This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m8zE9v1wf0T8QKGRHkTBECh5Q0s.roa File: m8zE9v1wf0T8QKGRHkTBECh5Q0s.roa (raw, json) Hash identifier: V7hdrzK0kNLOW1bAcYh9gx0ryz6iEzJ3NTETmIZk9iM= Subject key identifier: 9B:CC:C4:F6:FD:70:7F:44:FC:40:A1:91:1E:44:C1:10:28:79:43:4B Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D6386BA18740E487414AD76262904 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m8zE9v1wf0T8QKGRHkTBECh5Q0s.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399498 IP address blocks: 45.85.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:63:86:ba:18:74:0e:48:74:14:ad:76:26:29:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bccc4f6fd707f44fc40a1911e44c1102879434b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:a6:a6:fb:1d:10:e1:8e:b3:f4:44:ac:9d: 07:2f:47:c0:06:10:c2:b3:9a:ef:5e:7b:59:8a:dc: a4:56:8e:5e:b5:ad:e8:b0:47:88:a5:96:1e:9d:cd: 5b:c7:67:ae:14:6d:47:a6:2d:b0:ba:3f:56:53:9b: 1c:10:1d:77:91:8b:b3:10:db:39:5f:0d:1f:3a:18: 60:fb:67:90:8c:23:00:29:04:43:52:39:d8:85:04: aa:99:50:e9:d4:7e:e3:56:69:ad:e6:9c:30:7f:e9: 1c:b3:11:85:46:dc:09:70:3f:82:30:0d:23:a5:d7: bd:71:c8:f2:4a:43:ad:c2:e8:7d:7b:8f:b8:9f:ed: 14:8c:f4:71:13:dc:dc:73:df:b6:15:54:96:4c:0b: 92:04:89:41:f7:dd:53:2e:45:f1:6a:5c:dd:e3:51: 1b:ec:f1:90:2f:e0:41:ff:57:70:3c:4d:2d:23:20: 05:52:51:73:9a:b1:65:ee:7d:4a:f7:4c:20:a1:0f: 2d:a4:36:2f:6c:07:61:1e:2c:f6:01:f3:38:26:35: 93:2e:12:7c:15:78:ba:45:d0:17:5a:dc:6f:aa:ab: 5f:94:02:0e:5c:82:3f:c3:67:b1:e6:fb:2a:dd:b8: 83:1f:9e:b2:0c:1b:a8:e0:5b:5c:65:6d:29:36:8a: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CC:C4:F6:FD:70:7F:44:FC:40:A1:91:1E:44:C1:10:28:79:43:4B X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/m8zE9v1wf0T8QKGRHkTBECh5Q0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.105.0/24 Signature Algorithm: sha256WithRSAEncryption 41:bb:de:ac:f1:10:0b:c6:6c:0c:41:76:21:59:dd:4b:e3:0c: 2b:7b:59:67:4c:c3:fd:25:a7:bc:3f:5a:03:41:a6:cb:4c:ec: 84:04:1d:a0:6e:50:94:68:0d:85:0a:59:a5:2d:52:78:26:8c: 28:2a:7f:c3:b0:f1:cb:c9:4f:32:8f:93:ac:b0:54:76:9f:7c: 7d:3f:c6:18:07:b5:02:97:ee:48:6d:f4:2b:2c:d0:e8:a9:88: c4:95:ec:9f:33:d1:8b:47:10:c1:34:80:4f:0d:81:24:17:05: 82:18:54:42:db:f7:69:41:d3:81:ef:eb:70:bc:1a:17:b2:e4: 18:10:31:5a:8b:fa:7f:13:ba:78:10:16:fb:37:88:0b:4c:2b: f9:41:e5:5b:18:a2:30:bd:d0:18:9b:2c:26:b2:c3:88:b7:ca: cd:b4:05:36:7f:8b:c4:83:26:7a:f4:46:39:82:5b:37:b2:af: ef:33:de:b3:32:ee:a9:fa:22:0a:de:9d:b6:4e:cf:65:b0:e8: e7:ca:a0:70:02:e7:d5:9b:d6:1a:32:f5:1d:33:6f:0e:d2:14: d7:62:5e:01:a4:9d:18:d3:95:0c:82:20:f3:6a:53:69:47:cc: 18:7d:cd:f3:48:b6:af:fa:99:0d:71:80:6e:a6:d3:bc:3c:f3: 63:98:1c:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWOGuhh0Dkh0FK12JikEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNjYzRmNmZkNzA3ZjQ0ZmM0MGExOTExZTQ0YzExMDI4Nzk0MzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl6mpvsdEOGOs/RErJ0HL0fABhDC s5rvXntZitykVo5eta3osEeIpZYenc1bx2euFG1Hpi2wuj9WU5scEB13kYuzENs5 Xw0fOhhg+2eQjCMAKQRDUjnYhQSqmVDp1H7jVmmt5pwwf+kcsxGFRtwJcD+CMA0j pde9ccjySkOtwuh9e4+4n+0UjPRxE9zcc9+2FVSWTAuSBIlB991TLkXxalzd41Eb 7PGQL+BB/1dwPE0tIyAFUlFzmrFl7n1K90wgoQ8tpDYvbAdhHiz2AfM4JjWTLhJ8 FXi6RdAXWtxvqqtflAIOXII/w2ex5vsq3biDH56yDBuo4FtcZW0pNoqkVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJvMxPb9cH9E/EChkR5EwRAoeUNLMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbTh6RTl2MXdmMFQ4UUtHUkhrVEJFQ2g1UTBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVpMA0G CSqGSIb3DQEBCwUAA4IBAQBBu96s8RALxmwMQXYhWd1L4wwre1lnTMP9Jae8P1oD QabLTOyEBB2gblCUaA2FClmlLVJ4JowoKn/DsPHLyU8yj5OssFR2n3x9P8YYB7UC l+5IbfQrLNDoqYjEleyfM9GLRxDBNIBPDYEkFwWCGFRC2/dpQdOB7+twvBoXsuQY EDFai/p/E7p4EBb7N4gLTCv5QeVbGKIwvdAYmywmssOIt8rNtAU2f4vEgyZ69EY5 gls3sq/vM96zMu6p+iIK3p22Ts9lsOjnyqBwAufVm9YaMvUdM28O0hTXYl4BpJ0Y 05UMgiDzalNpR8wYfc3zSLav+pkNcYBuptO8PPNjmBxm -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client