:59:08:78:f0:59:6b:8e:eb: fd:c8:4a:11:ba:80:91:14:14:8f:04:84:df:6c:21:41:15:8a: 00:94:d9:98:5d:d2:14:9e:05:13:b3:b8:53:87:c3:b9:a0:66: 56:62:01:06 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yN7Ec8WyGk7OPvkw7DRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTNmNzBhMGQ3ODljMDE3OTRlMzZhY2RjOWJmMzhmMTI5ODE2MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qt/cSzZfEcEsltXygmt8Mq+iPYy mCl2K+0xcmkiLDPo4VBhRbbru1ncVxQTfCxvmxqXFgaOkQ1v9g6giBu938JzMhv3 5NhqMeTueqgbTUMYzgTBSBydMOQwYezlosSOPUbAsY4RQj6kBZjyDYOIlZtQ/fj4 rTrGMdnXeGPgYa+qLkFr1QdTHpWT41vO7b4G+mlD4t1SQhc9L5//oV8FuNQaJRd2 q2rD1TzaMdi7DhIR2TsP5HrRhckRRQy3A7mYkzhYuhA++QsVtly7uATMhTEqCoKJ HZIZQJdaUi6N2ff0jKsbVxsWZC5F49YZQ0gFf8jzZfid3EZQT07pRaTL3wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDU/cKDXicAXlONqzcm/OPEpgWJaMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvTlQ5d29OZUp3QmVVNDJyTnliODQ4U21CWWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbRPcD BABbRPowDQYJKoZIhvcNAQELBQADggEBALZiKwW6b32QMdq2Ts63hNV/oWrQH7tN GrqNNktMOp99y8DiHkVRjY4b4SNBOnI33CsH7bKNPUUVt5hyYEQDvpTgXaTT2auu omXERbOaYLYrfYp/j2M+qd7IGerSUKD7Aif+NUd0jtC+fOfp4kg75BZC2Pn62Aad q5oLmyvhQyy+BD1gKdXfYzWsx9z1msEQ8y7bipvxHfdfeX/7KvXDQgdjFXWhr+nl s/INJ6umK517Idy7aRnsQVJuA7Vv6ZGM/GE6Ynfa+FQY9nySNBOp9qBZCHjwWWuO 6/3IShG6gJEUFI8EhN9sIUEVigCU2Zhd0hSeBROzuFOHw7mgZlZiAQY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:43 2026 by rpki-client