This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa File: nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa (raw, json) Hash identifier: 0oA4F2JQGbyYxaGrlY3X98PqMdWzLbRbe+bzFWz2G3g= Subject key identifier: 9C:DD:EB:5F:5E:72:F8:A4:22:1E:66:74:7E:90:2C:68:D4:AF:C2:75 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E3869BF9B09C8364DF7DC4552EB1F8B Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 81.31.198.0/24 maxlen: 24 91.188.253.0/24 maxlen: 24 91.188.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:69:bf:9b:09:c8:36:4d:f7:dc:45:52:eb:1f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cddeb5f5e72f8a4221e66747e902c68d4afc275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:05:dd:b5:27:c2:b0:10:bc:c9:72:7f:97: 99:fa:b2:22:16:d0:4f:46:0b:52:d5:ee:b8:f8:0a: dd:d5:f0:c2:44:37:af:de:e7:cc:a5:32:88:3b:6d: e7:df:37:0d:30:5a:04:16:0a:c5:1d:7a:1f:9b:f1: 05:a2:b0:2b:5c:4f:b5:33:e9:35:28:74:0a:fb:7b: ef:4b:74:3d:3e:a6:14:f8:03:23:21:48:2c:f9:c7: 2b:50:78:6c:10:14:49:93:1a:fa:b1:54:81:27:e1: ac:a4:15:4d:d2:22:3a:f0:39:5a:36:d3:c5:59:bf: 25:c1:1b:b9:0f:4f:13:91:30:83:de:ff:78:fd:3f: e1:c2:ad:5c:df:14:31:c5:d4:59:46:26:2d:e0:d2: 48:0f:32:09:03:1e:7b:c7:1f:9a:2d:81:bb:f0:e2: f2:d6:67:46:3b:64:ff:ac:81:54:bd:48:b9:a0:97: 24:9f:95:fd:e7:e2:04:50:f3:52:05:81:1b:92:b7: 00:ea:73:a7:bc:49:53:cd:ff:0a:07:5e:42:b5:8c: 87:b6:cb:86:34:b2:a5:12:24:05:e2:f5:7c:de:63: 11:9a:01:73:61:ce:ba:43:fe:15:db:0f:7c:ae:70: 7c:1a:8e:f6:80:8a:b9:48:47:c0:d0:bd:88:8f:a7: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DD:EB:5F:5E:72:F8:A4:22:1E:66:74:7E:90:2C:68:D4:AF:C2:75 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/nN3rX15y-KQiHmZ0fpAsaNSvwnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.198.0/24 91.188.253.0/24 91.188.255.0/24 Signature Algorithm: sha256WithRSAEncryption a7:e7:08:24:89:e2:fb:8d:94:07:fe:62:7c:6e:3e:78:8d:b4: 7f:81:e3:3f:55:a4:83:47:2c:ec:32:0a:b9:8e:fe:15:67:42: 7d:24:ba:75:cd:cd:42:33:36:48:80:6e:2b:63:f7:09:56:cf: bf:bb:74:f2:9b:26:59:dc:92:e1:82:27:b2:84:27:c2:75:dd: f6:e6:48:4e:68:21:be:05:3e:3b:59:62:43:68:88:6a:1a:3d: d2:38:0b:42:e0:72:da:92:0c:32:0a:79:9c:fd:3d:86:d8:85: 29:58:11:aa:8b:b6:cd:9d:a6:d8:cb:d2:da:a2:9d:ec:25:c1: 63:c8:2f:3a:e9:c4:18:0b:89:65:8a:f4:0b:d6:8e:24:45:24: 47:c4:ec:3a:3d:3c:5d:4b:61:67:58:3a:80:f4:05:8a:ca:b5: 56:7a:67:92:e5:b4:d9:54:67:8b:ff:02:65:db:4f:01:87:ec: 95:04:63:d8:47:47:99:b9:e4:be:2d:bc:8f:d2:b7:e2:94:c6: 1c:b7:b4:6c:7b:be:c0:d1:16:94:9a:eb:f0:74:4b:85:a2:0f: 98:be:ae:f1:81:3c:f3:f0:3d:4f:50:b1:50:9d:f0:65:c1:fe: 0b:7a:8b:2e:3d:06:d8:78:1f:5f:8d:b8:1f:77:fe:36:ad:fa: 3b:9f:65:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OGm/mwnINk333EVS6x+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2RkZWI1ZjVlNzJmOGE0MjIxZTY2NzQ3ZTkwMmM2OGQ0YWZjMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vgF3bUnwrAQvMlyf5eZ+rIiFtBP RgtS1e64+Ard1fDCRDev3ufMpTKIO23n3zcNMFoEFgrFHXofm/EForArXE+1M+k1 KHQK+3vvS3Q9PqYU+AMjIUgs+ccrUHhsEBRJkxr6sVSBJ+GspBVN0iI68DlaNtPF Wb8lwRu5D08TkTCD3v94/T/hwq1c3xQxxdRZRiYt4NJIDzIJAx57xx+aLYG78OLy 1mdGO2T/rIFUvUi5oJckn5X95+IEUPNSBYEbkrcA6nOnvElTzf8KB15CtYyHtsuG NLKlEiQF4vV83mMRmgFzYc66Q/4V2w98rnB8Go72gIq5SEfA0L2Ij6eF9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJzd619ecvikIh5mdH6QLGjUr8J1MB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvbk4zclgxNXktS1FpSG1aMGZwQXNhTlN2d25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUR/GAwQA W7z9AwQAW7z/MA0GCSqGSIb3DQEBCwUAA4IBAQCn5wgkieL7jZQH/mJ8bj54jbR/ geM/VaSDRyzsMgq5jv4VZ0J9JLp1zc1CMzZIgG4rY/cJVs+/u3TymyZZ3JLhgiey hCfCdd325khOaCG+BT47WWJDaIhqGj3SOAtC4HLakgwyCnmc/T2G2IUpWBGqi7bN nabYy9Laop3sJcFjyC866cQYC4llivQL1o4kRSRHxOw6PTxdS2FnWDqA9AWKyrVW emeS5bTZVGeL/wJl208Bh+yVBGPYR0eZueS+LbyP0rfilMYct7Rse77A0RaUmuvw dEuFog+Yvq7xgTzz8D1PULFQnfBlwf4LeosuPQbYeB9fjbgfd/42rfo7n2X6 -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:59 2026 by rpki-client