This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nuhDQy2qCNnVVef3JletDDcJXEI.roa File: nuhDQy2qCNnVVef3JletDDcJXEI.roa (raw, json) Hash identifier: DMO56rXMB7HoAGbZN7FRVO4UYTTnLmlK/5n0SA7bCiI= Subject key identifier: 9E:E8:43:43:2D:AA:08:D9:D5:55:E7:F7:26:57:AD:0C:37:09:5C:42 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F15063E936BA24E6255DEDAF1C4DF32 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nuhDQy2qCNnVVef3JletDDcJXEI.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206647 IP address blocks: 81.12.57.0/24 maxlen: 24 81.12.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:06:3e:93:6b:a2:4e:62:55:de:da:f1:c4:df:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ee843432daa08d9d555e7f72657ad0c37095c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:9d:4a:a7:a8:d8:4b:37:93:17:3b:e2:82: 61:e8:08:a0:13:82:ee:99:32:5a:8b:a2:44:3c:72: 1e:39:6a:d2:92:ef:cc:b7:94:6c:0a:b1:a5:b1:d5: 9c:1a:97:66:9d:39:b6:cd:99:f7:95:13:7d:65:f6: 73:84:a3:80:31:2e:19:89:2c:9b:00:7d:b5:5f:08: 8f:1b:cc:6f:30:27:39:54:cc:2b:67:19:14:9e:b9: f4:f3:3e:c7:1a:68:68:f1:1e:82:25:c8:c7:59:9b: 86:39:e8:f8:cb:f6:59:d1:57:07:8c:1a:08:3f:08: e5:99:46:b5:c7:75:9d:a9:cb:fb:91:63:d0:c5:15: 11:c1:14:11:e2:d3:90:aa:be:c1:cc:c9:39:de:4f: 6f:64:2f:32:d4:46:b3:88:79:b4:42:e4:d3:df:a6: e1:04:90:c1:72:51:a8:a7:23:86:3a:17:f3:1b:d8: 0a:14:83:c1:16:dc:ae:5b:ae:2f:ec:38:c9:96:3a: 48:58:76:84:e2:d1:b8:2e:4e:e1:82:9a:45:3f:dd: 1b:7f:be:d1:3c:a2:f1:9e:1c:3c:e7:6e:e6:65:e8: 4a:e9:4c:1f:47:a4:6c:2b:a0:ae:04:9f:b4:33:02: 28:f5:51:82:29:5e:3a:42:6b:fd:6f:ef:43:7f:56: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:43:43:2D:AA:08:D9:D5:55:E7:F7:26:57:AD:0C:37:09:5C:42 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nuhDQy2qCNnVVef3JletDDcJXEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.57.0/24 81.12.92.0/24 Signature Algorithm: sha256WithRSAEncryption bc:ad:f2:67:37:3e:bd:6f:9b:98:1c:b4:ae:b7:c5:cd:c2:88: 4f:34:81:fa:dc:eb:a8:a9:e3:4f:72:59:27:db:ee:81:cd:a3: fb:16:d4:df:96:0a:bf:79:d4:24:ac:9e:da:f9:2e:90:70:5c: a8:ef:f7:6f:6a:23:5f:5f:39:28:2e:bb:05:28:a4:07:61:e8: ba:64:ed:4b:7a:fd:00:ba:64:97:30:8b:6d:d7:5e:8f:e7:d3: 27:4d:fc:cf:cd:c7:d4:e2:04:38:70:b0:d1:4f:ca:d5:e9:06: 97:71:52:99:77:0a:c2:d4:11:73:cb:6b:7d:bd:0a:81:9d:f4: a3:9c:51:a0:7f:4e:b1:74:9c:ea:cb:ec:c5:5c:cc:f1:e5:5d: 96:11:ae:7a:fc:b5:05:41:93:23:23:49:a5:56:50:45:d6:3d: b0:b3:ab:42:d5:db:26:ef:06:91:23:97:74:fe:47:f8:e2:f2: c7:37:47:08:75:67:ae:98:b9:a2:a0:70:64:58:68:78:1a:09: 8b:a3:82:3a:a4:ea:b8:80:b9:28:b1:e3:b4:43:4f:2f:f7:64: 44:ac:9d:46:02:ed:ac:ee:9d:d7:06:2f:b4:0a:a2:b6:e6:ec: d1:85:17:48:2f:b3:e9:5f:53:24:f6:bc:47:61:20:54:cf:f0: ed:c6:32:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQY+k2uiTmJV3trxxN8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWU4NDM0MzJkYWEwOGQ5ZDU1NWU3ZjcyNjU3YWQwYzM3MDk1YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02idSqeo2Es3kxc74oJh6AigE4Lu mTJai6JEPHIeOWrSku/Mt5RsCrGlsdWcGpdmnTm2zZn3lRN9ZfZzhKOAMS4ZiSyb AH21XwiPG8xvMCc5VMwrZxkUnrn08z7HGmho8R6CJcjHWZuGOej4y/ZZ0VcHjBoI PwjlmUa1x3Wdqcv7kWPQxRURwRQR4tOQqr7BzMk53k9vZC8y1EaziHm0QuTT36bh BJDBclGopyOGOhfzG9gKFIPBFtyuW64v7DjJljpIWHaE4tG4Lk7hgppFP90bf77R PKLxnhw8527mZehK6UwfR6RsK6CuBJ+0MwIo9VGCKV46Qmv9b+9Df1YezQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ7oQ0MtqgjZ1VXn9yZXrQw3CVxCMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvbnVoRFF5MnFDTm5WVmVmM0psZXRERGNKWEVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQw5AwQA UQxcMA0GCSqGSIb3DQEBCwUAA4IBAQC8rfJnNz69b5uYHLSut8XNwohPNIH63Ouo qeNPclkn2+6BzaP7FtTflgq/edQkrJ7a+S6QcFyo7/dvaiNfXzkoLrsFKKQHYei6 ZO1Lev0AumSXMItt116P59MnTfzPzcfU4gQ4cLDRT8rV6QaXcVKZdwrC1BFzy2t9 vQqBnfSjnFGgf06xdJzqy+zFXMzx5V2WEa56/LUFQZMjI0mlVlBF1j2ws6tC1dsm 7waRI5d0/kf44vLHN0cIdWeumLmioHBkWGh4GgmLo4I6pOq4gLkoseO0Q08v92RE rJ1GAu2s7p3XBi+0CqK25uzRhRdIL7PpX1Mk9rxHYSBUz/DtxjI8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:47 2026 by rpki-client