This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nT0dZV9vpJOe4Ur34PRwza0i0vo.roa File: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (raw, json) Hash identifier: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30= Subject key identifier: 9D:3D:1D:65:5F:6F:A4:93:9E:E1:4A:F7:E0:F4:70:CD:AD:22:D2:FA Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Certificate serial: 019B7759367D8A5DDB88E7CEA4F51253FFEE Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nT0dZV9vpJOe4Ur34PRwza0i0vo.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209164 IP address blocks: 45.132.52.0/22 maxlen: 24 2a11:ab00::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:36:7d:8a:5d:db:88:e7:ce:a4:f5:12:53:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d3d1d655f6fa4939ee14af7e0f470cdad22d2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:8f:8f:6e:26:9e:87:0f:d4:0a:d0:58:26: 1f:10:00:d8:cb:6a:8e:d3:cd:d2:ae:7e:7a:a6:3d: c9:b1:d1:56:24:02:26:de:27:a0:a3:ce:5a:2b:5c: 0b:63:8a:69:69:70:7d:5b:50:20:4a:98:5f:95:9f: 58:d5:24:48:7e:1d:0d:37:d4:11:71:9c:91:4e:4e: f2:be:2f:4a:97:c1:a9:6e:42:7b:21:fa:78:29:97: d9:0c:76:42:34:9a:45:79:5d:71:18:5c:81:04:f6: 34:80:5a:01:9f:98:06:58:08:08:38:9d:a3:87:57: 8b:72:8a:13:e8:eb:d1:7c:22:c9:32:40:94:ba:78: ed:bb:26:92:6a:d2:5d:ca:d5:87:3c:fe:b7:02:bc: 1d:c7:35:91:2a:31:95:84:5a:2b:5d:ce:33:5c:a1: 40:22:e2:7a:89:b0:1d:ef:83:8c:da:aa:88:15:78: 78:a8:19:85:8b:cf:00:83:a6:c1:0a:f2:31:a1:5a: a4:b1:a9:5e:1a:b0:7d:25:0a:d4:f7:93:39:f6:63: ab:1e:67:16:a8:46:d1:eb:2e:74:53:81:5b:8d:59: c6:3f:65:28:d1:b5:f3:ab:5f:9f:51:2d:69:64:3b: 25:ad:50:12:13:a0:11:77:f4:e4:43:70:41:53:66: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:1D:65:5F:6F:A4:93:9E:E1:4A:F7:E0:F4:70:CD:AD:22:D2:FA X509v3 Authority Key Identifier: keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nT0dZV9vpJOe4Ur34PRwza0i0vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.52.0/22 IPv6: 2a11:ab00::/32 Signature Algorithm: sha256WithRSAEncryption c2:81:f2:cb:53:4d:0d:29:5d:dc:1c:e7:5d:08:86:cb:3a:d3: 8d:10:5b:58:81:a1:7a:e1:f8:ce:18:ee:a2:ab:bf:58:0d:2e: fd:48:a8:c8:5e:d6:c7:00:76:07:84:c0:19:7f:8a:04:a9:b4: aa:f5:d6:1f:bd:a7:c1:d5:87:38:ff:15:bb:76:ae:ce:85:b6: d7:82:f7:88:93:9d:fd:3a:ea:c2:7b:12:ef:29:8f:d3:e4:c0: 7d:dd:45:ee:8f:9d:16:70:a8:d8:57:43:3c:10:f9:f5:39:a6: a5:db:97:70:93:6c:1b:9c:e2:00:b2:60:cd:2e:36:f3:1e:1c: e6:a6:81:53:9f:4f:41:68:f6:9f:6a:50:95:43:88:a6:d2:30: 38:0d:5d:bf:bd:56:78:f1:8f:ac:41:6f:e4:54:0d:59:d6:6d: 3a:63:de:d4:64:f0:c4:4a:d2:e4:b3:eb:c8:79:09:b3:56:f6: 6d:0d:81:81:af:37:dc:e1:e5:c2:5e:6e:bd:66:21:d9:11:a1: cb:ff:91:7b:90:03:a1:b7:00:4a:6e:fb:58:d4:26:78:59:5c: 83:39:68:03:e8:fa:40:33:0c:3a:e2:b9:15:76:0b:77:78:40: 68:96:8e:e7:43:66:31:30:21:a9:dd:c5:16:ad:9b:e9:e7:3b: fd:76:d4:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WTZ9il3biOfOpPUSU//uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl OTVjYWYwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDNkMWQ2NTVmNmZhNDkzOWVlMTRhZjdlMGY0NzBjZGFkMjJkMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NKPj24mnocP1ArQWCYfEADYy2qO 083Srn56pj3JsdFWJAIm3iego85aK1wLY4ppaXB9W1AgSphflZ9Y1SRIfh0NN9QR cZyRTk7yvi9Kl8GpbkJ7Ifp4KZfZDHZCNJpFeV1xGFyBBPY0gFoBn5gGWAgIOJ2j h1eLcooT6OvRfCLJMkCUunjtuyaSatJdytWHPP63ArwdxzWRKjGVhForXc4zXKFA IuJ6ibAd74OM2qqIFXh4qBmFi88Ag6bBCvIxoVqksaleGrB9JQrU95M59mOrHmcW qEbR6y50U4FbjVnGP2Uo0bXzq1+fUS1pZDslrVASE6ARd/TkQ3BBU2bhgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ09HWVfb6STnuFK9+D0cM2tItL6MB8GA1UdIwQY MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt MjM4YzZkOGE0YzE3LzEvblQwZFpWOXZwSk9lNFVyMzRQUnd6YTBpMHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3 LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYQ0MA0E AgACMAcDBQAqEasAMA0GCSqGSIb3DQEBCwUAA4IBAQDCgfLLU00NKV3cHOddCIbL OtONEFtYgaF64fjOGO6iq79YDS79SKjIXtbHAHYHhMAZf4oEqbSq9dYfvafB1Yc4 /xW7dq7OhbbXgveIk539OurCexLvKY/T5MB93UXuj50WcKjYV0M8EPn1Oaal25dw k2wbnOIAsmDNLjbzHhzmpoFTn09BaPafalCVQ4im0jA4DV2/vVZ48Y+sQW/kVA1Z 1m06Y97UZPDEStLks+vIeQmzVvZtDYGBrzfc4eXCXm69ZiHZEaHL/5F7kAOhtwBK bvtY1CZ4WVyDOWgD6PpAMww64rkVdgt3eEBolo7nQ2YxMCGp3cUWrZvp5zv9dtSo -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:00 2026 by rpki-client