This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/nbm3hVn9hJgrdxApoYW6_LkAHBw.roa File: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (raw, json) Hash identifier: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k= Subject key identifier: 9D:B9:B7:85:59:FD:84:98:2B:77:10:29:A1:85:BA:FC:B9:00:1C:1C Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076 Certificate serial: 019B77C749202ECA24CCA61F618F006D8E40 Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/nbm3hVn9hJgrdxApoYW6_LkAHBw.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 109.224.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:49:20:2e:ca:24:cc:a6:1f:61:8f:00:6d:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db9b78559fd84982b771029a185bafcb9001c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:e6:d1:cb:98:e9:2e:69:49:4e:c9:21:c5: cb:cf:27:ba:bf:66:2a:5c:1f:ba:24:61:fb:0d:8c: bc:26:52:86:5a:96:12:b1:56:33:19:d7:5b:d3:39: a1:69:4d:eb:82:ed:29:b3:4c:12:e9:7e:d6:51:41: 2a:74:d4:94:3f:b0:a4:ce:35:10:ce:5d:fa:4e:b6: a8:62:9f:97:37:7a:57:60:4b:3d:34:39:45:e9:43: 61:13:0a:e7:30:7c:ed:1e:cb:46:37:48:53:cc:62: 07:7c:05:fa:73:f6:bb:df:cc:22:1c:de:f9:0f:4d: 97:76:eb:7c:6f:57:d3:84:5b:75:b7:82:38:0b:24: 07:50:14:bd:20:4d:bc:4b:e3:6c:8f:39:2c:8e:10: b9:70:8c:7a:ff:40:42:65:7c:5a:3b:e4:17:b2:37: 4f:fa:40:d0:26:55:4b:6f:39:49:57:e9:8a:de:d7: 7b:ea:a3:48:d8:e5:39:ae:d8:bd:1a:54:27:20:86: 10:98:96:b6:59:cf:c2:aa:3e:e7:11:3d:3f:a2:20: b5:18:55:c0:7e:6d:ea:3e:a6:7d:d4:fd:cb:15:09: 5b:07:8d:9a:0a:f9:be:21:1b:4d:6b:7f:79:d2:7d: 67:2a:9d:72:f3:37:77:95:f5:d2:34:d5:bb:71:3f: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B9:B7:85:59:FD:84:98:2B:77:10:29:A1:85:BA:FC:B9:00:1C:1C X509v3 Authority Key Identifier: keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/nbm3hVn9hJgrdxApoYW6_LkAHBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f8:8a:cd:2c:f7:81:a3:06:cb:fd:ec:f0:41:06:db:90:49: 9e:72:91:6c:7b:05:03:ff:33:3b:f6:ea:32:67:e5:57:f3:54: b9:4a:1d:63:54:31:66:d1:54:40:96:f0:7b:12:1d:f6:28:e1: 94:83:24:d8:0b:a4:87:56:df:2e:a3:c7:84:52:b0:10:1a:a2: c9:b1:94:d2:fa:a2:83:9d:40:bc:2a:9a:69:d5:bc:36:9f:61: 70:ba:53:60:c3:ef:10:55:f8:b8:4f:cc:aa:98:41:56:15:97: e5:ef:6b:a2:50:ab:f6:19:87:34:55:9a:f6:d2:24:15:15:5d: 59:be:bf:eb:94:8e:80:50:35:54:13:16:b5:2e:2b:bb:fc:71: b6:d1:2e:73:f0:03:f1:5b:56:ce:9c:ba:53:ed:53:6e:cb:6f: 55:1c:47:85:d1:d9:87:90:61:07:a3:65:a4:e5:e1:6c:69:01: 4c:26:73:f1:40:3f:b9:b8:5a:a5:23:84:66:5d:6f:cf:a8:51: d4:18:ec:bf:11:6d:db:1e:4a:46:4b:e1:c8:4d:eb:ce:ce:bc: 16:6d:2f:61:e6:8b:1f:48:d2:5a:c1:86:02:fa:9c:e2:c1:44: 71:00:dd:09:4b:9b:81:9a:d5:80:f2:78:97:0c:a8:88:f4:97: 69:94:b0:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0kgLsokzKYfYY8AbY5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi NzAwNzYwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGI5Yjc4NTU5ZmQ4NDk4MmI3NzEwMjlhMTg1YmFmY2I5MDAxYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fzm0cuY6S5pSU7JIcXLzye6v2Yq XB+6JGH7DYy8JlKGWpYSsVYzGddb0zmhaU3rgu0ps0wS6X7WUUEqdNSUP7CkzjUQ zl36TraoYp+XN3pXYEs9NDlF6UNhEwrnMHztHstGN0hTzGIHfAX6c/a738wiHN75 D02Xdut8b1fThFt1t4I4CyQHUBS9IE28S+NsjzksjhC5cIx6/0BCZXxaO+QXsjdP +kDQJlVLbzlJV+mK3td76qNI2OU5rti9GlQnIIYQmJa2Wc/Cqj7nET0/oiC1GFXA fm3qPqZ91P3LFQlbB42aCvm+IRtNa3950n1nKp1y8zd3lfXSNNW7cT/PHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ25t4VZ/YSYK3cQKaGFuvy5ABwcMB8GA1UdIwQY MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt ZmI3ZDdkY2EzNGE3LzEvbmJtM2hWbjloSmdyZHhBcG9ZVzZfTGtBSEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3 LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbeDyMA0G CSqGSIb3DQEBCwUAA4IBAQCM+IrNLPeBowbL/ezwQQbbkEmecpFsewUD/zM79uoy Z+VX81S5Sh1jVDFm0VRAlvB7Eh32KOGUgyTYC6SHVt8uo8eEUrAQGqLJsZTS+qKD nUC8Kppp1bw2n2FwulNgw+8QVfi4T8yqmEFWFZfl72uiUKv2GYc0VZr20iQVFV1Z vr/rlI6AUDVUExa1Liu7/HG20S5z8APxW1bOnLpT7VNuy29VHEeF0dmHkGEHo2Wk 5eFsaQFMJnPxQD+5uFqlI4RmXW/PqFHUGOy/EW3bHkpGS+HITevOzrwWbS9h5osf SNJawYYC+pziwURxAN0JS5uBmtWA8niXDKiI9JdplLCD -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:12 2026 by rpki-client