This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/NS4bJSf8JtisPPo4E4AUvgYiJkI.roa File: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (raw, json) Hash identifier: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M= Subject key identifier: 35:2E:1B:25:27:FC:26:D8:AC:3C:FA:38:13:80:14:BE:06:22:26:42 Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1 Certificate serial: 019B77C70DA070A7B902E1ED56CB94016155 Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/NS4bJSf8JtisPPo4E4AUvgYiJkI.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201228 IP address blocks: 81.90.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0d:a0:70:a7:b9:02:e1:ed:56:cb:94:01:61:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=352e1b2527fc26d8ac3cfa38138014be06222642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:eb:9e:d4:f3:ec:4b:b2:b2:d9:61:ed:b6: c3:34:81:19:d1:3a:27:1e:0f:94:2a:1c:98:cb:b9: 79:05:4c:39:92:0f:07:c2:74:f3:96:46:44:33:f0: 43:ea:c7:11:d0:f0:e4:2a:93:97:fd:5b:ec:1d:11: 12:3d:5c:58:ae:65:c7:f7:8c:51:2f:c0:47:b7:13: a7:73:00:2b:23:4b:9e:38:2a:90:96:59:42:d5:4d: 07:f1:02:f2:e6:28:a5:63:07:ee:18:04:aa:c1:47: 40:fe:ca:8a:10:c7:20:21:eb:28:f0:09:bb:d6:2e: c8:0c:6b:a5:8d:ec:83:90:b0:b7:9e:c2:3b:df:e0: a9:03:1e:ae:81:e1:a7:ca:e9:fb:37:17:68:8e:aa: 0e:29:3e:6b:28:bc:ec:30:98:0a:27:fa:09:14:68: 48:d7:26:32:b4:46:c0:d6:e5:a2:1d:f3:16:65:c1: 1e:98:02:2e:6a:20:ac:c3:8f:13:2e:79:a1:7a:85: ff:57:b0:69:30:13:32:1d:ee:d6:ff:e0:57:cf:6b: f6:ea:32:47:94:8d:f0:fc:44:fa:fa:69:d9:b1:81: 0f:be:e7:6e:59:bb:ba:9a:04:88:d8:32:b8:ff:24: 05:14:3b:0f:96:e6:45:ca:64:dd:73:f6:47:a4:9d: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2E:1B:25:27:FC:26:D8:AC:3C:FA:38:13:80:14:BE:06:22:26:42 X509v3 Authority Key Identifier: keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/NS4bJSf8JtisPPo4E4AUvgYiJkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.186.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8d:b2:a1:30:af:a6:89:7b:9d:ba:a5:61:18:82:ba:0b:ec: 5c:8f:43:1c:f6:92:69:ae:d1:8e:f1:e2:be:3b:d8:ff:37:d8: cd:53:88:23:0e:b1:d6:ec:d0:0f:12:bb:c9:8b:e0:70:8e:06: cc:2c:46:64:f2:74:fb:1c:e9:2d:b0:25:0c:a7:ae:50:70:fa: a3:ed:72:79:fb:d7:f7:07:b9:23:61:4e:f4:50:d8:6f:26:00: a7:f5:ca:3a:a9:5a:82:2d:2a:ce:de:ec:a5:50:ac:80:64:60: a8:f8:2b:ac:cb:e2:c0:55:3c:c3:c8:11:d6:25:ee:14:8f:6e: 5b:7b:9e:52:0d:36:43:ac:86:b7:2b:43:36:1a:3f:58:36:6f: 75:93:4a:c7:e3:18:95:6c:c5:40:7f:59:ec:25:5a:dd:6f:d1: 9e:5a:f1:55:9e:3e:0d:34:13:4a:0e:34:7c:01:3a:91:08:2c: 10:0b:a4:bf:6b:1e:1c:f6:82:c9:ce:50:3e:7b:72:3a:8a:e0: c6:54:a0:d1:4a:ae:3c:8c:f4:eb:ba:a1:f8:d6:78:a2:87:b9: 58:80:89:b1:a2:a8:ad:ea:d6:67:c1:3d:cb:a2:d3:51:28:33: 38:84:93:9e:2f:09:03:86:ed:f5:6e:a4:4b:e7:bf:58:7f:be: fa:0d:68:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw2gcKe5AuHtVsuUAWFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2YxZWU5MDY1M2I3YjgxNGQ2YjU0NTk0OWJkOTRkZGUw ZmM2YTEwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTJlMWIyNTI3ZmMyNmQ4YWMzY2ZhMzgxMzgwMTRiZTA2MjIyNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2TrntTz7Euystlh7bbDNIEZ0Ton Hg+UKhyYy7l5BUw5kg8HwnTzlkZEM/BD6scR0PDkKpOX/VvsHRESPVxYrmXH94xR L8BHtxOncwArI0ueOCqQlllC1U0H8QLy5iilYwfuGASqwUdA/sqKEMcgIeso8Am7 1i7IDGuljeyDkLC3nsI73+CpAx6ugeGnyun7NxdojqoOKT5rKLzsMJgKJ/oJFGhI 1yYytEbA1uWiHfMWZcEemAIuaiCsw48TLnmheoX/V7BpMBMyHe7W/+BXz2v26jJH lI3w/ET6+mnZsYEPvuduWbu6mgSI2DK4/yQFFDsPluZFymTdc/ZHpJ1PUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUuGyUn/CbYrDz6OBOAFL4GIiZCMB8GA1UdIwQY MBaAFGTPHukGU7e4FNa1RZSb2U3eD8ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjkt ODgwNGRhZDc4MGExLzEvTlM0YkpTZjhKdGlzUFBvNEU0QVV2Z1lpSmtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjktODgwNGRhZDc4MGEx LzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVq6MA0G CSqGSIb3DQEBCwUAA4IBAQB8jbKhMK+miXuduqVhGIK6C+xcj0Mc9pJprtGO8eK+ O9j/N9jNU4gjDrHW7NAPErvJi+BwjgbMLEZk8nT7HOktsCUMp65QcPqj7XJ5+9f3 B7kjYU70UNhvJgCn9co6qVqCLSrO3uylUKyAZGCo+Cusy+LAVTzDyBHWJe4Uj25b e55SDTZDrIa3K0M2Gj9YNm91k0rH4xiVbMVAf1nsJVrdb9GeWvFVnj4NNBNKDjR8 ATqRCCwQC6S/ax4c9oLJzlA+e3I6iuDGVKDRSq48jPTruqH41niih7lYgImxoqit 6tZnwT3LotNRKDM4hJOeLwkDhu31bqRL579Yf776DWjE -----END CERTIFICATE-----Generated at Mon Jan 26 12:57:04 2026 by rpki-client