This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/naC9tmlsUhgbJLA03hz741hMbFg.roa File: naC9tmlsUhgbJLA03hz741hMbFg.roa (raw, json) Hash identifier: Yv/9jK6omovr8t6/O6AjIBsjxvzoLwnUDO913RNu4UY= Subject key identifier: 9D:A0:BD:B6:69:6C:52:18:1B:24:B0:34:DE:1C:FB:E3:58:4C:6C:58 Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763 Certificate serial: 019B7910395234323E9548ACED30394F85DE Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/naC9tmlsUhgbJLA03hz741hMbFg.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.88.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:39:52:34:32:3e:95:48:ac:ed:30:39:4f:85:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9da0bdb6696c52181b24b034de1cfbe3584c6c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:bb:10:13:99:2b:a7:5d:f4:1d:1f:65:f3: 4e:98:33:99:09:1e:ea:fb:2d:04:9e:67:00:ce:df: e4:21:30:35:dd:ed:d2:08:97:05:20:49:0b:ad:3c: 07:d3:b7:df:12:d0:f8:0a:7e:ac:65:af:76:f2:43: 4a:4e:f8:60:94:9e:02:49:a5:ea:49:c7:7c:0f:93: d5:87:9a:b8:78:8e:c9:ce:f7:e5:29:a2:7e:3a:81: 39:f7:42:3d:a9:92:78:f6:1b:d8:ed:49:06:eb:6c: 6d:e8:69:ac:48:4c:fd:e1:2a:86:86:4c:2d:b0:fa: 3d:3a:fb:f8:34:2c:18:3b:12:67:6a:bd:71:03:b3: 30:17:5b:7d:5b:e4:b5:dc:61:b0:e1:30:48:55:3c: 34:58:3b:8d:d5:7a:be:d9:b9:f8:6a:fb:03:96:23: 13:63:9b:4c:00:e0:8c:ff:a8:35:b9:11:a5:89:0d: 4a:e4:c5:f0:fd:66:64:6e:95:e1:21:68:b7:0a:c2: 2a:5a:8e:75:36:64:95:7b:4e:c5:6a:03:5a:6b:05: 0c:71:48:63:cc:76:6b:f5:8f:8f:2e:35:5f:6f:6a: 16:0d:42:29:db:f4:ce:71:c0:10:10:f9:62:da:7a: a0:df:55:18:73:58:0e:80:a9:1c:32:ae:b4:59:bf: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A0:BD:B6:69:6C:52:18:1B:24:B0:34:DE:1C:FB:E3:58:4C:6C:58 X509v3 Authority Key Identifier: keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/naC9tmlsUhgbJLA03hz741hMbFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.248.0/22 Signature Algorithm: sha256WithRSAEncryption 78:e2:58:58:fa:71:d2:c2:cb:92:9b:a6:c5:5f:47:0d:22:09: 60:a6:23:15:09:82:4d:8c:01:9f:7c:b2:bb:15:55:c9:ee:ac: 7a:1f:44:ae:9d:9d:b3:17:06:a6:b3:ce:ef:84:b1:17:50:27: 6f:1f:ca:31:e2:cf:5a:27:aa:87:12:40:4e:24:ad:5f:30:22: d5:95:75:7c:f9:36:2e:17:55:0c:ee:7a:a4:ad:19:7c:ae:3e: 93:4f:56:09:89:e6:f4:fa:d9:dc:2c:f2:a5:3a:04:99:f1:0f: 9a:64:37:ea:fc:a1:00:0e:a4:d7:03:c4:0d:e8:e1:37:52:20: 8b:ab:f9:31:67:ea:ab:4e:c5:8d:9d:a4:10:f5:fb:93:7e:e2: 99:a3:ea:f5:03:c1:e9:9f:6b:1f:3d:91:69:0a:91:f2:4a:04: da:97:36:ea:84:ec:5f:ac:2b:62:12:6c:03:ce:6b:8f:f5:2b: 50:a2:2d:5b:a2:f1:70:ae:ee:e1:e2:2c:40:ba:ff:3a:14:f3: 82:1e:29:ce:01:d7:80:9f:5d:69:2a:e7:5d:d7:26:92:89:d2: 89:1f:2d:d8:2f:e2:f8:4c:99:8d:3a:4c:d9:26:47:62:6b:e7: 31:a8:c7:fe:3b:9b:c3:0b:22:ad:1f:c1:6a:db:21:6b:b9:de: 81:02:13:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDlSNDI+lUis7TA5T4XeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj YTE3NjMwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGEwYmRiNjY5NmM1MjE4MWIyNGIwMzRkZTFjZmJlMzU4NGM2YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDa7EBOZK6dd9B0fZfNOmDOZCR7q +y0EnmcAzt/kITA13e3SCJcFIEkLrTwH07ffEtD4Cn6sZa928kNKTvhglJ4CSaXq Scd8D5PVh5q4eI7JzvflKaJ+OoE590I9qZJ49hvY7UkG62xt6GmsSEz94SqGhkwt sPo9Ovv4NCwYOxJnar1xA7MwF1t9W+S13GGw4TBIVTw0WDuN1Xq+2bn4avsDliMT Y5tMAOCM/6g1uRGliQ1K5MXw/WZkbpXhIWi3CsIqWo51NmSVe07FagNaawUMcUhj zHZr9Y+PLjVfb2oWDUIp2/TOccAQEPli2nqg31UYc1gOgKkcMq60Wb8LiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2gvbZpbFIYGySwNN4c++NYTGxYMB8GA1UdIwQY MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt MmY2ODIxNmI3NDI0LzEvbmFDOXRtbHNVaGdiSkxBMDNoejc0MWhNYkZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0 LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVj4MA0G CSqGSIb3DQEBCwUAA4IBAQB44lhY+nHSwsuSm6bFX0cNIglgpiMVCYJNjAGffLK7 FVXJ7qx6H0SunZ2zFwams87vhLEXUCdvH8ox4s9aJ6qHEkBOJK1fMCLVlXV8+TYu F1UM7nqkrRl8rj6TT1YJieb0+tncLPKlOgSZ8Q+aZDfq/KEADqTXA8QN6OE3UiCL q/kxZ+qrTsWNnaQQ9fuTfuKZo+r1A8Hpn2sfPZFpCpHySgTalzbqhOxfrCtiEmwD zmuP9StQoi1bovFwru7h4ixAuv86FPOCHinOAdeAn11pKudd1yaSidKJHy3YL+L4 TJmNOkzZJkdia+cxqMf+O5vDCyKtH8Fq2yFrud6BAhPS -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:22 2026 by rpki-client