This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIlefUHjOxxTL-wxLNjryB5uJNU.roa File: SIlefUHjOxxTL-wxLNjryB5uJNU.roa (raw, json) Hash identifier: N1bqvaTF2pbmV7urBdmFoBO7C44g0Oe3q+XzEd8RKsA= Subject key identifier: 48:89:5E:7D:41:E3:3B:1C:53:2F:EC:31:2C:D8:EB:C8:1E:6E:24:D5 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D4805F62C616C67FA7BDA0FECFCFA Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIlefUHjOxxTL-wxLNjryB5uJNU.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.80.157.0/24 maxlen: 24 45.144.226.0/24 maxlen: 24 185.192.69.0/24 maxlen: 24 185.198.240.0/24 maxlen: 24 185.198.243.0/24 maxlen: 24 185.217.117.0/24 maxlen: 24 188.213.203.0/24 maxlen: 24 193.218.35.0/24 maxlen: 24 213.109.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:48:05:f6:2c:61:6c:67:fa:7b:da:0f:ec:fc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48895e7d41e33b1c532fec312cd8ebc81e6e24d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:db:24:76:70:42:5b:0e:7f:9e:50:3a:6a: 42:02:0b:1a:64:93:35:45:b7:6f:73:07:31:c1:00: 62:a7:b3:be:02:42:4e:17:61:cf:60:f0:09:dd:2c: 67:ed:4b:41:02:41:f7:9a:0e:17:2d:99:14:78:02: c0:9f:85:57:31:90:1f:4e:53:14:5b:6c:db:31:67: 9c:18:90:23:d3:90:a8:01:ca:4e:06:1a:0f:af:d6: 3d:2b:72:de:56:97:e1:57:50:e4:40:bf:73:40:7e: cc:57:9f:87:94:31:12:53:c2:b0:0f:43:00:2a:df: ca:e7:3b:0a:ca:d2:ec:9e:10:f8:a7:4c:9e:ff:05: 6c:6f:d0:ae:4a:ce:fe:d3:16:c7:47:d3:98:3b:71: 3a:e4:44:2c:fa:e1:ad:96:67:e7:a7:5e:e1:f4:bf: 9d:25:50:8c:cb:db:4b:ef:83:f6:f2:dd:4f:17:b8: 88:2d:37:a6:42:9c:31:16:be:6c:61:bb:b4:8c:6b: 9e:39:b5:e0:c2:9b:e6:f2:3b:20:b5:22:5f:3d:b5: 67:b7:c9:5b:8d:83:f5:c4:8c:9f:25:e4:53:8d:e5: 58:4a:bc:91:ca:d1:e3:9b:f6:dd:cc:cf:60:94:77: c7:31:9a:8f:5e:b1:55:06:d5:97:ec:2b:b3:1d:ef: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:5E:7D:41:E3:3B:1C:53:2F:EC:31:2C:D8:EB:C8:1E:6E:24:D5 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIlefUHjOxxTL-wxLNjryB5uJNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.157.0/24 45.144.226.0/24 185.192.69.0/24 185.198.240.0/24 185.198.243.0/24 185.217.117.0/24 188.213.203.0/24 193.218.35.0/24 213.109.151.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:91:fe:d7:ac:ee:cc:5c:b5:76:93:ef:f3:77:db:40:15:3b: 86:5d:90:27:a9:28:5c:92:60:38:e2:42:59:09:1a:15:6b:ff: e0:bf:4a:7a:87:2e:b7:f6:27:b6:81:9b:84:f4:30:29:23:38: ad:32:8c:d3:9a:ce:91:38:7f:1f:c0:2c:d8:0b:4a:0d:78:4b: 65:f8:24:6a:6e:e1:9e:f5:af:ad:ef:eb:1d:01:ca:b7:87:97: 03:e5:4d:e2:40:d4:d4:78:6c:33:ed:a2:57:f5:4d:45:80:39: 7f:bb:b0:c9:a7:2a:96:41:b4:f1:ad:30:35:3b:45:19:f8:33: b3:7f:f3:07:c9:3e:31:75:3f:0a:45:1c:a2:aa:53:2a:19:cf: b4:2e:3d:37:c6:98:4f:dd:96:fa:c7:01:ee:4b:e6:3f:53:c8: cd:59:8b:31:c1:82:c1:37:65:ea:59:ce:81:05:56:cf:09:0c: 23:76:e1:0c:59:0e:20:71:87:04:8f:10:84:a9:e4:7b:c2:a1: 1c:61:ee:34:d6:92:c6:c8:6c:de:42:d5:be:08:5e:2e:78:72: 42:05:79:87:9e:fb:dd:82:d9:a9:a5:03:89:07:31:25:7b:2e: 5c:f2:80:45:46:95:92:a6:35:7a:2d:2b:83:26:ca:38:21:ae: 3b:3f:b0:28 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9XUgF9ixhbGf6e9oP7Pz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODg5NWU3ZDQxZTMzYjFjNTMyZmVjMzEyY2Q4ZWJjODFlNmUyNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzbJHZwQlsOf55QOmpCAgsaZJM1 RbdvcwcxwQBip7O+AkJOF2HPYPAJ3Sxn7UtBAkH3mg4XLZkUeALAn4VXMZAfTlMU W2zbMWecGJAj05CoAcpOBhoPr9Y9K3LeVpfhV1DkQL9zQH7MV5+HlDESU8KwD0MA Kt/K5zsKytLsnhD4p0ye/wVsb9CuSs7+0xbHR9OYO3E65EQs+uGtlmfnp17h9L+d JVCMy9tL74P28t1PF7iILTemQpwxFr5sYbu0jGueObXgwpvm8jsgtSJfPbVnt8lb jYP1xIyfJeRTjeVYSryRytHjm/bdzM9glHfHMZqPXrFVBtWX7CuzHe+TowIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEiJXn1B4zscUy/sMSzY68gebiTVMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvU0lsZWZVSGpPeHhUTC13eExOanJ5QjV1Sk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVCdAwQA LZDiAwQAucBFAwQAucbwAwQAucbzAwQAudl1AwQAvNXLAwQAwdojAwQA1W2XMA0G CSqGSIb3DQEBCwUAA4IBAQB/kf7XrO7MXLV2k+/zd9tAFTuGXZAnqShckmA44kJZ CRoVa//gv0p6hy639ie2gZuE9DApIzitMozTms6ROH8fwCzYC0oNeEtl+CRqbuGe 9a+t7+sdAcq3h5cD5U3iQNTUeGwz7aJX9U1FgDl/u7DJpyqWQbTxrTA1O0UZ+DOz f/MHyT4xdT8KRRyiqlMqGc+0Lj03xphP3Zb6xwHuS+Y/U8jNWYsxwYLBN2XqWc6B BVbPCQwjduEMWQ4gcYcEjxCEqeR7wqEcYe401pLGyGzeQtW+CF4ueHJCBXmHnvvd gtmppQOJBzEley5c8oBFRpWSpjV6LSuDJso4Ia47P7Ao -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:50 2026 by rpki-client