This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa File: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (raw, json) Hash identifier: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY= Subject key identifier: 36:D0:E9:1E:56:39:04:10:C1:95:77:FD:A9:75:E7:64:2E:7F:E1:37 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80C24486617CD32ED91BAEC4C5E852 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198228 IP address blocks: 46.253.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c2:44:86:61:7c:d3:2e:d9:1b:ae:c4:c5:e8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36d0e91e56390410c19577fda975e7642e7fe137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:35:da:69:1e:ff:22:ec:bd:18:45:51:7e: bd:c4:f5:2a:69:25:ee:54:7d:e4:29:f8:ec:c2:f1: eb:11:ab:f4:2e:98:2c:fd:e6:da:a2:cf:4f:9a:c0: 4f:a4:d6:ab:4c:7e:ca:ab:4b:ee:67:cf:cd:fd:85: 7d:21:08:07:1b:d0:52:2f:ab:bd:44:68:b2:97:38: e5:c3:be:49:69:fc:54:e1:5f:3c:fb:4d:65:5e:2d: a1:54:36:6f:e6:43:64:3f:4e:c4:4a:c5:24:26:64: a5:4d:81:ce:b6:c7:14:ac:59:eb:a9:5e:a7:36:67: 40:07:37:59:ad:4a:e1:a6:8c:fe:f4:bd:0f:3d:ac: 86:50:1d:62:88:74:55:3d:9c:5e:a2:b4:9c:cd:13: c0:e3:d0:38:28:b6:42:96:94:f1:42:63:4d:94:2e: f7:57:17:55:dd:58:80:7b:9a:ef:53:c3:39:d3:69: 40:69:3a:62:70:40:14:16:ca:09:46:a3:81:05:e5: 7b:28:e0:39:10:85:30:87:f0:6a:a3:4c:e8:99:98: 29:88:7a:f2:27:80:be:07:80:fc:24:4d:e3:ad:a7: f6:db:b6:e7:ba:c5:c7:8e:a5:88:4c:5c:39:17:6a: f2:57:03:d7:12:3f:12:b7:b0:09:f6:92:6a:44:fa: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D0:E9:1E:56:39:04:10:C1:95:77:FD:A9:75:E7:64:2E:7F:E1:37 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.9.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f0:57:c2:27:ff:3c:ca:f4:b4:ef:4d:e9:11:12:c9:fe:60: a2:53:a2:ff:eb:db:73:6e:f5:01:74:2e:c0:88:fd:45:cd:4e: f0:fb:45:b5:6b:c6:1b:af:df:bb:1d:88:c4:88:99:b7:fc:39: b5:72:81:6e:30:3a:b2:eb:a1:32:5e:d5:79:7a:78:61:af:4b: d6:52:54:ac:04:53:bf:d6:1b:a7:64:1c:8a:96:3e:55:59:42: 18:fd:a5:4e:2f:7c:ec:de:9b:20:f5:35:bd:70:41:1c:2c:24: 69:d4:57:c3:a4:4a:3b:88:ae:a8:43:36:93:77:50:11:2f:8d: 90:80:68:0a:cf:d3:e9:40:ef:dd:87:2a:0f:b8:58:4d:0f:a1: 09:90:21:06:c4:53:c8:d7:5d:48:30:6b:ea:ea:59:67:2f:ee: 3d:0b:43:0a:91:04:f9:79:e2:bc:bd:f9:91:7a:62:38:ce:e6: 81:6c:bd:51:f9:ef:61:a0:63:50:b8:f1:98:b9:db:4a:af:47: fc:17:46:09:4c:9b:ac:e6:69:72:60:db:2c:68:6e:d7:cf:0f: a7:30:17:87:b5:c0:f7:d1:ea:19:ca:1a:36:a1:24:a9:20:7b: 4d:4f:12:f1:04:2e:d4:47:69:cb:ab:3b:29:b9:d6:ae:39:ee: ee:1c:bb:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMJEhmF80y7ZG67ExehSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmQwZTkxZTU2MzkwNDEwYzE5NTc3ZmRhOTc1ZTc2NDJlN2ZlMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzU12mke/yLsvRhFUX69xPUqaSXu VH3kKfjswvHrEav0Lpgs/ebaos9PmsBPpNarTH7Kq0vuZ8/N/YV9IQgHG9BSL6u9 RGiylzjlw75JafxU4V88+01lXi2hVDZv5kNkP07ESsUkJmSlTYHOtscUrFnrqV6n NmdABzdZrUrhpoz+9L0PPayGUB1iiHRVPZxeorSczRPA49A4KLZClpTxQmNNlC73 VxdV3ViAe5rvU8M502lAaTpicEAUFsoJRqOBBeV7KOA5EIUwh/Bqo0zomZgpiHry J4C+B4D8JE3jraf227bnusXHjqWITFw5F2ryVwPXEj8St7AJ9pJqRPrDmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbQ6R5WOQQQwZV3/al152Quf+E3MB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvTnREcEhsWTVCQkRCbFhmOXFYWG5aQzVfNFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv0JMA0G CSqGSIb3DQEBCwUAA4IBAQCZ8FfCJ/88yvS0703pERLJ/mCiU6L/69tzbvUBdC7A iP1FzU7w+0W1a8Ybr9+7HYjEiJm3/Dm1coFuMDqy66EyXtV5enhhr0vWUlSsBFO/ 1hunZByKlj5VWUIY/aVOL3zs3psg9TW9cEEcLCRp1FfDpEo7iK6oQzaTd1ARL42Q gGgKz9PpQO/dhyoPuFhND6EJkCEGxFPI111IMGvq6llnL+49C0MKkQT5eeK8vfmR emI4zuaBbL1R+e9hoGNQuPGYudtKr0f8F0YJTJus5mlyYNssaG7Xzw+nMBeHtcD3 0eoZyho2oSSpIHtNTxLxBC7UR2nLqzspudauOe7uHLvU -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:53 2026 by rpki-client