This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/VL1qKh4BlP9GtryA1MjUs_RCkN4.roa File: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (raw, json) Hash identifier: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw= Subject key identifier: 54:BD:6A:2A:1E:01:94:FF:46:B6:BC:80:D4:C8:D4:B3:F4:42:90:DE Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C6064977110A7223D95292CA9B5D Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/VL1qKh4BlP9GtryA1MjUs_RCkN4.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9335 IP address blocks: 45.136.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:06:49:77:11:0a:72:23:d9:52:92:ca:9b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54bd6a2a1e0194ff46b6bc80d4c8d4b3f44290de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:ab:ca:73:2c:9b:6e:2f:2e:ea:97:af:d8: 46:00:59:b4:60:4b:54:0b:24:91:ec:85:06:b6:5d: 62:a4:04:ec:dd:6e:db:ba:a8:4b:72:2c:8b:1f:56: a5:ca:6f:40:77:63:5a:a0:60:34:e9:bd:76:29:46: 32:6f:1c:f3:52:58:29:21:70:86:d1:f3:74:6b:da: b0:5e:23:93:f3:1d:3a:50:b9:08:c4:a4:94:e4:3c: 11:90:28:59:a4:84:1b:d6:eb:f7:da:85:10:2e:d7: 71:d6:60:92:36:96:5a:ec:46:6c:21:b9:bb:5e:c2: 73:d4:0b:5a:59:89:11:83:e4:3b:d3:b2:6c:38:e0: 23:f3:71:26:4a:e9:62:d6:5b:8d:a8:97:6f:a1:9e: 6d:3e:40:66:95:22:3e:7c:79:6f:12:dc:87:89:b7: 6c:a6:79:e0:ee:32:49:bc:44:ca:b4:74:6a:67:2f: 02:aa:8b:54:6b:9a:9b:0e:3d:70:8d:f9:73:cd:6c: de:4a:f3:7e:d4:1d:25:85:34:42:8d:ef:dc:83:a4: c2:cc:4c:66:86:72:48:1c:d0:7e:8d:f9:52:8a:9f: b0:4d:e8:6d:fa:17:8d:dd:f0:4f:15:3b:f2:ad:7a: 48:72:7f:ae:0d:83:83:fc:2e:5c:ae:d3:1b:64:72: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BD:6A:2A:1E:01:94:FF:46:B6:BC:80:D4:C8:D4:B3:F4:42:90:DE X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/VL1qKh4BlP9GtryA1MjUs_RCkN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.236.0/22 Signature Algorithm: sha256WithRSAEncryption 23:d7:60:93:4e:b0:b5:ec:76:3b:6d:94:af:e9:46:43:f2:8b: e6:7e:c7:99:e9:b6:5f:16:91:38:9a:f0:cf:b1:bc:b6:bb:e7: fb:cb:a9:ab:86:4c:a5:5b:58:ef:e1:2d:fa:3e:bb:66:8b:3a: c2:95:ac:ca:66:3c:55:a4:c3:36:42:60:12:68:48:da:be:c1: ad:ff:6e:52:ed:5d:43:9d:02:bf:46:28:c8:66:3f:1c:e1:dc: cd:ab:fd:c9:7c:bf:e0:7e:c9:17:0c:c4:73:c4:c4:ec:60:3f: 32:cb:5d:30:20:6a:94:99:bb:cf:50:7f:d0:04:e8:41:3c:84: 28:2c:23:f9:0e:84:5f:8f:a1:e6:46:2e:02:28:d5:ae:85:b9: f1:52:b9:4b:8a:24:4e:24:7d:eb:2a:90:ea:95:1a:a3:e8:df: 84:b7:fc:fa:b9:b5:ec:a0:93:ae:a4:4d:f8:43:06:18:30:c5: ae:d5:a3:f7:60:cb:fb:04:a7:f4:23:8e:ef:6c:bd:b7:f2:6b: d5:eb:be:f4:b8:06:af:4a:43:24:35:3f:13:76:58:fa:01:d1: 55:b7:b2:38:99:d5:96:f6:6e:77:de:e3:9a:e9:ce:6c:84:99: ff:5f:92:1a:2e:c4:34:2f:ff:3d:a3:52:ce:32:6f:66:3c:9d: c4:0b:0d:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsYGSXcRCnIj2VKSyptdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGJkNmEyYTFlMDE5NGZmNDZiNmJjODBkNGM4ZDRiM2Y0NDI5MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC2rynMsm24vLuqXr9hGAFm0YEtU CySR7IUGtl1ipATs3W7buqhLciyLH1alym9Ad2NaoGA06b12KUYybxzzUlgpIXCG 0fN0a9qwXiOT8x06ULkIxKSU5DwRkChZpIQb1uv32oUQLtdx1mCSNpZa7EZsIbm7 XsJz1AtaWYkRg+Q707JsOOAj83EmSuli1luNqJdvoZ5tPkBmlSI+fHlvEtyHibds pnng7jJJvETKtHRqZy8CqotUa5qbDj1wjflzzWzeSvN+1B0lhTRCje/cg6TCzExm hnJIHNB+jflSip+wTeht+heN3fBPFTvyrXpIcn+uDYOD/C5crtMbZHKQBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFS9aioeAZT/Rra8gNTI1LP0QpDeMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvVkwxcUtoNEJsUDlHdHJ5QTFNalVzX1JDa040LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYjsMA0G CSqGSIb3DQEBCwUAA4IBAQAj12CTTrC17HY7bZSv6UZD8ovmfseZ6bZfFpE4mvDP sby2u+f7y6mrhkylW1jv4S36PrtmizrClazKZjxVpMM2QmASaEjavsGt/25S7V1D nQK/RijIZj8c4dzNq/3JfL/gfskXDMRzxMTsYD8yy10wIGqUmbvPUH/QBOhBPIQo LCP5DoRfj6HmRi4CKNWuhbnxUrlLiiROJH3rKpDqlRqj6N+Et/z6ubXsoJOupE34 QwYYMMWu1aP3YMv7BKf0I47vbL238mvV6770uAavSkMkNT8Tdlj6AdFVt7I4mdWW 9m533uOa6c5shJn/X5IaLsQ0L/89o1LOMm9mPJ3ECw2F -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:56 2026 by rpki-client