This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/nfsrhorPXoDNAav4xcAjYkGLsDs.roa File: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (raw, json) Hash identifier: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo= Subject key identifier: 9D:FB:2B:86:8A:CF:5E:80:CD:01:AB:F8:C5:C0:23:62:41:8B:B0:3B Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5CFF88A4009D39A6A8123C480C82C7 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/nfsrhorPXoDNAav4xcAjYkGLsDs.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59584 IP address blocks: 92.63.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:88:a4:00:9d:39:a6:a8:12:3c:48:0c:82:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dfb2b868acf5e80cd01abf8c5c02362418bb03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:51:10:19:2e:fb:9b:7d:75:97:8e:dd:a3: 83:47:fd:4c:8f:65:b5:d6:8a:1a:89:d8:5c:93:7d: 10:84:7e:78:54:2f:bb:ff:e5:10:c2:b4:44:e0:e9: ab:22:9a:28:df:cb:1e:16:b3:b0:68:56:b5:df:b0: 00:8d:88:b5:ca:aa:eb:dc:02:a3:7d:6a:8b:d3:76: f9:ae:ec:d0:cd:c7:e1:82:6c:2d:49:34:35:57:93: 11:66:19:29:4a:09:9f:c1:9a:d1:a0:4e:55:ed:1a: b8:98:62:e3:6c:b4:8a:6a:aa:ba:46:9e:92:67:d2: 8d:cf:e2:c8:93:c1:5a:c0:3c:49:23:cd:1d:9b:9b: 18:73:b3:8b:00:91:99:11:8b:8d:d8:1e:5d:80:75: f6:06:3b:f9:6a:36:73:85:be:bc:e7:e6:6b:e7:e4: 76:11:65:48:b5:34:b4:f6:8b:63:e1:f6:f4:13:e3: 33:9f:15:07:c4:e0:09:00:c9:51:71:a7:96:8c:2a: 49:1f:54:e9:ff:68:40:d7:0f:91:7f:3b:fe:e4:3d: 29:62:27:5f:1f:b3:6f:37:86:51:f2:57:31:7a:2a: dd:66:3f:16:8a:af:ca:d0:b3:54:0d:db:2b:e6:67: d4:6d:83:c2:e1:86:6a:0f:15:5f:2a:8a:b2:8b:09: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:2B:86:8A:CF:5E:80:CD:01:AB:F8:C5:C0:23:62:41:8B:B0:3B X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/nfsrhorPXoDNAav4xcAjYkGLsDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.200.0/24 Signature Algorithm: sha256WithRSAEncryption 44:3c:d1:5f:78:f4:6c:56:40:7a:63:56:7e:b8:6f:ce:df:ef: 5d:f6:17:4e:03:3a:98:1b:83:6c:69:8e:48:46:77:4e:64:78: f0:25:c6:c8:e3:be:dd:93:eb:78:15:6a:00:41:04:67:1c:96: a4:57:2b:61:52:6c:91:4c:f8:b6:e2:42:0f:7a:9b:f4:42:65: ec:65:8f:dd:a8:d0:ed:81:79:13:8c:86:06:30:05:e7:6c:5c: 6f:c3:1d:02:37:e3:4d:6a:20:e2:f0:f9:ed:62:fb:b7:9e:b7: a8:35:2a:2d:be:29:0f:27:60:86:16:4c:4b:4d:df:0c:2c:72: d9:94:65:26:4e:60:51:87:ba:9c:3c:38:cb:67:78:a9:c8:c0: 4d:21:82:97:0c:6d:c6:0d:0a:f4:e6:b7:86:8d:4a:54:e2:e7: 75:89:bc:56:29:1c:e0:e5:91:72:10:f6:a0:8d:7a:cb:e0:18: 65:76:00:5e:34:ef:b8:29:67:71:07:5e:0e:76:3e:38:ba:70: 53:ed:73:19:aa:87:7a:b9:39:e8:f3:8f:b6:b4:27:50:d7:0d: 0d:e2:17:13:7b:d1:da:50:35:0a:3a:4d:c4:7f:6f:e0:24:01: 26:cc:c5:db:e7:51:4f:80:ed:9b:75:d2:6d:20:12:d3:26:af: a4:b5:0f:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP+IpACdOaaoEjxIDILHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGZiMmI4NjhhY2Y1ZTgwY2QwMWFiZjhjNWMwMjM2MjQxOGJiMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i9REBku+5t9dZeO3aODR/1Mj2W1 1ooaidhck30QhH54VC+7/+UQwrRE4OmrIpoo38seFrOwaFa137AAjYi1yqrr3AKj fWqL03b5ruzQzcfhgmwtSTQ1V5MRZhkpSgmfwZrRoE5V7Rq4mGLjbLSKaqq6Rp6S Z9KNz+LIk8FawDxJI80dm5sYc7OLAJGZEYuN2B5dgHX2Bjv5ajZzhb685+Zr5+R2 EWVItTS09otj4fb0E+MznxUHxOAJAMlRcaeWjCpJH1Tp/2hA1w+Rfzv+5D0pYidf H7NvN4ZR8lcxeirdZj8Wiq/K0LNUDdsr5mfUbYPC4YZqDxVfKoqyiwlUyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ37K4aKz16AzQGr+MXAI2JBi7A7MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvbmZzcmhvclBYb0ROQWF2NHhjQWpZa0dMc0RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/IMA0G CSqGSIb3DQEBCwUAA4IBAQBEPNFfePRsVkB6Y1Z+uG/O3+9d9hdOAzqYG4NsaY5I RndOZHjwJcbI477dk+t4FWoAQQRnHJakVythUmyRTPi24kIPepv0QmXsZY/dqNDt gXkTjIYGMAXnbFxvwx0CN+NNaiDi8PntYvu3nreoNSotvikPJ2CGFkxLTd8MLHLZ lGUmTmBRh7qcPDjLZ3ipyMBNIYKXDG3GDQr05reGjUpU4ud1ibxWKRzg5ZFyEPag jXrL4BhldgBeNO+4KWdxB14Odj44unBT7XMZqod6uTno84+2tCdQ1w0N4hcTe9Ha UDUKOk3Ef2/gJAEmzMXb51FPgO2bddJtIBLTJq+ktQ9T -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:38 2026 by rpki-client