This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa File: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (raw, json) Hash identifier: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no= Subject key identifier: 07:B5:3F:3D:62:51:6C:13:C7:C8:16:28:25:A8:FF:4C:63:78:F8:61 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C6BF91A8D490A32E738A055E302B Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400395 IP address blocks: 45.155.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c6:bf:91:a8:d4:90:a3:2e:73:8a:05:5e:30:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07b53f3d62516c13c7c8162825a8ff4c6378f861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:42:2d:70:5a:a9:76:58:0e:61:b6:f8:91: c5:fb:23:e9:96:6d:f7:3c:40:30:15:cb:52:25:dd: 81:43:74:ed:98:62:a0:93:6c:68:f0:c9:0b:20:4f: a2:82:62:e8:40:71:1f:09:be:11:03:b2:fb:bd:73: 08:e0:0b:1f:73:1b:59:1a:48:67:94:1b:d8:52:59: 99:e8:58:20:f8:74:6c:85:13:91:8d:37:b7:22:f4: 5f:df:42:f2:3f:c6:27:d8:4b:bc:58:77:8c:15:12: 11:df:d6:82:a9:40:a7:c1:6e:b6:b0:5c:ed:c1:08: 3f:0c:04:c6:d1:87:49:f7:14:2e:71:25:c2:dd:70: 62:0c:bc:82:2e:9d:db:a1:57:4b:2a:3c:7d:aa:fa: 96:71:77:ff:f6:60:9d:aa:8a:be:5d:ce:39:09:62: bd:0f:64:1e:4a:64:d7:18:e3:8c:60:da:54:f5:2a: 8c:d0:09:6c:48:32:d4:ce:11:db:d6:47:e9:30:0d: a2:6c:5f:82:53:6e:69:73:80:e4:02:5f:30:50:27: d0:57:ae:63:e3:03:e0:79:8a:3b:d7:0c:0f:d1:49: b6:ea:0a:87:29:bc:06:2b:a1:8e:a9:cc:27:5c:cc: e3:9c:29:28:91:01:f5:4d:83:45:74:d0:48:15:77: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:3F:3D:62:51:6C:13:C7:C8:16:28:25:A8:FF:4C:63:78:F8:61 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.255.0/24 Signature Algorithm: sha256WithRSAEncryption 07:40:01:27:d9:7b:78:2e:35:b8:74:12:54:fb:57:12:83:ee: 92:81:b1:85:b1:ab:af:41:58:f1:dc:5d:66:71:59:f8:3f:87: 73:a2:0a:36:d6:23:ac:b4:f2:51:98:97:f2:5f:d3:34:97:08: a5:c9:6e:df:97:ec:22:ec:2d:ae:23:11:52:82:e7:d9:51:d6: 8e:86:13:20:71:f4:1d:34:52:1f:44:41:de:9b:ac:89:b6:3e: f6:a4:02:f4:ef:88:cc:f3:68:47:dd:06:7d:5b:5c:24:fb:5c: e4:51:20:18:c4:98:5f:68:74:03:1f:c2:4f:56:98:3b:3a:c1: 15:57:8b:2d:42:f6:29:0e:bf:49:15:7b:22:38:45:d7:a1:d8: 97:a0:84:91:e1:7e:ef:e4:3d:c2:15:9a:53:f3:94:fd:c3:fc: a2:35:4a:78:50:38:e1:25:ca:2a:3a:bc:4c:15:4c:35:71:a2: 55:f0:73:b5:af:1f:e1:40:4a:8c:fd:05:e0:7a:06:67:7d:6a: fc:e0:0e:63:86:cc:2e:12:30:29:45:42:2b:b3:f0:4a:b2:2f: aa:99:5f:6c:65:53:38:ec:54:30:ed:4b:51:54:b4:b7:4f:99: 10:42:de:0b:04:4b:c0:57:49:60:04:79:e0:8b:e9:2c:bc:86: cc:a6:68:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nsa/kajUkKMuc4oFXjArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2I1M2YzZDYyNTE2YzEzYzdjODE2MjgyNWE4ZmY0YzYzNzhmODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg39CLXBaqXZYDmG2+JHF+yPplm33 PEAwFctSJd2BQ3TtmGKgk2xo8MkLIE+igmLoQHEfCb4RA7L7vXMI4AsfcxtZGkhn lBvYUlmZ6Fgg+HRshRORjTe3IvRf30LyP8Yn2Eu8WHeMFRIR39aCqUCnwW62sFzt wQg/DATG0YdJ9xQucSXC3XBiDLyCLp3boVdLKjx9qvqWcXf/9mCdqoq+Xc45CWK9 D2QeSmTXGOOMYNpU9SqM0AlsSDLUzhHb1kfpMA2ibF+CU25pc4DkAl8wUCfQV65j 4wPgeYo71wwP0Um26gqHKbwGK6GOqcwnXMzjnCkokQH1TYNFdNBIFXeLGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAe1Pz1iUWwTx8gWKCWo/0xjePhhMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvQjdVX1BXSlJiQlBIeUJZb0phal9UR040LUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZv/MA0G CSqGSIb3DQEBCwUAA4IBAQAHQAEn2Xt4LjW4dBJU+1cSg+6SgbGFsauvQVjx3F1m cVn4P4dzogo21iOstPJRmJfyX9M0lwilyW7fl+wi7C2uIxFSgufZUdaOhhMgcfQd NFIfREHem6yJtj72pAL074jM82hH3QZ9W1wk+1zkUSAYxJhfaHQDH8JPVpg7OsEV V4stQvYpDr9JFXsiOEXXodiXoISR4X7v5D3CFZpT85T9w/yiNUp4UDjhJcoqOrxM FUw1caJV8HO1rx/hQEqM/QXgegZnfWr84A5jhswuEjApRUIrs/BKsi+qmV9sZVM4 7FQw7UtRVLS3T5kQQt4LBEvAV0lgBHngi+ksvIbMpmhs -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:04 2026 by rpki-client