This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/npfOYoLkMF6GfWzhyiCR_xV5jb0.roa File: npfOYoLkMF6GfWzhyiCR_xV5jb0.roa (raw, json) Hash identifier: HJJSJ7t5T9vJTD5emF6ws4ImsexkxhlD/ZWlT2Xy2lw= Subject key identifier: 9E:97:CE:62:82:E4:30:5E:86:7D:6C:E1:CA:20:91:FF:15:79:8D:BD Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019A7D576283A58AF481AC6F3450ED9F0855 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/npfOYoLkMF6GfWzhyiCR_xV5jb0.roa Signing time: Thu 13 Nov 2025 13:11:10 +0000 ROA not before: Thu 13 Nov 2025 13:11:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214286 IP address blocks: 45.133.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:57:62:83:a5:8a:f4:81:ac:6f:34:50:ed:9f:08:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Nov 13 13:11:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e97ce6282e4305e867d6ce1ca2091ff15798dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:a9:78:86:a7:e5:85:06:35:27:72:c9:18: 5f:69:3d:28:01:97:59:3f:f5:31:a9:ab:48:6b:9e: 3d:e4:5a:39:68:d3:1f:e8:81:bc:d4:d4:ca:cd:9f: 4a:69:32:03:9d:5a:da:b9:32:2d:0b:98:7e:3d:4b: 90:e0:59:91:aa:21:56:88:a8:10:a0:71:c1:b7:0e: d7:98:3b:a3:bb:fe:12:87:61:76:ff:b9:5a:7b:72: 7e:80:5b:e0:cd:9d:2d:5f:a6:a6:b1:e7:03:48:64: 01:2c:3a:c9:86:b8:4d:de:bc:61:f2:b6:c9:c2:fb: a5:89:81:40:ed:35:06:01:80:7d:58:ee:4e:2e:6b: 3e:be:2f:2a:84:77:43:80:ad:b2:90:c0:47:80:36: dd:97:e9:47:7f:32:39:49:70:ce:38:d8:6e:9b:93: e7:05:42:1d:03:c2:8c:de:60:80:de:87:f4:1d:35: 7a:75:78:ca:c4:51:67:28:39:55:c7:f7:c4:81:96: 73:c5:08:86:71:49:51:21:0c:75:2b:b8:91:03:c7: 28:bc:92:9e:67:fd:f1:e9:45:00:b0:4c:b4:a8:a7: 12:7a:55:de:81:f6:92:7a:c5:28:95:ed:be:1b:d5: af:1e:ad:6c:2b:cd:10:27:9f:81:65:c5:99:95:1d: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:97:CE:62:82:E4:30:5E:86:7D:6C:E1:CA:20:91:FF:15:79:8D:BD X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/npfOYoLkMF6GfWzhyiCR_xV5jb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.2.0/23 Signature Algorithm: sha256WithRSAEncryption 80:fd:d1:c9:55:52:c0:16:8c:85:31:af:7e:26:32:48:4c:cf: 62:c1:66:f2:a0:5a:f5:d5:2d:e4:d8:22:10:68:90:6a:61:23: e9:49:e8:a9:cd:d7:26:e7:19:10:4b:f9:27:fb:a5:da:b8:45: 70:ba:ac:51:67:c7:a6:d6:0f:7c:c7:cf:13:88:7e:d0:83:bd: 00:5f:d4:fa:e2:05:c6:10:87:a8:d1:87:0d:b3:90:21:01:f0: 94:9f:3c:df:ea:e9:51:eb:c8:26:5f:97:b9:8a:10:72:bf:58: e1:ea:07:91:d6:45:5b:b1:dc:a3:3a:77:36:36:44:5a:7d:e3: b8:eb:ec:66:d8:35:18:73:c2:e3:c9:72:a3:80:15:98:b8:cf: 80:89:86:ba:60:ae:72:d9:81:36:e0:ed:69:74:9e:72:5b:0e: 7d:e0:41:29:62:02:e5:4f:73:37:be:14:94:ce:a7:e1:61:c5: e3:0c:95:b3:92:15:76:3d:04:8d:8b:59:eb:e7:ea:c1:7c:2b: f3:da:05:36:84:86:08:38:d1:86:4f:29:5f:49:bf:55:e8:68: 8f:b5:26:46:d5:a2:c1:db:42:08:13:ce:b8:44:cb:36:1c:b1: 0a:a7:ab:63:4e:27:0d:14:fc:4d:48:44:9d:2f:d8:3f:5f:28: 09:aa:0d:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9V2KDpYr0gaxvNFDtnwhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjUxMTEzMTMxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTk3Y2U2MjgyZTQzMDVlODY3ZDZjZTFjYTIwOTFmZjE1Nzk4ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GWpeIan5YUGNSdyyRhfaT0oAZdZ P/UxqatIa5495Fo5aNMf6IG81NTKzZ9KaTIDnVrauTItC5h+PUuQ4FmRqiFWiKgQ oHHBtw7XmDuju/4Sh2F2/7lae3J+gFvgzZ0tX6amsecDSGQBLDrJhrhN3rxh8rbJ wvuliYFA7TUGAYB9WO5OLms+vi8qhHdDgK2ykMBHgDbdl+lHfzI5SXDOONhum5Pn BUIdA8KM3mCA3of0HTV6dXjKxFFnKDlVx/fEgZZzxQiGcUlRIQx1K7iRA8covJKe Z/3x6UUAsEy0qKcSelXegfaSesUole2+G9WvHq1sK80QJ5+BZcWZlR2QCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6XzmKC5DBehn1s4cogkf8VeY29MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbnBmT1lvTGtNRjZHZld6aHlpQ1JfeFY1amIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYUCMA0G CSqGSIb3DQEBCwUAA4IBAQCA/dHJVVLAFoyFMa9+JjJITM9iwWbyoFr11S3k2CIQ aJBqYSPpSeipzdcm5xkQS/kn+6XauEVwuqxRZ8em1g98x88TiH7Qg70AX9T64gXG EIeo0YcNs5AhAfCUnzzf6ulR68gmX5e5ihByv1jh6geR1kVbsdyjOnc2NkRafeO4 6+xm2DUYc8LjyXKjgBWYuM+AiYa6YK5y2YE24O1pdJ5yWw594EEpYgLlT3M3vhSU zqfhYcXjDJWzkhV2PQSNi1nr5+rBfCvz2gU2hIYIONGGTylfSb9V6GiPtSZG1aLB 20IIE864RMs2HLEKp6tjTicNFPxNSESdL9g/XygJqg0T -----END CERTIFICATE-----Generated at Fri Dec 5 13:45:22 2025 by rpki-client