This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/r-NoE_XHTABnwPRM9GdFHoEeHJo.roa File: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (raw, json) Hash identifier: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8= Subject key identifier: AF:E3:68:13:F5:C7:4C:00:67:C0:F4:4C:F4:67:45:1E:81:1E:1C:9A Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C5481A858ED37FF083CA1EBF3DA3 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/r-NoE_XHTABnwPRM9GdFHoEeHJo.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 45.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c5:48:1a:85:8e:d3:7f:f0:83:ca:1e:bf:3d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe36813f5c74c0067c0f44cf467451e811e1c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:7d:c0:84:ab:a6:b4:c7:27:46:f3:64:34: 66:18:bc:69:e2:c1:6c:60:74:cb:2f:c5:6f:44:d1: 1b:7f:b7:51:d9:19:da:55:f8:e7:f0:3f:ad:bd:5f: 84:8a:63:e9:cc:71:7a:ea:c6:cf:45:8e:de:ce:e5: 23:0a:ef:00:74:47:07:f1:c9:1a:bc:94:88:29:f2: 22:c8:fa:a4:2e:be:98:50:90:b5:40:2d:87:9b:21: 9f:95:a4:e8:b3:94:9c:82:33:ca:56:79:aa:17:89: 0e:3a:69:6a:52:e6:33:c1:8e:ee:1f:0d:13:93:7d: 83:2f:65:23:dc:8b:8c:15:f8:a4:03:9c:e0:0d:b5: 53:2e:20:9c:2a:6a:7b:5d:d1:78:f1:cd:75:1a:30: 2b:b1:65:d3:a2:5c:58:a8:b4:fb:08:89:69:1f:db: 33:8f:8b:02:58:df:d0:bb:5b:b4:e9:91:f1:8b:75: 10:af:86:6e:ef:02:6f:63:d9:81:89:e3:7c:05:28: 46:46:c7:bc:a8:d0:be:9b:79:46:7f:7d:fb:60:ce: b7:a4:52:01:c0:c0:6d:8f:d0:24:90:41:29:c2:e0: 89:7a:4d:3e:b1:ad:1a:05:79:78:47:d2:0c:de:94: 14:be:49:76:2f:ef:3e:90:5a:4a:67:03:43:11:7b: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:68:13:F5:C7:4C:00:67:C0:F4:4C:F4:67:45:1E:81:1E:1C:9A X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/r-NoE_XHTABnwPRM9GdFHoEeHJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.139.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:01:c5:96:4c:46:8e:25:aa:5d:a4:d0:df:31:bd:45:9c:f9: 5b:3f:af:be:71:b7:3b:b0:e9:74:8f:9d:ec:ac:c5:23:bd:0d: 0a:ab:5e:ba:c0:30:d7:86:da:35:6b:ce:f2:a3:43:25:68:fa: 12:7d:f2:c2:a8:4d:2e:9a:7a:80:73:21:cb:6c:4a:25:e1:52: e5:96:89:d2:4c:be:a5:c6:38:d3:9d:e2:e8:1b:d0:6e:0d:a7: 74:a5:e6:ac:bc:f7:91:1c:49:c1:30:e5:02:e8:d0:17:64:12: b6:b7:3f:07:10:a0:92:cb:eb:4d:6a:69:a4:6e:f9:95:c9:a1: 2a:47:f9:9f:22:8c:72:e5:8a:11:75:28:ee:20:db:01:11:05: 4b:e4:93:cf:63:d5:dd:bb:1c:83:bf:45:e1:16:65:40:4a:15: 8a:9d:9d:09:84:e7:c6:40:f6:79:cb:52:1b:6a:6c:48:1a:30: ef:82:ad:fb:2b:1f:72:fc:cd:85:f5:47:ba:16:f1:68:0f:58: f3:0c:f1:cb:91:32:d8:0d:c7:76:4c:43:a2:0a:8a:ee:b9:cd: ef:63:85:e3:75:64:f3:4a:69:07:13:1b:12:88:70:e0:86:2f: 5a:5e:91:db:16:e7:ba:44:e5:c0:17:df:7d:9a:e6:16:6d:8a: 53:c1:0f:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcVIGoWO03/wg8oevz2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmUzNjgxM2Y1Yzc0YzAwNjdjMGY0NGNmNDY3NDUxZTgxMWUxYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpV9wISrprTHJ0bzZDRmGLxp4sFs YHTLL8VvRNEbf7dR2RnaVfjn8D+tvV+EimPpzHF66sbPRY7ezuUjCu8AdEcH8cka vJSIKfIiyPqkLr6YUJC1QC2HmyGflaTos5ScgjPKVnmqF4kOOmlqUuYzwY7uHw0T k32DL2Uj3IuMFfikA5zgDbVTLiCcKmp7XdF48c11GjArsWXTolxYqLT7CIlpH9sz j4sCWN/Qu1u06ZHxi3UQr4Zu7wJvY9mBieN8BShGRse8qNC+m3lGf337YM63pFIB wMBtj9AkkEEpwuCJek0+sa0aBXl4R9IM3pQUvkl2L+8+kFpKZwNDEXu4mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/jaBP1x0wAZ8D0TPRnRR6BHhyaMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvci1Ob0VfWEhUQUJud1BSTTlHZEZIb0VlSEpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeLMA0G CSqGSIb3DQEBCwUAA4IBAQCOAcWWTEaOJapdpNDfMb1FnPlbP6++cbc7sOl0j53s rMUjvQ0Kq166wDDXhto1a87yo0MlaPoSffLCqE0umnqAcyHLbEol4VLllonSTL6l xjjTneLoG9BuDad0peasvPeRHEnBMOUC6NAXZBK2tz8HEKCSy+tNammkbvmVyaEq R/mfIoxy5YoRdSjuINsBEQVL5JPPY9XduxyDv0XhFmVAShWKnZ0JhOfGQPZ5y1Ib amxIGjDvgq37Kx9y/M2F9Ue6FvFoD1jzDPHLkTLYDcd2TEOiCoruuc3vY4XjdWTz SmkHExsSiHDghi9aXpHbFue6ROXAF999muYWbYpTwQ+v -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:08 2026 by rpki-client