This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa File: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (raw, json) Hash identifier: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64= Subject key identifier: 35:3A:4D:DB:57:8B:DD:1B:29:EA:49:FF:F2:2A:66:ED:27:7D:5B:94 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1507C91D1E853A1ACB3A22A9350D39 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 45.141.168.0/23 maxlen: 24 148.222.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:07:c9:1d:1e:85:3a:1a:cb:3a:22:a9:35:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353a4ddb578bdd1b29ea49fff22a66ed277d5b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:54:f4:02:9a:e9:d9:0f:9b:f3:01:92:7e: ea:52:88:20:e1:7c:68:e2:9f:b5:bd:d0:a9:9c:7f: b2:dd:76:0f:b0:b1:a4:2c:45:93:fa:68:d9:ba:16: 3d:20:10:d6:e4:90:32:b4:f3:d5:b0:f3:be:72:19: 17:06:d3:97:af:3f:29:51:4a:bc:58:18:92:26:30: 93:c8:e3:3c:1b:02:a3:da:76:f7:9f:aa:ef:33:cd: 5a:78:f5:37:1e:09:61:fd:23:0d:0e:a8:7d:c9:30: cd:a1:25:10:91:a8:9d:a5:c6:09:31:4f:c6:c7:4b: e7:86:7a:5a:ce:a9:3d:e2:a4:5d:f1:9a:6e:5d:ec: 8a:6b:e8:46:ee:97:cb:37:77:22:c7:fa:6e:c7:3d: 07:5f:0a:4d:e7:d0:41:9c:b4:99:32:ef:db:54:71: 23:e9:9e:c2:d4:26:42:45:9d:7c:aa:2d:e7:8c:c2: d7:4f:19:96:16:72:5f:48:e8:1f:46:c6:65:31:c2: eb:e8:54:6f:f7:51:9a:55:a6:bb:3f:94:86:87:63: c5:e0:82:8d:84:16:43:a3:3b:d4:52:dc:58:91:7b: 7a:82:87:5d:22:d8:7f:64:8a:25:6e:a7:0a:15:5c: 0c:34:cc:d2:d3:5b:3b:3f:ef:34:32:ec:e8:d3:73: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3A:4D:DB:57:8B:DD:1B:29:EA:49:FF:F2:2A:66:ED:27:7D:5B:94 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.168.0/23 148.222.240.0/22 Signature Algorithm: sha256WithRSAEncryption 83:88:0c:c9:13:a0:ca:0b:bf:86:57:f2:33:f0:e2:ca:96:d6: 5b:4e:9f:3e:0e:ed:82:14:63:54:52:dd:c7:4f:78:54:e1:80: 72:0a:7e:c4:36:5d:d7:ce:a7:d2:9c:a1:d5:09:59:69:51:6d: d7:90:2c:4e:56:67:b5:ad:74:18:c6:a6:7b:cf:df:a2:86:82: 18:d5:79:c3:74:0d:92:8a:27:60:fc:79:b8:de:10:4f:30:96: db:a4:24:b1:99:25:cd:ae:98:86:8e:ed:50:29:58:ec:8d:ce: e3:93:b3:ef:c2:1c:44:09:24:8b:1b:40:97:38:5f:3e:e8:af: 82:07:f0:2d:d4:a6:9f:28:5c:07:0b:f8:76:5a:27:b4:2e:7f: 1c:be:19:87:e1:69:82:58:b2:90:53:b3:b8:c0:44:63:b9:80: 92:fa:fa:26:9e:5e:79:93:a2:26:b0:73:8b:98:6d:01:6e:13: ce:18:38:fd:38:b2:e1:4f:bf:a4:76:47:19:08:1b:ee:f1:33: 74:52:da:26:c3:0e:6c:73:66:28:50:e8:37:2b:65:30:a9:bf: e2:00:27:4b:b1:a4:27:b1:f2:30:8e:cc:ad:4c:82:57:19:82: 3f:13:48:de:24:a7:fd:fd:1f:e0:20:41:7b:5b:df:f2:d7:e5: 8d:16:6b:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQfJHR6FOhrLOiKpNQ05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTNhNGRkYjU3OGJkZDFiMjllYTQ5ZmZmMjJhNjZlZDI3N2Q1Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc9U9AKa6dkPm/MBkn7qUogg4Xxo 4p+1vdCpnH+y3XYPsLGkLEWT+mjZuhY9IBDW5JAytPPVsPO+chkXBtOXrz8pUUq8 WBiSJjCTyOM8GwKj2nb3n6rvM81aePU3Hglh/SMNDqh9yTDNoSUQkaidpcYJMU/G x0vnhnpazqk94qRd8ZpuXeyKa+hG7pfLN3cix/puxz0HXwpN59BBnLSZMu/bVHEj 6Z7C1CZCRZ18qi3njMLXTxmWFnJfSOgfRsZlMcLr6FRv91GaVaa7P5SGh2PF4IKN hBZDozvUUtxYkXt6goddIth/ZIolbqcKFVwMNMzS01s7P+80Muzo03PdkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDU6TdtXi90bKepJ//IqZu0nfVuUMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvTlRwTjIxZUwzUnNwNmtuXzhpcG03U2Q5VzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY2oAwQC lN7wMA0GCSqGSIb3DQEBCwUAA4IBAQCDiAzJE6DKC7+GV/Iz8OLKltZbTp8+Du2C FGNUUt3HT3hU4YByCn7ENl3XzqfSnKHVCVlpUW3XkCxOVme1rXQYxqZ7z9+ihoIY 1XnDdA2Siidg/Hm43hBPMJbbpCSxmSXNrpiGju1QKVjsjc7jk7PvwhxECSSLG0CX OF8+6K+CB/At1KafKFwHC/h2Wie0Ln8cvhmH4WmCWLKQU7O4wERjuYCS+vomnl55 k6ImsHOLmG0BbhPOGDj9OLLhT7+kdkcZCBvu8TN0Utomww5sc2YoUOg3K2Uwqb/i ACdLsaQnsfIwjsytTIJXGYI/E0jeJKf9/R/gIEF7W9/y1+WNFmso -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:05 2026 by rpki-client