This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NG8IcyNVidWmcwYHFtsxqnFG2_g.roa File: NG8IcyNVidWmcwYHFtsxqnFG2_g.roa (raw, json) Hash identifier: i2fR7CmyfbWbarlN1SWfe5YmoqYcXZTpBNc2u+dRpWU= Subject key identifier: 34:6F:08:73:23:55:89:D5:A6:73:06:07:16:DB:31:AA:71:46:DB:F8 Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Certificate serial: 019B7BA33A6E2F9457E919A6A229F2A80A7A Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NG8IcyNVidWmcwYHFtsxqnFG2_g.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 45.82.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:6e:2f:94:57:e9:19:a6:a2:29:f2:a8:0a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=346f0873235589d5a673060716db31aa7146dbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:44:ad:17:24:83:7a:73:92:11:3f:61:8d: 46:24:a0:f1:3d:42:3d:43:09:20:f8:c7:d0:9d:66: 12:0f:f0:f2:84:0f:fe:55:36:c9:c7:de:b5:e7:06: 80:43:cf:eb:c1:4e:8f:96:d3:25:91:f3:a8:6a:57: 2c:dd:eb:04:66:15:74:4a:c3:6f:2c:be:40:d3:12: a2:9e:c4:7a:f3:95:e9:72:1d:6c:dc:e9:35:b4:9f: 57:11:cd:ae:1c:7d:c1:ad:03:1b:5b:c1:69:73:8b: 70:73:ce:ed:66:e9:9b:89:13:56:55:6b:8c:44:a3: dd:27:b7:89:11:6e:6b:e5:53:e3:26:51:02:78:df: c8:d3:9c:7a:81:b3:3d:6e:6e:68:fc:b6:f9:98:56: 5e:9e:77:9f:8f:ec:c5:7b:30:23:0f:c9:1f:7a:27: 6b:11:2f:f4:3f:ea:ca:15:53:b1:25:b0:4b:c0:ba: 69:aa:37:aa:21:28:1e:26:bf:27:9e:86:93:e4:0e: f3:06:e3:00:c1:9a:83:40:10:f3:db:dd:f5:f0:1c: e8:55:ec:b4:99:87:3b:fc:ca:04:a5:ac:a0:be:0c: 04:19:53:52:ab:06:52:f6:b6:fb:00:ba:c2:1d:fe: 15:8b:24:9d:7f:3e:2d:c4:72:75:6b:73:3d:18:ec: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6F:08:73:23:55:89:D5:A6:73:06:07:16:DB:31:AA:71:46:DB:F8 X509v3 Authority Key Identifier: keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/NG8IcyNVidWmcwYHFtsxqnFG2_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.13.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7c:17:f1:e6:f7:96:ca:be:26:ef:ba:b0:ea:3a:79:0e:97: 7f:d3:a7:20:7b:ec:a2:58:bc:ce:0a:4a:63:d2:54:13:7c:6e: 15:9c:95:83:e2:fc:74:88:85:4f:6b:b4:9b:cb:7f:90:3e:99: 60:16:e1:59:1c:81:f9:5f:b4:32:01:02:42:6d:28:77:7d:d1: ea:e8:b0:5d:9c:9b:a2:8f:9d:b8:4a:44:86:12:02:3e:3e:3c: 71:9b:99:49:66:aa:ad:a8:a9:d8:e8:46:ed:b6:8e:4e:6e:61: 41:0d:aa:9a:0f:54:18:bf:94:a1:b9:7c:5e:6f:15:7d:86:1a: 48:88:65:d1:34:7f:1e:5f:31:f7:23:6f:d8:66:e9:ba:0b:2b: 7f:ca:df:87:4f:d6:bf:a4:32:03:53:00:91:72:ce:ed:5f:43: 0d:9a:89:ee:c0:5b:f2:bb:94:a7:41:c1:41:de:23:bb:53:3b: 26:7e:d7:0c:d6:4a:1e:cd:6e:9d:74:b0:46:37:32:b4:3f:75: 14:dc:8e:ee:a9:73:47:5c:d8:85:e1:b3:74:ac:a1:d8:af:d5: 87:9d:62:bf:15:a6:d3:03:c7:2f:4e:18:b9:e1:1d:e0:a7:e8: 0b:3f:13:76:d2:ed:cc:1e:d7:09:4e:0b:ab:0f:42:8c:ef:5c: 04:e1:aa:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozpuL5RX6RmmoinyqAp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx NjlmODMwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDZmMDg3MzIzNTU4OWQ1YTY3MzA2MDcxNmRiMzFhYTcxNDZkYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56hErRckg3pzkhE/YY1GJKDxPUI9 Qwkg+MfQnWYSD/DyhA/+VTbJx9615waAQ8/rwU6PltMlkfOoalcs3esEZhV0SsNv LL5A0xKinsR685Xpch1s3Ok1tJ9XEc2uHH3BrQMbW8Fpc4twc87tZumbiRNWVWuM RKPdJ7eJEW5r5VPjJlECeN/I05x6gbM9bm5o/Lb5mFZennefj+zFezAjD8kfeidr ES/0P+rKFVOxJbBLwLppqjeqISgeJr8nnoaT5A7zBuMAwZqDQBDz29318BzoVey0 mYc7/MoEpaygvgwEGVNSqwZS9rb7ALrCHf4ViySdfz4txHJ1a3M9GOwd/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRvCHMjVYnVpnMGBxbbMapxRtv4MB8GA1UdIwQY MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt NWM0NzZlMzMyNWY1LzEvTkc4SWN5TlZpZFdtY3dZSEZ0c3hxbkZHMl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1 LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVINMA0G CSqGSIb3DQEBCwUAA4IBAQCTfBfx5veWyr4m77qw6jp5Dpd/06cge+yiWLzOCkpj 0lQTfG4VnJWD4vx0iIVPa7Sby3+QPplgFuFZHIH5X7QyAQJCbSh3fdHq6LBdnJui j524SkSGEgI+Pjxxm5lJZqqtqKnY6Ebtto5ObmFBDaqaD1QYv5ShuXxebxV9hhpI iGXRNH8eXzH3I2/YZum6Cyt/yt+HT9a/pDIDUwCRcs7tX0MNmonuwFvyu5SnQcFB 3iO7UzsmftcM1koezW6ddLBGNzK0P3UU3I7uqXNHXNiF4bN0rKHYr9WHnWK/FabT A8cvThi54R3gp+gLPxN20u3MHtcJTgurD0KM71wE4aq6 -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:41 2026 by rpki-client