This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nQt6F3BSJqHy4fALD2RHFlQ25mo.roa File: nQt6F3BSJqHy4fALD2RHFlQ25mo.roa (raw, json) Hash identifier: +pcQa+dOjdICwU2cmVa3Frh5HllQ1ZOt5T3Nb58yLMQ= Subject key identifier: 9D:0B:7A:17:70:52:26:A1:F2:E1:F0:0B:0F:64:47:16:54:36:E6:6A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B833E89CBDC1C2E4DE0B998E5CB7 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nQt6F3BSJqHy4fALD2RHFlQ25mo.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58955 IP address blocks: 45.128.25.0/24 maxlen: 24 45.128.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 14:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b8:33:e8:9c:bd:c1:c2:e4:de:0b:99:8e:5c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d0b7a17705226a1f2e1f00b0f6447165436e66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:35:81:f9:23:2e:0c:7c:82:49:74:61:66: 94:0f:c6:08:43:d2:1c:6b:56:9f:52:ac:e8:3d:ee: e0:0e:b9:a7:80:b2:c7:6f:b5:41:eb:0d:c5:55:49: cc:5f:80:1e:79:77:58:a6:ea:88:cd:90:ad:bf:77: c0:42:ce:b2:5a:d6:82:da:31:e7:5b:5e:9c:96:7d: 37:3b:8d:40:66:9a:5a:e6:9d:12:3d:6b:98:ba:1e: b1:d9:4c:33:05:8a:38:84:1d:44:f0:04:46:a5:bf: b7:6f:65:df:65:c3:c8:bb:da:a9:58:19:f2:c5:20: de:2e:8e:c9:53:1e:cf:34:21:8b:df:a6:19:81:e7: cf:00:6c:65:1b:7f:33:e1:f4:b3:c8:e2:c8:4d:80: 61:4e:b6:98:79:08:50:70:fe:e0:3b:5c:7d:a8:42: cf:37:49:8b:e4:13:5f:94:16:bf:e9:1f:ca:25:33: 63:f3:36:9c:8b:6a:ad:e1:83:1f:1c:4b:7b:e4:4e: 37:52:60:a3:c7:6b:a2:61:f5:5c:87:be:24:c5:83: b9:7c:5a:df:6e:d0:c5:af:61:ff:fd:94:56:83:2d: d6:34:6d:24:01:39:8f:0c:4f:bb:19:d7:00:ea:0e: 62:bf:f7:88:7f:7e:69:90:dc:36:8c:01:45:07:4a: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0B:7A:17:70:52:26:A1:F2:E1:F0:0B:0F:64:47:16:54:36:E6:6A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nQt6F3BSJqHy4fALD2RHFlQ25mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.25.0-45.128.26.255 Signature Algorithm: sha256WithRSAEncryption 88:ff:97:f7:e9:80:d5:a1:c7:8b:f2:a9:41:c4:3b:a7:9a:0f: ab:1f:a4:81:9a:a7:2a:75:79:f5:24:70:50:4e:e2:d4:9c:e5: 88:cc:1a:d0:5b:62:92:3b:a3:45:13:f6:d5:09:02:04:0c:3e: 59:8b:52:7f:5c:01:be:19:e3:42:0b:1a:9f:d0:e3:55:f4:71: 38:7f:c6:bf:bf:d1:0c:c2:03:20:74:05:4f:7f:21:8f:28:ca: f7:e4:43:e0:77:32:75:bc:23:91:61:5e:73:1a:0c:5e:52:da: 61:8d:0e:e9:12:16:d4:5b:8e:cd:11:9a:ff:17:13:52:d4:16: 84:5e:00:0b:2d:f0:e9:c0:93:23:80:84:7e:97:c2:4f:a7:cb: 38:62:53:9f:6e:cd:4b:32:5d:2e:82:b3:ee:65:d0:f3:78:85: a3:6d:87:a4:bd:52:5a:d1:c8:c6:52:60:5f:c6:2a:3d:2c:73: 44:f3:a2:f6:d9:d2:b3:40:22:44:3f:2f:b0:bb:df:56:21:7f: 04:ee:51:42:11:4d:c1:55:bb:25:86:f1:2b:0b:76:9e:2b:a3: 13:67:64:ac:6d:4c:72:d9:cc:8e:13:e8:ce:ec:17:a5:8f:6d: 0a:c8:c4:fd:2b:12:f4:f3:a5:75:c6:ff:4f:25:15:9c:ef:8a: 98:7e:de:6b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8bgz6Jy9wcLk3guZjly3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDBiN2ExNzcwNTIyNmExZjJlMWYwMGIwZjY0NDcxNjU0MzZlNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWE1gfkjLgx8gkl0YWaUD8YIQ9Ic a1afUqzoPe7gDrmngLLHb7VB6w3FVUnMX4AeeXdYpuqIzZCtv3fAQs6yWtaC2jHn W16cln03O41AZppa5p0SPWuYuh6x2UwzBYo4hB1E8ARGpb+3b2XfZcPIu9qpWBny xSDeLo7JUx7PNCGL36YZgefPAGxlG38z4fSzyOLITYBhTraYeQhQcP7gO1x9qELP N0mL5BNflBa/6R/KJTNj8zaci2qt4YMfHEt75E43UmCjx2uiYfVch74kxYO5fFrf btDFr2H//ZRWgy3WNG0kATmPDE+7GdcA6g5iv/eIf35pkNw2jAFFB0rtBwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ0LehdwUiah8uHwCw9kRxZUNuZqMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvblF0NkYzQlNKcUh5NGZBTEQyUkhGbFEyNW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtgBkD BAAtgBowDQYJKoZIhvcNAQELBQADggEBAIj/l/fpgNWhx4vyqUHEO6eaD6sfpIGa pyp1efUkcFBO4tSc5YjMGtBbYpI7o0UT9tUJAgQMPlmLUn9cAb4Z40ILGp/Q41X0 cTh/xr+/0QzCAyB0BU9/IY8oyvfkQ+B3MnW8I5FhXnMaDF5S2mGNDukSFtRbjs0R mv8XE1LUFoReAAst8OnAkyOAhH6Xwk+nyzhiU59uzUsyXS6Cs+5l0PN4haNth6S9 UlrRyMZSYF/GKj0sc0TzovbZ0rNAIkQ/L7C731YhfwTuUUIRTcFVuyWG8SsLdp4r oxNnZKxtTHLZzI4T6M7sF6WPbQrIxP0rEvTzpXXG/08lFZzviph+3ms= -----END CERTIFICATE-----Generated at Thu Jan 8 21:12:14 2026 by rpki-client