This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NMRSYRWPNEeA7-bAu7YGKb77w-w.roa File: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (raw, json) Hash identifier: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0= Subject key identifier: 34:C4:52:61:15:8F:34:47:80:EF:E6:C0:BB:B6:06:29:BE:FB:C3:EC Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910E649E85C5F1347BC5C62A66B5CDF Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NMRSYRWPNEeA7-bAu7YGKb77w-w.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1 IP address blocks: 89.22.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e6:49:e8:5c:5f:13:47:bc:5c:62:a6:6b:5c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34c45261158f344780efe6c0bbb60629befbc3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:81:47:23:c8:d0:df:88:2b:11:7b:96:a9: 7c:71:28:6e:94:8b:3d:91:dc:55:40:e6:98:a1:15: 46:b5:16:18:13:35:e8:77:dd:41:ba:1f:11:8d:07: da:81:c5:91:a4:5c:69:de:74:e2:02:d7:04:7e:9c: b8:4c:fa:de:e8:24:64:c8:c5:30:40:3a:89:ae:73: 71:cb:f2:f8:9a:a2:ae:f5:1a:bc:c2:20:73:4c:c8: 79:88:d9:a0:dc:28:47:c1:93:35:c7:e6:be:31:41: 6c:8a:18:d1:f1:4c:a1:02:4f:6b:02:19:04:53:0c: c0:93:c1:8c:2c:5e:97:53:6b:32:d2:ee:d6:9b:1c: 62:10:70:9a:f9:1c:dd:78:3d:fb:88:39:9c:5e:c1: ee:4f:46:66:04:21:20:78:2d:32:e7:f2:85:da:a7: 45:41:c1:ba:63:19:ee:e8:29:a0:d1:85:57:7c:09: 87:81:8c:9a:79:7e:e5:09:c0:4f:6f:23:72:fb:79: 98:35:5c:47:fe:a5:f8:cd:a1:cd:2c:f3:a9:c0:08: f0:04:d0:a2:1e:a3:c4:b5:a5:0b:a0:44:6f:5f:d3: da:32:bd:b0:5f:1d:31:4b:03:6c:18:e6:7c:e8:42: 59:28:c1:ee:c3:6c:57:2a:4b:45:16:40:95:1f:08: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C4:52:61:15:8F:34:47:80:EF:E6:C0:BB:B6:06:29:BE:FB:C3:EC X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/NMRSYRWPNEeA7-bAu7YGKb77w-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.194.0/24 Signature Algorithm: sha256WithRSAEncryption 71:4c:88:82:d8:30:65:76:75:20:55:dc:71:29:a1:a7:4e:93: 52:7e:7c:c3:82:de:1c:13:5b:24:9a:cd:a4:c8:0c:7d:f7:32: fd:24:f9:60:13:d4:b3:ac:20:83:a7:f5:d0:8a:43:84:cd:77: fe:bd:f0:1a:97:5b:ca:51:64:23:bc:ff:32:a8:fc:0a:4d:a5: 6a:f3:6f:d4:2b:9c:69:66:ee:ac:e2:da:9b:da:25:6e:ad:66: 08:a9:87:25:34:6d:c8:53:fd:c6:3b:7d:e5:27:bf:1a:74:c7: e9:fb:f4:25:0e:04:ed:ce:9d:e9:87:ae:c4:b2:76:7c:55:57: 94:8e:5d:4d:70:66:13:a5:3d:1f:76:c8:38:5c:8f:8c:4a:ff: b5:41:80:8c:8d:c3:54:a3:e8:73:82:31:ca:0c:09:ed:5f:83: df:be:1f:9f:84:c5:aa:f2:a1:2a:9e:fd:ad:37:8e:a4:ca:bb: 66:a7:2c:5c:d9:81:40:29:54:b5:6a:f5:1b:71:82:fe:75:be: b3:04:70:80:b6:b2:5b:b3:1c:41:80:20:e2:8c:0b:8b:62:f5: 55:0c:f6:45:a3:6b:41:9f:19:67:d6:54:c0:df:ca:04:ce:1b: 82:3c:83:42:bc:6e:c8:dc:87:15:26:21:50:dc:9f:4e:b0:31: f5:35:b1:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOZJ6FxfE0e8XGKma1zfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGM0NTI2MTE1OGYzNDQ3ODBlZmU2YzBiYmI2MDYyOWJlZmJjM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnuBRyPI0N+IKxF7lql8cShulIs9 kdxVQOaYoRVGtRYYEzXod91Buh8RjQfagcWRpFxp3nTiAtcEfpy4TPre6CRkyMUw QDqJrnNxy/L4mqKu9Rq8wiBzTMh5iNmg3ChHwZM1x+a+MUFsihjR8UyhAk9rAhkE UwzAk8GMLF6XU2sy0u7WmxxiEHCa+RzdeD37iDmcXsHuT0ZmBCEgeC0y5/KF2qdF QcG6Yxnu6Cmg0YVXfAmHgYyaeX7lCcBPbyNy+3mYNVxH/qX4zaHNLPOpwAjwBNCi HqPEtaULoERvX9PaMr2wXx0xSwNsGOZ86EJZKMHuw2xXKktFFkCVHwjmawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDTEUmEVjzRHgO/mwLu2Bim++8PsMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvTk1SU1lSV1BORWVBNy1iQXU3WUdLYjc3dy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRbCMA0G CSqGSIb3DQEBCwUAA4IBAQBxTIiC2DBldnUgVdxxKaGnTpNSfnzDgt4cE1skms2k yAx99zL9JPlgE9SzrCCDp/XQikOEzXf+vfAal1vKUWQjvP8yqPwKTaVq82/UK5xp Zu6s4tqb2iVurWYIqYclNG3IU/3GO33lJ78adMfp+/QlDgTtzp3ph67EsnZ8VVeU jl1NcGYTpT0fdsg4XI+MSv+1QYCMjcNUo+hzgjHKDAntX4Pfvh+fhMWq8qEqnv2t N46kyrtmpyxc2YFAKVS1avUbcYL+db6zBHCAtrJbsxxBgCDijAuLYvVVDPZFo2tB nxln1lTA38oEzhuCPINCvG7I3IcVJiFQ3J9OsDH1NbHT -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:26 2026 by rpki-client