This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/nNBvu_nSPGHqA9h_MtyLsSN73UY.roa File: nNBvu_nSPGHqA9h_MtyLsSN73UY.roa (raw, json) Hash identifier: +QJ1/VDdtyvkWD7pbywb3gX3mlPQz4+BuVYL+Ebcgb8= Subject key identifier: 9C:D0:6F:BB:F9:D2:3C:61:EA:03:D8:7F:32:DC:8B:B1:23:7B:DD:46 Certificate issuer: /CN=17096a033650c8830fd56b3fe5ffd49a174d322e Certificate serial: 019BDF6E3A7766A49E02BA460BA0881B9D95 Authority key identifier: 17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/nNBvu_nSPGHqA9h_MtyLsSN73UY.roa Signing time: Wed 21 Jan 2026 07:21:41 +0000 ROA not before: Wed 21 Jan 2026 07:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 91.229.32.0/24 maxlen: 24 91.229.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:6e:3a:77:66:a4:9e:02:ba:46:0b:a0:88:1b:9d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17096a033650c8830fd56b3fe5ffd49a174d322e Validity Not Before: Jan 21 07:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cd06fbbf9d23c61ea03d87f32dc8bb1237bdd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:6f:9a:a5:ec:d2:46:c6:db:6e:e0:52:1d: 2d:15:5d:29:ed:0f:d7:ab:d8:b2:51:78:b1:8d:98: 44:7b:d0:a6:60:74:6e:22:02:1d:4c:f2:6d:87:95: 44:34:b8:cd:18:b3:b7:6b:ee:d1:63:e4:62:6b:af: 99:46:a5:19:3d:35:79:f5:ed:f1:5c:2e:97:0d:5e: 2e:f1:b4:aa:e2:81:fc:86:ef:90:94:5c:2f:e7:09: d7:99:21:c1:c8:a6:ff:7c:b7:01:5a:9f:fe:32:ac: 6f:b7:0f:00:2b:47:ff:e3:77:9d:21:45:b1:c6:a0: 61:23:98:14:b2:1b:9f:fc:60:ab:25:f3:5e:b2:51: c4:1e:16:b3:8b:90:38:84:ca:12:70:07:55:c0:7c: 2a:c6:6c:6f:65:c0:6a:41:7d:47:ee:f9:80:15:8e: a9:a5:c0:83:7b:5a:28:01:7b:3c:de:52:05:7c:ca: 5d:09:96:16:b1:a4:e4:7c:06:9d:06:5a:0f:cd:b5: 2b:3a:18:73:05:ce:16:a1:cf:a8:11:0f:db:8f:79: cd:ea:80:19:87:ff:ab:34:44:0a:7c:e9:d5:80:e6: 30:a6:fa:7d:de:d6:f9:08:36:80:45:26:9e:dc:6a: ff:cb:ad:fa:80:8b:1d:05:fd:c5:62:e8:1b:4b:34: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:6F:BB:F9:D2:3C:61:EA:03:D8:7F:32:DC:8B:B1:23:7B:DD:46 X509v3 Authority Key Identifier: keyid:17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/nNBvu_nSPGHqA9h_MtyLsSN73UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.32.0/23 Signature Algorithm: sha256WithRSAEncryption b7:59:27:9f:35:4c:4f:a5:81:4d:4c:54:96:23:f1:53:b7:78: 25:9b:18:a5:90:84:cd:58:2a:d9:fd:c4:7f:1b:3a:4e:13:32: 98:65:e9:7f:66:3a:f0:9a:6f:5c:dd:22:0f:11:aa:0a:df:c1: b8:5f:42:93:41:af:1f:c5:8d:00:3b:56:b3:37:84:4f:d0:bc: 07:65:3d:e7:6c:f2:ec:cf:0a:e0:50:07:56:4c:0f:dd:9a:9e: 57:e3:b3:04:ac:2d:cf:60:9a:2c:92:00:1c:91:f2:1b:2d:94: 3e:39:df:60:26:92:17:c2:c6:89:3d:5e:ac:59:01:84:27:7e: fc:74:d3:e3:6f:06:0c:4d:25:76:18:f6:85:ed:cc:62:d3:a7: ba:d9:7d:59:35:3f:a9:b8:8a:12:97:a3:19:f4:aa:21:b1:be: d2:c5:85:a6:a7:48:44:44:e5:e9:50:3d:b3:5c:f3:64:f4:30: f3:1c:7c:37:47:7f:52:9b:7b:97:4f:d1:f6:68:f7:c5:c6:d2: 4e:ec:11:5a:2a:62:5a:8b:a8:14:fa:8b:5f:78:bc:f1:b3:e1: 3f:91:fb:42:96:12:1c:d9:23:78:70:c1:b4:d6:af:e9:56:28: ae:e4:f2:e1:9c:ae:72:66:c4:7d:b5:38:d0:73:b6:84:47:66: a4:c1:18:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvfbjp3ZqSeArpGC6CIG52VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDk2YTAzMzY1MGM4ODMwZmQ1NmIzZmU1ZmZkNDlhMTc0 ZDMyMmUwHhcNMjYwMTIxMDcyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2QwNmZiYmY5ZDIzYzYxZWEwM2Q4N2YzMmRjOGJiMTIzN2JkZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDlvmqXs0kbG227gUh0tFV0p7Q/X q9iyUXixjZhEe9CmYHRuIgIdTPJth5VENLjNGLO3a+7RY+Ria6+ZRqUZPTV59e3x XC6XDV4u8bSq4oH8hu+QlFwv5wnXmSHByKb/fLcBWp/+Mqxvtw8AK0f/43edIUWx xqBhI5gUshuf/GCrJfNeslHEHhazi5A4hMoScAdVwHwqxmxvZcBqQX1H7vmAFY6p pcCDe1ooAXs83lIFfMpdCZYWsaTkfAadBloPzbUrOhhzBc4Woc+oEQ/bj3nN6oAZ h/+rNEQKfOnVgOYwpvp93tb5CDaARSae3Gr/y636gIsdBf3FYugbSzQwTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzQb7v50jxh6gPYfzLci7Eje91GMB8GA1UdIwQY MBaAFBcJagM2UMiDD9VrP+X/1JoXTTIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndscUF6WlF5SU1QMVdzXzVmX1VtaGROTWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lMzg4ZGQtYzc0ZC00MmYwLTgzZmIt MmU4NGYxZGZkYzYyLzEvbk5CdnVfblNQR0hxQTloX010eUxzU043M1VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lMzg4ZGQtYzc0ZC00MmYwLTgzZmItMmU4NGYxZGZkYzYy LzEvRndscUF6WlF5SU1QMVdzXzVmX1VtaGROTWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+UgMA0G CSqGSIb3DQEBCwUAA4IBAQC3WSefNUxPpYFNTFSWI/FTt3glmxilkITNWCrZ/cR/ GzpOEzKYZel/Zjrwmm9c3SIPEaoK38G4X0KTQa8fxY0AO1azN4RP0LwHZT3nbPLs zwrgUAdWTA/dmp5X47MErC3PYJoskgAckfIbLZQ+Od9gJpIXwsaJPV6sWQGEJ378 dNPjbwYMTSV2GPaF7cxi06e62X1ZNT+puIoSl6MZ9Kohsb7SxYWmp0hEROXpUD2z XPNk9DDzHHw3R39Sm3uXT9H2aPfFxtJO7BFaKmJai6gU+otfeLzxs+E/kftClhIc 2SN4cMG01q/pViiu5PLhnK5yZsR9tTjQc7aER2akwRgO -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:06 2026 by rpki-client