This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/npQMs4lwAGLubKT1m_mzMFsTFiY.roa File: npQMs4lwAGLubKT1m_mzMFsTFiY.roa (raw, json) Hash identifier: R8+wcfRO9vBTuS6ZyvYnnN/WgjAB0xJqyrpzMVEdAUM= Subject key identifier: 9E:94:0C:B3:89:70:00:62:EE:6C:A4:F5:9B:F9:B3:30:5B:13:16:26 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F86700A0ED2DC57F7795DEC93517 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/npQMs4lwAGLubKT1m_mzMFsTFiY.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35682 IP address blocks: 45.138.158.0/24 maxlen: 24 185.217.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:67:00:a0:ed:2d:c5:7f:77:95:de:c9:35:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e940cb389700062ee6ca4f59bf9b3305b131626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:2d:32:89:76:f2:82:6c:08:88:f6:59:a4: d2:64:4c:1d:cd:ff:0f:57:a1:e0:c1:34:de:f5:f0: 0b:65:10:38:e3:36:de:ff:c1:32:bf:2c:50:5d:93: ef:a1:38:51:20:ed:90:15:2c:f5:40:71:c0:51:7e: 98:bb:e9:38:31:7b:3a:e0:9b:99:60:a0:d8:bf:e5: c4:ee:c9:8c:82:69:de:38:f7:28:cc:8c:5f:85:93: 3a:66:7c:99:b1:37:20:9f:d8:71:8d:32:dc:a4:85: 38:aa:f2:a2:8a:4b:4b:f1:c7:5f:1d:a1:14:d4:a9: 57:b6:64:f1:a1:a1:39:95:e6:f3:03:92:f9:2d:7d: c1:11:64:f8:bf:db:81:c1:8b:de:51:b8:cf:a0:e6: 17:f6:07:ed:48:22:70:52:df:37:5d:e4:ae:77:25: f5:bb:9a:53:98:21:ce:3f:9d:2c:93:9f:32:30:09: aa:0a:23:6b:b0:9a:b9:bc:92:28:57:ad:ce:52:f0: 24:a8:cf:5f:2d:a7:1d:f6:f6:bc:be:44:91:da:77: 00:bf:05:cd:c3:14:7d:c4:83:1a:31:e0:0c:75:d7: 29:b3:a7:75:6d:b9:fa:0e:df:27:b0:18:3f:92:42: 23:ec:83:ff:80:31:65:6c:48:ca:41:4d:d8:1b:26: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:0C:B3:89:70:00:62:EE:6C:A4:F5:9B:F9:B3:30:5B:13:16:26 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/npQMs4lwAGLubKT1m_mzMFsTFiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.158.0/24 185.217.131.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:d6:d9:5a:bb:3d:ab:a2:2a:f6:90:20:0c:ad:a6:ad:ff:69: 2c:b7:ac:9f:16:08:e3:0b:38:ea:21:46:b6:ac:87:af:5c:76: 72:c1:79:e3:17:9f:4e:36:8d:7f:36:43:f5:96:79:05:7b:58: 25:31:eb:81:1d:72:5d:92:b6:76:60:4c:d8:e0:1a:29:4b:bf: e3:9e:20:27:ad:d4:ed:3c:70:d4:4f:99:52:0b:7f:94:a8:bd: 9c:07:13:83:54:bc:95:1d:d6:fe:4f:87:2d:31:0e:d4:83:42: d3:c5:d3:1b:f7:2a:57:d9:f6:1f:3c:f8:90:5f:0c:19:c7:96: cf:bf:26:32:ef:ab:52:45:ab:75:3a:72:f8:5e:c3:34:cf:31: 61:85:f2:46:b9:80:27:90:e1:63:10:38:6b:2f:d6:67:43:8c: 6b:33:a2:5c:b8:8c:f8:61:71:cb:0e:7b:d3:dc:ae:9a:d3:ab: 91:a3:93:f9:5d:42:11:e9:f0:99:77:8c:c1:0f:28:de:c1:7b: b6:82:c3:24:08:6b:1f:df:af:e3:d8:a0:ba:12:8f:a8:7a:6a: 07:b7:b2:1d:fe:7c:c4:ad:a9:1b:69:d9:8b:6d:eb:01:fe:b1: 29:b4:fe:8b:a5:ec:27:1e:15:d1:e5:3b:38:c0:63:cc:6a:37: d8:f9:ca:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NfhnAKDtLcV/d5XeyTUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTk0MGNiMzg5NzAwMDYyZWU2Y2E0ZjU5YmY5YjMzMDViMTMxNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyEtMol28oJsCIj2WaTSZEwdzf8P V6HgwTTe9fALZRA44zbe/8EyvyxQXZPvoThRIO2QFSz1QHHAUX6Yu+k4MXs64JuZ YKDYv+XE7smMgmneOPcozIxfhZM6ZnyZsTcgn9hxjTLcpIU4qvKiiktL8cdfHaEU 1KlXtmTxoaE5lebzA5L5LX3BEWT4v9uBwYveUbjPoOYX9gftSCJwUt83XeSudyX1 u5pTmCHOP50sk58yMAmqCiNrsJq5vJIoV63OUvAkqM9fLacd9va8vkSR2ncAvwXN wxR9xIMaMeAMddcps6d1bbn6Dt8nsBg/kkIj7IP/gDFlbEjKQU3YGybmBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ6UDLOJcABi7myk9Zv5szBbExYmMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvbnBRTXM0bHdBR0x1YktUMW1fbXpNRnNURmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYqeAwQA udmDMA0GCSqGSIb3DQEBCwUAA4IBAQB/1tlauz2roir2kCAMraat/2kst6yfFgjj CzjqIUa2rIevXHZywXnjF59ONo1/NkP1lnkFe1glMeuBHXJdkrZ2YEzY4BopS7/j niAnrdTtPHDUT5lSC3+UqL2cBxODVLyVHdb+T4ctMQ7Ug0LTxdMb9ypX2fYfPPiQ XwwZx5bPvyYy76tSRat1OnL4XsM0zzFhhfJGuYAnkOFjEDhrL9ZnQ4xrM6JcuIz4 YXHLDnvT3K6a06uRo5P5XUIR6fCZd4zBDyjewXu2gsMkCGsf36/j2KC6Eo+oemoH t7Id/nzErakbadmLbesB/rEptP6LpewnHhXR5Ts4wGPMajfY+coH -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:53 2026 by rpki-client