This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa File: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (raw, json) Hash identifier: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio= Subject key identifier: 36:3E:56:71:5C:4C:B0:1F:2C:D8:8B:E3:08:E7:D7:E8:E6:32:2F:D7 Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019B7D5C42CC31B17AEA6DACD9243F115B07 Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa Signing time: Fri 02 Jan 2026 06:19:16 +0000 ROA not before: Fri 02 Jan 2026 06:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209500 IP address blocks: 45.182.188.0/24 maxlen: 24 46.226.121.0/24 maxlen: 24 85.193.79.0/24 maxlen: 24 103.14.1.0/24 maxlen: 24 193.31.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:42:cc:31:b1:7a:ea:6d:ac:d9:24:3f:11:5b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Jan 2 06:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=363e56715c4cb01f2cd88be308e7d7e8e6322fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:48:d4:6c:36:91:48:ce:07:c7:1a:af:92: b6:7c:f5:78:35:57:a2:8e:ea:93:00:a9:95:7e:a6: 9e:28:2b:17:90:60:cd:d1:58:32:43:98:cc:39:c4: 6c:55:b7:33:b7:62:42:9a:ce:c1:b6:4b:84:15:c4: 49:ab:cd:5d:24:de:e5:33:4f:33:76:06:87:79:8d: 9f:ef:9a:1f:71:1f:be:d9:8a:b1:e1:d9:c7:93:1e: 66:f8:1d:96:66:db:68:61:36:82:95:0b:aa:70:8c: b2:c3:0d:a6:8c:1a:6e:54:ab:1b:f5:bc:f3:36:14: 1c:8e:50:b2:25:8b:6a:61:7d:62:aa:be:d1:30:74: 4c:fd:0a:96:00:00:3d:76:b4:a8:25:ba:80:2b:df: 4c:13:97:c8:c3:a8:13:e6:36:85:b2:d7:01:5b:ff: 03:b4:93:a3:c0:95:d7:6b:d9:9b:83:c6:27:29:bc: 29:08:04:34:5c:61:6d:46:07:6c:35:e3:c1:ec:05: 29:66:44:1b:db:af:4a:71:46:0e:83:a4:06:99:f4: 23:13:93:79:e6:8e:32:d3:2f:77:54:b3:13:46:d8: 5f:c3:fc:d9:e2:db:3b:e9:26:7d:5d:8f:d3:28:a4: 42:6c:36:42:46:01:ec:7d:78:67:4d:f6:83:73:75: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:56:71:5C:4C:B0:1F:2C:D8:8B:E3:08:E7:D7:E8:E6:32:2F:D7 X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.188.0/24 46.226.121.0/24 85.193.79.0/24 103.14.1.0/24 193.31.7.0/24 Signature Algorithm: sha256WithRSAEncryption 67:8c:86:e7:d6:09:72:e8:b7:e6:53:f5:1a:63:c0:31:33:c3: 23:42:dc:08:93:da:99:9a:50:47:55:29:58:95:40:2d:ec:61: aa:ea:74:3d:ec:95:30:4f:11:0d:3a:0b:24:5b:a0:5d:64:4a: 08:be:b2:2a:7b:1b:e1:51:eb:9c:36:1e:a4:75:26:cf:c6:9c: af:ba:6b:30:3d:d9:ab:7e:59:23:1f:db:9e:3e:6b:60:e6:44: a5:e7:6f:ae:68:ee:f7:db:ad:a9:58:0d:34:39:e4:1b:e9:68: e4:1a:ea:6f:f0:f6:1c:ce:d7:74:2a:32:d0:e0:1a:a6:7a:61: be:a7:62:73:cf:fe:83:b4:32:04:a8:51:b6:e0:39:70:aa:43: e3:23:3e:9e:d2:bc:df:b4:fd:8c:7f:29:be:da:6c:fe:63:9d: 48:fe:58:4a:a6:b8:b3:12:2c:11:50:56:ad:b2:c6:72:6d:2a: 64:67:ad:4a:d8:c9:15:36:ae:cd:ab:e5:0e:19:6c:bf:2e:48: 9b:b9:ef:43:a3:66:c7:b2:44:f8:36:65:56:58:cc:2a:7a:0d: 0b:b5:f2:ee:af:3c:66:6b:00:54:b4:6d:ee:04:58:ae:f9:e9: 96:d2:ec:42:4d:77:02:84:57:a5:61:04:d8:fd:02:39:da:ee: 2f:2e:3d:18 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XELMMbF66m2s2SQ/EVsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjYwMTAyMDYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjNlNTY3MTVjNGNiMDFmMmNkODhiZTMwOGU3ZDdlOGU2MzIyZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1I1Gw2kUjOB8car5K2fPV4NVei juqTAKmVfqaeKCsXkGDN0VgyQ5jMOcRsVbczt2JCms7BtkuEFcRJq81dJN7lM08z dgaHeY2f75ofcR++2Yqx4dnHkx5m+B2WZttoYTaClQuqcIyyww2mjBpuVKsb9bzz NhQcjlCyJYtqYX1iqr7RMHRM/QqWAAA9drSoJbqAK99ME5fIw6gT5jaFstcBW/8D tJOjwJXXa9mbg8YnKbwpCAQ0XGFtRgdsNePB7AUpZkQb269KcUYOg6QGmfQjE5N5 5o4y0y93VLMTRthfw/zZ4ts76SZ9XY/TKKRCbDZCRgHsfXhnTfaDc3WclQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDY+VnFcTLAfLNiL4wjn1+jmMi/XMB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvTmo1V2NWeE1zQjhzMkl2akNPZlg2T1l5TDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALba8AwQA LuJ5AwQAVcFPAwQAZw4BAwQAwR8HMA0GCSqGSIb3DQEBCwUAA4IBAQBnjIbn1gly 6LfmU/UaY8AxM8MjQtwIk9qZmlBHVSlYlUAt7GGq6nQ97JUwTxENOgskW6BdZEoI vrIqexvhUeucNh6kdSbPxpyvumswPdmrflkjH9uePmtg5kSl52+uaO73262pWA00 OeQb6WjkGupv8PYcztd0KjLQ4BqmemG+p2Jzz/6DtDIEqFG24DlwqkPjIz6e0rzf tP2Mfym+2mz+Y51I/lhKprizEiwRUFatssZybSpkZ61K2MkVNq7Nq+UOGWy/Lkib ue9Do2bHskT4NmVWWMwqeg0LtfLurzxmawBUtG3uBFiu+emW0uxCTXcChFelYQTY /QI52u4vLj0Y -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:38 2026 by rpki-client