This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RdvWV3i98RkcLur3gB6t-o45RR8.roa File: RdvWV3i98RkcLur3gB6t-o45RR8.roa (raw, json) Hash identifier: vbTg4Rd34IB89UOgQ0xioFLR/xwxSCr11G6qS2UeNl0= Subject key identifier: 45:DB:D6:57:78:BD:F1:19:1C:2E:EA:F7:80:1E:AD:FA:8E:39:45:1F Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2CA66E84B20F48CBA381535CD8EA Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RdvWV3i98RkcLur3gB6t-o45RR8.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12844 IP address blocks: 45.85.107.0/24 maxlen: 24 185.217.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2c:a6:6e:84:b2:0f:48:cb:a3:81:53:5c:d8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45dbd65778bdf1191c2eeaf7801eadfa8e39451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:4a:ad:24:1c:3e:5a:6c:ee:cd:3c:93:93: 2c:73:c7:2b:d9:de:b4:50:50:ce:41:99:31:27:dc: 12:db:1b:c0:ab:03:5b:f2:92:3d:99:5d:f4:0a:f3: b8:00:a7:97:5f:35:13:a3:0c:30:5a:61:c9:be:75: f5:08:e0:58:84:72:26:ad:1a:ab:c5:cf:e6:89:ac: 40:0f:fc:5a:46:2f:d9:14:75:e9:79:62:50:49:1e: 08:f8:0a:36:6d:f3:b2:1a:2c:47:d3:7d:c5:f3:e5: d1:b4:1e:98:4a:f9:f3:c6:0a:c6:f3:19:fc:3b:23: 44:92:4e:80:06:8e:1e:0c:f2:58:29:29:cd:10:be: 16:e2:22:21:ad:19:3d:1a:cf:2c:42:cb:4c:f2:b5: 20:5e:1c:be:61:fc:f3:9f:83:76:29:1a:93:bd:01: 9b:fd:9a:31:69:94:a5:10:e2:21:e8:c7:60:68:55: 88:66:b8:2d:76:2b:fa:f8:b1:d1:a8:f3:8c:45:9c: 69:78:bc:7d:f5:ec:a5:27:7e:93:8d:b0:27:24:0e: 9e:d9:6b:b9:88:fa:ea:5a:2e:b5:f7:51:16:e4:9b: 1f:73:d7:6f:cb:c8:ba:71:7e:2d:1e:fb:94:03:b2: be:c2:b6:2c:9f:08:21:48:46:c6:7f:3a:c2:6d:bd: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:D6:57:78:BD:F1:19:1C:2E:EA:F7:80:1E:AD:FA:8E:39:45:1F X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RdvWV3i98RkcLur3gB6t-o45RR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.107.0/24 185.217.119.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:19:92:ca:1f:59:6d:e5:67:9f:e2:99:12:f3:5d:87:76:d1: 66:bb:89:84:3b:67:d7:7e:06:c1:b8:43:72:0b:33:24:d1:80: cb:5b:1b:82:f6:c0:1b:e3:83:ad:57:37:45:3f:a6:fc:cd:87: fc:3f:11:90:33:fc:81:77:c0:71:a1:4b:36:d7:14:33:ff:84: 90:06:79:f1:d3:d5:10:aa:e4:8b:5d:9d:63:ac:9e:3c:4f:1b: fc:85:17:bf:c3:52:ea:3b:2d:80:e6:72:ef:2b:ec:38:79:49: 98:29:b7:3d:be:31:e1:4a:67:c0:46:f4:70:d7:d2:09:6a:17: 5d:74:7a:cc:77:32:c9:63:69:f9:1e:7e:af:3b:63:54:df:4c: a1:6d:05:b2:d1:9f:05:4e:7e:72:80:be:26:65:43:eb:ac:95: ff:33:75:fa:cb:ec:e6:13:76:a3:58:6e:63:e3:85:2e:81:ae: ee:68:7e:db:ec:80:e0:d4:1c:1e:56:c0:02:fb:60:fe:e1:69: c7:26:28:7d:77:99:1b:dd:6d:94:09:31:8e:a9:a9:55:18:4b: 92:e1:7c:bf:9e:ec:11:55:ae:28:8e:d1:2b:dc:d5:23:1f:94: ff:6a:5d:92:06:61:28:6b:74:b5:14:fd:df:85:35:af:b0:eb: 19:9c:71:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSymboSyD0jLo4FTXNjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWRiZDY1Nzc4YmRmMTE5MWMyZWVhZjc4MDFlYWRmYThlMzk0NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJxKrSQcPlps7s08k5Msc8cr2d60 UFDOQZkxJ9wS2xvAqwNb8pI9mV30CvO4AKeXXzUTowwwWmHJvnX1COBYhHImrRqr xc/miaxAD/xaRi/ZFHXpeWJQSR4I+Ao2bfOyGixH033F8+XRtB6YSvnzxgrG8xn8 OyNEkk6ABo4eDPJYKSnNEL4W4iIhrRk9Gs8sQstM8rUgXhy+Yfzzn4N2KRqTvQGb /ZoxaZSlEOIh6MdgaFWIZrgtdiv6+LHRqPOMRZxpeLx99eylJ36TjbAnJA6e2Wu5 iPrqWi6191EW5Jsfc9dvy8i6cX4tHvuUA7K+wrYsnwghSEbGfzrCbb0KpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEXb1ld4vfEZHC7q94AerfqOOUUfMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvUmR2V1YzaTk4UmtjTHVyM2dCNnQtbzQ1UlI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVVrAwQA udl3MA0GCSqGSIb3DQEBCwUAA4IBAQB6GZLKH1lt5Wef4pkS812HdtFmu4mEO2fX fgbBuENyCzMk0YDLWxuC9sAb44OtVzdFP6b8zYf8PxGQM/yBd8BxoUs21xQz/4SQ Bnnx09UQquSLXZ1jrJ48Txv8hRe/w1LqOy2A5nLvK+w4eUmYKbc9vjHhSmfARvRw 19IJahdddHrMdzLJY2n5Hn6vO2NU30yhbQWy0Z8FTn5ygL4mZUPrrJX/M3X6y+zm E3ajWG5j44Uuga7uaH7b7IDg1BweVsAC+2D+4WnHJih9d5kb3W2UCTGOqalVGEuS 4Xy/nuwRVa4ojtEr3NUjH5T/al2SBmEoa3S1FP3fhTWvsOsZnHGt -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client