This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa File: Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa (raw, json) Hash identifier: jISOsp+VyfAbEpR6bMtcVFG4B/gUZHPkFBIPoaBcPQs= Subject key identifier: 35:EE:F8:2C:B6:B4:9D:FC:D9:B8:AE:13:1E:70:FA:04:62:88:33:B4 Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Certificate serial: 019B7CED224723F2C24CBC9EC85091212954 Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa Signing time: Fri 02 Jan 2026 04:17:53 +0000 ROA not before: Fri 02 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49523 IP address blocks: 91.213.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:22:47:23:f2:c2:4c:bc:9e:c8:50:91:21:29:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Validity Not Before: Jan 2 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35eef82cb6b49dfcd9b8ae131e70fa04628833b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:d0:0e:22:8d:05:ac:97:14:15:f3:6c:3d: 20:37:ee:dd:13:58:71:23:70:fe:4c:56:d2:be:43: a4:9b:a4:2f:cd:69:0e:7e:bb:8d:e5:9d:74:e4:d2: f5:73:50:df:56:ab:46:6c:5a:63:80:d9:e5:dc:a4: 20:13:eb:d4:31:39:52:16:df:3d:01:16:8a:0f:94: 61:d9:bb:d5:27:f8:c2:26:5d:55:f6:20:52:31:c8: 6a:ae:a6:6e:85:54:a8:42:35:b0:70:0c:4d:d1:e2: ad:d0:32:21:8b:0d:fe:66:2b:d2:5f:a9:05:f4:d2: e1:49:22:b7:fb:28:48:3d:e4:ad:03:e1:ca:fd:e3: a2:ab:9d:a2:ac:fe:32:5e:b9:b7:19:6e:80:53:0d: b8:23:8f:19:75:02:b7:45:35:d4:bb:14:05:50:f5: ae:60:f3:4d:a8:18:fb:52:98:80:d9:ad:42:81:2f: ac:9e:7d:71:00:81:08:ac:12:08:a1:4e:8b:fc:ab: d8:27:28:7d:c7:4e:4e:19:7a:7a:f4:a3:74:c2:4f: a7:26:67:22:ce:ff:d7:8e:14:b7:70:db:4d:c0:45: de:4e:e8:15:ab:ce:5f:82:eb:ff:47:50:0a:f8:17: 2c:44:69:55:c0:6f:34:01:04:03:ac:77:66:9a:57: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EE:F8:2C:B6:B4:9D:FC:D9:B8:AE:13:1E:70:FA:04:62:88:33:B4 X509v3 Authority Key Identifier: keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.22.0/24 Signature Algorithm: sha256WithRSAEncryption 24:3c:b4:6d:9c:df:dd:b3:14:14:5b:a0:91:9f:92:bd:dc:fc: 90:a8:43:9f:e7:7d:98:a9:b1:7a:6b:48:fa:e4:83:f0:a8:ca: f6:53:1f:b3:fb:28:d3:32:a3:4f:0e:7c:f3:4e:33:64:8c:85: dd:13:0e:3e:29:b3:a4:28:9d:14:f0:d3:1d:89:a9:13:c9:8d: c8:e3:27:f4:a8:32:76:5c:d2:4a:7d:20:df:90:28:5f:a2:fe: a6:9d:79:08:8a:13:e5:c8:30:9b:cd:5e:4f:19:91:35:c0:89: 0e:f1:81:ff:79:45:28:d1:98:e8:a8:52:61:ac:47:70:ce:a0: 80:84:e2:53:8e:75:4f:8d:2c:57:17:18:e6:34:f3:11:36:8a: 4d:9d:28:44:34:40:2e:91:de:98:35:d7:bf:cf:e9:91:f4:29: a9:60:93:b8:7f:52:a4:fd:33:ee:05:cd:cf:dd:50:4b:d1:a3: 64:95:04:66:5b:86:a1:43:cf:42:2d:c0:9e:0e:4f:97:1d:ef: 18:39:75:f6:d2:15:c6:0b:be:d6:0e:f0:3a:40:51:9f:03:25: 48:a8:58:42:0d:c9:dd:0b:d8:33:45:df:e4:ac:6e:f4:75:02: 01:91:9a:f6:e4:ee:90:13:bc:da:29:cb:19:c6:6d:e6:df:df: 6a:5c:69:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SJHI/LCTLyeyFCRISlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZDM5MDdmODExY2I4M2YxNmI4MTY3ODVlMzgwYmMyNGM4 YWMxOTMwHhcNMjYwMTAyMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWVlZjgyY2I2YjQ5ZGZjZDliOGFlMTMxZTcwZmEwNDYyODgzM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFDQDiKNBayXFBXzbD0gN+7dE1hx I3D+TFbSvkOkm6QvzWkOfruN5Z105NL1c1DfVqtGbFpjgNnl3KQgE+vUMTlSFt89 ARaKD5Rh2bvVJ/jCJl1V9iBSMchqrqZuhVSoQjWwcAxN0eKt0DIhiw3+ZivSX6kF 9NLhSSK3+yhIPeStA+HK/eOiq52irP4yXrm3GW6AUw24I48ZdQK3RTXUuxQFUPWu YPNNqBj7UpiA2a1CgS+snn1xAIEIrBIIoU6L/KvYJyh9x05OGXp69KN0wk+nJmci zv/XjhS3cNtNwEXeTugVq85fguv/R1AK+BcsRGlVwG80AQQDrHdmmlfEnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXu+Cy2tJ382biuEx5w+gRiiDO0MB8GA1UdIwQY MBaAFKPTkH+BHLg/FrgWeF44C8JMisGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2It MzMyMDI3MWZiM2FjLzEvTmU3NExMYTBuZnpadUs0VEhuRDZCR0tJTTdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2ItMzMyMDI3MWZiM2Fj LzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9UWMA0G CSqGSIb3DQEBCwUAA4IBAQAkPLRtnN/dsxQUW6CRn5K93PyQqEOf532YqbF6a0j6 5IPwqMr2Ux+z+yjTMqNPDnzzTjNkjIXdEw4+KbOkKJ0U8NMdiakTyY3I4yf0qDJ2 XNJKfSDfkChfov6mnXkIihPlyDCbzV5PGZE1wIkO8YH/eUUo0ZjoqFJhrEdwzqCA hOJTjnVPjSxXFxjmNPMRNopNnShENEAukd6YNde/z+mR9CmpYJO4f1Kk/TPuBc3P 3VBL0aNklQRmW4ahQ89CLcCeDk+XHe8YOXX20hXGC77WDvA6QFGfAyVIqFhCDcnd C9gzRd/krG70dQIBkZr25O6QE7zaKcsZxm3m399qXGnS -----END CERTIFICATE-----Generated at Mon Jan 12 03:23:17 2026 by rpki-client