This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/nmsIxvxBY6tqKivZQl1HnVG3UO4.roa File: nmsIxvxBY6tqKivZQl1HnVG3UO4.roa (raw, json) Hash identifier: +FWrYX9XP4p2Wi+VL15AwTpXmf3rznCN8E5dnff8vtk= Subject key identifier: 9E:6B:08:C6:FC:41:63:AB:6A:2A:2B:D9:42:5D:47:9D:51:B7:50:EE Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Certificate serial: 019A9DB4D93C42DB1CB48689888F8AF4584A Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/nmsIxvxBY6tqKivZQl1HnVG3UO4.roa Signing time: Wed 19 Nov 2025 20:01:06 +0000 ROA not before: Wed 19 Nov 2025 20:01:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60387 IP address blocks: 45.87.220.0/24 maxlen: 24 45.87.221.0/24 maxlen: 24 45.87.222.0/24 maxlen: 24 82.115.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:b4:d9:3c:42:db:1c:b4:86:89:88:8f:8a:f4:58:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Validity Not Before: Nov 19 20:01:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e6b08c6fc4163ab6a2a2bd9425d479d51b750ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ec:18:2b:54:dd:e1:75:30:6e:3a:1e:6f:a5: b8:d8:bc:4b:a4:4b:6f:56:ad:e0:97:4e:8a:4d:aa: 7d:78:ea:b0:e6:95:07:e3:a7:b0:53:44:43:7e:b9: 4d:b2:62:91:8c:81:d0:b3:8b:7a:5c:73:e5:b2:9c: 97:c2:44:a2:58:8a:73:0e:00:d0:1a:38:a5:94:c8: 93:c5:13:e9:db:e8:80:ef:31:0e:46:7b:45:24:b5: 3d:60:57:60:9e:b4:35:2d:92:bb:f4:6a:04:10:76: 98:14:13:a4:2e:dd:af:40:2b:70:a7:77:6a:53:1a: 53:58:51:e7:e0:48:68:50:2b:c7:5b:31:f4:37:6a: 9f:7e:55:14:d3:1b:5f:dd:02:b9:9d:68:7d:6f:50: b1:88:26:1f:02:5d:0d:87:ab:f8:77:17:4b:bc:70: 71:6e:93:65:3f:31:e6:ad:10:e8:72:c7:6d:8c:13: 48:ed:7e:f7:67:5b:db:e3:14:80:3e:c3:ce:6f:cb: 5b:6b:54:5d:6a:4e:f0:23:0d:df:3a:9c:b4:aa:b9: 8a:bc:25:c2:76:26:59:2a:36:e1:6c:1b:05:b9:2f: bc:49:2a:c6:ca:ab:7c:a0:58:22:3a:be:d0:4d:a7: fc:6a:23:6e:7d:da:f3:33:7d:b1:5d:62:32:4a:c3: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:08:C6:FC:41:63:AB:6A:2A:2B:D9:42:5D:47:9D:51:B7:50:EE X509v3 Authority Key Identifier: keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/nmsIxvxBY6tqKivZQl1HnVG3UO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.220.0-45.87.222.255 82.115.15.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a4:29:a7:1a:75:6c:4f:61:8d:91:ab:a9:ee:71:88:6d:43: cc:68:3f:d3:86:b8:f3:1e:2b:87:7d:96:ac:bf:5f:5c:cf:09: 04:84:c9:5f:e3:60:8d:b8:86:25:4e:ae:c2:a4:e1:d4:38:bb: 3f:08:ac:d8:01:1d:6c:91:af:c8:b2:02:c3:05:9c:42:35:9f: ae:97:61:dd:ad:4a:94:8c:43:f9:a2:f4:c5:ac:73:e1:a7:e3: 5f:8e:a1:27:ea:95:70:3e:5d:77:a1:81:2a:b8:51:09:ee:9f: 05:53:33:b1:30:83:2d:17:a6:2d:46:f2:b1:c9:bd:40:d8:b8: f9:4b:92:26:66:6f:b9:ae:8a:81:66:85:74:d1:40:c5:3e:e3: 4a:67:6b:21:fe:54:4c:72:8c:5f:24:8f:a9:64:83:4b:53:86: 11:0c:82:d6:30:59:a5:f7:1d:7e:22:4c:de:e4:b6:7c:20:e4: c7:95:65:e8:05:4d:a5:f9:85:fe:d4:70:4f:92:c5:c8:3d:2f: dd:3d:a1:b8:59:21:d7:6f:d6:8c:bc:e7:76:5e:e3:55:5f:b7: 11:0b:ee:1a:1c:b7:95:9a:dd:ba:f0:ea:31:76:91:22:4a:a5: 02:25:8f:13:e4:28:c6:01:4c:5a:83:a8:27:1f:dd:38:0f:3b: c4:77:18:69 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqdtNk8QtsctIaJiI+K9FhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw NzgxOWYwHhcNMjUxMTE5MjAwMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTZiMDhjNmZjNDE2M2FiNmEyYTJiZDk0MjVkNDc5ZDUxYjc1MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOwYK1Td4XUwbjoeb6W42LxLpEtv Vq3gl06KTap9eOqw5pUH46ewU0RDfrlNsmKRjIHQs4t6XHPlspyXwkSiWIpzDgDQ GjillMiTxRPp2+iA7zEORntFJLU9YFdgnrQ1LZK79GoEEHaYFBOkLt2vQCtwp3dq UxpTWFHn4EhoUCvHWzH0N2qfflUU0xtf3QK5nWh9b1CxiCYfAl0Nh6v4dxdLvHBx bpNlPzHmrRDocsdtjBNI7X73Z1vb4xSAPsPOb8tba1Rdak7wIw3fOpy0qrmKvCXC diZZKjbhbBsFuS+8SSrGyqt8oFgiOr7QTaf8aiNufdrzM32xXWIySsMqtQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJ5rCMb8QWOraior2UJdR51Rt1DuMB8GA1UdIwQY MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt YTRkMGQxMGM5MDE2LzEvbm1zSXh2eEJZNnRxS2l2WlFsMUhuVkczVU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2 LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAItV9wD BAAtV94DBABScw8wDQYJKoZIhvcNAQELBQADggEBAASkKacadWxPYY2Rq6nucYht Q8xoP9OGuPMeK4d9lqy/X1zPCQSEyV/jYI24hiVOrsKk4dQ4uz8IrNgBHWyRr8iy AsMFnEI1n66XYd2tSpSMQ/mi9MWsc+Gn41+OoSfqlXA+XXehgSq4UQnunwVTM7Ew gy0Xpi1G8rHJvUDYuPlLkiZmb7muioFmhXTRQMU+40pnayH+VExyjF8kj6lkg0tT hhEMgtYwWaX3HX4iTN7ktnwg5MeVZegFTaX5hf7UcE+Sxcg9L909obhZIddv1oy8 53Ze41VftxEL7hoct5Wa3brw6jF2kSJKpQIljxPkKMYBTFqDqCcf3TgPO8R3GGk= -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:00 2025 by rpki-client