This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa File: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (raw, json) Hash identifier: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA= Subject key identifier: 34:78:D6:ED:D3:EC:C8:8A:B4:45:AE:A4:7C:9B:DB:D4:50:CF:3A:B7 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C129A92674ACEAD3C323F97C5935CAB Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 45.158.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:92:67:4a:ce:ad:3c:32:3f:97:c5:93:5c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3478d6edd3ecc88ab445aea47c9bdbd450cf3ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:23:f9:23:62:7a:aa:7c:cd:b8:59:04:8e: 86:fa:57:8b:6b:97:d1:39:83:2c:af:b8:d1:1e:69: 98:a9:cb:93:3f:67:fa:b3:07:b2:71:94:84:11:3b: 6d:5f:e7:0b:5e:6f:6b:7a:80:22:aa:b9:20:11:17: 56:5d:d2:0b:68:4e:c9:cb:57:86:cc:d3:cb:b0:99: 8b:80:b2:2a:40:63:bd:9f:be:f2:46:be:5b:15:24: ef:63:ef:09:f2:dc:1f:e5:2f:bb:8c:97:46:3c:f4: f0:d2:29:83:3d:c4:b6:b4:d7:4e:55:bc:9d:15:21: bb:6f:4d:a6:96:8f:3d:f8:a9:cd:16:67:4e:72:65: 54:56:cc:4b:cc:19:2d:d1:60:6b:2d:2f:6f:53:da: a1:21:53:a0:68:8c:65:44:b8:91:1f:0a:50:9f:c3: 00:e2:dd:5c:e8:18:67:62:30:e4:92:2d:49:70:ef: 2a:5c:cf:8f:d2:63:26:2a:29:50:08:87:66:8d:ac: 5f:d7:27:57:5f:39:1d:aa:cb:b1:db:57:cf:20:e4: 32:7f:1b:7e:61:51:52:68:67:ee:cb:bf:7f:d2:0b: 05:f2:5d:5d:06:cf:62:ef:7f:e6:18:21:d6:91:90: cb:65:26:b7:e7:28:d6:e9:b8:e2:60:8f:be:76:56: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:D6:ED:D3:EC:C8:8A:B4:45:AE:A4:7C:9B:DB:D4:50:CF:3A:B7 X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.76.0/23 Signature Algorithm: sha256WithRSAEncryption 95:37:7b:70:1d:88:3c:20:19:3d:df:d8:a3:fc:6b:0d:75:cb: c6:1c:1d:62:e3:85:3e:18:f2:18:f6:3b:86:ea:7c:7d:c4:76: 8f:27:2f:b6:ba:cd:1f:04:57:de:51:99:7c:e3:9d:90:85:24: f1:b0:de:87:83:3b:b0:cb:3d:f8:5b:b6:90:ac:6d:fd:d2:cd: fe:28:7d:49:26:52:87:48:26:2d:a9:78:ef:23:44:8f:89:86: 9a:36:bf:fc:b8:df:2c:eb:93:e2:16:b9:38:80:70:30:80:58: d8:ea:40:cc:04:d1:32:08:a9:4f:c6:83:02:77:53:e9:eb:c8: c1:3f:e0:14:79:c0:44:43:23:5b:50:89:74:56:04:1e:73:5b: a6:df:63:32:c7:54:6e:11:d8:08:6b:d3:0f:c6:07:c0:5e:8d: 2c:12:b6:02:9c:f6:62:41:16:bc:25:5e:90:9e:16:84:64:bd: e6:c6:af:62:bf:1e:fa:14:36:99:ff:e6:bb:da:ff:bf:de:06: 72:4b:34:d3:c8:60:2c:04:b6:ea:5f:f3:be:c0:1c:3b:b0:1a: 7e:cf:04:a7:ca:07:01:85:ee:c4:7c:ce:4e:65:55:bd:9f:41: 56:58:ee:17:d0:bb:14:d2:ae:38:95:07:d6:cf:bd:8a:1f:98: 0f:53:f2:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpqSZ0rOrTwyP5fFk1yrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDc4ZDZlZGQzZWNjODhhYjQ0NWFlYTQ3YzliZGJkNDUwY2YzYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoMj+SNieqp8zbhZBI6G+leLa5fR OYMsr7jRHmmYqcuTP2f6sweycZSEETttX+cLXm9reoAiqrkgERdWXdILaE7Jy1eG zNPLsJmLgLIqQGO9n77yRr5bFSTvY+8J8twf5S+7jJdGPPTw0imDPcS2tNdOVbyd FSG7b02mlo89+KnNFmdOcmVUVsxLzBkt0WBrLS9vU9qhIVOgaIxlRLiRHwpQn8MA 4t1c6BhnYjDkki1JcO8qXM+P0mMmKilQCIdmjaxf1ydXXzkdqsux21fPIOQyfxt+ YVFSaGfuy79/0gsF8l1dBs9i73/mGCHWkZDLZSa35yjW6bjiYI++dlYWwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDR41u3T7MiKtEWupHyb29RQzzq3MB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvTkhqVzdkUHN5SXEwUmE2a2ZKdmIxRkRQT3JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ5MMA0G CSqGSIb3DQEBCwUAA4IBAQCVN3twHYg8IBk939ij/GsNdcvGHB1i44U+GPIY9juG 6nx9xHaPJy+2us0fBFfeUZl8452QhSTxsN6Hgzuwyz34W7aQrG390s3+KH1JJlKH SCYtqXjvI0SPiYaaNr/8uN8s65PiFrk4gHAwgFjY6kDMBNEyCKlPxoMCd1Pp68jB P+AUecBEQyNbUIl0VgQec1um32Myx1RuEdgIa9MPxgfAXo0sErYCnPZiQRa8JV6Q nhaEZL3mxq9ivx76FDaZ/+a72v+/3gZySzTTyGAsBLbqX/O+wBw7sBp+zwSnygcB he7EfM5OZVW9n0FWWO4X0LsU0q44lQfWz72KH5gPU/J+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:06 2026 by rpki-client