This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/NrFG9a7lhgdagV21jW_Y5WHIDU4.roa File: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (raw, json) Hash identifier: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4= Subject key identifier: 36:B1:46:F5:AE:E5:86:07:5A:81:5D:B5:8D:6F:D8:E5:61:C8:0D:4E Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Certificate serial: 019B7AC782F29FBF8E2A32F3139EE45AD637 Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/NrFG9a7lhgdagV21jW_Y5WHIDU4.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 91.223.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:82:f2:9f:bf:8e:2a:32:f3:13:9e:e4:5a:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36b146f5aee586075a815db58d6fd8e561c80d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:44:1c:2f:cb:38:f3:99:94:74:b8:fe:4a: 26:91:6e:49:1d:9a:87:59:15:23:94:b1:48:f3:1c: f6:4c:ee:8a:87:71:a8:55:6e:eb:44:dd:9d:23:fd: f5:96:08:cb:31:f9:82:e8:3a:fd:56:2b:ff:b1:e1: 7b:f9:ab:81:f5:6e:7b:65:0f:33:9a:2f:4d:23:12: 44:5f:2a:95:92:9f:91:6a:ab:19:67:74:f1:10:ae: f0:37:1b:d9:84:57:b9:0d:0e:93:db:3b:91:93:13: 30:c8:38:a2:b6:ba:fe:4f:bd:ab:20:d9:44:15:19: 2e:77:bc:f0:d0:fa:43:4a:97:bb:f9:64:a3:80:2c: 67:5e:c3:73:4b:75:13:21:ff:46:c3:d3:54:e2:ec: 05:21:d7:43:8a:38:98:2c:7b:a3:a9:dc:9e:34:3f: 3c:a0:a3:0a:61:16:05:d1:db:51:6b:05:9f:f2:37: 86:df:e1:c2:09:8c:ad:44:19:d1:8f:87:b7:a6:6b: 03:f2:7c:da:a1:a3:1f:83:71:86:1b:55:c6:1f:85: 05:c2:22:66:08:73:33:62:fe:2b:c3:c5:37:96:89: d4:57:fd:d8:d4:72:5f:cc:a7:8f:4d:cc:e7:b4:fb: 44:1d:f5:3a:b1:f9:92:2d:76:79:52:cc:f3:87:60: 98:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:46:F5:AE:E5:86:07:5A:81:5D:B5:8D:6F:D8:E5:61:C8:0D:4E X509v3 Authority Key Identifier: keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/NrFG9a7lhgdagV21jW_Y5WHIDU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.187.0/24 Signature Algorithm: sha256WithRSAEncryption 01:55:bb:88:6d:10:76:46:7c:0b:dc:88:cb:5b:6e:fe:17:bd: 82:4c:6d:78:3f:fb:34:b4:f9:b7:9d:83:14:ec:89:c8:eb:37: 9d:a1:34:73:2b:eb:ed:e3:e6:3e:d6:45:bd:7a:9a:78:f7:bf: c3:80:d1:8a:69:34:28:78:65:e2:ee:e3:e3:7a:d3:c3:5b:32: e2:8e:da:af:50:32:a7:e1:51:fb:36:a5:cd:12:96:25:72:2c: c2:92:b9:95:87:7d:fa:e8:10:33:d9:4c:63:60:bc:53:cc:89: 73:db:25:8d:5e:c5:93:51:91:16:f9:f6:3d:4b:05:3d:a4:a5: 88:cb:a0:a8:9f:7f:35:8b:bf:6e:12:d3:78:07:ef:77:8a:0a: fa:d6:e6:fc:df:27:18:d0:ee:41:69:99:9d:e5:ee:00:31:33: b3:a2:f3:d9:61:0c:6f:9e:e8:54:7c:03:09:a3:65:d1:00:2b: 06:bb:45:c8:25:ca:d1:87:18:36:ae:40:72:35:04:0f:0a:28: 9b:70:86:3c:27:f9:de:5d:b2:22:32:f1:10:e8:67:92:a4:ee: f9:5d:a9:50:4f:48:c5:f2:82:56:63:d1:a2:f6:56:d6:92:a3: 5d:46:85:6d:56:88:d3:2c:5c:14:fc:a2:d8:ae:39:a6:e5:00: c0:ab:c8:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4Lyn7+OKjLzE57kWtY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk OWZmMmYwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmIxNDZmNWFlZTU4NjA3NWE4MTVkYjU4ZDZmZDhlNTYxYzgwZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPlEHC/LOPOZlHS4/komkW5JHZqH WRUjlLFI8xz2TO6Kh3GoVW7rRN2dI/31lgjLMfmC6Dr9Viv/seF7+auB9W57ZQ8z mi9NIxJEXyqVkp+RaqsZZ3TxEK7wNxvZhFe5DQ6T2zuRkxMwyDiitrr+T72rINlE FRkud7zw0PpDSpe7+WSjgCxnXsNzS3UTIf9Gw9NU4uwFIddDijiYLHujqdyeND88 oKMKYRYF0dtRawWf8jeG3+HCCYytRBnRj4e3pmsD8nzaoaMfg3GGG1XGH4UFwiJm CHMzYv4rw8U3lonUV/3Y1HJfzKePTczntPtEHfU6sfmSLXZ5Uszzh2CYOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDaxRvWu5YYHWoFdtY1v2OVhyA1OMB8GA1UdIwQY MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt ZmJmMGVkM2Y5MTU3LzEvTnJGRzlhN2xoZ2RhZ1YyMWpXX1k1V0hJRFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3 LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+7MA0G CSqGSIb3DQEBCwUAA4IBAQABVbuIbRB2RnwL3IjLW27+F72CTG14P/s0tPm3nYMU 7InI6zedoTRzK+vt4+Y+1kW9epp497/DgNGKaTQoeGXi7uPjetPDWzLijtqvUDKn 4VH7NqXNEpYlcizCkrmVh3366BAz2UxjYLxTzIlz2yWNXsWTUZEW+fY9SwU9pKWI y6Con381i79uEtN4B+93igr61ub83ycY0O5BaZmd5e4AMTOzovPZYQxvnuhUfAMJ o2XRACsGu0XIJcrRhxg2rkByNQQPCiibcIY8J/neXbIiMvEQ6GeSpO75XalQT0jF 8oJWY9Gi9lbWkqNdRoVtVojTLFwU/KLYrjmm5QDAq8hW -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:58 2026 by rpki-client