This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-t9ioZz4hDYJjgF0dUVgoNNmKBY.roa File: 1-t9ioZz4hDYJjgF0dUVgoNNmKBY.roa (raw, json) Hash identifier: JhhrxHLntj+abRJLQ9pdrDhocFCdP89vAdmYpk4L36w= Subject key identifier: FA:DF:62:A1:9C:F8:84:36:09:8E:01:74:75:45:60:A0:D3:66:28:16 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D3D1539699FDBC31558CEC576F1BE Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-t9ioZz4hDYJjgF0dUVgoNNmKBY.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 45.8.68.0/24 maxlen: 24 45.67.97.0/24 maxlen: 24 45.67.99.0/24 maxlen: 24 45.91.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3d:15:39:69:9f:db:c3:15:58:ce:c5:76:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fadf62a19cf88436098e0174754560a0d3662816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:8b:db:ce:d8:ec:ab:0a:61:5f:c5:4f:63: 4b:8d:3c:ad:ea:0f:a0:73:f4:0b:9f:ab:5b:83:87: 0a:7f:30:81:d0:af:e7:47:37:04:45:c9:80:a2:88: 21:a6:e8:7e:55:f0:29:63:9a:99:5f:6c:87:0d:19: 98:a4:98:c7:03:04:b2:1b:e5:07:1f:fd:7f:42:9f: 2a:49:fd:fc:1f:78:45:76:00:90:d5:27:69:53:32: bb:9b:99:3c:59:9b:9a:7b:f4:69:76:d8:a5:a9:eb: 67:21:7c:bb:31:99:45:ec:94:e3:e0:19:ee:e4:78: 91:7b:50:a9:13:ce:0b:37:a6:4a:00:6f:8d:5c:d7: 2b:2e:57:2c:b7:eb:11:5e:55:2b:c2:21:09:7d:fb: 8a:2c:6f:73:49:d7:cb:eb:55:36:72:bc:f9:f2:f8: 8d:71:b9:4d:86:7b:7b:b0:53:7b:c3:88:e8:7a:6d: 22:80:5b:34:fd:4d:cd:f4:ea:ac:6e:2c:99:8d:ff: 45:a6:fe:58:a9:8e:5e:31:94:a5:23:48:69:bb:74: a0:9f:62:42:cf:96:e9:2f:20:9a:35:f0:fe:b5:75: 05:c2:38:8b:78:46:71:2c:44:a0:19:2d:c3:00:c2: 06:48:23:e4:94:37:c9:83:ed:db:e9:a8:7e:28:3c: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:62:A1:9C:F8:84:36:09:8E:01:74:75:45:60:A0:D3:66:28:16 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-t9ioZz4hDYJjgF0dUVgoNNmKBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.68.0/24 45.67.97.0/24 45.67.99.0/24 45.91.50.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:47:21:ba:e2:35:f4:49:17:58:22:47:ab:51:75:5c:18:6f: 57:21:34:77:ac:58:7e:d9:02:63:0f:fb:6d:bc:c6:18:02:8a: 5b:4a:5b:94:c0:6c:30:40:9e:25:0a:28:d7:e0:42:46:26:79: f7:e7:41:7b:38:d8:cc:15:c2:cc:48:f6:54:f5:f4:10:3d:3c: 13:51:5b:af:b6:fa:10:4c:03:e8:bd:b1:12:7f:fc:18:a8:83: 5c:cb:21:80:9e:ac:7d:8a:f7:c9:36:44:fc:00:60:49:9d:2f: 5c:dc:1c:80:f1:e3:f7:d8:3d:a2:42:cf:1f:fc:fc:25:47:b0: bb:09:d6:03:16:8b:91:a3:b0:56:5f:a0:54:57:eb:2a:f5:95: 85:76:f5:a7:4a:f1:ca:c1:30:04:01:60:80:d4:54:e9:bb:47: f0:59:73:46:10:68:1d:0e:25:af:88:f5:c1:0c:f5:d7:bb:81: 38:6b:cf:65:1d:16:61:c6:25:69:29:ac:f9:6d:8a:5f:1e:ce: dc:b6:d3:32:da:4a:3f:eb:b0:18:5d:7b:d4:00:57:c7:08:50: 4d:0a:40:89:db:08:db:3d:87:91:f4:8c:92:fe:c3:f2:00:84: 59:6e:04:46:36:52:5a:b9:a1:81:84:f6:90:5c:6b:3c:3c:bb: 83:1e:4e:7a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt9XT0VOWmf28MVWM7FdvG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWRmNjJhMTljZjg4NDM2MDk4ZTAxNzQ3NTQ1NjBhMGQzNjYyODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApluL287Y7KsKYV/FT2NLjTyt6g+g c/QLn6tbg4cKfzCB0K/nRzcERcmAooghpuh+VfApY5qZX2yHDRmYpJjHAwSyG+UH H/1/Qp8qSf38H3hFdgCQ1SdpUzK7m5k8WZuae/RpdtilqetnIXy7MZlF7JTj4Bnu 5HiRe1CpE84LN6ZKAG+NXNcrLlcst+sRXlUrwiEJffuKLG9zSdfL61U2crz58viN cblNhnt7sFN7w4joem0igFs0/U3N9OqsbiyZjf9Fpv5YqY5eMZSlI0hpu3Sgn2JC z5bpLyCaNfD+tXUFwjiLeEZxLESgGS3DAMIGSCPklDfJg+3b6ah+KDwjqQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPrfYqGc+IQ2CY4BdHVFYKDTZigWMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvMS10OWlvWno0aERZSmpnRjBkVVZnb05ObUtCWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1 OC8xL05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC0IRAME AC1DYQMEAC1DYwMEAC1bMjANBgkqhkiG9w0BAQsFAAOCAQEAPEchuuI19EkXWCJH q1F1XBhvVyE0d6xYftkCYw/7bbzGGAKKW0pblMBsMECeJQoo1+BCRiZ59+dBezjY zBXCzEj2VPX0ED08E1Fbr7b6EEwD6L2xEn/8GKiDXMshgJ6sfYr3yTZE/ABgSZ0v XNwcgPHj99g9okLPH/z8JUewuwnWAxaLkaOwVl+gVFfrKvWVhXb1p0rxysEwBAFg gNRU6btH8FlzRhBoHQ4lr4j1wQz117uBOGvPZR0WYcYlaSms+W2KXx7O3LbTMtpK P+uwGF171ABXxwhQTQpAidsI2z2HkfSMkv7D8gCEWW4ERjZSWrmhgYT2kFxrPDy7 gx5Oeg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:30 2026 by rpki-client