This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa File: nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa (raw, json) Hash identifier: x9G1Iq+NtdVi63p//emczmZZMCgqQAa74W6f9TfCdmE= Subject key identifier: 9C:84:4A:FF:90:4D:06:7C:34:04:E4:E8:3C:3F:54:83:7D:89:A3:7B Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3613DE8773A7C16F24DB2AF65D0475 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210485 IP address blocks: 89.34.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:13:de:87:73:a7:c1:6f:24:db:2a:f6:5d:04:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c844aff904d067c3404e4e83c3f54837d89a37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:75:02:a4:e0:dd:a6:b1:2b:e9:1e:30:58: 39:9a:29:72:dd:56:64:43:ec:fd:a9:76:e3:14:f5: f9:41:51:9b:63:a0:c8:29:a4:20:bc:35:b4:80:66: c1:dd:6a:97:27:00:9f:69:41:7b:83:78:9d:09:83: 4b:21:a4:36:54:7c:b4:3a:bc:56:18:a8:a6:41:37: 72:51:80:5d:2d:8b:81:93:41:45:b1:fd:ec:63:7c: 86:26:52:56:ec:c5:c1:53:b4:3e:06:fd:26:58:6d: d9:2d:af:ec:20:5f:ca:c7:e1:7a:e9:5b:43:b6:18: 0d:4b:97:68:56:5a:aa:c8:b3:dc:47:01:61:fc:0d: 0a:7e:b1:07:43:68:b8:41:97:72:8c:53:1e:4d:9b: c4:cd:ee:f3:9c:58:e2:39:9d:5e:ac:ea:a7:1e:86: b1:d3:1e:97:b6:f5:00:05:78:3b:d3:f8:5b:bf:fe: 76:5b:ab:b1:b6:a5:e5:ae:85:46:8f:cf:56:c1:34: 0e:74:b3:72:5f:21:7d:66:63:b4:d3:54:93:3d:51: 7c:67:06:58:9f:c3:4d:4b:57:66:69:ed:c5:17:ef: d9:36:5b:da:77:53:d8:d4:97:07:30:7e:52:43:89: 31:f3:f4:69:7a:8c:d1:8b:dc:9d:b5:6c:88:c2:e2: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:4A:FF:90:4D:06:7C:34:04:E4:E8:3C:3F:54:83:7D:89:A3:7B X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/nIRK_5BNBnw0BOToPD9Ug32Jo3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.1.0/24 Signature Algorithm: sha256WithRSAEncryption 20:eb:33:44:0c:ac:95:d2:41:44:ef:39:d8:25:6a:33:96:9a: e1:0f:74:31:6d:f0:f8:17:a2:16:2a:3b:73:5a:e7:c2:21:8f: 14:a2:62:6b:9d:63:f4:3e:79:d6:1c:9d:18:cb:38:c9:85:d0: 00:80:45:3e:df:2c:1d:a5:8d:59:c1:6c:61:fd:87:2a:47:74: e0:6c:0a:3f:8f:1d:86:15:a7:b8:bd:58:c6:d3:e0:4a:38:15: 4c:f4:46:61:c5:89:71:c5:70:22:ce:70:57:66:82:c5:ae:3a: 24:ee:5c:92:75:e5:c8:56:e3:ce:5e:a7:2c:01:ca:50:24:c1: ec:ba:5b:19:54:0e:43:76:e6:12:38:e3:a1:54:40:65:63:5e: 9c:07:20:3e:43:d2:ae:5d:43:21:3f:6b:f3:35:a9:bb:d1:7b: 2e:65:a3:a5:22:92:a0:c5:5d:dd:47:ae:64:19:f1:e2:69:74: b7:9a:e3:25:6b:f4:54:40:1b:17:cc:7e:92:60:35:4b:48:4b: 22:de:32:60:db:aa:65:e8:09:b7:b7:56:fe:36:75:ab:ea:6d: e3:c6:ff:57:bc:e9:ed:25:a2:12:4d:83:94:25:8c:52:1b:19: 22:03:03:71:a8:20:f3:f0:1a:43:60:1f:8d:46:80:73:46:c7: b0:05:be:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhPeh3OnwW8k2yr2XQR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzg0NGFmZjkwNGQwNjdjMzQwNGU0ZTgzYzNmNTQ4MzdkODlhMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51d1AqTg3aaxK+keMFg5mily3VZk Q+z9qXbjFPX5QVGbY6DIKaQgvDW0gGbB3WqXJwCfaUF7g3idCYNLIaQ2VHy0OrxW GKimQTdyUYBdLYuBk0FFsf3sY3yGJlJW7MXBU7Q+Bv0mWG3ZLa/sIF/Kx+F66VtD thgNS5doVlqqyLPcRwFh/A0KfrEHQ2i4QZdyjFMeTZvEze7znFjiOZ1erOqnHoax 0x6XtvUABXg70/hbv/52W6uxtqXlroVGj89WwTQOdLNyXyF9ZmO001STPVF8ZwZY n8NNS1dmae3FF+/ZNlvad1PY1JcHMH5SQ4kx8/RpeozRi9ydtWyIwuK4kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJyESv+QTQZ8NATk6Dw/VIN9iaN7MB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvbklSS181Qk5CbncwQk9Ub1BEOVVnMzJKbzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSIBMA0G CSqGSIb3DQEBCwUAA4IBAQAg6zNEDKyV0kFE7znYJWozlprhD3QxbfD4F6IWKjtz WufCIY8UomJrnWP0PnnWHJ0YyzjJhdAAgEU+3ywdpY1ZwWxh/YcqR3TgbAo/jx2G Fae4vVjG0+BKOBVM9EZhxYlxxXAiznBXZoLFrjok7lySdeXIVuPOXqcsAcpQJMHs ulsZVA5DduYSOOOhVEBlY16cByA+Q9KuXUMhP2vzNam70XsuZaOlIpKgxV3dR65k GfHiaXS3muMla/RUQBsXzH6SYDVLSEsi3jJg26pl6Am3t1b+NnWr6m3jxv9XvOnt JaISTYOUJYxSGxkiAwNxqCDz8BpDYB+NRoBzRsewBb5N -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:32 2026 by rpki-client