This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NOjidsLCUywjqiSQh6-DSKu6yLQ.roa File: NOjidsLCUywjqiSQh6-DSKu6yLQ.roa (raw, json) Hash identifier: I/pPJalNybpVcOs6vL8mm15AVckT45IXDQCP50tuk2M= Subject key identifier: 34:E8:E2:76:C2:C2:53:2C:23:AA:24:90:87:AF:83:48:AB:BA:C8:B4 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5418203602B5BF557CC75E36B917C Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NOjidsLCUywjqiSQh6-DSKu6yLQ.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9335 IP address blocks: 45.91.132.0/24 maxlen: 24 45.144.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:82:03:60:2b:5b:f5:57:cc:75:e3:6b:91:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e8e276c2c2532c23aa249087af8348abbac8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:03:92:cc:6c:77:df:70:de:e4:94:96:6a: cf:f2:ab:25:6f:8e:13:fd:88:cf:9f:ab:26:ce:ee: 99:c4:77:6d:72:82:c0:f6:6c:43:ec:61:bf:dc:fe: 0f:d8:b0:2d:c8:b2:7d:bf:17:2a:56:4f:9c:da:62: 2e:15:16:a1:1a:c0:cb:72:16:02:fd:43:d8:62:5b: e8:49:32:85:76:d9:2a:5b:30:36:d0:2a:e8:51:7b: a9:b4:18:e4:7c:b1:75:43:b1:cd:2a:45:0a:cd:68: 44:d9:f3:e4:db:7a:48:34:a8:1d:d2:18:50:cb:99: 62:85:5a:57:e9:cb:59:d5:ab:f2:12:c7:62:81:45: d1:4e:9a:54:03:45:e4:dc:8c:b9:80:c5:f1:75:ee: 4c:75:cf:bb:6a:26:7d:dd:e2:f8:c3:dd:21:94:b1: 87:c3:fa:97:d0:ed:29:b0:a2:bb:04:6b:b8:e9:85: 76:f3:ad:e0:2a:48:f8:8d:b1:b3:a1:e6:51:f9:cc: 1a:73:ed:3f:86:39:53:fb:20:be:10:0d:20:56:62: 96:20:75:ba:d1:22:78:e3:5c:98:56:ae:7b:3a:e9: 15:0b:15:86:cb:b5:d3:44:a1:97:a5:3d:3c:43:65: ed:52:46:17:a3:d7:ee:29:70:4a:a3:ba:51:9a:a5: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E8:E2:76:C2:C2:53:2C:23:AA:24:90:87:AF:83:48:AB:BA:C8:B4 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NOjidsLCUywjqiSQh6-DSKu6yLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.132.0/24 45.144.164.0/22 Signature Algorithm: sha256WithRSAEncryption 66:a3:ee:28:ec:d9:da:89:13:72:4f:c5:d3:1b:fd:a3:14:8a: 13:37:36:34:27:9d:05:79:f7:34:99:98:7f:1a:64:ad:31:c2: 95:36:2b:86:7a:2b:20:3f:b8:2c:72:bc:2b:29:cd:f9:5f:ed: c3:f1:5a:66:c3:28:75:35:12:d1:f4:55:ff:35:a1:a4:52:ca: 56:d6:d4:78:81:99:a4:29:57:e3:99:10:73:9f:54:b2:dd:c7: e3:78:c3:b5:ae:96:62:21:b5:aa:8f:e2:b8:27:ef:91:8b:bf: 9c:7a:73:45:f9:06:f8:51:a3:58:ca:5a:55:2d:24:cc:2d:b5: 5d:34:c9:3d:1d:b7:f6:af:15:cc:28:08:1f:97:3e:41:14:9e: d7:e5:2b:b6:2b:ab:eb:d9:09:3e:af:19:67:b6:56:0b:ed:80: 35:38:cc:f4:b8:05:31:bb:b7:fc:f7:34:04:25:e1:8d:3d:f7: f6:7c:88:13:52:58:0d:f4:bd:21:41:cc:e3:2e:5b:6a:9b:2b: 13:56:3e:17:cd:0e:9e:ad:cf:40:b5:d4:6c:03:57:76:eb:25: b3:10:a1:39:54:cf:ab:22:f9:3c:ab:4c:be:e9:49:b9:64:b8: 15:bd:b7:10:55:c1:4c:b1:5e:dd:93:df:f5:b0:56:00:c8:c2: 13:ed:f0:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pUGCA2ArW/VXzHXja5F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU4ZTI3NmMyYzI1MzJjMjNhYTI0OTA4N2FmODM0OGFiYmFjOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGYDksxsd99w3uSUlmrP8qslb44T /YjPn6smzu6ZxHdtcoLA9mxD7GG/3P4P2LAtyLJ9vxcqVk+c2mIuFRahGsDLchYC /UPYYlvoSTKFdtkqWzA20CroUXuptBjkfLF1Q7HNKkUKzWhE2fPk23pINKgd0hhQ y5lihVpX6ctZ1avyEsdigUXRTppUA0Xk3Iy5gMXxde5Mdc+7aiZ93eL4w90hlLGH w/qX0O0psKK7BGu46YV2863gKkj4jbGzoeZR+cwac+0/hjlT+yC+EA0gVmKWIHW6 0SJ441yYVq57OukVCxWGy7XTRKGXpT08Q2XtUkYXo9fuKXBKo7pRmqVyMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDTo4nbCwlMsI6okkIevg0irusi0MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvTk9qaWRzTENVeXdqcWlTUWg2LURTS3U2eUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVuEAwQC LZCkMA0GCSqGSIb3DQEBCwUAA4IBAQBmo+4o7NnaiRNyT8XTG/2jFIoTNzY0J50F efc0mZh/GmStMcKVNiuGeisgP7gscrwrKc35X+3D8Vpmwyh1NRLR9FX/NaGkUspW 1tR4gZmkKVfjmRBzn1Sy3cfjeMO1rpZiIbWqj+K4J++Ri7+cenNF+Qb4UaNYylpV LSTMLbVdNMk9Hbf2rxXMKAgflz5BFJ7X5Su2K6vr2Qk+rxlntlYL7YA1OMz0uAUx u7f89zQEJeGNPff2fIgTUlgN9L0hQczjLltqmysTVj4XzQ6erc9AtdRsA1d26yWz EKE5VM+rIvk8q0y+6Um5ZLgVvbcQVcFMsV7dk9/1sFYAyMIT7fBB -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client