This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/NnDti1qolMnRdu6TKLIWSO85A8k.roa File: NnDti1qolMnRdu6TKLIWSO85A8k.roa (raw, json) Hash identifier: rZbXVayKsphGvgxDa2Rkpb2xF4uS1h5k4Mw2d6eGCNs= Subject key identifier: 36:70:ED:8B:5A:A8:94:C9:D1:76:EE:93:28:B2:16:48:EF:39:03:C9 Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Certificate serial: 019B7F831C4DF11248CBCE6BEB7FD98B6A5E Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/NnDti1qolMnRdu6TKLIWSO85A8k.roa Signing time: Fri 02 Jan 2026 16:20:57 +0000 ROA not before: Fri 02 Jan 2026 16:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50819 IP address blocks: 91.234.168.0/23 maxlen: 23 194.1.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1c:4d:f1:12:48:cb:ce:6b:eb:7f:d9:8b:6a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3670ed8b5aa894c9d176ee9328b21648ef3903c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:2f:87:1e:7d:df:e4:3d:ae:54:a0:58:7d: 54:f4:8f:38:2a:1a:b0:f0:34:17:61:a7:91:88:00: 50:b5:d6:aa:c4:7d:06:a0:9a:90:58:79:74:38:5b: a6:4e:10:fb:17:cd:b4:d8:2b:06:bb:09:1f:a5:fc: bc:82:e5:38:ba:b6:32:1a:e9:a2:ca:97:53:07:4d: ad:bf:b8:4b:45:c5:e7:0e:7a:8d:b6:82:11:14:44: e7:a9:c8:24:fe:ad:38:5f:e7:d2:9d:1f:4e:68:79: da:f1:f6:05:f9:44:3b:cc:15:00:55:24:a0:80:cb: c8:fe:d6:64:11:81:9e:86:01:54:8e:1b:88:1d:36: 52:5d:63:93:5d:54:18:f4:8b:3e:5b:74:ae:69:e1: 63:f3:32:14:b6:d8:55:f5:04:fd:f5:e7:c7:95:8b: 19:07:7f:d7:cf:e6:50:fd:f1:d4:6e:59:c3:99:73: b0:a5:81:8b:a7:49:09:b6:e1:8c:fd:0c:17:a2:a7: db:ee:99:9c:1b:b8:1b:41:0d:af:52:00:e4:1c:9b: 8f:c5:9f:46:52:08:d7:61:ff:00:eb:47:a0:da:bb: 8a:56:ff:c6:9b:a1:d2:e3:01:86:a1:4f:1f:15:08: df:db:34:05:af:90:2a:02:0a:c0:ac:18:5b:2c:42: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:70:ED:8B:5A:A8:94:C9:D1:76:EE:93:28:B2:16:48:EF:39:03:C9 X509v3 Authority Key Identifier: keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/NnDti1qolMnRdu6TKLIWSO85A8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.168.0/23 194.1.169.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a2:60:dc:a9:fe:44:10:ca:62:99:a0:41:0e:0a:b5:f4:d1: 3b:82:d4:42:ba:d8:cf:16:50:02:9e:f5:43:99:08:b1:3f:bd: 11:39:8b:a1:88:3c:26:1e:6d:ee:a6:e4:7a:01:50:2f:46:ff: 11:0b:7a:1b:7d:d8:1b:c8:47:82:77:88:20:9a:f2:ae:cc:69: 8e:e7:63:52:4d:27:6f:d3:db:1e:f8:93:c4:32:6f:74:24:29: 03:80:07:db:1a:5d:39:fa:83:47:9e:40:1f:ff:d8:ef:3d:e8: 74:ca:86:de:ba:50:64:cf:89:56:23:88:9c:d1:60:b7:f9:f2: 6a:9f:2e:69:0e:c0:b8:7f:2a:80:85:04:6b:bf:76:1f:8e:03: cf:e5:32:50:81:7c:ec:b1:2b:84:47:08:47:43:b4:e2:89:8e: 91:44:8b:1d:14:08:05:e6:a6:b0:83:f0:7e:81:cc:e9:f9:f7: 65:9b:e4:1c:52:24:47:ff:c2:0a:6b:93:10:39:90:48:c6:01: b0:b0:5b:2a:dd:7d:22:85:da:01:50:1b:51:6a:de:92:d8:76: 9f:b8:47:90:84:0b:6f:e0:8f:57:09:05:a3:4e:5d:f1:e0:d7: ff:48:ee:1d:a7:26:cf:88:af:fe:1c:57:d9:9b:3e:17:07:89: 1e:bd:83:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gxxN8RJIy85r63/Zi2peMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWRiODllOGJiNjYwZjIxZWI1YzRhZjNiOWFkZDUyZDU3 ZWI4OWYwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjcwZWQ4YjVhYTg5NGM5ZDE3NmVlOTMyOGIyMTY0OGVmMzkwM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/8vhx593+Q9rlSgWH1U9I84Khqw 8DQXYaeRiABQtdaqxH0GoJqQWHl0OFumThD7F8202CsGuwkfpfy8guU4urYyGumi ypdTB02tv7hLRcXnDnqNtoIRFETnqcgk/q04X+fSnR9OaHna8fYF+UQ7zBUAVSSg gMvI/tZkEYGehgFUjhuIHTZSXWOTXVQY9Is+W3SuaeFj8zIUtthV9QT99efHlYsZ B3/Xz+ZQ/fHUblnDmXOwpYGLp0kJtuGM/QwXoqfb7pmcG7gbQQ2vUgDkHJuPxZ9G UgjXYf8A60eg2ruKVv/Gm6HS4wGGoU8fFQjf2zQFr5AqAgrArBhbLEIjTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDZw7YtaqJTJ0XbukyiyFkjvOQPJMB8GA1UdIwQY MBaAFKZduJ6LtmDyHrXErzua3VLVfrifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2It YTM1NzhjOTQ0MDQwLzEvTm5EdGkxcW9sTW5SZHU2VEtMSVdTTzg1QThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2ItYTM1NzhjOTQ0MDQw LzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+qoAwQA wgGpMA0GCSqGSIb3DQEBCwUAA4IBAQA3omDcqf5EEMpimaBBDgq19NE7gtRCutjP FlACnvVDmQixP70ROYuhiDwmHm3upuR6AVAvRv8RC3obfdgbyEeCd4ggmvKuzGmO 52NSTSdv09se+JPEMm90JCkDgAfbGl05+oNHnkAf/9jvPeh0yobeulBkz4lWI4ic 0WC3+fJqny5pDsC4fyqAhQRrv3YfjgPP5TJQgXzssSuERwhHQ7TiiY6RRIsdFAgF 5qawg/B+gczp+fdlm+QcUiRH/8IKa5MQOZBIxgGwsFsq3X0ihdoBUBtRat6S2Haf uEeQhAtv4I9XCQWjTl3x4Nf/SO4dpybPiK/+HFfZmz4XB4kevYMt -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:40 2026 by rpki-client