This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/nu9XCXuPflVxiBkepDLOxds4g2s.roa File: nu9XCXuPflVxiBkepDLOxds4g2s.roa (raw, json) Hash identifier: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0= Subject key identifier: 9E:EF:57:09:7B:8F:7E:55:71:88:19:1E:A4:32:CE:C5:DB:38:83:6B Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Certificate serial: 019B7834B30871E408EBE928A4BA6D1471B9 Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/nu9XCXuPflVxiBkepDLOxds4g2s.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197882 IP address blocks: 185.75.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b3:08:71:e4:08:eb:e9:28:a4:ba:6d:14:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9eef57097b8f7e557188191ea432cec5db38836b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:5d:2e:85:9e:cb:6d:a2:d0:39:31:0b:23: d3:16:df:ca:91:ec:24:c6:51:8d:ee:4c:03:32:58: 49:e0:ca:5c:07:86:b3:38:52:24:e2:f5:ef:4d:fd: ef:9c:dc:ea:de:8f:66:d2:07:dc:78:8f:04:10:c5: f8:ef:9e:59:ac:2e:04:68:74:ab:d8:33:6c:d2:53: fd:47:ee:98:36:35:e5:07:36:2f:7a:4a:84:ea:97: 46:a8:6b:bf:33:99:32:3d:b4:4c:b5:fd:30:bb:20: f9:43:38:44:39:89:eb:8c:56:f9:82:45:c4:ea:ff: 52:80:df:f3:b8:06:95:41:2c:b4:40:6f:e1:f3:6c: db:3c:75:98:e7:09:8b:86:a1:71:9f:5c:59:66:bd: f4:aa:a3:f6:f7:2f:c4:15:25:85:29:63:43:f4:c7: ec:81:46:a4:5a:f5:ef:0a:9d:3b:8c:1a:b4:27:4e: 88:f6:b9:8a:e2:ba:28:33:f7:e8:02:4b:0c:8a:ec: 05:4a:61:f6:b4:58:ef:ae:52:60:6c:62:56:a5:83: 6b:9b:26:11:a9:d0:61:8e:fd:ac:8c:81:42:e8:ea: 03:b0:8a:2e:9f:dd:85:12:2a:2c:6f:7b:a1:ff:1e: b8:15:fa:b1:96:7e:0f:0c:09:b7:54:ad:9f:00:45: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:57:09:7B:8F:7E:55:71:88:19:1E:A4:32:CE:C5:DB:38:83:6B X509v3 Authority Key Identifier: keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/nu9XCXuPflVxiBkepDLOxds4g2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.96.0/24 Signature Algorithm: sha256WithRSAEncryption c7:17:f6:5c:5e:c6:5c:d8:32:3d:d2:25:6a:43:91:1f:ce:dd: f6:5a:17:be:90:c8:5b:90:d5:11:5e:0a:39:dc:ae:3a:17:1e: 06:bc:8f:6f:12:84:f5:07:a1:ed:08:68:0f:a5:8b:3a:74:d9: 4a:5c:10:0d:da:4c:3a:81:23:97:e2:45:de:80:09:e0:a1:aa: b5:1d:14:9e:62:46:1c:86:65:8f:08:94:65:29:23:ea:60:87: 80:51:76:45:14:d7:c8:2c:f2:68:e2:84:29:18:d8:25:89:79: ba:7b:1c:4c:20:85:8e:df:02:94:e7:3c:7a:fe:fc:53:fe:9f: fd:55:13:4b:41:7f:d5:f0:32:fd:f9:d1:1a:ea:e2:29:2b:3d: 66:1b:96:de:7f:9e:8c:f8:fb:95:26:9b:51:cf:3a:89:7a:5e: 5a:67:8b:1e:a4:f2:c2:b9:6e:d6:cf:6c:8b:f8:a3:c6:4a:39: 4a:50:c5:28:94:b0:ac:c3:ec:fc:a5:d8:b8:94:01:c1:75:ce: cf:51:73:68:89:d7:62:1a:e1:3a:6d:1f:cb:c1:2e:f6:ff:4b: 5d:f2:36:a2:6f:90:2b:b3:80:f3:20:78:e1:28:df:b1:73:bc: cd:48:44:35:77:08:d5:06:7e:14:16:6f:77:65:14:b1:33:35: f7:bb:fe:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLMIceQI6+kopLptFHG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1 MzdhYWEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWVmNTcwOTdiOGY3ZTU1NzE4ODE5MWVhNDMyY2VjNWRiMzg4MzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpdLoWey22i0DkxCyPTFt/Kkewk xlGN7kwDMlhJ4MpcB4azOFIk4vXvTf3vnNzq3o9m0gfceI8EEMX4755ZrC4EaHSr 2DNs0lP9R+6YNjXlBzYvekqE6pdGqGu/M5kyPbRMtf0wuyD5QzhEOYnrjFb5gkXE 6v9SgN/zuAaVQSy0QG/h82zbPHWY5wmLhqFxn1xZZr30qqP29y/EFSWFKWND9Mfs gUakWvXvCp07jBq0J06I9rmK4rooM/foAksMiuwFSmH2tFjvrlJgbGJWpYNrmyYR qdBhjv2sjIFC6OoDsIoun92FEiosb3uh/x64Ffqxln4PDAm3VK2fAEXoPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7vVwl7j35VcYgZHqQyzsXbOINrMB8GA1UdIwQY MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt YmI0ZDI0MmVkMmNkLzEvbnU5WENYdVBmbFZ4aUJrZXBETE94ZHM0ZzJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUtgMA0G CSqGSIb3DQEBCwUAA4IBAQDHF/ZcXsZc2DI90iVqQ5Efzt32Whe+kMhbkNURXgo5 3K46Fx4GvI9vEoT1B6HtCGgPpYs6dNlKXBAN2kw6gSOX4kXegAngoaq1HRSeYkYc hmWPCJRlKSPqYIeAUXZFFNfILPJo4oQpGNgliXm6exxMIIWO3wKU5zx6/vxT/p/9 VRNLQX/V8DL9+dEa6uIpKz1mG5bef56M+PuVJptRzzqJel5aZ4sepPLCuW7Wz2yL +KPGSjlKUMUolLCsw+z8pdi4lAHBdc7PUXNoiddiGuE6bR/LwS72/0td8jaib5Ar s4DzIHjhKN+xc7zNSEQ1dwjVBn4UFm93ZRSxMzX3u/5x -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:31 2026 by rpki-client