This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa File: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (raw, json) Hash identifier: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc= Subject key identifier: 36:7D:8C:D1:08:C5:44:06:BF:4F:67:26:60:35:54:1D:32:79:19:7B Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B775943E91190132697F461B6A9913002 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.95.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:43:e9:11:90:13:26:97:f4:61:b6:a9:91:30:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=367d8cd108c54406bf4f67266035541d3279197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:55:92:69:47:e9:3d:af:b0:91:50:40:4e: 84:da:02:5c:4a:a9:e2:42:42:43:dc:0b:f5:33:70: 0e:fa:5a:e1:9f:8b:6f:9d:2e:d0:fb:9c:59:46:f1: d5:bf:b0:a3:5e:01:d5:cb:21:66:11:ce:d1:09:5e: 04:7b:a4:9b:2b:be:52:9d:70:52:59:b7:19:3c:dc: 1c:92:1a:a2:b1:04:aa:a2:d4:2c:46:e6:5f:28:cf: 4c:45:48:6b:d3:1c:a6:88:ff:37:18:cf:3c:05:c1: 83:cc:43:20:6e:ff:ea:ec:43:a5:26:a9:62:32:89: ef:12:ba:48:e3:cb:3d:a2:7a:7c:d9:ff:2e:c1:82: f9:c0:bc:ab:a0:87:1a:32:a7:a6:40:f3:de:e5:01: 05:25:73:d1:00:61:c0:bb:e5:fe:42:e6:5e:e8:08: 5c:25:5d:1a:0d:76:62:d7:13:9c:12:11:6e:40:bf: e1:d4:74:45:1f:13:e3:0e:56:33:44:41:e2:7c:c6: 6d:7b:3a:38:5b:90:4f:ef:a0:20:e5:f0:c9:36:9e: b6:0f:29:c3:05:96:b3:82:df:b2:e1:bf:01:8b:dc: b6:95:5d:d1:95:cd:6a:82:be:bb:e5:22:ad:a5:3c: 63:af:3e:9a:8d:5b:88:6c:6e:25:0c:d8:69:13:7f: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:8C:D1:08:C5:44:06:BF:4F:67:26:60:35:54:1D:32:79:19:7B X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.35.0/24 Signature Algorithm: sha256WithRSAEncryption 37:c9:cc:fe:67:76:6b:c9:e1:05:fb:bf:c6:f3:0b:99:fe:c2: 5b:7e:58:53:8d:28:4b:a7:36:0a:c3:11:fe:91:63:c3:81:0c: 52:cb:c1:56:23:61:41:6a:63:c2:ef:5f:2c:4e:8c:c8:1d:6e: d1:f2:d2:16:ce:cf:09:1d:53:2c:6f:9c:bf:81:d8:9d:7c:12: 37:55:80:f0:32:15:33:0b:68:e5:f5:f4:f2:5b:83:5c:8e:f7: 41:aa:fb:48:9a:fc:38:e2:22:f0:28:b8:bc:c7:d4:cf:c5:bc: e4:67:4e:06:b2:c5:03:98:1c:c6:e4:da:67:ed:76:c5:bc:1e: 69:4f:bd:df:d9:4c:71:66:06:61:bb:a5:7a:de:9c:77:1a:27: d4:32:40:5a:65:26:45:3e:70:7e:21:9b:06:08:75:a0:93:a8: 8d:89:4b:0d:72:5a:8b:45:5a:3c:60:03:36:92:e3:c9:8c:de: a4:53:64:cf:06:3c:e2:f4:00:44:29:66:53:4c:80:52:15:70: 31:ff:ea:46:ca:ac:9f:fd:85:b8:a0:da:13:49:fb:34:53:01: 43:44:6a:62:be:15:9e:7a:0a:dd:06:07:dd:e4:78:14:a7:46: 98:19:e0:0d:75:07:86:af:c3:b5:d1:a1:f1:32:c4:ce:48:ad: 87:5e:a7:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUPpEZATJpf0YbapkTACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjdkOGNkMTA4YzU0NDA2YmY0ZjY3MjY2MDM1NTQxZDMyNzkxOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFVVkmlH6T2vsJFQQE6E2gJcSqni QkJD3Av1M3AO+lrhn4tvnS7Q+5xZRvHVv7CjXgHVyyFmEc7RCV4Ee6SbK75SnXBS WbcZPNwckhqisQSqotQsRuZfKM9MRUhr0xymiP83GM88BcGDzEMgbv/q7EOlJqli MonvErpI48s9onp82f8uwYL5wLyroIcaMqemQPPe5QEFJXPRAGHAu+X+QuZe6Ahc JV0aDXZi1xOcEhFuQL/h1HRFHxPjDlYzREHifMZtezo4W5BP76Ag5fDJNp62DynD BZazgt+y4b8Bi9y2lV3Rlc1qgr675SKtpTxjrz6ajVuIbG4lDNhpE3/VmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZ9jNEIxUQGv09nJmA1VB0yeRl7MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvTm4yTTBRakZSQWFfVDJjbVlEVlVIVEo1R1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8jMA0G CSqGSIb3DQEBCwUAA4IBAQA3ycz+Z3ZryeEF+7/G8wuZ/sJbflhTjShLpzYKwxH+ kWPDgQxSy8FWI2FBamPC718sTozIHW7R8tIWzs8JHVMsb5y/gdidfBI3VYDwMhUz C2jl9fTyW4NcjvdBqvtImvw44iLwKLi8x9TPxbzkZ04GssUDmBzG5Npn7XbFvB5p T73f2UxxZgZhu6V63px3GifUMkBaZSZFPnB+IZsGCHWgk6iNiUsNclqLRVo8YAM2 kuPJjN6kU2TPBjzi9ABEKWZTTIBSFXAx/+pGyqyf/YW4oNoTSfs0UwFDRGpivhWe egrdBgfd5HgUp0aYGeANdQeGr8O10aHxMsTOSK2HXqeS -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:11 2026 by rpki-client