This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/NwT9W71qDLuM68yfor7jaPtZ31g.roa File: NwT9W71qDLuM68yfor7jaPtZ31g.roa (raw, json) Hash identifier: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo= Subject key identifier: 37:04:FD:5B:BD:6A:0C:BB:8C:EB:CC:9F:A2:BE:E3:68:FB:59:DF:58 Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a Certificate serial: 019B79108FAC967C86C70300936C74327EA6 Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/NwT9W71qDLuM68yfor7jaPtZ31g.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 91.229.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8f:ac:96:7c:86:c7:03:00:93:6c:74:32:7e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3704fd5bbd6a0cbb8cebcc9fa2bee368fb59df58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:8f:e7:4c:cd:88:b2:0b:3f:2b:12:33:ec: be:90:dd:7f:85:f1:53:52:63:aa:ae:d5:0a:f3:b2: 54:03:2e:d6:29:c1:4a:54:1f:cf:11:d6:17:78:36: 4a:0e:8d:bc:89:42:92:5d:4c:c9:86:1b:ae:e4:3b: 11:c7:1f:ee:5e:5c:1a:87:6a:18:7f:27:68:42:05: 87:7d:4c:ef:82:3a:f2:0a:4c:e3:d1:da:d2:3f:0d: ad:c5:f1:a2:57:45:72:e6:bf:f1:1a:75:3c:0f:5b: 6b:c4:f3:64:18:5b:d4:b2:94:50:3e:8b:5f:7c:90: 16:10:65:7e:04:08:6d:5f:06:b3:79:9c:5a:e5:0e: 85:e3:4d:a9:cc:df:f7:37:f0:ee:f3:d5:26:db:9e: 59:32:f5:3c:7d:50:f2:65:f5:b9:06:d1:db:8f:9f: 5e:e8:c8:d7:f7:da:37:7a:f3:fd:b3:a1:0f:59:03: 77:ab:7c:35:fa:04:92:b9:eb:0c:0a:1c:f5:1c:76: 4d:62:71:d3:83:f0:31:8d:45:c5:0f:9a:2a:bc:7e: 9d:9b:d8:fb:74:d3:a0:bb:f9:fe:7c:86:4e:e6:04: f0:9c:11:fa:45:32:85:a2:01:29:d9:28:2f:b7:5c: 62:1e:5f:d7:8a:9c:9d:9c:a5:d2:66:d5:0b:91:28: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:FD:5B:BD:6A:0C:BB:8C:EB:CC:9F:A2:BE:E3:68:FB:59:DF:58 X509v3 Authority Key Identifier: keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/NwT9W71qDLuM68yfor7jaPtZ31g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.80.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:fb:6a:1a:1d:6a:f6:31:04:e7:26:85:10:15:d2:71:fc:af: 5e:27:24:6e:46:4d:09:68:95:9c:7c:d2:cd:7c:08:8f:1e:41: 9c:55:63:80:7d:e7:0d:6d:9f:b3:88:fc:ba:f8:db:02:87:5a: a2:c1:f0:df:77:37:f0:d2:96:1d:14:86:93:56:10:c9:f0:17: 52:13:76:3e:27:68:9e:f4:ac:93:2e:dc:fb:68:dd:92:d6:96: 79:ff:80:88:89:e5:d5:10:bb:18:03:e3:c0:a2:3e:0e:92:31: 9b:cb:dc:f9:2f:b6:98:68:7d:ff:1e:79:ec:75:1f:90:bc:44: 23:96:92:43:aa:80:a4:da:8d:e5:7f:0e:70:aa:23:b4:a8:2f: e8:56:14:e6:8b:97:25:80:cb:21:2f:a2:6e:70:6b:d9:58:fa: 41:d7:4e:7b:af:7b:ad:70:01:6d:e1:63:2b:0b:9a:1c:1a:27: df:d7:91:f6:64:3a:98:9e:09:8d:3c:54:da:b9:38:75:8d:45: 99:ed:05:6a:81:f6:cf:95:67:fe:37:9d:61:f6:71:54:64:4a: c2:40:9c:8b:ce:d5:0b:a9:ef:b2:45:0a:21:8e:b9:2b:c6:52: 9e:69:73:29:a1:4b:e3:c3:d9:74:a8:4f:c3:78:6e:5c:03:5a: ae:af:a0:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EI+slnyGxwMAk2x0Mn6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3 MDQxOWEwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzA0ZmQ1YmJkNmEwY2JiOGNlYmNjOWZhMmJlZTM2OGZiNTlkZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu26P50zNiLILPysSM+y+kN1/hfFT UmOqrtUK87JUAy7WKcFKVB/PEdYXeDZKDo28iUKSXUzJhhuu5DsRxx/uXlwah2oY fydoQgWHfUzvgjryCkzj0drSPw2txfGiV0Vy5r/xGnU8D1trxPNkGFvUspRQPotf fJAWEGV+BAhtXwazeZxa5Q6F402pzN/3N/Du89Um255ZMvU8fVDyZfW5BtHbj59e 6MjX99o3evP9s6EPWQN3q3w1+gSSuesMChz1HHZNYnHTg/AxjUXFD5oqvH6dm9j7 dNOgu/n+fIZO5gTwnBH6RTKFogEp2Sgvt1xiHl/XipydnKXSZtULkSiPOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcE/Vu9agy7jOvMn6K+42j7Wd9YMB8GA1UdIwQY MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt MjgzMWE0ODUwNjQ1LzEvTndUOVc3MXFETHVNNjh5Zm9yN2phUHRaMzFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1 LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+VQMA0G CSqGSIb3DQEBCwUAA4IBAQAc+2oaHWr2MQTnJoUQFdJx/K9eJyRuRk0JaJWcfNLN fAiPHkGcVWOAfecNbZ+ziPy6+NsCh1qiwfDfdzfw0pYdFIaTVhDJ8BdSE3Y+J2ie 9KyTLtz7aN2S1pZ5/4CIieXVELsYA+PAoj4OkjGby9z5L7aYaH3/HnnsdR+QvEQj lpJDqoCk2o3lfw5wqiO0qC/oVhTmi5clgMshL6JucGvZWPpB1057r3utcAFt4WMr C5ocGiff15H2ZDqYngmNPFTauTh1jUWZ7QVqgfbPlWf+N51h9nFUZErCQJyLztUL qe+yRQohjrkrxlKeaXMpoUvjw9l0qE/DeG5cA1qur6AQ -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:15 2026 by rpki-client