This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/NEU1c7VNN4q-TguvB94_KBChOu4.roa File: NEU1c7VNN4q-TguvB94_KBChOu4.roa (raw, json) Hash identifier: szP1WPQvFX40P7/Pi1/TmYlqHInk9WSkXPOdCLYLMNw= Subject key identifier: 34:45:35:73:B5:4D:37:8A:BE:4E:0B:AF:07:DE:3F:28:10:A1:3A:EE Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca Certificate serial: 019B7C120A9597721BCB7ED6A352DED344E0 Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/NEU1c7VNN4q-TguvB94_KBChOu4.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199925 IP address blocks: 45.149.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0a:95:97:72:1b:cb:7e:d6:a3:52:de:d3:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34453573b54d378abe4e0baf07de3f2810a13aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:14:08:d7:ca:63:8f:9a:31:f8:20:2f:1f: 8a:e7:97:5d:50:39:d5:57:07:8c:28:4d:ec:84:01: 9c:25:8e:d6:c8:09:28:44:b1:fc:4b:53:d3:fc:9a: 0a:40:b4:18:32:af:c9:e4:e8:d4:1c:a2:c9:38:cb: b1:ad:e7:05:4f:2d:37:80:f5:5b:98:d3:fe:4d:a6: 78:46:57:0f:1e:95:15:19:56:39:c4:fa:97:24:ac: 46:4c:bf:ef:6e:b9:74:82:6a:19:d3:fc:93:ed:34: b4:c8:3c:13:5e:ee:70:ee:58:02:0d:ad:a5:38:d2: 1e:70:c3:92:45:bc:d2:9a:a0:c2:c1:b4:67:d2:bd: 59:ed:17:a3:c1:89:13:44:46:a8:9f:c2:a3:63:b0: 1f:2c:d1:c1:a7:f4:73:a3:b8:6d:9f:6b:95:2b:cf: 16:78:03:b3:02:88:44:2e:4d:aa:60:1e:43:59:f2: 38:40:33:51:eb:b3:d5:9c:13:e0:f8:62:fd:5c:d8: f4:ed:e8:06:4e:fe:ac:c5:32:dd:0c:e1:62:61:66: 41:1b:d4:01:94:c5:fb:d4:62:65:ce:26:5e:6f:3d: 05:aa:e0:14:94:8d:5e:95:66:c7:ad:e7:d1:b0:86: 38:d3:92:f9:8c:47:6e:d9:9c:d3:af:66:d2:17:28: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:45:35:73:B5:4D:37:8A:BE:4E:0B:AF:07:DE:3F:28:10:A1:3A:EE X509v3 Authority Key Identifier: keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/NEU1c7VNN4q-TguvB94_KBChOu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.37.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:aa:e3:54:54:1c:89:53:cc:d3:54:f6:2e:62:e5:f7:89:16: c3:2d:46:16:37:1d:84:42:bb:22:d5:78:00:a4:f7:5f:b3:7c: 76:0b:b7:b0:46:33:af:84:03:fb:56:69:be:a1:7c:8d:20:18: 6b:17:1f:2a:03:74:12:db:c7:3d:63:95:b7:15:3a:5f:06:88: 0d:e2:b3:f4:3e:1c:d1:53:71:74:ec:f9:6a:bd:0e:41:a4:12: 45:b0:c7:2f:24:43:7c:e5:fd:8f:91:7f:78:d0:78:15:db:36: 17:ba:db:24:d2:8d:06:90:88:fe:73:14:0c:3c:b8:ef:a8:b4: 40:0b:db:4f:62:0f:87:86:9c:7f:8b:23:69:b5:d1:4f:87:3d: 61:12:77:d8:d4:64:7b:d6:ff:e8:03:31:5a:8c:ff:e8:f5:e0: c0:e1:ca:68:b2:c9:ed:5a:4c:46:7c:55:19:00:20:63:29:64: 4d:42:26:6e:da:f0:7d:3c:91:43:d0:41:25:7d:41:4b:92:2d: f0:7d:a0:a0:73:37:dc:44:59:c8:e9:1b:2d:50:12:59:79:1d: 5a:cf:03:cb:a6:8b:54:2e:61:5e:04:de:28:2b:08:f1:e2:42: 04:f9:d9:58:9d:2f:e1:e4:04:b0:d3:4b:16:78:aa:da:ea:8d: 4e:d9:a0:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EgqVl3Iby37Wo1Le00TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4 NWNmY2EwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ1MzU3M2I1NGQzNzhhYmU0ZTBiYWYwN2RlM2YyODEwYTEzYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcAUCNfKY4+aMfggLx+K55ddUDnV VweMKE3shAGcJY7WyAkoRLH8S1PT/JoKQLQYMq/J5OjUHKLJOMuxrecFTy03gPVb mNP+TaZ4RlcPHpUVGVY5xPqXJKxGTL/vbrl0gmoZ0/yT7TS0yDwTXu5w7lgCDa2l ONIecMOSRbzSmqDCwbRn0r1Z7RejwYkTREaon8KjY7AfLNHBp/Rzo7htn2uVK88W eAOzAohELk2qYB5DWfI4QDNR67PVnBPg+GL9XNj07egGTv6sxTLdDOFiYWZBG9QB lMX71GJlziZebz0FquAUlI1elWbHrefRsIY405L5jEdu2ZzTr2bSFyhKhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRFNXO1TTeKvk4LrwfePygQoTruMB8GA1UdIwQY MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt ZDNiOTBhOWI5YjQxLzEvTkVVMWM3Vk5ONHEtVGd1dkI5NF9LQkNoT3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUlMA0G CSqGSIb3DQEBCwUAA4IBAQCaquNUVByJU8zTVPYuYuX3iRbDLUYWNx2EQrsi1XgA pPdfs3x2C7ewRjOvhAP7Vmm+oXyNIBhrFx8qA3QS28c9Y5W3FTpfBogN4rP0PhzR U3F07PlqvQ5BpBJFsMcvJEN85f2PkX940HgV2zYXutsk0o0GkIj+cxQMPLjvqLRA C9tPYg+Hhpx/iyNptdFPhz1hEnfY1GR71v/oAzFajP/o9eDA4cpossntWkxGfFUZ ACBjKWRNQiZu2vB9PJFD0EElfUFLki3wfaCgczfcRFnI6RstUBJZeR1azwPLpotU LmFeBN4oKwjx4kIE+dlYnS/h5ASw00sWeKra6o1O2aB8 -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:54 2026 by rpki-client