This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/N8RSRMP8UAQKEFAGsHIuhNlTork.roa File: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (raw, json) Hash identifier: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg= Subject key identifier: 37:C4:52:44:C3:FC:50:04:0A:10:50:06:B0:72:2E:84:D9:53:A2:B9 Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Certificate serial: 019B7CEE4FD1C494E75DCD7EB9970490D751 Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/N8RSRMP8UAQKEFAGsHIuhNlTork.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209433 IP address blocks: 45.86.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4f:d1:c4:94:e7:5d:cd:7e:b9:97:04:90:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37c45244c3fc50040a105006b0722e84d953a2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:6d:84:61:09:00:f8:71:5b:d5:3d:21:2d: a9:53:0f:49:90:5e:b7:73:e7:50:db:12:05:ab:54: dd:7d:85:f0:ff:af:6a:93:8c:08:47:02:db:2c:ba: f0:38:35:65:1c:4c:f6:18:13:5e:54:90:64:f5:64: c9:9a:1c:22:f3:bd:de:ea:99:c4:04:25:8c:2a:ca: b5:aa:2d:3e:25:d3:36:5a:73:07:91:da:f4:53:39: fc:f4:02:7b:b9:d1:1e:10:59:5f:e2:fd:24:14:cb: d8:28:e4:96:ca:e0:a2:b0:38:31:a1:2d:b6:17:38: 1c:d2:a0:49:f7:e8:b8:ac:e6:19:fc:05:56:ed:25: 65:34:72:b7:66:36:88:31:5c:1f:32:f3:81:e8:20: 49:f1:70:c4:ef:a0:2e:11:6a:c2:d0:c5:fe:ed:44: 4b:be:a1:71:82:8f:21:fb:22:ac:70:c5:fd:df:2b: bf:83:fb:1b:00:bb:43:f7:fd:59:9e:88:5e:9b:d3: 12:26:07:88:8f:7a:fb:e2:c9:3d:cf:5f:b5:97:ed: d5:75:fd:ba:2d:c8:17:cb:c8:99:e3:9c:b0:78:a7: 0d:d0:21:60:6d:43:19:06:08:0a:00:b0:f6:c0:8c: 33:ea:e1:4d:69:b5:3a:5b:6a:40:95:84:ce:db:76: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:52:44:C3:FC:50:04:0A:10:50:06:B0:72:2E:84:D9:53:A2:B9 X509v3 Authority Key Identifier: keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/N8RSRMP8UAQKEFAGsHIuhNlTork.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.136.0/24 Signature Algorithm: sha256WithRSAEncryption 32:b2:78:5f:5a:e7:43:79:29:ab:52:2f:1a:51:11:05:2e:fb: 32:17:f1:4b:95:6d:1d:f3:8b:e7:d8:4c:7c:d9:09:8b:49:24: 06:b3:b5:15:01:cf:6e:ac:b6:b3:19:28:df:c1:45:96:5e:e1: 2a:ac:b3:66:fe:6d:ab:37:b3:de:fb:dc:2e:18:cc:35:62:d5: 8d:54:3f:44:6a:49:21:42:cc:53:06:e0:9e:f7:f8:a6:7c:52: 79:8f:37:01:3a:a5:17:73:0e:81:44:27:9e:2a:db:66:3b:db: b3:7f:ab:6e:bc:fd:bb:17:b6:26:88:ac:cc:d4:a6:30:5f:4c: 8b:b0:03:ec:ea:85:f4:34:91:2f:77:e2:b1:26:0a:7b:6c:94: 1e:8c:b6:c2:fe:d1:3c:31:6f:a3:06:a2:83:6b:0e:66:d1:eb: c7:8e:63:39:09:1a:8b:f4:0c:7c:d6:aa:3a:b2:04:b6:83:88: 2d:ed:b4:1f:6a:bb:6f:dc:17:8b:ad:80:c3:fd:fb:34:81:75: a3:19:14:70:22:d8:58:b5:08:59:60:67:a2:fa:1c:8d:b4:d7: 06:98:a6:fd:8b:a9:eb:66:19:62:1a:1c:d4:c7:d9:83:42:f0: dd:c3:77:56:1e:72:4f:32:07:12:2c:93:fc:bf:79:56:12:82: 8a:6f:94:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87k/RxJTnXc1+uZcEkNdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0 MjIwZjMwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2M0NTI0NGMzZmM1MDA0MGExMDUwMDZiMDcyMmU4NGQ5NTNhMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37NthGEJAPhxW9U9IS2pUw9JkF63 c+dQ2xIFq1TdfYXw/69qk4wIRwLbLLrwODVlHEz2GBNeVJBk9WTJmhwi873e6pnE BCWMKsq1qi0+JdM2WnMHkdr0Uzn89AJ7udEeEFlf4v0kFMvYKOSWyuCisDgxoS22 Fzgc0qBJ9+i4rOYZ/AVW7SVlNHK3ZjaIMVwfMvOB6CBJ8XDE76AuEWrC0MX+7URL vqFxgo8h+yKscMX93yu/g/sbALtD9/1Znohem9MSJgeIj3r74sk9z1+1l+3Vdf26 LcgXy8iZ45yweKcN0CFgbUMZBggKALD2wIwz6uFNabU6W2pAlYTO23a01wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfEUkTD/FAEChBQBrByLoTZU6K5MB8GA1UdIwQY MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et MDUxODg2ZDBlZDRlLzEvTjhSU1JNUDhVQVFLRUZBR3NISXVoTmxUb3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVaIMA0G CSqGSIb3DQEBCwUAA4IBAQAysnhfWudDeSmrUi8aUREFLvsyF/FLlW0d84vn2Ex8 2QmLSSQGs7UVAc9urLazGSjfwUWWXuEqrLNm/m2rN7Pe+9wuGMw1YtWNVD9Eakkh QsxTBuCe9/imfFJ5jzcBOqUXcw6BRCeeKttmO9uzf6tuvP27F7YmiKzM1KYwX0yL sAPs6oX0NJEvd+KxJgp7bJQejLbC/tE8MW+jBqKDaw5m0evHjmM5CRqL9Ax81qo6 sgS2g4gt7bQfartv3BeLrYDD/fs0gXWjGRRwIthYtQhZYGei+hyNtNcGmKb9i6nr ZhliGhzUx9mDQvDdw3dWHnJPMgcSLJP8v3lWEoKKb5Rk -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:58 2026 by rpki-client