This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/NFE4HlGf7fTf9LfiFuy-BFgDDf0.roa File: NFE4HlGf7fTf9LfiFuy-BFgDDf0.roa (raw, json) Hash identifier: fuM7ZP8v7GqX65zMi7ztQUhLfqFB4QBfybnPzhSaOrs= Subject key identifier: 34:51:38:1E:51:9F:ED:F4:DF:F4:B7:E2:16:EC:BE:04:58:03:0D:FD Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c Certificate serial: 019B7C8045EEB97D1A3BD87BFFAC650D4A66 Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/NFE4HlGf7fTf9LfiFuy-BFgDDf0.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.155.99.0/24 maxlen: 24 2a10:ba00:1::/48 maxlen: 48 2a10:ba00:2::/48 maxlen: 48 2a10:ba00:3::/48 maxlen: 48 2a10:ba00:4::/48 maxlen: 48 2a10:ba00:5::/48 maxlen: 48 2a10:ba00:6::/48 maxlen: 48 2a10:ba00:7::/48 maxlen: 48 2a10:ba00:8::/48 maxlen: 48 2a10:ba00:9::/48 maxlen: 48 2a10:ba00:10::/48 maxlen: 48 2a10:ba00:11::/48 maxlen: 48 2a10:ba00:12::/48 maxlen: 48 2a10:ba00:13::/48 maxlen: 48 2a10:ba00:14::/48 maxlen: 48 2a10:ba00:15::/48 maxlen: 48 2a10:ba00:16::/48 maxlen: 48 2a10:ba00:17::/48 maxlen: 48 2a10:ba00:18::/48 maxlen: 48 2a10:ba00:19::/48 maxlen: 48 2a10:ba00:20::/48 maxlen: 48 2a10:ba00:bee0::/48 maxlen: 48 2a10:ba00:bee1::/48 maxlen: 48 2a10:ba00:bee2::/48 maxlen: 48 2a10:ba00:bee3::/48 maxlen: 48 2a10:ba00:bee4::/48 maxlen: 48 2a10:ba00:bee5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:45:ee:b9:7d:1a:3b:d8:7b:ff:ac:65:0d:4a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3451381e519fedf4dff4b7e216ecbe0458030dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:22:f8:24:6a:1b:2c:a8:92:5d:59:b1:32: dc:a3:86:a8:12:bf:08:24:e0:40:8b:55:72:44:3d: 04:95:4d:ed:b5:73:dd:d0:fe:54:a2:1c:94:d2:d2: 58:e4:84:2f:50:e9:12:71:35:6b:2e:55:fd:ad:15: e0:b9:c3:77:59:a0:2e:77:ca:f8:8a:ab:88:ec:b0: de:e2:35:c4:ac:63:8d:ca:6c:9b:b3:a3:84:67:7a: e8:60:59:14:44:aa:87:2c:83:5d:d7:b1:b0:aa:72: 7b:3f:5d:9c:e9:43:0f:de:89:55:25:08:3f:8d:67: bd:c9:9f:4c:3d:66:8c:27:5f:71:b2:54:e0:9e:35: b2:77:c9:a9:ac:36:c6:aa:2f:3f:b1:ef:11:e2:81: 34:02:c0:e9:d7:84:e6:30:58:7f:ca:4f:21:a8:b2: 66:63:14:ac:b3:19:39:1f:c3:eb:96:df:be:f3:0e: e5:b6:1d:20:c1:14:79:38:04:7d:81:0c:bc:26:db: 9d:c7:f1:41:77:ef:8f:d1:68:5e:a7:ab:6e:1e:c7: d0:cb:4b:5f:7a:78:8e:be:bd:8c:0a:5c:7a:3f:05: 2b:40:02:f3:40:b7:bd:62:76:40:f6:93:49:e8:42: 1d:7a:7e:ea:6b:e3:74:57:59:63:97:92:f0:97:c3: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:38:1E:51:9F:ED:F4:DF:F4:B7:E2:16:EC:BE:04:58:03:0D:FD X509v3 Authority Key Identifier: keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/NFE4HlGf7fTf9LfiFuy-BFgDDf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.99.0/24 IPv6: 2a10:ba00:1::-2a10:ba00:9:ffff:ffff:ffff:ffff:ffff 2a10:ba00:10::-2a10:ba00:19:ffff:ffff:ffff:ffff:ffff 2a10:ba00:20::/48 2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:63:d8:f8:53:ac:e9:e0:ca:3e:8f:81:56:b4:28:27:1f:7a: 7d:0d:87:50:8a:ad:d5:d8:96:0e:e1:33:f4:d7:88:15:c5:1d: fa:f0:14:6e:85:67:f3:a2:a3:26:58:8f:d4:de:8b:89:b0:14: b4:74:ce:48:e4:d4:07:c4:1a:b4:47:2d:73:25:9b:d2:a5:49: 7c:a5:f2:e4:83:f7:a7:a6:07:0b:89:0c:49:89:5e:11:07:99: 93:22:f7:96:8a:5b:da:b2:82:86:5e:4e:9e:ed:75:99:8f:16: 4c:bb:61:11:b6:e0:5e:dd:1e:84:31:28:7c:56:c4:ec:85:2b: 33:d7:85:a9:18:4b:27:5d:09:0b:5f:c4:2f:25:2d:b9:09:cf: 71:32:c8:a0:2c:1d:fd:9e:40:ac:65:59:4c:a8:e8:fb:05:a8: b7:ab:69:94:15:85:09:a0:7d:b4:f2:c8:66:a0:8e:1c:79:14: 8a:50:8d:3a:ed:2d:b4:23:5b:a1:45:40:b2:71:cb:a6:95:3b: ff:b1:0d:b4:e3:9b:a3:f5:a8:15:e2:0a:1b:a8:de:83:8b:8f: d1:e9:18:34:66:b7:f1:b5:4c:17:4c:40:f2:23:4d:d5:00:ed: 6c:8e:f9:1c:57:cc:12:ce:d8:ad:1a:6d:95:da:f9:f3:ac:6c: c5:f3:a6:d1 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt8gEXuuX0aO9h7/6xlDUpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2 OGRmM2MwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDUxMzgxZTUxOWZlZGY0ZGZmNGI3ZTIxNmVjYmUwNDU4MDMwZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEi+CRqGyyokl1ZsTLco4aoEr8I JOBAi1VyRD0ElU3ttXPd0P5UohyU0tJY5IQvUOkScTVrLlX9rRXgucN3WaAud8r4 iquI7LDe4jXErGONymybs6OEZ3roYFkURKqHLINd17GwqnJ7P12c6UMP3olVJQg/ jWe9yZ9MPWaMJ19xslTgnjWyd8mprDbGqi8/se8R4oE0AsDp14TmMFh/yk8hqLJm YxSssxk5H8Prlt++8w7lth0gwRR5OAR9gQy8Jtudx/FBd++P0Whep6tuHsfQy0tf eniOvr2MClx6PwUrQALzQLe9YnZA9pNJ6EIden7qa+N0V1ljl5Lwl8MT9wIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFDRROB5Rn+303/S34hbsvgRYAw39MB8GA1UdIwQY MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt MjUwOTc0M2FkMjllLzEvTkZFNEhsR2Y3ZlRmOUxmaUZ1eS1CRmdERGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzAMBAIAATAGAwQALZtjMEsE AgACMEUwEgMHACoQugAAAQMHASoQugAACDASAwcEKhC6AAAQAwcBKhC6AAAYAwcA KhC6AAAgMBIDBwUqELoAvuADBwEqELoAvuQwDQYJKoZIhvcNAQELBQADggEBAEdj 2PhTrOngyj6PgVa0KCcfen0Nh1CKrdXYlg7hM/TXiBXFHfrwFG6FZ/OioyZYj9Te i4mwFLR0zkjk1AfEGrRHLXMlm9KlSXyl8uSD96emBwuJDEmJXhEHmZMi95aKW9qy goZeTp7tdZmPFky7YRG24F7dHoQxKHxWxOyFKzPXhakYSyddCQtfxC8lLbkJz3Ey yKAsHf2eQKxlWUyo6PsFqLeraZQVhQmgfbTyyGagjhx5FIpQjTrtLbQjW6FFQLJx y6aVO/+xDbTjm6P1qBXiChuo3oOLj9HpGDRmt/G1TBdMQPIjTdUA7WyO+RxXzBLO 2K0abZXa+fOsbMXzptE= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:19 2026 by rpki-client