This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pUZ0cADUGYPUuHqfitnFHyybUw4.roa File: pUZ0cADUGYPUuHqfitnFHyybUw4.roa (raw, json) Hash identifier: Naha2U55GhtzCKFBnmE9JT47YKWQ6NsLdCvIq1JQVSM= Subject key identifier: A5:46:74:70:00:D4:19:83:D4:B8:7A:9F:8A:D9:C5:1F:2C:9B:53:0E Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D353AC2FBF820A342961B6351B128 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pUZ0cADUGYPUuHqfitnFHyybUw4.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 45.83.31.0/24 maxlen: 24 193.26.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:3a:c2:fb:f8:20:a3:42:96:1b:63:51:b1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a546747000d41983d4b87a9f8ad9c51f2c9b530e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:7e:c3:08:08:7b:5c:5d:74:1c:07:4e:d2: 9a:e9:f0:1a:be:45:14:15:b8:52:c4:4d:e9:e9:91: ce:8b:76:fe:2c:21:e5:ea:40:bc:c7:8e:09:fb:0f: 07:b5:6f:2b:35:cb:1a:0d:c7:d8:0a:4c:d8:3e:d2: 9c:bf:e9:86:b4:85:dc:38:02:f1:00:43:d2:e9:89: 45:09:24:b8:d1:3d:0b:d9:07:87:14:4f:d8:18:69: cc:fa:86:24:b1:2a:6d:d9:56:80:2b:5f:e9:12:b2: 38:14:ed:d3:d3:fd:ad:2e:a0:3c:d7:03:ad:26:90: 9d:15:63:58:2d:b7:91:45:af:bd:59:cd:f6:db:92: f6:b0:e1:4b:c6:35:a4:09:0a:d4:8b:db:fb:0f:12: 47:de:66:95:fe:23:27:f8:10:74:f7:3e:80:0a:48: 1a:a6:31:af:be:dd:19:a1:d5:85:b1:39:74:97:bc: 17:3f:92:fb:c5:69:d9:ac:13:7e:97:b9:1d:80:8f: 9a:02:15:0c:d5:f8:c7:31:f1:e5:07:f9:4b:e5:11: b8:9b:83:9d:20:32:bc:9c:9a:10:d4:a7:96:0a:f5: a1:0e:83:44:25:71:d7:25:a9:16:11:e1:00:f2:0f: 20:b4:23:8c:b1:bb:6f:ca:a4:c2:6d:fb:19:d7:51: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:74:70:00:D4:19:83:D4:B8:7A:9F:8A:D9:C5:1F:2C:9B:53:0E X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pUZ0cADUGYPUuHqfitnFHyybUw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.31.0/24 193.26.115.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:00:a4:8e:27:fe:d8:e1:04:57:ce:05:97:e5:c3:da:02:ed: 52:9a:da:35:cf:eb:72:cc:c2:c0:38:36:b8:17:02:d7:c4:6c: 7b:ca:94:d7:3c:97:2f:3e:92:27:6c:67:17:06:38:7a:cb:87: e3:86:cd:37:4e:32:81:a4:bd:f6:ad:8f:36:87:14:f1:66:37: 51:c1:61:35:ea:52:74:1c:a3:23:ac:92:71:3a:77:74:c9:dc: 0d:53:60:71:39:2b:5a:24:df:ea:d4:54:29:1e:e1:c7:60:89: fb:22:56:5c:4a:db:d8:b9:89:8a:b7:d5:a3:55:4b:83:d5:0c: 8d:08:f9:51:b7:0a:98:8c:bb:a1:a1:f8:09:4d:5b:96:07:78: 8e:b5:c8:b4:65:7e:9d:a0:64:53:22:a9:b8:68:1c:1d:04:d3: 7b:a0:60:2d:a5:62:0c:f9:9b:b2:9e:6d:f5:6c:37:39:c9:d5: a9:d0:db:4a:6e:91:3d:d2:63:6a:8a:37:04:a3:02:1b:4e:7b: 08:1c:54:40:ba:1e:1b:8a:13:be:0d:b8:06:60:76:c2:8f:23: 38:27:45:b8:5b:95:34:ef:c1:6a:31:a9:53:bf:9a:37:30:ef: 1b:11:4a:47:03:ba:53:aa:28:b1:ba:a7:08:e5:3d:d9:a2:cf: a4:19:4d:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XTU6wvv4IKNClhtjUbEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ2NzQ3MDAwZDQxOTgzZDRiODdhOWY4YWQ5YzUxZjJjOWI1MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUZ+wwgIe1xddBwHTtKa6fAavkUU FbhSxE3p6ZHOi3b+LCHl6kC8x44J+w8HtW8rNcsaDcfYCkzYPtKcv+mGtIXcOALx AEPS6YlFCSS40T0L2QeHFE/YGGnM+oYksSpt2VaAK1/pErI4FO3T0/2tLqA81wOt JpCdFWNYLbeRRa+9Wc3225L2sOFLxjWkCQrUi9v7DxJH3maV/iMn+BB09z6ACkga pjGvvt0ZodWFsTl0l7wXP5L7xWnZrBN+l7kdgI+aAhUM1fjHMfHlB/lL5RG4m4Od IDK8nJoQ1KeWCvWhDoNEJXHXJakWEeEA8g8gtCOMsbtvyqTCbfsZ11HMzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKVGdHAA1BmD1Lh6n4rZxR8sm1MOMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvcFVaMGNBRFVHWVBVdUhxZml0bkZIeXliVXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVMfAwQA wRpzMA0GCSqGSIb3DQEBCwUAA4IBAQAqAKSOJ/7Y4QRXzgWX5cPaAu1Smto1z+ty zMLAODa4FwLXxGx7ypTXPJcvPpInbGcXBjh6y4fjhs03TjKBpL32rY82hxTxZjdR wWE16lJ0HKMjrJJxOnd0ydwNU2BxOStaJN/q1FQpHuHHYIn7IlZcStvYuYmKt9Wj VUuD1QyNCPlRtwqYjLuhofgJTVuWB3iOtci0ZX6doGRTIqm4aBwdBNN7oGAtpWIM +Zuynm31bDc5ydWp0NtKbpE90mNqijcEowIbTnsIHFRAuh4bihO+DbgGYHbCjyM4 J0W4W5U078FqMalTv5o3MO8bEUpHA7pTqiixuqcI5T3Zos+kGU3X -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:44 2026 by rpki-client