This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nx6CrFXDENO6rpf1ul-dLqT3c0o.roa File: Nx6CrFXDENO6rpf1ul-dLqT3c0o.roa (raw, json) Hash identifier: 9NlEvxtYzWAhwIqLB/lqxokY7/EqanAu9Hl5wHM/YfE= Subject key identifier: 37:1E:82:AC:55:C3:10:D3:BA:AE:97:F5:BA:5F:9D:2E:A4:F7:73:4A Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB5E112AE9C9CCF48E96AB89347EE Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nx6CrFXDENO6rpf1ul-dLqT3c0o.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 45.8.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b5:e1:12:ae:9c:9c:cf:48:e9:6a:b8:93:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371e82ac55c310d3baae97f5ba5f9d2ea4f7734a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:c6:62:b1:b8:90:51:33:5c:f3:f4:a1:7c: fc:90:f2:00:2c:1b:04:3c:b3:be:68:43:f1:18:cb: 17:66:69:0a:48:6b:97:b0:1f:98:33:e3:79:d7:ee: e9:de:c1:b3:97:4b:dc:9c:87:5b:3d:e9:cf:77:32: e6:4f:71:73:d1:07:2f:7f:05:38:ea:4c:b7:fb:69: 1e:83:a8:e4:9d:72:01:b8:5a:26:e1:67:d6:a4:b6: 1b:c5:8d:7c:ca:3a:d7:42:e5:47:93:80:ad:d2:b4: ed:1b:d8:61:86:4e:0a:6c:e2:86:8d:7d:28:d8:a6: 2f:21:62:8c:06:85:94:4f:f5:d2:5d:ce:a7:f1:ad: 9a:9c:a6:7c:e5:e4:13:cc:91:1e:95:76:75:cb:a7: 33:04:97:ca:c8:46:bf:ae:8a:fa:61:2f:8c:61:5b: 44:20:13:d4:4b:ad:36:ca:de:4b:3a:bf:6f:c4:96: 79:2d:a1:24:75:17:05:f5:60:09:7e:06:f7:6d:38: 5d:79:ed:d1:08:91:8c:69:e6:ac:6e:4f:17:d7:a7: 31:19:76:fa:ac:1b:83:7c:c8:2d:5f:74:f8:aa:09: 63:c8:a8:7c:63:7f:d1:f0:ea:5c:90:1a:70:c4:d9: 3b:37:81:90:9b:71:df:2b:75:df:29:ec:52:9e:73: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:82:AC:55:C3:10:D3:BA:AE:97:F5:BA:5F:9D:2E:A4:F7:73:4A X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Nx6CrFXDENO6rpf1ul-dLqT3c0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.184.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:03:ba:a1:c7:93:6e:a4:67:1f:f8:ce:b7:a4:90:e6:ad:d1: 0d:ec:17:57:b0:1e:46:6e:81:bc:6c:d3:02:76:a5:31:23:b1: 5e:8c:bf:83:89:39:5c:99:bd:a9:72:8e:2d:7f:95:30:2f:ac: 15:7b:85:e2:eb:7b:47:00:ef:d5:81:66:19:cc:5a:3a:f2:e2: c0:3e:80:67:d8:7f:05:1c:9a:65:f6:fe:98:95:73:79:ca:78: 68:31:46:2b:1c:fc:35:b9:27:ae:82:c4:d6:f4:95:39:32:63: 45:01:23:e5:a9:6c:e1:dd:c8:f0:32:d7:77:b6:09:4e:bd:1d: 8f:15:38:85:0b:fe:36:7a:91:ca:ac:11:b8:61:46:71:d4:94: 1a:e6:19:10:e6:67:3b:da:06:2e:52:cd:e8:76:db:2b:d2:ff: e7:eb:9c:ce:cf:fd:a1:45:e0:32:07:46:94:9c:a2:02:c7:7d: 5f:8f:81:9e:d2:84:d6:bd:64:ef:c0:13:6a:05:bb:20:a9:00: 41:c3:6f:79:83:c8:7f:15:6d:6f:cd:99:c8:70:41:4c:57:1a: 14:31:37:bd:a6:a0:5b:28:2a:16:1b:12:61:b7:25:69:ba:22: b6:23:f7:38:26:dd:98:0e:f9:d7:44:0e:61:09:e9:6e:bb:47: cd:8a:86:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rXhEq6cnM9I6Wq4k0fuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFlODJhYzU1YzMxMGQzYmFhZTk3ZjViYTVmOWQyZWE0Zjc3MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1/GYrG4kFEzXPP0oXz8kPIALBsE PLO+aEPxGMsXZmkKSGuXsB+YM+N51+7p3sGzl0vcnIdbPenPdzLmT3Fz0QcvfwU4 6ky3+2keg6jknXIBuFom4WfWpLYbxY18yjrXQuVHk4Ct0rTtG9hhhk4KbOKGjX0o 2KYvIWKMBoWUT/XSXc6n8a2anKZ85eQTzJEelXZ1y6czBJfKyEa/ror6YS+MYVtE IBPUS602yt5LOr9vxJZ5LaEkdRcF9WAJfgb3bThdee3RCJGMaeasbk8X16cxGXb6 rBuDfMgtX3T4qgljyKh8Y3/R8OpckBpwxNk7N4GQm3HfK3XfKexSnnM9YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDcegqxVwxDTuq6X9bpfnS6k93NKMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTng2Q3JGWERFTk82cnBmMXVsLWRMcVQzYzBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi4MA0G CSqGSIb3DQEBCwUAA4IBAQAOA7qhx5NupGcf+M63pJDmrdEN7BdXsB5GboG8bNMC dqUxI7FejL+DiTlcmb2pco4tf5UwL6wVe4Xi63tHAO/VgWYZzFo68uLAPoBn2H8F HJpl9v6YlXN5ynhoMUYrHPw1uSeugsTW9JU5MmNFASPlqWzh3cjwMtd3tglOvR2P FTiFC/42epHKrBG4YUZx1JQa5hkQ5mc72gYuUs3odtsr0v/n65zOz/2hReAyB0aU nKICx31fj4Ge0oTWvWTvwBNqBbsgqQBBw295g8h/FW1vzZnIcEFMVxoUMTe9pqBb KCoWGxJhtyVpuiK2I/c4Jt2YDvnXRA5hCeluu0fNioah -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:12 2026 by rpki-client