This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa
File: NvPHM9DbtscigEStbedrS4ZnrcE.roa (raw, json)
Hash identifier: YiK5qvrI0X5QgkIf9YEzw+6MmxBJxVAFj9mlF+7Uj4U=
Subject key identifier: 36:F3:C7:33:D0:DB:B6:C7:22:80:44:AD:6D:E7:6B:4B:86:67:AD:C1
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019B7758F69D55E23568ECE455A2331C14EF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa
Signing time: Thu 01 Jan 2026 02:17:57 +0000
ROA not before: Thu 01 Jan 2026 02:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216086
IP address blocks: 45.133.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:f6:9d:55:e2:35:68:ec:e4:55:a2:33:1c:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 02:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f3c733d0dbb6c7228044ad6de76b4b8667adc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:e4:78:05:66:98:70:ae:27:08:4a:18:50:
5c:11:15:0d:1d:7e:4f:8b:6b:66:64:57:69:b4:f6:
3d:2a:75:92:88:09:f4:50:38:14:8a:42:fb:46:9c:
a6:d6:0e:a9:1b:5b:f7:16:57:04:43:22:85:bf:dd:
a8:d1:a8:94:50:bb:c1:f9:01:b0:70:99:b4:34:5f:
1b:d8:94:d4:97:fb:33:e3:7d:76:4b:fd:8d:13:fe:
2f:45:53:96:64:31:47:fc:e1:0a:65:53:d4:71:e3:
21:5c:86:71:be:69:03:67:80:a0:29:30:de:b4:de:
0c:4e:86:bb:65:9b:70:c5:83:6b:6b:da:90:fc:29:
41:10:c4:78:b3:f0:a0:d1:6f:6c:e1:be:6c:68:23:
63:14:ff:7c:d0:ad:61:62:b8:69:e7:e9:28:3b:33:
a3:c1:cc:25:cd:38:a2:a4:b2:ad:20:6a:0a:9a:3d:
6b:bd:7a:6e:65:c1:52:0e:a6:15:51:07:f1:f5:74:
69:75:cf:b1:02:6a:e1:a7:21:86:c6:b0:6e:5a:bf:
62:c8:5f:d2:31:c1:a2:09:3a:ca:22:44:07:49:ec:
ef:e2:4a:dd:b9:d6:4e:d1:e9:a4:7e:ec:0e:be:52:
b6:ae:c9:7a:9d:48:b9:12:76:1a:40:5c:b1:81:c3:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:C7:33:D0:DB:B6:C7:22:80:44:AD:6D:E7:6B:4B:86:67:AD:C1
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:e7:a2:82:67:a0:8b:f8:33:53:2e:a0:e5:c1:fa:b7:8d:
cc:f2:b6:d5:aa:e7:b0:a6:8e:37:ed:e7:55:38:70:ad:37:f4:
d3:dc:8a:da:7b:07:75:db:39:70:f8:80:bb:d8:e7:00:e2:2f:
d7:88:06:9f:01:3a:1c:f3:91:72:7d:7d:6d:64:cd:d8:05:6d:
ef:58:9f:4e:9a:72:9a:2f:ff:04:06:65:b0:3e:8d:cf:03:66:
c6:cb:66:ec:23:52:be:e8:28:51:08:9c:61:f4:33:61:f5:bd:
b2:28:0d:71:96:66:b5:3a:cd:a2:a2:0f:10:15:aa:e0:65:86:
58:1f:0b:ee:7e:bc:d3:3c:24:a3:df:f0:b8:62:57:ac:d4:7c:
d4:2a:15:02:fe:64:3b:2a:40:ef:32:55:7e:98:3d:24:67:7d:
dd:6a:4a:25:90:04:89:8a:3e:23:92:21:99:19:6c:61:69:b9:
73:c4:59:96:f9:35:b5:3c:5a:bf:9a:16:af:36:aa:6a:0f:fa:
07:bf:c4:46:e0:cf:e1:b5:d5:e0:46:17:e6:ff:bb:8f:82:c5:
3a:64:e8:bb:28:d1:85:2a:55:7c:dc:4e:32:a9:b1:69:ea:db:
91:db:33:c6:ed:11:fe:91:7c:62:66:3b:43:7e:91:a8:c8:fe:
25:bd:88:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WPadVeI1aOzkVaIzHBTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmYzYzczM2QwZGJiNmM3MjI4MDQ0YWQ2ZGU3NmI0Yjg2NjdhZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYnkeAVmmHCuJwhKGFBcERUNHX5P
i2tmZFdptPY9KnWSiAn0UDgUikL7Rpym1g6pG1v3FlcEQyKFv92o0aiUULvB+QGw
cJm0NF8b2JTUl/sz4312S/2NE/4vRVOWZDFH/OEKZVPUceMhXIZxvmkDZ4CgKTDe
tN4MToa7ZZtwxYNra9qQ/ClBEMR4s/Cg0W9s4b5saCNjFP980K1hYrhp5+koOzOj
wcwlzTiipLKtIGoKmj1rvXpuZcFSDqYVUQfx9XRpdc+xAmrhpyGGxrBuWr9iyF/S
McGiCTrKIkQHSezv4krdudZO0emkfuwOvlK2rsl6nUi5EnYaQFyxgcNbJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDbzxzPQ27bHIoBErW3na0uGZ63BMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvTnZQSE05RGJ0c2NpZ0VTdGJlZHJTNFpucmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYVrMA0G
CSqGSIb3DQEBCwUAA4IBAQANsOeigmegi/gzUy6g5cH6t43M8rbVquewpo437edV
OHCtN/TT3Iraewd12zlw+IC72OcA4i/XiAafAToc85FyfX1tZM3YBW3vWJ9OmnKa
L/8EBmWwPo3PA2bGy2bsI1K+6ChRCJxh9DNh9b2yKA1xlma1Os2iog8QFargZYZY
HwvufrzTPCSj3/C4Yles1HzUKhUC/mQ7KkDvMlV+mD0kZ33dakolkASJij4jkiGZ
GWxhablzxFmW+TW1PFq/mhavNqpqD/oHv8RG4M/htdXgRhfm/7uPgsU6ZOi7KNGF
KlV83E4yqbFp6tuR2zPG7RH+kXxiZjtDfpGoyP4lvYg6
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:02 2026 by rpki-client