This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/NVSHB6tzwUob75xSfGz6jaNLiYE.roa File: NVSHB6tzwUob75xSfGz6jaNLiYE.roa (raw, json) Hash identifier: +Q4isin9ctWLd5y4nbiMUVJ0M1dT5+TerwoyCULpr+o= Subject key identifier: 35:54:87:07:AB:73:C1:4A:1B:EF:9C:52:7C:6C:FA:8D:A3:4B:89:81 Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2 Certificate serial: 019B7D5B8BF9E1DDBF6424578B3AB895CD2D Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/NVSHB6tzwUob75xSfGz6jaNLiYE.roa Signing time: Fri 02 Jan 2026 06:18:30 +0000 ROA not before: Fri 02 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53991 IP address blocks: 91.198.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8b:f9:e1:dd:bf:64:24:57:8b:3a:b8:95:cd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2 Validity Not Before: Jan 2 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35548707ab73c14a1bef9c527c6cfa8da34b8981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:b0:84:65:17:08:d1:42:a0:7e:bc:c5:37: 51:b3:6e:d9:94:64:85:72:a6:6b:20:8e:7e:c8:6e: 45:a6:fa:3a:22:72:32:be:11:eb:59:33:e9:32:7a: 14:c1:5a:95:07:4e:96:c1:be:a8:07:4a:04:1a:53: 80:a0:11:a1:38:99:e2:a6:d1:3f:e3:08:a9:53:f7: 00:34:c4:f2:9c:d4:8a:95:1a:65:28:be:eb:89:86: 2e:1a:a7:ed:a8:d8:4c:6b:d8:ec:bd:e6:c9:b5:b3: f4:4a:02:9a:b7:c8:a5:0a:4f:c9:c9:86:39:d7:44: a7:bc:06:50:ee:06:46:e9:e7:55:a8:70:82:9d:f3: 74:d8:6e:5c:08:3f:6c:da:0f:18:b0:1a:d5:9e:de: e8:56:ae:fb:4e:b5:82:23:4f:39:7f:23:8e:e1:81: 9e:0e:4a:83:31:1a:77:d1:cd:ba:c4:67:8f:3d:cc: f2:34:18:da:74:44:20:56:37:4f:c1:65:56:e3:1f: 61:6d:16:41:a0:c6:68:48:9e:ef:d6:54:47:e0:e3: 6f:92:9f:24:43:63:f3:29:31:c0:9d:05:d4:03:0f: 17:05:7a:89:1b:8a:2e:ec:0c:15:c5:95:01:5f:e7: 19:0b:f8:a5:59:a5:71:7b:aa:8e:1d:74:26:c7:02: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:87:07:AB:73:C1:4A:1B:EF:9C:52:7C:6C:FA:8D:A3:4B:89:81 X509v3 Authority Key Identifier: keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/NVSHB6tzwUob75xSfGz6jaNLiYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.51.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f5:c0:a9:9e:12:04:f4:69:3f:93:f2:97:7f:7d:27:18:c5: ec:c9:6f:97:f0:0a:25:88:46:bc:a0:fd:5c:10:f8:f2:2b:13: 6e:29:08:0b:38:27:1f:e1:f5:40:68:0f:c9:c5:00:16:33:8f: b3:ac:91:d5:8a:67:da:1a:81:86:80:af:2f:28:aa:04:72:e4: 82:aa:22:f2:f6:d5:88:f1:35:27:7c:c4:80:38:31:b5:7a:d6: c9:6e:3b:52:1c:51:bb:30:d1:06:54:e7:9d:6c:65:3d:fa:58: 1b:e2:d6:c4:f6:ce:78:28:41:4f:8a:d4:d2:55:fa:30:37:93: 0f:99:48:3b:dc:35:34:b2:22:ed:d8:38:88:b7:da:1f:fa:66: 78:6a:1d:90:17:00:03:ce:c8:27:bb:96:6a:d7:b1:a2:52:70: 08:bf:63:75:b1:cf:a6:e2:9c:30:fe:9a:d7:1a:17:7d:c2:52: f4:0e:fa:a9:9c:5b:bc:c9:8c:dd:48:5b:22:27:b3:4c:bd:4f: 73:3a:01:4f:33:64:f8:a6:d3:88:62:37:15:60:f9:17:5f:dd: 0a:92:e9:2e:b0:de:88:72:11:ce:7a:0e:58:ba:b5:e2:81:cb: a6:43:80:a5:48:7b:17:64:77:26:13:28:45:1f:15:6c:49:fc: 70:6c:95:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4v54d2/ZCRXizq4lc0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWU3NWEyNmNjZjg2MjEyMjI4MTZhNDcxY2NiN2MwZDVl NzE2ZTIwHhcNMjYwMTAyMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTU0ODcwN2FiNzNjMTRhMWJlZjljNTI3YzZjZmE4ZGEzNGI4OTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn6whGUXCNFCoH68xTdRs27ZlGSF cqZrII5+yG5Fpvo6InIyvhHrWTPpMnoUwVqVB06Wwb6oB0oEGlOAoBGhOJniptE/ 4wipU/cANMTynNSKlRplKL7riYYuGqftqNhMa9jsvebJtbP0SgKat8ilCk/JyYY5 10SnvAZQ7gZG6edVqHCCnfN02G5cCD9s2g8YsBrVnt7oVq77TrWCI085fyOO4YGe DkqDMRp30c26xGePPczyNBjadEQgVjdPwWVW4x9hbRZBoMZoSJ7v1lRH4ONvkp8k Q2PzKTHAnQXUAw8XBXqJG4ou7AwVxZUBX+cZC/ilWaVxe6qOHXQmxwJyvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVUhwerc8FKG++cUnxs+o2jS4mBMB8GA1UdIwQY MBaAFBqudaJsz4YhIigWpHHMt8DV5xbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzct MjY0ZjBjYzVmZjgwLzEvTlZTSEI2dHp3VW9iNzV4U2ZHejZqYU5MaVlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzctMjY0ZjBjYzVmZjgw LzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YzMA0G CSqGSIb3DQEBCwUAA4IBAQB69cCpnhIE9Gk/k/KXf30nGMXsyW+X8AoliEa8oP1c EPjyKxNuKQgLOCcf4fVAaA/JxQAWM4+zrJHVimfaGoGGgK8vKKoEcuSCqiLy9tWI 8TUnfMSAODG1etbJbjtSHFG7MNEGVOedbGU9+lgb4tbE9s54KEFPitTSVfowN5MP mUg73DU0siLt2DiIt9of+mZ4ah2QFwADzsgnu5Zq17GiUnAIv2N1sc+m4pww/prX Ghd9wlL0DvqpnFu8yYzdSFsiJ7NMvU9zOgFPM2T4ptOIYjcVYPkXX90KkukusN6I chHOeg5YurXigcumQ4ClSHsXZHcmEyhFHxVsSfxwbJWj -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:51 2026 by rpki-client