This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN17uV__U1IU1XBJ4y2gFqqV_cI.roa File: pN17uV__U1IU1XBJ4y2gFqqV_cI.roa (raw, json) Hash identifier: z4R4ANO3VdM6qT4bZeL9ltr5ieffM6Tka30/bgzy+Tc= Subject key identifier: A4:DD:7B:B9:5F:FF:53:52:14:D5:70:49:E3:2D:A0:16:AA:95:FD:C2 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB81244EAE6379B73C75B998296662 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN17uV__U1IU1XBJ4y2gFqqV_cI.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 45.91.236.0/24 maxlen: 24 45.91.237.0/24 maxlen: 24 91.240.254.0/24 maxlen: 24 185.201.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:81:24:4e:ae:63:79:b7:3c:75:b9:98:29:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4dd7bb95fff535214d57049e32da016aa95fdc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:37:78:3f:ac:4c:06:e8:0c:04:2e:3e:2b: 09:71:c2:69:01:26:96:d9:f3:48:be:55:7e:11:66: 13:d7:73:15:b3:c1:4d:cb:41:99:ce:45:e6:12:fc: fd:00:bc:fc:c2:4f:9d:f6:df:9d:5b:cb:aa:fc:8a: f0:f8:0b:94:bf:96:32:23:03:57:a1:35:2c:d1:44: 56:f6:0d:f0:a6:8a:0e:0e:5f:ee:36:5b:2c:04:b7: 0a:de:cc:cf:04:86:4b:a6:4d:53:5b:2b:57:41:22: 21:44:b9:12:a4:dc:d1:67:66:72:f6:44:eb:16:80: 10:94:04:b7:16:cf:fe:33:ff:5b:af:b3:b1:16:a4: 28:86:f2:1a:ba:ac:0c:5b:c5:9a:3e:07:6d:6e:96: 68:4d:5b:86:35:5f:ae:3c:32:d8:3a:40:81:79:0a: d8:ce:c0:55:6e:7f:8c:62:97:4b:e0:3d:58:67:71: 0e:44:d6:c3:7a:07:3c:a6:45:41:a2:81:9d:ce:8d: b6:48:df:b2:ae:3e:b2:03:db:d3:be:72:25:71:63: 87:9c:79:4d:aa:21:b2:3c:45:71:76:27:4d:0f:b5: c2:43:de:11:ff:bb:7c:51:b2:7a:d5:1d:eb:c5:ad: 9a:2e:a2:2f:4a:58:3f:d0:62:68:f6:bd:cd:fc:69: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:7B:B9:5F:FF:53:52:14:D5:70:49:E3:2D:A0:16:AA:95:FD:C2 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN17uV__U1IU1XBJ4y2gFqqV_cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.236.0/23 91.240.254.0/24 185.201.28.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:59:79:e6:04:4d:a7:72:5e:96:d5:4b:a3:ff:d1:f1:b4:8a: 25:1c:fc:7b:a1:b5:be:b8:66:94:e1:d6:2d:9f:ab:35:69:87: 67:93:9a:ca:c8:4b:f3:24:89:20:fe:08:2c:ba:28:55:35:95: 38:2d:c8:68:dd:e0:e4:59:ae:1e:93:fe:9c:c2:25:82:f5:4b: 56:3a:a6:39:cb:5d:df:f3:53:cb:07:21:39:4f:29:c8:27:87: 21:67:23:fd:ea:10:a1:ae:60:d8:59:52:1b:85:34:99:eb:f8: 47:ce:f6:f1:31:e1:fd:7a:8a:8a:6d:d0:10:d0:eb:45:2f:2b: b5:f9:e9:87:62:2b:66:f6:e5:3c:9d:f4:a3:13:20:87:80:c0: eb:69:b3:4c:a4:aa:cd:d8:e0:29:30:59:ab:89:2d:35:3b:e1: b8:c2:43:5c:59:ea:95:66:6d:a2:9e:0e:e4:dd:7f:c6:2f:c9: 47:80:a5:34:83:c1:58:81:bd:84:65:45:9e:9a:68:a8:89:6e: af:d1:52:d5:1f:a0:11:93:03:7a:27:7b:a9:1d:a1:8c:56:44: e7:02:23:54:59:8f:b7:aa:e8:58:11:58:07:2d:e4:2a:ba:0e: 8d:b0:30:b7:b7:6e:aa:9c:bf:2a:69:db:e6:45:ea:d3:44:61: 03:73:9d:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y4EkTq5jebc8dbmYKWZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGRkN2JiOTVmZmY1MzUyMTRkNTcwNDllMzJkYTAxNmFhOTVmZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cQ3eD+sTAboDAQuPisJccJpASaW 2fNIvlV+EWYT13MVs8FNy0GZzkXmEvz9ALz8wk+d9t+dW8uq/Irw+AuUv5YyIwNX oTUs0URW9g3wpooODl/uNlssBLcK3szPBIZLpk1TWytXQSIhRLkSpNzRZ2Zy9kTr FoAQlAS3Fs/+M/9br7OxFqQohvIauqwMW8WaPgdtbpZoTVuGNV+uPDLYOkCBeQrY zsBVbn+MYpdL4D1YZ3EORNbDegc8pkVBooGdzo22SN+yrj6yA9vTvnIlcWOHnHlN qiGyPEVxdidND7XCQ94R/7t8UbJ61R3rxa2aLqIvSlg/0GJo9r3N/GlTAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKTde7lf/1NSFNVwSeMtoBaqlf3CMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvcE4xN3VWX19VMUlVMVhCSjR5MmdGcXFWX2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVvsAwQA W/D+AwQAuckcMA0GCSqGSIb3DQEBCwUAA4IBAQAsWXnmBE2ncl6W1Uuj/9HxtIol HPx7obW+uGaU4dYtn6s1aYdnk5rKyEvzJIkg/ggsuihVNZU4Lcho3eDkWa4ek/6c wiWC9UtWOqY5y13f81PLByE5TynIJ4chZyP96hChrmDYWVIbhTSZ6/hHzvbxMeH9 eoqKbdAQ0OtFLyu1+emHYitm9uU8nfSjEyCHgMDrabNMpKrN2OApMFmriS01O+G4 wkNcWeqVZm2ing7k3X/GL8lHgKU0g8FYgb2EZUWemmioiW6v0VLVH6ARkwN6J3up HaGMVkTnAiNUWY+3quhYEVgHLeQqug6NsDC3t26qnL8qadvmRerTRGEDc536 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:14 2026 by rpki-client