This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa File: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (raw, json) Hash identifier: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q= Subject key identifier: 35:B1:91:2E:81:BF:1A:EE:02:54:71:94:DA:86:1E:42:AB:92:54:2E Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51BAC0FFA6334DAE7958149CA1EFD Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208111 IP address blocks: 45.135.212.0/24 maxlen: 24 45.135.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1b:ac:0f:fa:63:34:da:e7:95:81:49:ca:1e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b1912e81bf1aee02547194da861e42ab92542e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:e2:5e:69:07:74:e6:9f:08:8f:88:a4:d8: f0:1c:d7:01:b7:7d:d2:48:d7:4e:d0:7e:a5:36:be: 24:a1:c5:bb:7a:d1:58:9d:ea:04:d3:24:7b:86:52: 27:6d:2e:00:25:96:8d:8a:d7:77:a2:c3:92:77:46: 47:e2:92:1f:05:ce:d2:ab:59:9a:48:c2:ce:e6:13: 5b:86:45:b2:d1:e1:07:77:3c:12:0a:70:bb:aa:38: 0c:0a:6f:92:45:b1:ac:16:40:92:3a:90:1f:99:3a: a5:b8:75:c7:4b:74:a7:a4:8e:70:53:31:3a:3b:86: ae:5a:28:ee:25:00:fe:02:30:db:9e:e0:c9:03:66: d9:54:44:f7:17:7b:07:2a:a8:2e:0a:07:31:44:20: 7e:32:73:4b:7e:37:67:8d:65:7f:14:ee:af:d0:7d: 7d:7f:df:cd:64:a5:18:46:a0:b9:43:64:1c:85:96: d2:10:eb:9a:81:9b:23:36:7f:23:e4:bb:96:53:d1: b4:6c:cb:d4:d1:8b:9a:31:a0:3b:de:72:70:da:fa: 44:d9:33:2f:0a:a8:15:9c:55:42:73:e7:77:32:ce: 9d:62:f8:57:8b:57:da:a3:3c:4c:0e:d3:0a:cc:1e: 06:a6:e0:46:7c:cd:6b:33:c7:3d:b9:05:2e:30:a5: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:91:2E:81:BF:1A:EE:02:54:71:94:DA:86:1E:42:AB:92:54:2E X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.212.0/23 Signature Algorithm: sha256WithRSAEncryption a5:48:c4:3b:c3:ca:46:c9:53:e4:99:e5:13:97:f3:79:81:6d: 77:be:1c:1a:97:a3:b4:81:63:30:d0:9b:cc:d3:07:92:ef:10: ab:ff:58:2a:e1:d4:6b:91:9c:75:44:f8:a8:1a:53:6a:0d:b4: 89:67:77:35:29:d6:28:14:bc:9f:44:16:12:b7:c9:46:fa:e4: 69:10:b0:cb:08:b6:2f:ce:99:d6:dc:b3:0e:1a:48:21:0b:25: 48:cf:d4:97:48:1e:ec:65:21:ce:f9:0d:9f:a9:a7:ff:2d:49: 50:4b:c5:bd:69:70:5f:28:09:b8:c4:90:47:e9:be:4d:bb:c2: e5:a6:0d:31:45:df:55:d1:ec:fc:72:ff:26:ef:67:f3:1e:cf: 18:ab:6a:23:26:b7:15:e8:8e:6e:51:b5:f2:62:cc:6c:a1:f7: 21:5a:f5:92:ed:f1:7c:15:92:e3:9f:e7:27:09:bf:cc:cb:5f: ca:4e:27:77:de:7f:f1:92:6d:6b:a1:0e:09:9b:1a:4a:e5:ef: 28:93:83:e5:6d:02:47:f0:68:1f:e0:8b:67:df:c0:99:6d:8e: d9:a0:df:81:a9:12:8a:40:66:51:24:50:11:7a:bb:e0:10:bc: 2d:d3:91:93:04:11:82:f3:f2:f4:c7:61:cb:49:da:af:6c:5b: ec:39:3f:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRusD/pjNNrnlYFJyh79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWIxOTEyZTgxYmYxYWVlMDI1NDcxOTRkYTg2MWU0MmFiOTI1NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUXiXmkHdOafCI+IpNjwHNcBt33S SNdO0H6lNr4kocW7etFYneoE0yR7hlInbS4AJZaNitd3osOSd0ZH4pIfBc7Sq1ma SMLO5hNbhkWy0eEHdzwSCnC7qjgMCm+SRbGsFkCSOpAfmTqluHXHS3SnpI5wUzE6 O4auWijuJQD+AjDbnuDJA2bZVET3F3sHKqguCgcxRCB+MnNLfjdnjWV/FO6v0H19 f9/NZKUYRqC5Q2QchZbSEOuagZsjNn8j5LuWU9G0bMvU0YuaMaA73nJw2vpE2TMv CqgVnFVCc+d3Ms6dYvhXi1faozxMDtMKzB4GpuBGfM1rM8c9uQUuMKVoqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWxkS6BvxruAlRxlNqGHkKrklQuMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvTmJHUkxvR19HdTRDVkhHVTJvWWVRcXVTVkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYfUMA0G CSqGSIb3DQEBCwUAA4IBAQClSMQ7w8pGyVPkmeUTl/N5gW13vhwal6O0gWMw0JvM 0weS7xCr/1gq4dRrkZx1RPioGlNqDbSJZ3c1KdYoFLyfRBYSt8lG+uRpELDLCLYv zpnW3LMOGkghCyVIz9SXSB7sZSHO+Q2fqaf/LUlQS8W9aXBfKAm4xJBH6b5Nu8Ll pg0xRd9V0ez8cv8m72fzHs8Yq2ojJrcV6I5uUbXyYsxsofchWvWS7fF8FZLjn+cn Cb/My1/KTid33n/xkm1roQ4JmxpK5e8ok4PlbQJH8Ggf4Itn38CZbY7ZoN+BqRKK QGZRJFARervgELwt05GTBBGC8/L0x2HLSdqvbFvsOT8a -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:52 2026 by rpki-client