This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nV3dAv1rz0q3UQPkxuaAgDi-ps8.roa File: nV3dAv1rz0q3UQPkxuaAgDi-ps8.roa (raw, json) Hash identifier: n1NuZdpCHMFyzQ+5Hnao4hNlaw3EP+QjTRscRYA0gxg= Subject key identifier: 9D:5D:DD:02:FD:6B:CF:4A:B7:51:03:E4:C6:E6:80:80:38:BE:A6:CF Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1341C0CAEA7767FABEEEE92DFD4E11 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nV3dAv1rz0q3UQPkxuaAgDi-ps8.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273015 IP address blocks: 45.81.105.0/24 maxlen: 24 45.81.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:41:c0:ca:ea:77:67:fa:be:ee:e9:2d:fd:4e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d5ddd02fd6bcf4ab75103e4c6e6808038bea6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:9f:17:bb:9d:ca:65:95:08:3a:30:08:a1: 64:85:82:76:38:6e:5c:63:af:e7:67:e3:1e:b2:33: 4c:30:b8:08:f9:90:9c:6b:cd:88:96:89:40:35:d1: 6d:42:0e:16:df:af:e3:d2:4e:00:b9:63:1a:27:5f: b6:f7:64:36:95:01:b7:0a:f9:68:04:cc:69:72:66: 8d:72:6c:a9:4a:82:1f:ca:7f:b7:eb:81:02:54:f3: 6d:c3:5a:89:d1:d7:8d:31:49:7a:21:81:21:86:78: 69:ae:ee:fa:71:51:03:09:d6:07:7f:48:b5:a9:30: b1:15:e7:d2:a5:a4:37:5e:fb:dc:c5:1a:da:fa:d0: ba:bd:0b:3d:bf:37:99:c3:2f:be:4b:52:43:3b:a6: 28:c0:ad:ac:d5:d9:0f:9e:a8:ba:c9:2c:69:7f:11: 4e:98:31:00:8c:1b:e9:29:39:35:de:2e:46:bf:94: 61:35:46:f3:68:72:bf:fb:51:f1:18:a0:65:c1:f1: 83:a4:4c:cb:da:0d:7b:4a:a2:b4:1a:cc:1e:97:3d: ef:3d:eb:6a:bc:4e:3d:41:bd:db:5c:d3:2f:7b:ff: e9:29:fe:cd:42:0c:64:0c:c5:ec:56:f9:13:83:25: e5:85:2f:a2:d1:7c:26:86:4b:d0:3d:19:0f:b0:41: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:DD:02:FD:6B:CF:4A:B7:51:03:E4:C6:E6:80:80:38:BE:A6:CF X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nV3dAv1rz0q3UQPkxuaAgDi-ps8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.105.0-45.81.106.255 Signature Algorithm: sha256WithRSAEncryption 13:15:4d:c0:5e:95:d7:0d:0d:11:83:ec:8d:f7:ca:ea:9c:e6: 91:aa:11:f8:e1:df:f1:a4:68:82:a1:1b:1c:c5:0d:a8:79:b8: 89:c8:81:39:15:bc:78:8b:58:24:b6:7a:51:cd:33:7e:94:8f: 02:03:ac:0a:fa:75:b3:66:11:03:cb:0c:e4:e8:46:e4:e9:5b: 7d:bc:7f:ba:35:ff:66:69:1c:20:cf:e9:06:be:e7:e3:16:0b: 47:1c:af:dd:df:9a:ac:4e:93:0e:0b:f8:f7:08:55:92:51:b9: b0:aa:fb:3e:4c:25:9c:a5:8f:2a:6a:66:19:f2:9f:f2:76:f4: dc:87:7d:b6:10:cf:4b:4f:6e:80:38:3e:16:88:13:e1:96:dd: f8:3a:ae:61:a9:fd:ac:d0:fb:b6:52:2a:4a:67:23:40:40:6e: 47:f1:a9:da:a6:40:b1:25:c5:b1:8d:56:ab:2f:3a:9c:e2:60: b2:47:6a:c0:49:ea:a8:8e:ce:6a:08:3f:98:fd:e9:37:bc:d0: 9f:53:01:0d:b8:6c:67:8a:87:f2:6a:79:f1:41:bb:8a:31:14: 68:51:72:28:ce:10:97:7e:2a:37:9b:de:89:d1:a0:2a:db:b4: 76:e7:8c:69:02:49:62:67:9a:8f:a0:66:b4:51:e4:5f:e3:99: 6a:ad:a2:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8E0HAyup3Z/q+7ukt/U4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDVkZGQwMmZkNmJjZjRhYjc1MTAzZTRjNmU2ODA4MDM4YmVhNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjyfF7udymWVCDowCKFkhYJ2OG5c Y6/nZ+MesjNMMLgI+ZCca82IlolANdFtQg4W36/j0k4AuWMaJ1+292Q2lQG3Cvlo BMxpcmaNcmypSoIfyn+364ECVPNtw1qJ0deNMUl6IYEhhnhpru76cVEDCdYHf0i1 qTCxFefSpaQ3XvvcxRra+tC6vQs9vzeZwy++S1JDO6YowK2s1dkPnqi6ySxpfxFO mDEAjBvpKTk13i5Gv5RhNUbzaHK/+1HxGKBlwfGDpEzL2g17SqK0Gswelz3vPetq vE49Qb3bXNMve//pKf7NQgxkDMXsVvkTgyXlhS+i0XwmhkvQPRkPsEEm7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ1d3QL9a89Kt1ED5MbmgIA4vqbPMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvblYzZEF2MXJ6MHEzVVFQa3h1YUFnRGktcHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUWkD BAAtUWowDQYJKoZIhvcNAQELBQADggEBABMVTcBeldcNDRGD7I33yuqc5pGqEfjh 3/GkaIKhGxzFDah5uInIgTkVvHiLWCS2elHNM36UjwIDrAr6dbNmEQPLDOToRuTp W328f7o1/2ZpHCDP6Qa+5+MWC0ccr93fmqxOkw4L+PcIVZJRubCq+z5MJZyljypq Zhnyn/J29NyHfbYQz0tPboA4PhaIE+GW3fg6rmGp/azQ+7ZSKkpnI0BAbkfxqdqm QLElxbGNVqsvOpziYLJHasBJ6qiOzmoIP5j96Te80J9TAQ24bGeKh/JqefFBu4ox FGhRcijOEJd+Kjeb3onRoCrbtHbnjGkCSWJnmo+gZrRR5F/jmWqtoqo= -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:54 2026 by rpki-client