This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/niRK46Usv38cJuxfMaCuRrcrP8k.roa File: niRK46Usv38cJuxfMaCuRrcrP8k.roa (raw, json) Hash identifier: AkcLMLLwy9K0L+KCEk/w1bTXBjDYeETGy30h9dMz8kU= Subject key identifier: 9E:24:4A:E3:A5:2C:BF:7F:1C:26:EC:5F:31:A0:AE:46:B7:2B:3F:C9 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6D7A646D3618C12E67C1A6FB4F91 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/niRK46Usv38cJuxfMaCuRrcrP8k.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57529 IP address blocks: 45.131.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6d:7a:64:6d:36:18:c1:2e:67:c1:a6:fb:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e244ae3a52cbf7f1c26ec5f31a0ae46b72b3fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:6f:5d:6d:10:9a:fb:54:d4:db:f1:df:a8: b3:1e:db:06:05:85:59:64:82:07:c8:75:83:45:12: 1d:f6:78:dc:87:33:b3:9c:9c:4c:21:03:17:0b:f8: 71:97:e1:4f:81:47:b2:a0:ab:64:61:9f:e9:c7:90: 56:5d:c6:89:9e:41:83:c4:e4:7d:27:bc:30:fe:4e: e9:b1:ce:97:f7:7f:9e:68:18:c1:3f:d4:1e:fb:9c: bb:b2:82:66:95:67:d3:43:18:43:e4:3b:6c:b3:5a: dc:cd:1f:1d:59:f7:1f:04:9f:8c:2e:86:5d:ae:8b: 55:99:5e:13:ff:fe:a2:2b:c5:32:67:07:e8:39:e7: c8:55:24:a9:a1:ed:97:40:f6:37:9b:3d:de:68:b3: e7:3f:9c:94:26:89:77:f6:67:a7:02:5e:44:a7:8d: a5:21:fc:a6:78:c3:73:90:ab:c7:97:5b:da:65:aa: e5:da:5d:26:41:a0:2d:7b:20:9b:58:02:ad:2b:06: a1:53:ef:bc:6d:a8:ff:7b:31:cc:11:a5:33:d7:c1: 3e:42:f4:b1:0e:53:73:01:f7:f1:a2:70:30:6e:0c: 84:a3:70:84:11:b3:6a:24:f2:e7:5b:00:84:72:fd: e5:af:a0:d7:0e:31:b1:4a:88:e5:b1:57:f5:ed:17: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:4A:E3:A5:2C:BF:7F:1C:26:EC:5F:31:A0:AE:46:B7:2B:3F:C9 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/niRK46Usv38cJuxfMaCuRrcrP8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.160.0/23 Signature Algorithm: sha256WithRSAEncryption 33:ad:ae:56:65:bb:6f:fa:7e:fe:7d:f3:dc:4e:4c:7d:77:ff: c8:99:5c:54:07:37:fd:db:e7:6e:94:8f:1c:f5:72:ed:5a:3d: fd:6a:17:6f:81:17:5f:57:44:51:b5:16:f6:88:c6:88:5c:1a: c5:f2:81:78:d3:41:a7:82:2e:c2:29:0a:c9:89:61:90:21:a2: df:8a:6d:c7:a1:31:43:f7:0d:9e:67:99:e4:40:82:1e:a4:b8: 21:0f:23:f8:8a:91:96:a0:19:b7:ba:d9:f1:90:70:f9:d3:1c: f0:6e:a4:f4:28:4e:9b:4d:22:38:50:e1:ad:9c:52:3f:27:a1: 25:d5:b5:4c:69:39:c3:1a:fb:28:cf:5c:52:f4:d5:8e:9a:ee: ae:d9:da:c4:cd:00:67:34:cc:89:b0:f7:fe:46:27:d2:f9:f6: 98:47:26:7b:62:3b:13:2d:c9:3d:af:17:42:65:fb:8a:60:70: a8:5f:63:8b:fb:97:17:4d:e9:72:d8:15:74:84:ed:fb:23:f3: a1:ae:d2:06:c1:9c:bb:e7:f3:01:14:d0:b3:d1:9e:b6:5d:48: ed:f2:51:22:a7:d8:0b:0e:c4:0c:9c:ec:a1:18:43:67:b5:3f: 30:41:bc:74:5b:1b:75:43:eb:67:97:7e:06:ff:3e:8b:c6:99: 55:73:81:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y216ZG02GMEuZ8Gm+0+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTI0NGFlM2E1MmNiZjdmMWMyNmVjNWYzMWEwYWU0NmI3MmIzZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMJvXW0QmvtU1Nvx36izHtsGBYVZ ZIIHyHWDRRId9njchzOznJxMIQMXC/hxl+FPgUeyoKtkYZ/px5BWXcaJnkGDxOR9 J7ww/k7psc6X93+eaBjBP9Qe+5y7soJmlWfTQxhD5Dtss1rczR8dWfcfBJ+MLoZd rotVmV4T//6iK8UyZwfoOefIVSSpoe2XQPY3mz3eaLPnP5yUJol39menAl5Ep42l IfymeMNzkKvHl1vaZarl2l0mQaAteyCbWAKtKwahU++8baj/ezHMEaUz18E+QvSx DlNzAffxonAwbgyEo3CEEbNqJPLnWwCEcv3lr6DXDjGxSojlsVf17Rd1OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4kSuOlLL9/HCbsXzGgrka3Kz/JMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvbmlSSzQ2VXN2MzhjSnV4Zk1hQ3VScmNyUDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYOgMA0G CSqGSIb3DQEBCwUAA4IBAQAzra5WZbtv+n7+ffPcTkx9d//ImVxUBzf92+dulI8c 9XLtWj39ahdvgRdfV0RRtRb2iMaIXBrF8oF400Gngi7CKQrJiWGQIaLfim3HoTFD 9w2eZ5nkQIIepLghDyP4ipGWoBm3utnxkHD50xzwbqT0KE6bTSI4UOGtnFI/J6El 1bVMaTnDGvsoz1xS9NWOmu6u2drEzQBnNMyJsPf+RifS+faYRyZ7YjsTLck9rxdC ZfuKYHCoX2OL+5cXTely2BV0hO37I/OhrtIGwZy75/MBFNCz0Z62XUjt8lEip9gL DsQMnOyhGENntT8wQbx0Wxt1Q+tnl34G/z6LxplVc4H9 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:31 2026 by rpki-client