This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa File: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (raw, json) Hash identifier: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI= Subject key identifier: 34:D4:63:0F:B6:21:3D:EE:BE:12:33:DE:14:16:B8:95:5C:CF:2B:0F Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019B79104F09F5A146D746A4F35F06176587 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20521 IP address blocks: 213.169.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:09:f5:a1:46:d7:46:a4:f3:5f:06:17:65:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34d4630fb6213deebe1233de1416b8955ccf2b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:10:ee:9a:f5:76:fc:62:ea:b5:be:a8:e1: 36:2c:8b:cb:3b:87:e2:b1:44:f5:a6:7c:e0:81:6e: f0:a2:0d:70:8f:ec:0b:30:bd:1a:56:9e:07:e6:ee: 4f:b5:da:58:e2:34:ff:fb:60:55:dc:11:e9:79:b8: 91:da:41:69:4d:a3:1a:03:35:4a:9a:d5:09:55:89: e8:f6:28:f0:c5:cb:5d:f8:94:9c:e2:31:c4:49:ee: d2:ee:f9:35:d1:12:e7:f1:32:ad:96:f1:7a:74:0c: 07:5f:c1:03:4a:d6:be:e1:84:1b:da:a2:d1:64:9b: db:cf:88:c2:a8:1d:d9:46:07:ea:1a:dd:4d:76:5c: c0:a7:51:52:d5:5e:c2:d7:85:7e:5b:3c:2f:ba:cc: cd:7c:fe:bb:95:72:09:52:cb:5c:64:9f:b8:d6:b2: 21:a1:71:f8:6f:f0:c3:80:f2:60:f6:d7:9e:7f:27: 80:17:4b:65:35:63:94:e7:6c:d1:43:4e:ea:93:22: 09:48:a1:e4:b0:48:f4:50:60:ae:69:69:36:b7:61: df:43:5d:1b:62:23:d8:20:96:9b:62:6b:43:80:39: 53:32:0e:86:06:ad:cc:71:69:f0:5b:4f:ff:44:22: d8:f1:af:54:8a:f2:00:73:7c:62:3e:db:2f:03:38: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:63:0F:B6:21:3D:EE:BE:12:33:DE:14:16:B8:95:5C:CF:2B:0F X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.151.0/24 Signature Algorithm: sha256WithRSAEncryption c6:47:47:ec:6d:aa:d4:4d:b3:da:5a:41:2f:c0:6a:1b:b1:30: d6:7b:c5:a6:a0:27:58:4d:9c:4d:e2:bd:68:2f:1f:cf:51:ef: f1:97:94:72:10:76:17:ba:8f:b4:4b:bd:94:a2:b1:56:09:54: ff:f8:6a:12:a0:a8:04:fd:1a:ad:f6:3f:8d:67:b3:cd:0f:b7: 8d:ac:8c:66:fd:22:97:47:11:aa:17:5b:1b:3b:c4:96:6e:06: 70:87:52:1a:bf:93:7c:d2:9f:e0:3d:3b:a9:41:9a:f5:4b:ef: ab:19:08:31:58:4e:d1:0f:ee:be:ae:b5:93:bb:72:9e:3a:46: 91:f7:18:a0:3c:81:ed:bc:0c:bb:47:64:9f:0e:57:b5:34:dd: 65:b4:5f:37:1a:8a:6b:2d:8f:fc:7d:ef:1e:ac:28:b8:f5:6c: 17:c5:ec:68:c6:c1:1d:3d:9e:74:34:cf:70:32:47:71:21:3c: e8:9d:ad:2e:4f:72:ef:ba:b8:02:9c:a4:05:34:7b:7a:15:f5: 35:b9:da:52:61:fc:69:7c:c7:42:87:4c:5c:c7:39:42:b9:06: 64:c3:48:9e:20:47:d9:a3:a2:2b:34:4c:82:a6:90:d2:ba:c4: 75:3b:00:ad:95:1e:6d:e3:8c:80:9a:ba:68:f5:ac:6d:4a:38: 1e:be:a5:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE8J9aFG10ak818GF2WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGQ0NjMwZmI2MjEzZGVlYmUxMjMzZGUxNDE2Yjg5NTVjY2YyYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbkQ7pr1dvxi6rW+qOE2LIvLO4fi sUT1pnzggW7wog1wj+wLML0aVp4H5u5PtdpY4jT/+2BV3BHpebiR2kFpTaMaAzVK mtUJVYno9ijwxctd+JSc4jHESe7S7vk10RLn8TKtlvF6dAwHX8EDSta+4YQb2qLR ZJvbz4jCqB3ZRgfqGt1NdlzAp1FS1V7C14V+WzwvuszNfP67lXIJUstcZJ+41rIh oXH4b/DDgPJg9teefyeAF0tlNWOU52zRQ07qkyIJSKHksEj0UGCuaWk2t2HfQ10b YiPYIJabYmtDgDlTMg6GBq3McWnwW0//RCLY8a9UivIAc3xiPtsvAzh9twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTUYw+2IT3uvhIz3hQWuJVczysPMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvTk5SakQ3WWhQZTYtRWpQZUZCYTRsVnpQS3c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1amXMA0G CSqGSIb3DQEBCwUAA4IBAQDGR0fsbarUTbPaWkEvwGobsTDWe8WmoCdYTZxN4r1o Lx/PUe/xl5RyEHYXuo+0S72UorFWCVT/+GoSoKgE/Rqt9j+NZ7PND7eNrIxm/SKX RxGqF1sbO8SWbgZwh1Iav5N80p/gPTupQZr1S++rGQgxWE7RD+6+rrWTu3KeOkaR 9xigPIHtvAy7R2SfDle1NN1ltF83GoprLY/8fe8erCi49WwXxexoxsEdPZ50NM9w MkdxITzona0uT3LvurgCnKQFNHt6FfU1udpSYfxpfMdCh0xcxzlCuQZkw0ieIEfZ o6IrNEyCppDSusR1OwCtlR5t44yAmrpo9axtSjgevqX9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:33 2026 by rpki-client