This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa File: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (raw, json) Hash identifier: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY= Subject key identifier: 35:B2:E2:FE:6C:42:DC:4E:FA:62:FD:71:58:B0:37:2E:F5:16:30:F9 Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019B7D5CF58D6F45E876CEF3647672294251 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198559 IP address blocks: 91.241.30.0/24 maxlen: 24 2001:67c:2a58::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:8d:6f:45:e8:76:ce:f3:64:76:72:29:42:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b2e2fe6c42dc4efa62fd7158b0372ef51630f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:f1:bb:27:c7:5f:a9:0f:1a:e9:48:e1:bb: db:1c:d2:a9:d8:ea:ba:22:80:24:ae:7c:a1:55:98: 0a:19:c5:8e:27:dd:0c:4d:49:4b:cf:2f:ac:d7:b9: 19:0d:ba:61:f8:02:df:1b:ed:31:19:5c:2e:37:64: 5b:bd:5d:2e:0b:07:50:23:da:d8:51:f6:78:76:0c: f7:d6:d2:af:9d:aa:8e:3d:74:18:42:64:79:d0:f2: a1:91:31:24:77:33:d1:0d:8e:9d:80:49:77:64:b4: b4:8f:70:a2:55:36:37:4b:ac:ff:ad:6c:f5:90:02: 41:ba:7d:b9:22:05:cc:5c:e3:09:fa:ee:cd:e8:e2: 90:13:d9:9f:80:e0:82:72:ba:37:6d:3e:5f:26:dd: aa:a6:c9:a9:47:65:32:b8:b4:7d:59:fb:d1:cd:c6: 0b:19:4e:cd:2c:28:8f:60:2f:37:da:db:a2:8f:dd: 7b:89:2b:f8:df:c6:43:8b:20:72:87:c5:51:ba:3c: 73:c9:7c:71:51:c1:7a:f0:43:f9:38:e0:b3:d8:41: f6:5b:da:77:a5:8f:44:22:e8:57:87:af:6b:cf:7a: 9c:79:4f:68:c1:33:73:18:27:08:27:09:70:5c:57: ee:e8:9f:54:19:74:dd:64:26:00:c4:5f:14:a0:31: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:E2:FE:6C:42:DC:4E:FA:62:FD:71:58:B0:37:2E:F5:16:30:F9 X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.30.0/24 IPv6: 2001:67c:2a58::/48 Signature Algorithm: sha256WithRSAEncryption 50:70:05:d6:93:e6:8b:12:1a:87:5f:03:59:3f:1b:b6:eb:c8: 70:85:ef:bc:73:83:ff:1b:b6:b7:89:61:a2:89:ce:3d:b5:61: 52:f1:b1:90:8d:63:05:33:e1:4a:d7:7d:a5:06:f8:57:6e:75: d8:0e:08:ab:03:25:93:38:da:cc:24:eb:12:b4:7b:e3:09:a9: ec:ff:7d:90:81:33:66:ee:ea:5c:b7:d8:88:19:ba:86:cf:03: 98:10:5b:32:ac:fb:dd:af:2b:4d:37:22:d3:1c:38:47:38:ca: 03:6c:74:9e:cc:f4:4a:df:b8:16:4a:df:1c:99:94:fe:20:d8: 63:34:14:5b:cf:91:43:f1:9b:20:7a:7d:bd:6b:d8:6f:00:c6: 64:be:93:10:7a:d0:db:1a:32:74:84:0c:99:3b:41:f6:e8:5f: c9:02:98:cb:4f:95:e8:98:b5:84:43:63:ab:af:22:10:97:af: dd:91:5c:2d:c4:18:b7:fd:d9:ef:18:8f:97:00:13:90:e7:a1: 8d:42:40:d4:dc:3d:ec:15:5f:74:16:f5:72:9a:9d:a0:f5:3b: c3:e9:d4:fd:a0:e7:36:42:fd:35:c1:c5:c6:ea:44:fe:06:cf: ae:8f:f4:ed:75:98:65:6c:18:3c:bc:97:2f:e0:e7:e9:c7:ee: 46:6b:c3:85 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XPWNb0Xods7zZHZyKUJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWIyZTJmZTZjNDJkYzRlZmE2MmZkNzE1OGIwMzcyZWY1MTYzMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5bxuyfHX6kPGulI4bvbHNKp2Oq6 IoAkrnyhVZgKGcWOJ90MTUlLzy+s17kZDbph+ALfG+0xGVwuN2RbvV0uCwdQI9rY UfZ4dgz31tKvnaqOPXQYQmR50PKhkTEkdzPRDY6dgEl3ZLS0j3CiVTY3S6z/rWz1 kAJBun25IgXMXOMJ+u7N6OKQE9mfgOCCcro3bT5fJt2qpsmpR2UyuLR9WfvRzcYL GU7NLCiPYC832tuij917iSv438ZDiyByh8VRujxzyXxxUcF68EP5OOCz2EH2W9p3 pY9EIuhXh69rz3qceU9owTNzGCcIJwlwXFfu6J9UGXTdZCYAxF8UoDG6IwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDWy4v5sQtxO+mL9cViwNy71FjD5MB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEvTmJMaV9teEMzRTc2WXYxeFdMQTNMdlVXTVBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/EeMA8E AgACMAkDBwAgAQZ8KlgwDQYJKoZIhvcNAQELBQADggEBAFBwBdaT5osSGodfA1k/ G7bryHCF77xzg/8btreJYaKJzj21YVLxsZCNYwUz4UrXfaUG+FduddgOCKsDJZM4 2swk6xK0e+MJqez/fZCBM2bu6ly32IgZuobPA5gQWzKs+92vK003ItMcOEc4ygNs dJ7M9ErfuBZK3xyZlP4g2GM0FFvPkUPxmyB6fb1r2G8AxmS+kxB60NsaMnSEDJk7 QfboX8kCmMtPleiYtYRDY6uvIhCXr92RXC3EGLf92e8Yj5cAE5DnoY1CQNTcPewV X3QW9XKanaD1O8Pp1P2g5zZC/TXBxcbqRP4Gz66P9O11mGVsGDy8ly/g5+nH7kZr w4U= -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:14 2026 by rpki-client