This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NIOWZKh0oDXyIxKIfot1rYoQmRw.roa File: NIOWZKh0oDXyIxKIfot1rYoQmRw.roa (raw, json) Hash identifier: yDc+l89CH93poVvCF1IwzoQ4bgjEpeOviCaC6Zkjb+I= Subject key identifier: 34:83:96:64:A8:74:A0:35:F2:23:12:88:7E:8B:75:AD:8A:10:99:1C Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D40D85A974663F96F2B8276E95D5F Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NIOWZKh0oDXyIxKIfot1rYoQmRw.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48806 IP address blocks: 45.146.186.0/24 maxlen: 24 185.205.191.0/24 maxlen: 24 185.239.242.0/24 maxlen: 24 188.212.155.0/24 maxlen: 24 188.241.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:40:d8:5a:97:46:63:f9:6f:2b:82:76:e9:5d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34839664a874a035f22312887e8b75ad8a10991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:5c:6a:a2:c3:f8:f8:7f:5f:91:a4:2a:87: eb:55:87:8b:f7:b5:7c:7c:00:91:ad:ed:dd:20:a1: ea:54:10:6d:54:2c:e7:d7:fd:18:12:9e:aa:76:65: da:20:c9:da:5e:dc:37:0a:ef:7a:3e:34:04:4e:89: 07:54:ba:dd:7e:bc:b0:24:2d:a6:76:83:2f:44:d8: 3b:34:b4:2e:b1:72:54:34:1f:e2:b2:2f:9b:7a:59: 47:66:c9:cd:3b:0c:c1:10:5c:21:9f:d4:2e:5a:29: 1f:02:50:8c:23:52:48:bf:71:09:dc:62:26:72:69: fa:5c:45:85:92:57:51:27:f5:71:26:d6:57:0a:57: 02:b2:26:a7:10:5f:0f:e4:39:a3:7c:85:7a:91:ec: d8:ab:d1:aa:98:80:ef:12:42:9a:83:4d:7b:1d:c1: 6e:7b:17:4a:3a:3c:25:95:34:33:cc:c5:cc:87:99: c8:6f:97:f0:ea:29:59:47:3a:4d:9f:9b:d0:3e:f7: a4:54:e7:c1:7a:2e:9e:7d:45:f2:4d:07:fa:a7:e8: 5a:0f:35:2c:c0:3c:56:7b:bf:a4:a5:15:a1:90:3c: 86:62:49:08:9f:bd:3a:9a:36:4a:d3:55:ab:28:b7: c7:92:bd:c7:0c:15:0c:fd:93:5e:cb:7d:37:29:c0: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:96:64:A8:74:A0:35:F2:23:12:88:7E:8B:75:AD:8A:10:99:1C X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NIOWZKh0oDXyIxKIfot1rYoQmRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.186.0/24 185.205.191.0/24 185.239.242.0/24 188.212.155.0/24 188.241.182.0/24 Signature Algorithm: sha256WithRSAEncryption 25:8e:cc:f9:9f:ef:17:f3:03:11:8b:a5:a2:6b:46:15:c0:f9: 9a:d3:38:18:3b:ba:e9:e3:c7:27:b9:c8:91:eb:ed:b5:6c:d4: 88:69:0b:e2:42:52:0b:1b:6f:73:6b:9e:cc:49:03:aa:02:b6: eb:3d:e0:cd:5e:02:ff:67:d4:7f:38:a6:6f:7e:3c:51:ea:49: 87:4a:ff:e6:60:c1:f3:d1:d3:7f:d1:c0:ca:30:37:cd:04:0e: 81:7f:c5:1e:02:d0:eb:9b:28:94:d5:27:03:e7:08:cd:2e:21: 95:43:85:bc:ac:43:32:01:65:e4:79:77:2f:b8:0a:67:17:bf: a5:e9:a5:72:3f:a0:89:4a:73:56:38:07:e0:49:0b:a0:61:73: fc:ae:90:7a:39:90:3d:dd:f3:ec:77:b1:0e:3f:c5:e8:58:b9: 40:e0:93:66:f5:09:c2:ea:ca:88:24:3b:6e:fa:6b:d9:05:97: ca:3b:f4:6f:40:5c:56:ba:3f:65:90:09:48:a3:f7:cc:49:32: fd:da:77:d1:9e:6c:28:d7:63:13:aa:1f:3b:5f:c1:98:47:ea: d8:16:a7:46:30:f8:34:77:2c:50:b7:aa:ed:f2:54:d8:e8:14: b1:48:8a:4c:52:0e:df:f0:04:65:e7:1b:61:6d:ff:74:f9:54: 07:8b:58:db -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XUDYWpdGY/lvK4J26V1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDgzOTY2NGE4NzRhMDM1ZjIyMzEyODg3ZThiNzVhZDhhMTA5OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue9caqLD+Ph/X5GkKofrVYeL97V8 fACRre3dIKHqVBBtVCzn1/0YEp6qdmXaIMnaXtw3Cu96PjQETokHVLrdfrywJC2m doMvRNg7NLQusXJUNB/isi+bellHZsnNOwzBEFwhn9QuWikfAlCMI1JIv3EJ3GIm cmn6XEWFkldRJ/VxJtZXClcCsianEF8P5DmjfIV6kezYq9GqmIDvEkKag017HcFu exdKOjwllTQzzMXMh5nIb5fw6ilZRzpNn5vQPvekVOfBei6efUXyTQf6p+haDzUs wDxWe7+kpRWhkDyGYkkIn706mjZK01WrKLfHkr3HDBUM/ZNey303KcDCdwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDSDlmSodKA18iMSiH6Lda2KEJkcMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvTklPV1pLaDBvRFh5SXhLSWZvdDFyWW9RbVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZK6AwQA uc2/AwQAue/yAwQAvNSbAwQAvPG2MA0GCSqGSIb3DQEBCwUAA4IBAQAljsz5n+8X 8wMRi6Wia0YVwPma0zgYO7rp48cnuciR6+21bNSIaQviQlILG29za57MSQOqArbr PeDNXgL/Z9R/OKZvfjxR6kmHSv/mYMHz0dN/0cDKMDfNBA6Bf8UeAtDrmyiU1ScD 5wjNLiGVQ4W8rEMyAWXkeXcvuApnF7+l6aVyP6CJSnNWOAfgSQugYXP8rpB6OZA9 3fPsd7EOP8XoWLlA4JNm9QnC6sqIJDtu+mvZBZfKO/RvQFxWuj9lkAlIo/fMSTL9 2nfRnmwo12MTqh87X8GYR+rYFqdGMPg0dyxQt6rt8lTY6BSxSIpMUg7f8ARl5xth bf90+VQHi1jb -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client