This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/NSu3QEv-adix_Q5roohaGM-bpUY.roa File: NSu3QEv-adix_Q5roohaGM-bpUY.roa (raw, json) Hash identifier: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8= Subject key identifier: 35:2B:B7:40:4B:FE:69:D8:B1:FD:0E:6B:A2:88:5A:18:CF:9B:A5:46 Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Certificate serial: 019B79ECD77B1B6B42E6F5FAE4725B234713 Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/NSu3QEv-adix_Q5roohaGM-bpUY.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43807 IP address blocks: 91.198.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d7:7b:1b:6b:42:e6:f5:fa:e4:72:5b:23:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=352bb7404bfe69d8b1fd0e6ba2885a18cf9ba546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:e6:69:8f:ea:c2:fd:e2:af:b5:7b:81:91: 73:45:aa:22:2b:03:9f:48:b9:69:f4:8d:05:17:b6: 39:4a:dd:f5:66:d8:5b:70:ad:98:cc:e4:5b:f7:b5: 91:60:de:cc:de:75:ba:ec:ee:2b:31:bc:a2:d6:02: 87:21:5f:cb:8f:4a:13:7d:29:f9:19:08:af:68:32: f0:57:62:b1:75:a2:33:53:ef:9e:69:ec:b5:34:42: e9:d6:bf:c7:46:20:49:db:4e:ca:44:8d:42:87:b7: 4a:22:c5:1e:53:ba:c6:74:ab:4c:9c:fd:db:b6:a8: 81:64:d1:63:48:67:20:d4:30:31:81:17:77:b0:fa: 8f:7b:70:36:ee:2c:64:56:4d:1f:a1:0b:20:aa:c0: 85:49:61:96:ef:d1:17:8d:15:68:9c:12:86:14:cb: c3:92:e0:2a:74:f5:37:a4:03:2e:e2:b1:ef:5e:f8: 72:04:1b:1a:56:f0:88:4f:6b:78:49:8c:e0:2e:ca: 57:e4:5e:20:73:5b:b0:bf:a7:45:54:45:71:dd:83: 6b:1d:07:d2:f5:c5:87:8b:93:2f:33:9f:d0:6d:55: 82:e4:7e:eb:0b:fe:1f:0a:5a:5b:e9:3a:16:50:b3: 88:ff:c9:ae:31:2e:cd:5f:07:a2:a3:28:33:fd:54: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:B7:40:4B:FE:69:D8:B1:FD:0E:6B:A2:88:5A:18:CF:9B:A5:46 X509v3 Authority Key Identifier: keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/NSu3QEv-adix_Q5roohaGM-bpUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.160.0/24 Signature Algorithm: sha256WithRSAEncryption 96:2e:b2:03:88:d6:c1:0b:2c:61:09:eb:9b:05:bc:b2:de:b1: 8e:f1:47:e3:e1:b1:35:63:4b:1e:66:3a:83:48:b6:61:9b:08: d5:e0:93:4c:37:67:ec:c8:7d:5c:2e:ba:53:71:6a:e2:4a:b2: ed:bf:b5:67:76:f9:11:55:47:b9:ec:af:08:40:a1:1c:a2:62: 93:6c:1a:fe:e0:86:af:90:9f:72:3c:dc:33:77:67:ab:15:02: 64:f6:d8:42:a4:e1:b8:5a:ed:2a:ed:32:30:f4:a5:82:c6:eb: 49:68:70:47:85:4b:86:52:2c:ed:c4:d2:f8:6a:4d:5b:a6:99: 48:66:30:f4:bd:8f:59:49:c6:b7:f7:fe:82:29:db:b9:5b:41: 1f:f4:36:65:6d:c7:9c:54:12:e9:29:4f:22:60:9d:df:d4:39: 28:82:37:18:99:e4:db:0e:b5:ce:14:5a:31:80:73:b1:e5:7d: ed:57:21:1a:49:51:e9:a3:d9:cf:bc:4f:62:13:ff:5e:1c:41: 3a:56:d4:2c:35:e1:f8:84:fa:48:f4:51:d3:0b:43:b4:09:3d: b7:63:d3:54:ea:b6:e7:be:4a:d0:c4:28:c0:82:4b:0c:c9:f6: c2:e2:a7:da:1d:57:2e:fa:0a:87:72:14:99:b9:8f:75:04:b2: 98:92:29:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Nd7G2tC5vX65HJbI0cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOTg1OWI3MGVhNDUwZTEzYWRhODcyNGMwZWI2YmVlY2M4 ZGFhOTEwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTJiYjc0MDRiZmU2OWQ4YjFmZDBlNmJhMjg4NWExOGNmOWJhNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4LmaY/qwv3ir7V7gZFzRaoiKwOf SLlp9I0FF7Y5St31ZthbcK2YzORb97WRYN7M3nW67O4rMbyi1gKHIV/Lj0oTfSn5 GQivaDLwV2KxdaIzU++eaey1NELp1r/HRiBJ207KRI1Ch7dKIsUeU7rGdKtMnP3b tqiBZNFjSGcg1DAxgRd3sPqPe3A27ixkVk0foQsgqsCFSWGW79EXjRVonBKGFMvD kuAqdPU3pAMu4rHvXvhyBBsaVvCIT2t4SYzgLspX5F4gc1uwv6dFVEVx3YNrHQfS 9cWHi5MvM5/QbVWC5H7rC/4fClpb6ToWULOI/8muMS7NXweioygz/VRUQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUrt0BL/mnYsf0Oa6KIWhjPm6VGMB8GA1UdIwQY MBaAFPKYWbcOpFDhOtqHJMDra+7MjaqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUt M2RmNDdiNjIwZDYwLzEvTlN1M1FFdi1hZGl4X1E1cm9vaGFHTS1icFVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUtM2RmNDdiNjIwZDYw LzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8agMA0G CSqGSIb3DQEBCwUAA4IBAQCWLrIDiNbBCyxhCeubBbyy3rGO8Ufj4bE1Y0seZjqD SLZhmwjV4JNMN2fsyH1cLrpTcWriSrLtv7VndvkRVUe57K8IQKEcomKTbBr+4Iav kJ9yPNwzd2erFQJk9thCpOG4Wu0q7TIw9KWCxutJaHBHhUuGUiztxNL4ak1bpplI ZjD0vY9ZSca39/6CKdu5W0Ef9DZlbcecVBLpKU8iYJ3f1DkogjcYmeTbDrXOFFox gHOx5X3tVyEaSVHpo9nPvE9iE/9eHEE6VtQsNeH4hPpI9FHTC0O0CT23Y9NU6rbn vkrQxCjAgksMyfbC4qfaHVcu+gqHchSZuY91BLKYkikd -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:15 2026 by rpki-client