This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bNtNYkLPuWzv9TPQ0I5T1JdcCBk.roa File: bNtNYkLPuWzv9TPQ0I5T1JdcCBk.roa (raw, json) Hash identifier: mztBQmn5JOoNIHHJZa+pCFbZouP66hkObFXusw/OPfw= Subject key identifier: 6C:DB:4D:62:42:CF:B9:6C:EF:F5:33:D0:D0:8E:53:D4:97:5C:08:19 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E05EDF2E223036826ABFA76342B5A Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bNtNYkLPuWzv9TPQ0I5T1JdcCBk.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 45.144.173.0/24 maxlen: 24 188.241.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:05:ed:f2:e2:23:03:68:26:ab:fa:76:34:2b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cdb4d6242cfb96ceff533d0d08e53d4975c0819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:e8:86:a1:b7:15:3e:f1:08:00:5a:bf:60: 96:e1:34:b6:5e:18:82:3f:3b:71:1c:fd:db:6d:91: 78:a1:73:d6:65:85:fb:2b:8c:d6:51:99:04:29:26: b3:4d:66:b3:56:cd:0c:fb:b6:55:af:57:56:75:05: d4:04:72:79:53:5e:25:65:bb:18:cd:48:68:f2:60: da:1d:71:86:14:bb:19:0c:31:7d:98:72:6b:5e:de: 04:21:9d:d9:b9:9f:4d:3e:62:5d:42:00:68:40:35: 2f:f4:0b:3d:ca:05:70:8a:9b:af:c2:97:fb:62:73: 6d:be:f8:06:8b:31:b0:30:46:2c:d5:f9:58:fa:7c: c6:a1:ff:4f:96:75:27:6d:7d:f4:23:d1:3a:fc:3b: 5e:56:2b:25:1e:ec:d5:c9:c5:57:ac:9a:11:3b:38: c9:e1:bf:c0:ac:6f:c8:39:fe:26:ca:02:0c:fb:7f: 26:05:73:b9:a0:84:7f:b4:36:48:cc:f6:a4:e0:13: e7:b7:45:ce:72:a4:c9:1d:6d:ab:35:76:9c:70:4b: 1c:36:25:e3:b3:27:cc:9b:05:9d:19:cd:6f:48:19: ae:70:9e:8e:13:3b:28:2c:2a:df:74:26:a8:e0:9d: 0d:0d:64:14:52:2d:9d:dd:46:f8:d7:f3:9d:56:88: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:4D:62:42:CF:B9:6C:EF:F5:33:D0:D0:8E:53:D4:97:5C:08:19 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bNtNYkLPuWzv9TPQ0I5T1JdcCBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.173.0/24 188.241.136.0/24 Signature Algorithm: sha256WithRSAEncryption 18:58:37:94:92:c9:29:3b:a8:f4:4a:30:46:16:db:7d:99:37: 1b:d1:ce:2a:55:2e:37:dc:e2:12:90:13:37:fe:7c:1d:9a:f6: 3a:ba:cc:8a:ae:2c:14:03:2a:54:3d:54:5b:40:e8:ef:91:a6: 6d:85:a8:eb:a7:b2:4e:9c:de:61:74:da:d1:19:f8:56:29:57: a0:e1:36:74:c6:6d:de:61:4d:14:76:ed:77:22:9f:c3:a3:78: 65:f9:b5:ea:53:46:ba:e1:11:11:8a:dc:3b:3b:fb:36:f8:45: 21:a8:51:42:2c:8d:6e:19:f0:32:b0:02:52:14:c6:51:10:85: af:5b:93:20:98:50:65:5a:1d:6d:4b:b0:87:c2:63:c3:f2:67: 11:92:0e:6e:33:24:3d:00:f8:10:45:d3:5b:1d:79:83:5d:ed: 3b:20:f2:52:56:2d:e2:27:c9:fb:5b:9e:17:39:40:0e:ed:fa: ab:15:c0:9a:71:31:53:25:00:5a:37:eb:f8:2c:b2:0e:23:b5: 22:0f:40:ec:0b:5f:98:56:bc:5e:63:b6:7c:d3:3b:83:03:e6: 22:57:3c:57:ee:af:fd:d3:d0:d9:71:89:0b:df:33:9d:20:40: 4a:27:b4:66:5d:3a:1a:6a:70:e0:85:50:b1:c1:73:48:ba:99: ca:7e:8f:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fgXt8uIjA2gmq/p2NCtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2RiNGQ2MjQyY2ZiOTZjZWZmNTMzZDBkMDhlNTNkNDk3NWMwODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3ohqG3FT7xCABav2CW4TS2XhiC PztxHP3bbZF4oXPWZYX7K4zWUZkEKSazTWazVs0M+7ZVr1dWdQXUBHJ5U14lZbsY zUho8mDaHXGGFLsZDDF9mHJrXt4EIZ3ZuZ9NPmJdQgBoQDUv9As9ygVwipuvwpf7 YnNtvvgGizGwMEYs1flY+nzGof9PlnUnbX30I9E6/DteVislHuzVycVXrJoROzjJ 4b/ArG/IOf4mygIM+38mBXO5oIR/tDZIzPak4BPnt0XOcqTJHW2rNXaccEscNiXj syfMmwWdGc1vSBmucJ6OEzsoLCrfdCao4J0NDWQUUi2d3Ub41/OdVojmNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGzbTWJCz7ls7/Uz0NCOU9SXXAgZMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYk50TllrTFB1V3p2OVRQUTBJNVQxSmRjQ0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZCtAwQA vPGIMA0GCSqGSIb3DQEBCwUAA4IBAQAYWDeUkskpO6j0SjBGFtt9mTcb0c4qVS43 3OISkBM3/nwdmvY6usyKriwUAypUPVRbQOjvkaZthajrp7JOnN5hdNrRGfhWKVeg 4TZ0xm3eYU0Udu13Ip/Do3hl+bXqU0a64RERitw7O/s2+EUhqFFCLI1uGfAysAJS FMZREIWvW5MgmFBlWh1tS7CHwmPD8mcRkg5uMyQ9APgQRdNbHXmDXe07IPJSVi3i J8n7W54XOUAO7fqrFcCacTFTJQBaN+v4LLIOI7UiD0DsC1+YVrxeY7Z80zuDA+Yi VzxX7q/909DZcYkL3zOdIEBKJ7RmXToaanDghVCxwXNIupnKfo8u -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:35 2026 by rpki-client