This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Njus34_tWTQbMZlE1tRpeQUdH2I.roa File: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (raw, json) Hash identifier: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ= Subject key identifier: 36:3B:AC:DF:8F:ED:59:34:1B:31:99:44:D6:D4:69:79:05:1D:1F:62 Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873 Certificate serial: 019B76EBA4313D73C40EEB91E71BEAA619AE Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Njus34_tWTQbMZlE1tRpeQUdH2I.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 95.107.150.0/24 maxlen: 24 95.107.151.0/24 maxlen: 24 95.107.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:31:3d:73:c4:0e:eb:91:e7:1b:ea:a6:19:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363bacdf8fed59341b319944d6d46979051d1f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:03:9b:f4:79:30:bb:51:cd:0b:c4:3d:dc: 42:4e:43:81:3d:ed:9a:ff:bb:13:ed:61:e5:2f:d0: 5d:42:d3:f1:b5:f7:39:75:87:d0:81:fc:1c:04:31: 45:6f:a0:80:a8:bc:b1:bd:76:34:0d:96:5f:40:d1: a6:5d:1c:37:2f:59:71:28:6a:15:b9:7a:8a:4c:72: d8:7d:40:2b:41:b8:f5:46:ac:49:6d:32:f8:90:6a: 6c:05:32:c5:5a:1f:71:50:87:72:5e:75:ba:81:9e: 76:1f:67:ff:5b:e7:73:e4:a4:a5:02:ce:49:32:99: 19:77:ad:36:98:57:e6:39:65:08:19:01:83:74:a8: 42:5f:81:83:03:09:26:f1:66:cd:99:06:12:da:a1: 94:13:40:e9:30:0d:da:48:df:72:52:0b:22:6a:c5: 0a:83:48:d4:c9:4b:9c:8e:31:e4:fa:fe:80:8b:8e: e5:6a:c4:08:2c:37:80:27:a9:84:e8:a6:83:44:c8: 2f:18:14:fd:79:fc:76:e9:e0:d4:65:55:62:34:41: 3c:85:84:36:5d:fe:39:a4:ee:1b:4c:f0:7e:b8:6a: 3f:b0:4a:35:ca:7b:2c:26:73:84:52:4d:5c:bd:d4: cc:04:fb:55:31:cb:2b:0c:00:19:75:de:6e:b6:12: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:AC:DF:8F:ED:59:34:1B:31:99:44:D6:D4:69:79:05:1D:1F:62 X509v3 Authority Key Identifier: keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Njus34_tWTQbMZlE1tRpeQUdH2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.107.150.0-95.107.155.255 Signature Algorithm: sha256WithRSAEncryption 8b:31:2c:31:b5:76:82:f3:bd:0d:b8:65:38:26:69:b9:fe:76: 38:35:8b:61:b9:48:b2:5f:84:c6:1a:c1:a2:59:50:94:df:aa: 81:93:99:c6:98:1d:9e:d7:07:3d:1e:d1:fa:45:28:e7:b8:cc: 31:4f:87:cc:b6:ad:fe:da:2b:00:fc:c2:15:2b:c9:12:37:d3: 2f:ed:1e:86:c0:1c:c4:d2:12:7b:20:75:9b:bf:03:4e:b1:7f: c7:77:bc:c1:28:c2:76:1b:96:6a:f6:6e:80:9e:27:97:28:1c: e5:cd:a4:db:c6:4f:01:3a:14:95:44:c8:6c:46:fb:49:cd:c7: 5b:d3:36:8a:43:46:fb:da:e5:d4:e5:ff:f4:9a:fc:26:18:4d: dd:69:f4:76:59:21:ab:25:d8:9c:1a:cc:b0:38:a5:ea:5c:d5: 76:aa:a9:88:0e:c6:c7:62:13:44:8a:42:68:72:86:10:eb:cc: c0:0f:4e:fb:1a:26:9d:7b:af:57:c1:ba:de:6b:55:70:28:55: f0:50:39:aa:40:99:54:59:c1:e0:ef:d2:00:7c:c1:8d:8c:7b: 42:89:a9:9e:16:2c:2e:68:a7:dd:bf:59:dc:b5:f1:95:a8:d6: 8a:14:34:51:75:b7:57:3d:e1:0c:a7:60:ba:65:f7:f3:e1:32: 10:ab:69:0d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt266QxPXPEDuuR5xvqphmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4 MjA4NzMwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjNiYWNkZjhmZWQ1OTM0MWIzMTk5NDRkNmQ0Njk3OTA1MWQxZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoADm/R5MLtRzQvEPdxCTkOBPe2a /7sT7WHlL9BdQtPxtfc5dYfQgfwcBDFFb6CAqLyxvXY0DZZfQNGmXRw3L1lxKGoV uXqKTHLYfUArQbj1RqxJbTL4kGpsBTLFWh9xUIdyXnW6gZ52H2f/W+dz5KSlAs5J MpkZd602mFfmOWUIGQGDdKhCX4GDAwkm8WbNmQYS2qGUE0DpMA3aSN9yUgsiasUK g0jUyUucjjHk+v6Ai47lasQILDeAJ6mE6KaDRMgvGBT9efx26eDUZVViNEE8hYQ2 Xf45pO4bTPB+uGo/sEo1ynssJnOEUk1cvdTMBPtVMcsrDAAZdd5uthKR6QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDY7rN+P7Vk0GzGZRNbUaXkFHR9iMB8GA1UdIwQY MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt ZDY3YTYxZDU0MTZkLzEvTmp1czM0X3RXVFFiTVpsRTF0UnBlUVVkSDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfa5YD BAJfa5gwDQYJKoZIhvcNAQELBQADggEBAIsxLDG1doLzvQ24ZTgmabn+djg1i2G5 SLJfhMYawaJZUJTfqoGTmcaYHZ7XBz0e0fpFKOe4zDFPh8y2rf7aKwD8whUryRI3 0y/tHobAHMTSEnsgdZu/A06xf8d3vMEownYblmr2boCeJ5coHOXNpNvGTwE6FJVE yGxG+0nNx1vTNopDRvva5dTl//Sa/CYYTd1p9HZZIasl2JwazLA4pepc1XaqqYgO xsdiE0SKQmhyhhDrzMAPTvsaJp17r1fBut5rVXAoVfBQOapAmVRZweDv0gB8wY2M e0KJqZ4WLC5op92/Wdy18ZWo1ooUNFF1t1c94QynYLpl9/PhMhCraQ0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:12 2026 by rpki-client