This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NIY6XHf2uHuqww_9c5ygoWz6IEU.roa File: NIY6XHf2uHuqww_9c5ygoWz6IEU.roa (raw, json) Hash identifier: 2u8VhcI+9QG/Tmn7FFzgMLzfcwpyrTkwkCpc+uBHPZ4= Subject key identifier: 34:86:3A:5C:77:F6:B8:7B:AA:C3:0F:FD:73:9C:A0:A1:6C:FA:20:45 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB60D7B889730B0829FA0DECF3488E Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NIY6XHf2uHuqww_9c5ygoWz6IEU.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43581 IP address blocks: 45.155.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:60:d7:b8:89:73:0b:08:29:fa:0d:ec:f3:48:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34863a5c77f6b87baac30ffd739ca0a16cfa2045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:7f:b1:fe:c6:5a:92:50:95:bf:8d:f3:e5: 1d:7d:16:3a:8d:cc:c8:c1:6f:dc:b2:36:f3:52:31: 6e:76:40:ff:8d:86:3a:55:8a:78:1d:f6:91:d7:6c: 1b:51:3f:8f:00:c9:38:e5:38:56:d6:c8:d4:f9:23: 65:5a:b4:85:95:89:a0:2e:85:c8:c9:db:7c:b4:c9: c7:b6:d6:e8:c7:98:d4:93:9d:15:db:44:6f:1b:04: 58:bf:4a:34:8f:78:5b:b3:d2:c1:9d:54:b7:11:3c: 6d:7f:f7:97:b8:c6:99:65:b9:91:9f:b2:96:47:07: ad:2f:7d:a3:fe:bc:d8:e2:11:94:37:ad:1a:61:e2: fd:69:1c:e8:75:59:4b:89:93:70:ca:df:4d:90:d0: 0e:d7:37:7c:f8:52:f3:69:34:8d:0d:d0:28:ed:a5: 5a:03:92:c9:7f:60:0c:c7:b4:95:e6:f9:6b:71:4b: a0:4b:d6:58:9a:66:d0:69:bb:1a:4a:0f:b6:22:7f: 4e:df:9e:8c:5e:a6:fb:00:a9:fa:10:2a:5a:a8:44: ac:c7:0c:2e:28:3f:bd:6b:4e:78:72:5a:73:06:61: 15:fe:4b:f2:a8:69:ba:95:ed:dd:9f:26:f2:c7:0a: ba:53:ce:51:eb:07:df:bf:65:00:ad:13:18:31:48: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:86:3A:5C:77:F6:B8:7B:AA:C3:0F:FD:73:9C:A0:A1:6C:FA:20:45 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/NIY6XHf2uHuqww_9c5ygoWz6IEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.207.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:3a:d4:8a:40:bc:ad:07:a7:01:d8:1a:9c:bf:5e:be:1e:b6: 6c:a3:27:67:ba:c3:de:0a:f6:71:55:2c:3a:30:eb:1b:74:69: c9:e7:96:57:88:31:6e:52:9a:9e:c4:10:83:d5:57:20:db:e2: 8f:a8:2a:e6:d6:c0:22:83:66:bb:e0:aa:07:b8:8f:89:8b:db: 92:dc:b4:6f:c5:0a:a8:f5:44:e8:2b:08:65:5a:23:76:20:b7: 63:1c:de:f2:4c:c9:1d:42:1a:31:16:fa:9c:aa:df:30:27:a8: 0c:a1:af:e2:3f:78:17:e7:ae:e5:11:b4:eb:c7:97:29:01:1f: 67:33:24:1c:98:bf:aa:5d:bf:66:c8:a0:52:05:4d:4e:03:bf: 73:cf:3d:c1:2f:eb:4e:c7:70:86:72:ff:7f:8e:88:90:68:33: 88:ca:37:4a:6c:8b:87:83:f3:ea:b8:6c:d1:98:80:bc:28:7e: fc:d1:23:aa:85:5d:13:3c:4e:b5:3b:a3:04:b5:9b:1b:c8:de: 8c:1d:0e:73:a2:3a:23:91:2c:c6:72:c7:fe:c3:f7:86:74:81: aa:f0:ce:27:73:22:f9:5f:20:3c:c9:c6:1b:0a:54:96:d5:e0: b2:95:b1:b7:20:af:0b:b8:f0:9a:de:32:bf:5a:eb:3a:d5:74: e9:ae:e7:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2DXuIlzCwgp+g3s80iOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDg2M2E1Yzc3ZjZiODdiYWFjMzBmZmQ3MzljYTBhMTZjZmEyMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1d/sf7GWpJQlb+N8+UdfRY6jczI wW/csjbzUjFudkD/jYY6VYp4HfaR12wbUT+PAMk45ThW1sjU+SNlWrSFlYmgLoXI ydt8tMnHttbox5jUk50V20RvGwRYv0o0j3hbs9LBnVS3ETxtf/eXuMaZZbmRn7KW RwetL32j/rzY4hGUN60aYeL9aRzodVlLiZNwyt9NkNAO1zd8+FLzaTSNDdAo7aVa A5LJf2AMx7SV5vlrcUugS9ZYmmbQabsaSg+2In9O356MXqb7AKn6ECpaqESsxwwu KD+9a054clpzBmEV/kvyqGm6le3dnybyxwq6U85R6wffv2UArRMYMUjXywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSGOlx39rh7qsMP/XOcoKFs+iBFMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTklZNlhIZjJ1SHVxd3dfOWM1eWdvV3o2SUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvPMA0G CSqGSIb3DQEBCwUAA4IBAQBeOtSKQLytB6cB2Bqcv16+HrZsoydnusPeCvZxVSw6 MOsbdGnJ55ZXiDFuUpqexBCD1Vcg2+KPqCrm1sAig2a74KoHuI+Ji9uS3LRvxQqo 9UToKwhlWiN2ILdjHN7yTMkdQhoxFvqcqt8wJ6gMoa/iP3gX567lEbTrx5cpAR9n MyQcmL+qXb9myKBSBU1OA79zzz3BL+tOx3CGcv9/joiQaDOIyjdKbIuHg/PquGzR mIC8KH780SOqhV0TPE61O6MEtZsbyN6MHQ5zojojkSzGcsf+w/eGdIGq8M4ncyL5 XyA8ycYbClSW1eCylbG3IK8LuPCa3jK/Wus61XTprud1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client