This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7mlNaMJ4gqG4vwIuJMXlJ34PFZM.roa File: 7mlNaMJ4gqG4vwIuJMXlJ34PFZM.roa (raw, json) Hash identifier: GB1VcB10huxYVE/frk42wqTVtCzATa3pOneYQHYouyk= Subject key identifier: EE:69:4D:68:C2:78:82:A1:B8:BF:02:2E:24:C5:E5:27:7E:0F:15:93 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5C8AF49F03291E23FC69F0AAC306 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7mlNaMJ4gqG4vwIuJMXlJ34PFZM.roa Signing time: Fri 02 Jan 2026 06:20:28 +0000 ROA not before: Fri 02 Jan 2026 06:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211043 IP address blocks: 45.67.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5c:8a:f4:9f:03:29:1e:23:fc:69:f0:aa:c3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee694d68c27882a1b8bf022e24c5e5277e0f1593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:f8:53:82:4e:bb:77:e7:98:d9:28:ae:4f: e0:d3:0e:36:de:2b:98:bc:5d:fc:5d:ca:97:58:ba: ab:b3:af:06:12:9c:2b:81:b3:92:dd:bf:b6:d6:10: 38:68:25:05:b9:8a:f7:e3:be:3c:de:86:e6:3f:38: 7f:e6:26:5e:67:59:a2:3f:44:a8:2d:b3:f2:10:79: 4b:3e:29:d9:c2:3e:5f:5e:78:20:b2:cd:9f:22:ec: b8:6a:a3:13:87:75:05:50:8d:b4:9e:84:7c:5c:19: 27:2f:4e:3b:c9:d4:c0:ab:e7:1d:e5:56:a8:5a:6d: 4e:01:f8:e6:2c:86:6c:9e:d8:1f:d7:e4:0d:89:13: 03:57:a7:4e:6e:81:e4:7d:c2:c2:3f:09:86:88:7a: 43:40:1b:03:f3:bb:22:1e:14:30:00:6e:ad:ae:a8: 24:82:c7:88:86:67:a2:21:f8:2e:ba:6b:52:e1:f4: fa:49:b0:99:ba:72:a2:0c:36:db:94:fe:87:03:7a: 54:84:50:75:c7:90:3d:46:4a:e5:ee:18:7f:6d:c8: 56:40:75:f2:89:8c:fc:86:03:02:48:09:e9:73:29: de:ad:49:6a:30:83:60:5d:df:80:ba:bd:5d:d5:84: d6:71:a4:43:ba:fc:32:82:4c:bb:44:2e:13:a0:21: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:69:4D:68:C2:78:82:A1:B8:BF:02:2E:24:C5:E5:27:7E:0F:15:93 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7mlNaMJ4gqG4vwIuJMXlJ34PFZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.98.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:51:8e:89:59:39:e3:d5:f1:3c:cf:7f:86:38:91:90:68:df: 22:45:a4:5b:48:1f:f7:71:71:6d:fa:34:0c:8a:41:fe:ba:f2: 33:fe:94:72:f1:80:cf:d9:c2:0c:b4:21:6e:fe:23:fa:d7:a9: 31:b6:20:8c:8f:6c:a0:22:af:92:77:65:ee:f1:a3:25:e7:89: f8:5e:d5:b8:dc:b2:d0:28:52:d9:e7:0d:77:12:92:08:be:9c: 47:d0:42:c4:d4:f5:78:1f:ba:4e:81:9c:e8:a1:f5:d0:20:97: 2c:2c:0b:7d:21:4f:5d:e0:9b:ab:c9:13:1e:ba:95:8f:e7:83: 89:88:3c:24:ef:d5:5f:b1:41:09:a4:56:13:06:79:47:d5:8e: cf:85:97:fb:64:4f:ff:d6:cb:70:c6:65:00:18:4c:c8:17:fa: 0e:c3:f5:d5:86:2c:1d:f7:a6:4d:59:0a:26:fd:68:da:ad:a7: bb:ab:65:ac:87:bc:bf:f5:d4:a3:b3:c1:01:2f:ac:ee:d3:ec: f5:0b:5f:df:06:8a:0b:42:67:f4:08:97:1b:d3:3f:88:c7:71: b9:a1:12:5b:db:ee:eb:77:d1:2d:f2:25:82:65:61:2d:cd:0a: ae:f9:4a:7d:28:98:30:92:6e:cc:9a:5a:64:b1:e0:be:4a:be: d7:87:13:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVyK9J8DKR4j/GnwqsMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTY5NGQ2OGMyNzg4MmExYjhiZjAyMmUyNGM1ZTUyNzdlMGYxNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdz4U4JOu3fnmNkork/g0w423iuY vF38XcqXWLqrs68GEpwrgbOS3b+21hA4aCUFuYr347483obmPzh/5iZeZ1miP0So LbPyEHlLPinZwj5fXnggss2fIuy4aqMTh3UFUI20noR8XBknL047ydTAq+cd5Vao Wm1OAfjmLIZsntgf1+QNiRMDV6dOboHkfcLCPwmGiHpDQBsD87siHhQwAG6trqgk gseIhmeiIfguumtS4fT6SbCZunKiDDbblP6HA3pUhFB1x5A9Rkrl7hh/bchWQHXy iYz8hgMCSAnpcynerUlqMINgXd+Aur1d1YTWcaRDuvwygky7RC4ToCFQ8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5pTWjCeIKhuL8CLiTF5Sd+DxWTMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvN21sTmFNSjRncUc0dndJdUpNWGxKMzRQRlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUNiMA0G CSqGSIb3DQEBCwUAA4IBAQCOUY6JWTnj1fE8z3+GOJGQaN8iRaRbSB/3cXFt+jQM ikH+uvIz/pRy8YDP2cIMtCFu/iP616kxtiCMj2ygIq+Sd2Xu8aMl54n4XtW43LLQ KFLZ5w13EpIIvpxH0ELE1PV4H7pOgZzoofXQIJcsLAt9IU9d4JuryRMeupWP54OJ iDwk79VfsUEJpFYTBnlH1Y7PhZf7ZE//1stwxmUAGEzIF/oOw/XVhiwd96ZNWQom /Wjarae7q2Wsh7y/9dSjs8EBL6zu0+z1C1/fBooLQmf0CJcb0z+Ix3G5oRJb2+7r d9Et8iWCZWEtzQqu+Up9KJgwkm7MmlpkseC+Sr7XhxPy -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client