This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NvbcbS3sBA-FnrMjZKlARjswrhU.roa File: NvbcbS3sBA-FnrMjZKlARjswrhU.roa (raw, json) Hash identifier: 0XvPm4XxIE4h3s1r+nyQD2kbnNEeoqaAYAG5sjcmPPc= Subject key identifier: 36:F6:DC:6D:2D:EC:04:0F:85:9E:B3:23:64:A9:40:46:3B:30:AE:15 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CAB5578C849F31F43001A8FE7F92 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NvbcbS3sBA-FnrMjZKlARjswrhU.roa Signing time: Fri 02 Jan 2026 18:21:50 +0000 ROA not before: Fri 02 Jan 2026 18:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211593 IP address blocks: 45.87.251.0/24 maxlen: 24 185.126.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ca:b5:57:8c:84:9f:31:f4:30:01:a8:fe:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36f6dc6d2dec040f859eb32364a940463b30ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:d3:78:b0:6b:f3:2b:47:fc:ea:d4:46:4c: b7:eb:cf:dc:d4:48:14:6a:fb:68:88:05:1a:d2:e2: 25:40:81:d0:a2:25:76:9f:fa:d8:ea:0c:13:93:cf: 63:6c:91:1e:b1:37:97:26:e8:9f:8a:79:4a:f0:79: 88:d6:1d:8c:a0:7c:c4:d2:b6:a7:69:7b:98:8c:5c: 6e:17:63:81:e6:7f:54:a9:6b:ae:3d:7b:ca:f0:e4: f8:23:93:1b:c5:a0:d7:05:e8:45:06:c6:77:c7:09: fe:14:19:76:66:b8:57:8b:02:a8:45:15:ac:0a:1c: a0:61:06:94:78:46:13:14:07:44:9a:a9:9d:1c:39: 44:50:3c:5b:c8:25:60:d2:09:65:f3:4f:08:7e:e2: b6:45:34:46:87:ae:42:ff:50:9d:d9:f9:c6:e2:ed: 46:1c:4b:a9:59:5b:9e:6c:88:80:26:28:e3:04:e2: af:e2:c2:c1:fb:9a:f7:85:ab:be:7c:f6:aa:d7:ee: e2:46:fd:42:f2:48:3f:d9:00:d1:f6:71:30:ab:5e: d0:98:89:14:6a:e2:ea:a1:58:09:ae:a6:30:73:26: 5e:b1:3c:b5:b9:00:5c:03:9e:ba:17:f6:b2:7f:7d: a2:a0:66:67:b5:24:36:ed:e7:23:97:14:58:fe:1e: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F6:DC:6D:2D:EC:04:0F:85:9E:B3:23:64:A9:40:46:3B:30:AE:15 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NvbcbS3sBA-FnrMjZKlARjswrhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.251.0/24 185.126.65.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ea:62:b3:4b:f2:2b:03:a9:5a:47:66:ff:08:db:65:f9:9d: 57:fe:c6:58:5c:61:d6:41:93:fd:5e:ec:25:a7:07:56:e4:58: c4:e8:f1:ce:89:4f:33:b1:37:8c:52:5f:e3:10:3d:72:51:06: 4a:d7:b2:7c:fc:d4:be:18:3b:df:45:23:70:c0:c2:94:16:29: dd:5d:e6:de:fb:3e:41:9d:a9:e6:6b:f8:b3:42:ea:e9:61:38: 7a:2a:07:db:6f:f5:50:72:c7:a8:9f:dd:f7:e1:2c:23:90:c5: d9:be:55:55:9c:79:7d:71:de:5d:4a:7b:0f:d1:e1:74:30:51: 16:ea:05:da:3c:02:15:7b:35:09:3e:51:59:f3:86:a1:e7:05: ef:0c:d1:ca:29:39:fd:69:bc:c1:1d:ef:5c:39:36:c2:37:49: c4:50:06:7b:94:f4:11:89:e5:ea:81:2f:92:ba:35:03:4d:d8: 93:9d:36:9b:41:21:a9:32:f9:ba:f9:2d:56:59:ae:b7:82:9f: 12:e6:7b:08:d8:e1:d5:66:b4:b5:aa:75:80:12:c9:73:35:da: 7e:f6:fd:74:50:2b:24:67:40:75:c3:9a:0c:be:25:d1:1b:37: dd:85:3e:53:d9:0e:10:48:ff:e3:76:e7:d1:00:5e:8d:47:e3: ae:93:3d:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8cq1V4yEnzH0MAGo/n+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmY2ZGM2ZDJkZWMwNDBmODU5ZWIzMjM2NGE5NDA0NjNiMzBhZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlfTeLBr8ytH/OrURky368/c1EgU avtoiAUa0uIlQIHQoiV2n/rY6gwTk89jbJEesTeXJuifinlK8HmI1h2MoHzE0ran aXuYjFxuF2OB5n9UqWuuPXvK8OT4I5MbxaDXBehFBsZ3xwn+FBl2ZrhXiwKoRRWs ChygYQaUeEYTFAdEmqmdHDlEUDxbyCVg0gll808IfuK2RTRGh65C/1Cd2fnG4u1G HEupWVuebIiAJijjBOKv4sLB+5r3hau+fPaq1+7iRv1C8kg/2QDR9nEwq17QmIkU auLqoVgJrqYwcyZesTy1uQBcA566F/ayf32ioGZntSQ27ecjlxRY/h7Z/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDb23G0t7AQPhZ6zI2SpQEY7MK4VMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvTnZiY2JTM3NCQS1GbnJNalpLbEFSanN3cmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVf7AwQA uX5BMA0GCSqGSIb3DQEBCwUAA4IBAQBS6mKzS/IrA6laR2b/CNtl+Z1X/sZYXGHW QZP9XuwlpwdW5FjE6PHOiU8zsTeMUl/jED1yUQZK17J8/NS+GDvfRSNwwMKUFind Xebe+z5Bnanma/izQurpYTh6Kgfbb/VQcseon9334SwjkMXZvlVVnHl9cd5dSnsP 0eF0MFEW6gXaPAIVezUJPlFZ84ah5wXvDNHKKTn9abzBHe9cOTbCN0nEUAZ7lPQR ieXqgS+SujUDTdiTnTabQSGpMvm6+S1WWa63gp8S5nsI2OHVZrS1qnWAEslzNdp+ 9v10UCskZ0B1w5oMviXRGzfdhT5T2Q4QSP/jdufRAF6NR+Oukz12 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:14 2026 by rpki-client