This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ni4S16S6UKOvrAf-kmxc3wD6hZM.roa File: ni4S16S6UKOvrAf-kmxc3wD6hZM.roa (raw, json) Hash identifier: d/44eKBhMgueE1bs1C0eNfSWvg/JgZGOkLyDO8UOnJA= Subject key identifier: 9E:2E:12:D7:A4:BA:50:A3:AF:AC:07:FE:92:6C:5C:DF:00:FA:85:93 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F1502127D8B9DDEC3B295D150CD0A3C Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ni4S16S6UKOvrAf-kmxc3wD6hZM.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61209 IP address blocks: 87.107.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:12:7d:8b:9d:de:c3:b2:95:d1:50:cd:0a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2e12d7a4ba50a3afac07fe926c5cdf00fa8593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:ca:bf:45:aa:db:c7:3b:5e:d5:3a:aa:72: ae:ed:00:95:95:36:ca:94:3f:6e:92:20:74:d4:d5: 48:46:89:42:24:77:52:aa:0f:c5:31:a5:ee:a1:9e: 38:f0:de:94:92:7c:be:55:22:1a:80:22:17:58:65: c6:e0:73:1c:ef:a2:d1:df:1a:79:0e:40:48:7b:8f: 3b:d9:67:e4:01:bd:bf:bf:5d:b3:52:b6:4d:6b:d7: 5c:3d:ab:14:c4:ba:96:fa:41:7a:e0:a9:6c:38:c3: 2e:98:f4:18:0a:23:59:cb:2f:2f:05:6c:27:df:68: c9:a6:ff:44:c2:04:f2:71:91:4e:a7:a2:cb:3b:2b: f3:a7:c0:25:ae:65:cd:cb:9c:2b:38:04:b6:47:33: c5:dc:5c:31:55:3f:2f:d1:22:29:fb:da:24:ff:ed: 02:b0:22:bb:e7:b7:00:45:ad:8a:a7:0b:14:0a:a1: 07:8f:93:32:2e:f1:3b:8c:1a:c6:6f:93:a7:1d:69: dd:23:de:42:fd:44:c2:25:91:ac:8f:e8:c9:a3:95: 69:d9:f8:59:cb:67:1b:0d:a7:3f:a3:fd:70:a6:04: 48:7d:b3:2a:e2:ff:7f:f3:7a:63:37:c5:42:be:fb: bb:5b:23:a3:43:6e:d5:11:fe:8b:41:ae:59:b8:d5: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2E:12:D7:A4:BA:50:A3:AF:AC:07:FE:92:6C:5C:DF:00:FA:85:93 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ni4S16S6UKOvrAf-kmxc3wD6hZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.186.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:64:93:82:f6:e0:e1:74:ac:c8:26:a9:ce:00:8c:13:e7:d9: 54:b1:b2:44:60:fe:e2:3f:70:e9:28:16:a0:15:4c:c3:35:e8: fc:9f:22:82:e7:8e:07:51:52:26:b1:36:81:82:35:d2:ec:09: c4:0f:ff:3e:ed:fe:1a:d1:4b:e2:6a:e8:45:53:f9:2d:64:0a: 61:e2:b4:38:53:2b:15:23:03:0d:d2:81:6d:fc:d3:86:f4:2c: 5a:13:81:1e:6b:3f:8e:5e:38:77:74:0c:d6:a8:c9:0b:6c:68: dc:2a:41:00:42:01:9a:23:d6:40:3b:c1:db:75:77:8f:a9:d3: 55:20:2b:c9:6e:60:d4:21:d4:1b:d9:80:c7:ea:49:58:71:d7: d5:ee:69:ff:4b:4a:26:6d:34:dd:d2:86:30:ac:a3:39:dc:66: df:dd:0f:02:aa:7d:c1:5e:e7:34:fb:20:ed:b7:95:1f:db:d6: 26:2b:cc:d3:e6:57:43:c9:a7:77:94:12:b4:21:82:aa:e5:13: b6:48:c5:f0:06:a6:a2:24:3a:a2:dc:19:50:4e:54:8a:f3:04: d5:ce:2f:8f:ec:01:b1:20:32:ad:e1:d5:fb:a5:2c:ad:53:28: ff:8d:fb:e7:36:55:80:c9:b3:d8:9a:d2:44:25:d8:0c:c9:df: cc:8d:8d:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQISfYud3sOyldFQzQo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJlMTJkN2E0YmE1MGEzYWZhYzA3ZmU5MjZjNWNkZjAwZmE4NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ibKv0Wq28c7XtU6qnKu7QCVlTbK lD9ukiB01NVIRolCJHdSqg/FMaXuoZ448N6Ukny+VSIagCIXWGXG4HMc76LR3xp5 DkBIe4872WfkAb2/v12zUrZNa9dcPasUxLqW+kF64KlsOMMumPQYCiNZyy8vBWwn 32jJpv9EwgTycZFOp6LLOyvzp8AlrmXNy5wrOAS2RzPF3FwxVT8v0SIp+9ok/+0C sCK757cARa2KpwsUCqEHj5MyLvE7jBrGb5OnHWndI95C/UTCJZGsj+jJo5Vp2fhZ y2cbDac/o/1wpgRIfbMq4v9/83pjN8VCvvu7WyOjQ27VEf6LQa5ZuNU8twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4uEtekulCjr6wH/pJsXN8A+oWTMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvbmk0UzE2UzZVS092ckFmLWtteGMzd0Q2aFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV2u6MA0G CSqGSIb3DQEBCwUAA4IBAQAeZJOC9uDhdKzIJqnOAIwT59lUsbJEYP7iP3DpKBag FUzDNej8nyKC544HUVImsTaBgjXS7AnED/8+7f4a0UviauhFU/ktZAph4rQ4UysV IwMN0oFt/NOG9CxaE4Eeaz+OXjh3dAzWqMkLbGjcKkEAQgGaI9ZAO8HbdXePqdNV ICvJbmDUIdQb2YDH6klYcdfV7mn/S0ombTTd0oYwrKM53Gbf3Q8Cqn3BXuc0+yDt t5Uf29YmK8zT5ldDyad3lBK0IYKq5RO2SMXwBqaiJDqi3BlQTlSK8wTVzi+P7AGx IDKt4dX7pSytUyj/jfvnNlWAybPYmtJEJdgMyd/MjY1f -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:46 2026 by rpki-client