This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NQ95q7_fBq4hFcM7C69i14yhMnM.roa File: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (raw, json) Hash identifier: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI= Subject key identifier: 35:0F:79:AB:BF:DF:06:AE:21:15:C3:3B:0B:AF:62:D7:8C:A1:32:73 Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019B7CEDB02F353D42BE6633F77B5130B958 Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NQ95q7_fBq4hFcM7C69i14yhMnM.roa Signing time: Fri 02 Jan 2026 04:18:30 +0000 ROA not before: Fri 02 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207475 IP address blocks: 45.87.88.0/24 maxlen: 24 2a10:2f47:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b0:2f:35:3d:42:be:66:33:f7:7b:51:30:b9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=350f79abbfdf06ae2115c33b0baf62d78ca13273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ec:18:4a:9c:30:b9:41:16:e2:0b:9a:60:27: c9:5e:81:3a:71:9d:f0:b4:e7:c3:88:d0:ea:3b:28: c8:76:0c:ac:22:6f:11:3a:03:e3:9d:6d:8d:01:ee: 70:62:f3:c2:c6:7d:d8:15:44:18:70:ba:70:29:a3: f5:f7:bd:fd:bb:d9:66:e0:5d:09:0f:a9:1a:f4:91: a4:2a:87:5c:5b:1d:4f:98:d9:4b:a1:e2:fd:b0:8a: 4d:f7:b9:b9:38:45:d2:c3:e2:0f:5b:bd:a2:a1:d1: 0f:81:c4:2f:b4:65:ea:74:99:a5:19:81:33:f3:19: de:fb:68:cf:4f:ca:29:ce:76:cc:05:60:b1:3b:7c: 01:25:21:b4:b5:8d:55:46:9b:a5:a5:34:7d:13:f5: 95:01:be:2e:cd:6a:07:d2:84:c8:95:d0:0c:d1:ad: 2d:14:71:f4:6f:17:4d:78:9a:41:26:26:c9:af:da: 57:7d:ea:15:5e:96:50:b4:df:59:44:7f:76:36:c1: 4a:b0:23:f8:87:71:83:b7:c6:db:96:cc:4f:41:b2: 57:1b:d4:b6:db:8b:c3:34:b5:f5:88:05:17:11:46: 6f:80:c2:68:7c:3e:15:f5:bc:8b:7b:27:d6:c4:47: fc:47:0f:f3:e0:ef:86:1c:26:c2:f3:35:72:5c:88: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:79:AB:BF:DF:06:AE:21:15:C3:3B:0B:AF:62:D7:8C:A1:32:73 X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/NQ95q7_fBq4hFcM7C69i14yhMnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.88.0/24 IPv6: 2a10:2f47:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 98:d6:0b:f7:78:68:23:46:7c:26:99:a1:df:9f:f7:d1:21:61: f5:2a:0d:8a:7d:df:78:01:84:d5:09:e6:37:df:9e:ba:a8:23: 0d:e0:8b:27:59:4f:05:41:5c:89:96:a3:3f:c5:eb:e8:13:92: 3e:9d:3a:09:aa:4b:2d:34:f3:56:78:57:f2:bc:8a:f6:af:98: 64:99:91:ce:44:3f:c5:07:99:ad:da:2c:53:69:31:46:4d:98: ba:3d:69:1a:10:38:a5:b2:39:0e:f7:c6:75:4b:f7:98:58:a0: 75:1f:be:29:7c:7a:da:f0:71:36:0f:ea:be:8d:4e:ed:70:f9: 00:0d:e4:49:db:33:e6:63:89:1f:26:b1:6f:15:ed:bd:a3:9b: 2e:44:f4:31:7c:2e:96:84:e9:28:ff:0c:7d:b1:f3:f9:11:fb: 63:c7:96:84:be:16:6d:76:f2:d1:8b:be:47:73:6a:c6:3f:4b: 7d:25:af:29:a5:4d:c1:73:3c:49:bc:6b:ca:c4:4b:87:77:31: 7e:cd:54:e6:6b:1e:16:dc:4a:06:a5:a4:ca:aa:78:85:f2:68: 9a:8a:70:41:9f:34:0c:f1:2a:dc:f4:08:fa:73:80:03:8e:41: 83:bc:d3:b2:54:0e:f2:ff:40:80:8b:b0:85:8a:91:58:93:15: ef:6f:1f:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87bAvNT1CvmYz93tRMLlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTBmNzlhYmJmZGYwNmFlMjExNWMzM2IwYmFmNjJkNzhjYTEzMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OwYSpwwuUEW4guaYCfJXoE6cZ3w tOfDiNDqOyjIdgysIm8ROgPjnW2NAe5wYvPCxn3YFUQYcLpwKaP19739u9lm4F0J D6ka9JGkKodcWx1PmNlLoeL9sIpN97m5OEXSw+IPW72iodEPgcQvtGXqdJmlGYEz 8xne+2jPT8opznbMBWCxO3wBJSG0tY1VRpulpTR9E/WVAb4uzWoH0oTIldAM0a0t FHH0bxdNeJpBJibJr9pXfeoVXpZQtN9ZRH92NsFKsCP4h3GDt8bblsxPQbJXG9S2 24vDNLX1iAUXEUZvgMJofD4V9byLeyfWxEf8Rw/z4O+GHCbC8zVyXIi4lQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDUPeau/3wauIRXDOwuvYteMoTJzMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvTlE5NXE3X2ZCcTRoRmNNN0M2OWkxNHloTW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVdYMA8E AgACMAkDBwAqEC9H//4wDQYJKoZIhvcNAQELBQADggEBAJjWC/d4aCNGfCaZod+f 99EhYfUqDYp933gBhNUJ5jffnrqoIw3giydZTwVBXImWoz/F6+gTkj6dOgmqSy00 81Z4V/K8ivavmGSZkc5EP8UHma3aLFNpMUZNmLo9aRoQOKWyOQ73xnVL95hYoHUf vil8etrwcTYP6r6NTu1w+QAN5EnbM+ZjiR8msW8V7b2jmy5E9DF8LpaE6Sj/DH2x 8/kR+2PHloS+Fm128tGLvkdzasY/S30lrymlTcFzPEm8a8rES4d3MX7NVOZrHhbc SgalpMqqeIXyaJqKcEGfNAzxKtz0CPpzgAOOQYO807JUDvL/QICLsIWKkViTFe9v H4I= -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:29 2026 by rpki-client