This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hd4xUO2qOPItXYcbhiHPS9D3eo8.roa File: hd4xUO2qOPItXYcbhiHPS9D3eo8.roa (raw, json) Hash identifier: mMKhFDUkqk2mqngZ41OQiq+aOSA/MCKp8ayRiJYcfSk= Subject key identifier: 85:DE:31:50:ED:AA:38:F2:2D:5D:87:1B:86:21:CF:4B:D0:F7:7A:8F Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5644B90ACE36AAC7EFA8BA190FE2 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hd4xUO2qOPItXYcbhiHPS9D3eo8.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206238 IP address blocks: 45.83.232.0/22 maxlen: 24 45.142.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:56:44:b9:0a:ce:36:aa:c7:ef:a8:ba:19:0f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85de3150edaa38f22d5d871b8621cf4bd0f77a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:b7:c9:95:9a:9e:8a:46:fd:18:3b:80:5a: 4f:dc:d8:95:04:c4:c8:71:d8:cb:ed:10:cb:82:95: ce:26:27:7b:05:7f:75:8a:7e:81:d6:32:7e:99:4d: 29:6c:98:38:aa:b2:a4:ff:3a:6b:0f:67:8f:a0:b9: 77:36:c3:92:a9:d8:c1:ee:6d:62:81:31:fb:0d:2f: 7e:f2:00:2d:e3:41:24:1e:54:e7:e6:fb:92:21:f1: 62:80:ef:e4:90:65:39:0e:32:2b:6a:50:04:c6:ab: b5:a8:3d:c4:7f:e3:b2:89:3c:b4:4b:be:3e:e0:b7: 3c:2b:2d:ae:9a:72:16:be:68:76:54:ad:f5:98:0c: 7e:8a:dc:0a:6c:49:85:22:32:f0:83:81:21:b1:be: 8f:c9:d3:f5:85:3e:f5:20:d5:3b:25:20:3e:f4:fe: 0c:2c:6b:fb:f2:22:15:be:3f:0e:2d:3d:b6:68:68: 6d:36:25:a4:0a:43:41:70:27:a5:7f:8b:6a:09:19: 39:cb:40:e1:ce:83:73:63:d8:72:80:24:4c:2b:0b: 34:07:57:46:f4:d1:d6:2d:08:d5:35:68:b5:74:68: 23:9d:f8:3f:93:8c:91:0b:d2:f1:31:f2:6e:0d:b7: 9f:21:09:f2:a6:49:3b:d9:8d:fb:36:17:44:0b:20: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:31:50:ED:AA:38:F2:2D:5D:87:1B:86:21:CF:4B:D0:F7:7A:8F X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/hd4xUO2qOPItXYcbhiHPS9D3eo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.232.0/22 45.142.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:f9:1b:75:05:3f:82:76:06:5c:99:b0:b0:2e:0b:c2:c9:75: e1:bd:9b:c7:b5:43:e9:cb:b1:42:bc:f2:6f:bb:f3:7d:c7:fd: c9:d5:17:eb:4a:eb:2d:5d:26:ec:da:4f:50:9b:ec:4a:04:72: c6:2f:fd:41:da:ae:e2:73:04:17:ba:01:d2:74:3a:46:a2:93: 98:a4:3f:16:65:68:37:4e:d0:96:36:3c:4e:00:cd:63:29:35: c9:07:cd:c9:d8:ac:a0:9f:df:8d:55:05:7a:3d:ce:00:bd:e1: d0:d4:57:2c:f4:17:ed:83:82:fe:4c:53:55:0d:92:0e:e5:93: 5f:70:a3:01:39:45:a4:c8:33:bd:98:f6:37:89:c3:f4:39:13: 88:ad:92:f5:13:47:8e:00:71:20:dc:8c:1f:85:b7:98:20:77: 49:f0:79:d2:a5:8f:6e:30:01:1a:8d:94:3b:17:e7:86:f6:d5: 94:6c:4e:55:42:dd:4e:f9:ce:5f:27:76:4d:e4:23:b8:10:62: be:8b:09:f3:a6:69:5d:db:f6:0e:8d:67:93:5f:96:6f:50:00: e4:ec:15:e6:c8:cf:0d:1d:3f:b5:73:24:36:50:1b:61:20:4e: 3e:cc:8e:1d:2e:56:41:4f:80:ab:4b:8c:3d:d0:1c:f5:fc:09: 5c:0e:79:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XVZEuQrONqrH76i6GQ/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWRlMzE1MGVkYWEzOGYyMmQ1ZDg3MWI4NjIxY2Y0YmQwZjc3YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/m3yZWanopG/Rg7gFpP3NiVBMTI cdjL7RDLgpXOJid7BX91in6B1jJ+mU0pbJg4qrKk/zprD2ePoLl3NsOSqdjB7m1i gTH7DS9+8gAt40EkHlTn5vuSIfFigO/kkGU5DjIralAExqu1qD3Ef+OyiTy0S74+ 4Lc8Ky2umnIWvmh2VK31mAx+itwKbEmFIjLwg4Ehsb6PydP1hT71INU7JSA+9P4M LGv78iIVvj8OLT22aGhtNiWkCkNBcCelf4tqCRk5y0DhzoNzY9hygCRMKws0B1dG 9NHWLQjVNWi1dGgjnfg/k4yRC9LxMfJuDbefIQnypkk72Y37NhdECyCClwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIXeMVDtqjjyLV2HG4Yhz0vQ93qPMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvaGQ0eFVPMnFPUEl0WFljYmhpSFBTOUQzZW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVPoAwQC LY7oMA0GCSqGSIb3DQEBCwUAA4IBAQAb+Rt1BT+CdgZcmbCwLgvCyXXhvZvHtUPp y7FCvPJvu/N9x/3J1RfrSustXSbs2k9Qm+xKBHLGL/1B2q7icwQXugHSdDpGopOY pD8WZWg3TtCWNjxOAM1jKTXJB83J2Kygn9+NVQV6Pc4AveHQ1Fcs9Bftg4L+TFNV DZIO5ZNfcKMBOUWkyDO9mPY3icP0OROIrZL1E0eOAHEg3IwfhbeYIHdJ8HnSpY9u MAEajZQ7F+eG9tWUbE5VQt1O+c5fJ3ZN5CO4EGK+iwnzpmld2/YOjWeTX5ZvUADk 7BXmyM8NHT+1cyQ2UBthIE4+zI4dLlZBT4CrS4w90Bz1/AlcDnlw -----END CERTIFICATE-----Generated at Tue Jan 13 11:18:11 2026 by rpki-client