This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nh-UyQ52cgwdzjf3IsqR5BWPNPU.roa File: nh-UyQ52cgwdzjf3IsqR5BWPNPU.roa (raw, json) Hash identifier: H5AtLCqkIVbc/SJiW3fiQGirxM23oteJd1sFGRuHn5A= Subject key identifier: 9E:1F:94:C9:0E:76:72:0C:1D:CE:37:F7:22:CA:91:E4:15:8F:34:F5 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F1502402AB1A8ECBF93754552DCB540 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nh-UyQ52cgwdzjf3IsqR5BWPNPU.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62367 IP address blocks: 87.107.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:40:2a:b1:a8:ec:bf:93:75:45:52:dc:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e1f94c90e76720c1dce37f722ca91e4158f34f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:5e:13:0a:a8:cf:b5:d4:e2:a9:1b:25:b7: 65:6c:9b:0b:ca:6b:4f:bd:c1:55:fa:3d:f7:b9:50: 92:59:91:e8:4b:45:01:cc:18:f8:35:8e:6b:f9:b0: 98:b0:c5:87:8d:4e:c1:bd:7a:04:b1:4c:06:bb:4c: 86:9a:5c:89:32:14:69:32:81:94:c4:d6:8b:0e:82: f4:32:7e:97:18:2f:b1:36:f4:97:8a:8a:a1:fc:6e: 67:83:47:45:c4:c4:53:f4:94:92:48:67:4d:c2:eb: f2:c6:a7:12:c5:36:df:43:8a:01:05:84:ce:53:d5: 9f:f3:04:3c:28:00:e2:87:db:9f:84:c3:92:00:3d: d4:cb:2c:17:ed:9f:34:48:32:1d:72:d3:cb:a1:82: 51:53:2c:d8:b2:fd:bc:b2:58:f8:bc:ca:97:79:b6: 69:6d:cb:82:24:38:2b:4c:db:7d:06:e0:32:a5:bd: b8:91:9b:a3:50:4f:0b:54:e0:a3:d0:1b:82:76:dc: d4:88:65:bb:38:0b:73:d0:74:7b:32:c5:96:18:e3: 03:1c:17:3c:4f:37:2a:d3:71:82:8e:24:3a:1b:a5: ab:03:58:4e:e4:e7:bf:c6:8b:41:1a:5a:24:6f:d8: 95:b0:c5:08:ba:a8:c1:a8:64:9a:6f:2d:86:f8:5b: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:94:C9:0E:76:72:0C:1D:CE:37:F7:22:CA:91:E4:15:8F:34:F5 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nh-UyQ52cgwdzjf3IsqR5BWPNPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.134.0/23 Signature Algorithm: sha256WithRSAEncryption 67:81:0f:6d:d2:86:b4:5c:e9:03:ca:ef:81:4d:54:c6:14:0f: 5c:6b:fa:7a:97:f4:21:4c:15:00:3f:ac:b6:cb:61:2d:92:f3: 21:df:b1:b7:36:a8:dd:4f:34:f6:a7:58:ce:6e:a7:98:13:be: 51:60:64:aa:f6:0c:72:90:73:59:43:14:67:9d:ed:f3:c4:21: 48:bd:84:ee:d2:8a:f4:6a:88:8e:69:e6:95:07:a5:2e:4b:b0: 92:30:5d:f2:d0:74:02:ee:95:c1:7e:72:39:6f:ec:89:a0:51: 24:73:f4:b9:cc:c3:32:06:f1:f7:9a:b1:1c:9f:a1:50:75:2b: 9b:82:ba:5a:e5:14:03:6b:03:bf:d2:6a:7f:0a:dd:12:c5:e6: c7:83:fb:18:b0:65:52:03:2e:0a:94:3a:1f:34:d0:eb:fd:54: 1e:e1:7a:71:e0:18:a0:dd:0d:f0:09:8c:49:c2:82:1c:78:44: d7:18:b8:b2:cf:0d:00:35:c6:d6:43:92:fa:63:5b:af:dd:57: e4:c3:b3:d9:50:bd:dd:37:0b:ab:5c:a2:94:00:b3:1e:4e:6d: 69:6a:1b:85:ad:2f:f7:46:c2:6a:76:8f:88:7d:3b:5d:80:b8: 5d:74:bd:f8:d9:9e:09:da:c0:a6:e5:70:73:f1:94:bc:8f:e9: 5b:25:28:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQJAKrGo7L+TdUVS3LVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTFmOTRjOTBlNzY3MjBjMWRjZTM3ZjcyMmNhOTFlNDE1OGYzNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TleEwqoz7XU4qkbJbdlbJsLymtP vcFV+j33uVCSWZHoS0UBzBj4NY5r+bCYsMWHjU7BvXoEsUwGu0yGmlyJMhRpMoGU xNaLDoL0Mn6XGC+xNvSXioqh/G5ng0dFxMRT9JSSSGdNwuvyxqcSxTbfQ4oBBYTO U9Wf8wQ8KADih9ufhMOSAD3UyywX7Z80SDIdctPLoYJRUyzYsv28slj4vMqXebZp bcuCJDgrTNt9BuAypb24kZujUE8LVOCj0BuCdtzUiGW7OAtz0HR7MsWWGOMDHBc8 Tzcq03GCjiQ6G6WrA1hO5Oe/xotBGlokb9iVsMUIuqjBqGSaby2G+Ft5uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4flMkOdnIMHc439yLKkeQVjzT1MB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvbmgtVXlRNTJjZ3dkempmM0lzcVI1QldQTlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV2uGMA0G CSqGSIb3DQEBCwUAA4IBAQBngQ9t0oa0XOkDyu+BTVTGFA9ca/p6l/QhTBUAP6y2 y2EtkvMh37G3NqjdTzT2p1jObqeYE75RYGSq9gxykHNZQxRnne3zxCFIvYTu0or0 aoiOaeaVB6UuS7CSMF3y0HQC7pXBfnI5b+yJoFEkc/S5zMMyBvH3mrEcn6FQdSub grpa5RQDawO/0mp/Ct0SxebHg/sYsGVSAy4KlDofNNDr/VQe4Xpx4Big3Q3wCYxJ woIceETXGLiyzw0ANcbWQ5L6Y1uv3Vfkw7PZUL3dNwurXKKUALMeTm1pahuFrS/3 RsJqdo+IfTtdgLhddL342Z4J2sCm5XBz8ZS8j+lbJShj -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:32 2026 by rpki-client