This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/nFYGg4ZIP1H9kzcY434jAerp2kU.roa File: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (raw, json) Hash identifier: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo= Subject key identifier: 9C:56:06:83:86:48:3F:51:FD:93:37:18:E3:7E:23:01:EA:E9:DA:45 Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C6E6BD346AC6AA439F34478175A2 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/nFYGg4ZIP1H9kzcY434jAerp2kU.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 45.11.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:e6:bd:34:6a:c6:aa:43:9f:34:47:81:75:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c56068386483f51fd933718e37e2301eae9da45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:9f:b6:d1:1f:df:13:ea:2f:a8:98:83:14: 00:18:72:01:4d:0d:99:f3:93:12:67:85:17:be:82: 7d:11:b0:d3:fd:db:6b:cb:17:fa:55:87:19:e6:a4: 07:4d:8c:58:3e:5c:76:c6:4d:1d:ea:1f:1c:ec:05: 65:64:89:18:10:ca:42:0e:99:b3:2d:3f:e0:9e:57: da:a9:40:c1:30:86:b7:5c:15:08:8a:45:8f:8e:04: 8f:85:0a:86:f6:61:8c:95:11:9b:79:27:55:40:35: e5:6c:71:65:09:3a:53:aa:07:f9:f9:6c:bf:89:c3: 9f:3a:7d:4b:a0:89:c5:4c:43:af:fb:e4:9c:7a:50: ad:fc:f6:f6:41:d4:a2:cd:9d:d3:6d:db:d7:12:6a: 03:35:e4:2d:3a:09:10:51:a6:93:87:ed:04:b1:f8: cc:79:8f:8a:29:9e:ed:29:d4:2b:aa:43:f7:17:35: be:7c:9a:f3:2e:67:d9:39:52:6b:1e:9b:56:03:b3: 7d:40:33:2f:86:4c:06:a9:da:46:f5:d9:2f:30:15: fb:57:2a:ef:72:08:43:55:85:77:c2:20:c3:0b:ec: 9d:23:7a:45:ef:36:27:12:16:c3:ce:3b:21:14:0d: ce:8a:8d:40:2e:eb:df:ed:ed:18:15:b1:bf:97:fd: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:06:83:86:48:3F:51:FD:93:37:18:E3:7E:23:01:EA:E9:DA:45 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/nFYGg4ZIP1H9kzcY434jAerp2kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.240.0/22 Signature Algorithm: sha256WithRSAEncryption 46:15:60:84:ce:29:c1:c9:bc:a5:5f:3d:7d:cb:fc:a4:67:ca: fb:18:71:a3:54:7f:55:05:57:ea:2a:fe:fb:bf:c5:e9:2a:7f: cb:e0:ad:ce:0a:6a:46:fd:d8:f6:4a:a9:d5:71:5c:c6:7c:97: 6c:13:42:50:5d:b0:9f:33:e0:2c:41:be:7f:9f:d4:86:36:7b: 7f:f5:7f:c0:a6:10:70:d2:da:53:df:a6:bb:6c:b3:3f:6d:49: 29:c2:35:d1:d5:48:07:59:62:ea:6a:89:e3:2a:39:41:e6:1e: 17:07:1f:7c:fa:2e:76:82:1b:97:db:6b:5c:5b:cd:25:b9:7d: 7b:f0:e7:4e:ca:be:3c:6b:2b:25:a9:b8:35:b3:48:8d:bf:58: da:5a:23:d5:48:91:b6:9c:9d:39:15:35:2f:f4:b2:25:8a:3a: f3:2d:29:48:a2:95:2f:ec:3c:07:c2:81:d0:e4:26:d6:46:0c: 02:a0:f2:57:c4:96:c5:84:07:2d:03:b0:c8:73:68:59:8a:f1: c4:95:5f:a9:d3:d8:62:db:a7:12:79:07:ea:45:cc:d3:4a:09: 55:91:26:79:72:96:13:da:2a:a2:41:51:5a:92:42:e3:03:20: a3:0e:18:71:02:8c:07:dc:38:de:2d:b0:7f:aa:5d:10:8f:d8: 0c:12:3b:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8bmvTRqxqpDnzRHgXWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzU2MDY4Mzg2NDgzZjUxZmQ5MzM3MThlMzdlMjMwMWVhZTlkYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJmfttEf3xPqL6iYgxQAGHIBTQ2Z 85MSZ4UXvoJ9EbDT/dtryxf6VYcZ5qQHTYxYPlx2xk0d6h8c7AVlZIkYEMpCDpmz LT/gnlfaqUDBMIa3XBUIikWPjgSPhQqG9mGMlRGbeSdVQDXlbHFlCTpTqgf5+Wy/ icOfOn1LoInFTEOv++ScelCt/Pb2QdSizZ3TbdvXEmoDNeQtOgkQUaaTh+0EsfjM eY+KKZ7tKdQrqkP3FzW+fJrzLmfZOVJrHptWA7N9QDMvhkwGqdpG9dkvMBX7Vyrv cghDVYV3wiDDC+ydI3pF7zYnEhbDzjshFA3Oio1ALuvf7e0YFbG/l/3nTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxWBoOGSD9R/ZM3GON+IwHq6dpFMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvbkZZR2c0WklQMUg5a3pjWTQzNGpBZXJwMmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQvwMA0G CSqGSIb3DQEBCwUAA4IBAQBGFWCEzinBybylXz19y/ykZ8r7GHGjVH9VBVfqKv77 v8XpKn/L4K3OCmpG/dj2SqnVcVzGfJdsE0JQXbCfM+AsQb5/n9SGNnt/9X/AphBw 0tpT36a7bLM/bUkpwjXR1UgHWWLqaonjKjlB5h4XBx98+i52ghuX22tcW80luX17 8OdOyr48ayslqbg1s0iNv1jaWiPVSJG2nJ05FTUv9LIlijrzLSlIopUv7DwHwoHQ 5CbWRgwCoPJXxJbFhActA7DIc2hZivHElV+p09hi26cSeQfqRczTSglVkSZ5cpYT 2iqiQVFakkLjAyCjDhhxAowH3DjeLbB/ql0Qj9gMEjs7 -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:27 2026 by rpki-client