This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa File: NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa (raw, json) Hash identifier: 3Wjbtflt/jjOunqkUKEb+3Cki8OMoGu4zLrIQR/qwZo= Subject key identifier: 36:59:A0:24:7E:D3:D8:DC:A1:E4:BC:2D:AD:4E:F3:1A:F7:BD:B1:90 Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Certificate serial: 019B7F822D8ECC0B23702AC3C9128156DB82 Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa Signing time: Fri 02 Jan 2026 16:19:56 +0000 ROA not before: Fri 02 Jan 2026 16:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134450 IP address blocks: 45.83.186.0/23 maxlen: 23 45.83.186.0/24 maxlen: 24 45.83.187.0/24 maxlen: 24 45.86.28.0/22 maxlen: 22 45.86.28.0/23 maxlen: 23 45.86.28.0/24 maxlen: 24 45.86.29.0/24 maxlen: 24 45.86.30.0/24 maxlen: 24 45.86.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2d:8e:cc:0b:23:70:2a:c3:c9:12:81:56:db:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Validity Not Before: Jan 2 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3659a0247ed3d8dca1e4bc2dad4ef31af7bdb190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:a6:f3:a5:5a:97:42:d2:51:d2:c9:74:b2: fc:0f:56:73:a7:c9:0c:02:d1:9a:80:60:02:71:e0: 6a:83:c9:cd:ce:9f:c8:5d:9c:69:bd:16:3b:21:45: 86:fd:12:f7:e0:8b:3c:0e:7d:97:5c:90:42:9a:a1: d7:ef:cc:18:4a:3e:a4:dd:61:93:c0:4d:00:75:73: f5:7e:e1:8a:6d:d9:19:08:d1:ab:7d:47:8c:47:c7: 6f:a7:7a:0d:62:66:36:62:69:2d:91:99:ea:ca:e7: 36:5e:7a:6b:bf:c5:5a:71:0a:64:27:d8:a2:b3:c1: fc:ca:e3:96:fd:e4:f0:ef:ab:6a:82:c9:d6:58:ad: 12:d5:fc:71:ff:52:90:2b:0b:d4:24:b0:72:75:a4: d6:72:d6:ac:e1:17:d8:29:54:a5:3f:2f:92:35:10: 4d:34:03:8a:e2:21:49:38:0d:97:b8:71:cc:9a:3c: d8:2e:7d:d8:d8:59:48:29:4d:09:3e:cf:ba:fe:e7: 38:6e:97:39:d2:5d:13:2b:cd:e1:a6:f7:88:ff:44: 22:26:01:df:38:8e:76:92:1a:52:48:39:5c:13:8a: ac:b2:9b:9c:b1:0a:f1:64:9c:e4:46:5a:fd:9d:bb: 73:82:7d:10:da:15:07:09:37:27:74:e8:a6:23:95: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:59:A0:24:7E:D3:D8:DC:A1:E4:BC:2D:AD:4E:F3:1A:F7:BD:B1:90 X509v3 Authority Key Identifier: keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.186.0/23 45.86.28.0/22 Signature Algorithm: sha256WithRSAEncryption 04:0c:24:84:a0:1e:9a:d3:4b:a4:d7:23:7a:d3:68:a7:11:c9: 14:37:22:06:3b:91:98:cc:59:80:d1:0e:f8:e1:43:41:fc:06: 32:26:d9:32:df:e3:c4:78:1b:26:b3:86:1c:f3:14:7a:75:df: 4f:b8:80:18:fd:8d:c2:33:9f:a3:e9:50:eb:39:a3:78:9d:77: 85:ab:3f:89:51:a6:89:6f:71:38:3f:66:af:d7:71:90:9d:fb: 6e:99:dc:be:0d:67:be:68:82:95:1d:77:31:28:86:f2:bf:c9: d1:f6:a6:5e:11:42:cc:6b:91:f7:b8:59:46:9b:90:8f:17:86: ca:fe:45:2b:4e:27:94:3b:00:f0:08:61:6d:ff:96:54:30:5a: 35:95:07:12:07:ce:25:be:aa:f5:60:d6:a3:8b:e2:d4:91:e3: 8f:48:f6:b1:d2:35:bb:76:da:1f:14:a1:40:41:3b:70:d7:41: 2b:f0:19:56:5d:a6:d1:db:cb:41:76:fc:9a:75:c5:d4:b3:1e: ec:2f:56:45:44:6d:96:72:f8:35:77:f2:28:f6:97:cc:df:d4: 27:e9:70:96:36:ad:fc:43:ea:75:5e:8e:db:72:a5:7c:48:ff: 67:41:ef:17:2d:30:57:e5:9e:ca:cf:89:c1:e0:15:39:8a:f2: 44:33:b8:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gi2OzAsjcCrDyRKBVtuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4 OGU5MmMwHhcNMjYwMTAyMTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjU5YTAyNDdlZDNkOGRjYTFlNGJjMmRhZDRlZjMxYWY3YmRiMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9+m86Val0LSUdLJdLL8D1Zzp8kM AtGagGACceBqg8nNzp/IXZxpvRY7IUWG/RL34Is8Dn2XXJBCmqHX78wYSj6k3WGT wE0AdXP1fuGKbdkZCNGrfUeMR8dvp3oNYmY2YmktkZnqyuc2Xnprv8VacQpkJ9ii s8H8yuOW/eTw76tqgsnWWK0S1fxx/1KQKwvUJLBydaTWctas4RfYKVSlPy+SNRBN NAOK4iFJOA2XuHHMmjzYLn3Y2FlIKU0JPs+6/uc4bpc50l0TK83hpveI/0QiJgHf OI52khpSSDlcE4qsspucsQrxZJzkRlr9nbtzgn0Q2hUHCTcndOimI5UHDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDZZoCR+09jcoeS8La1O8xr3vbGQMB8GA1UdIwQY MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt NjQ0YmQwZmM3ZjgwLzEvTmxtZ0pIN1QyTnloNUx3dHJVN3pHdmU5c1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVO6AwQC LVYcMA0GCSqGSIb3DQEBCwUAA4IBAQAEDCSEoB6a00uk1yN602inEckUNyIGO5GY zFmA0Q744UNB/AYyJtky3+PEeBsms4Yc8xR6dd9PuIAY/Y3CM5+j6VDrOaN4nXeF qz+JUaaJb3E4P2av13GQnftumdy+DWe+aIKVHXcxKIbyv8nR9qZeEULMa5H3uFlG m5CPF4bK/kUrTieUOwDwCGFt/5ZUMFo1lQcSB84lvqr1YNaji+LUkeOPSPax0jW7 dtofFKFAQTtw10Er8BlWXabR28tBdvyadcXUsx7sL1ZFRG2Wcvg1d/Io9pfM39Qn 6XCWNq38Q+p1Xo7bcqV8SP9nQe8XLTBX5Z7Kz4nB4BU5ivJEM7ix -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:38 2026 by rpki-client