This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/nEwlFQn77GRj0a5PcdvpntXjCkk.roa File: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (raw, json) Hash identifier: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s= Subject key identifier: 9C:4C:25:15:09:FB:EC:64:63:D1:AE:4F:71:DB:E9:9E:D5:E3:0A:49 Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Certificate serial: 019B7A5A04FF9181EF9B69CA4EDA5536C921 Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/nEwlFQn77GRj0a5PcdvpntXjCkk.roa Signing time: Thu 01 Jan 2026 16:17:58 +0000 ROA not before: Thu 01 Jan 2026 16:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208603 IP address blocks: 45.90.252.0/22 maxlen: 24 45.90.254.0/24 maxlen: 24 45.90.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:04:ff:91:81:ef:9b:69:ca:4e:da:55:36:c9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c4c251509fbec6463d1ae4f71dbe99ed5e30a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:52:32:9f:07:4b:9b:45:95:85:29:ec:65: f1:d2:7a:d4:ed:27:e7:c9:28:0e:50:b0:05:d9:26: 20:d1:b4:ec:01:aa:5a:ac:10:41:42:9c:3f:fc:99: 91:10:91:88:96:f5:db:b0:8e:e7:75:0b:31:61:31: e7:93:9d:99:0d:c5:39:db:9d:0b:c8:45:c6:47:8c: 36:d4:14:9a:44:9e:8b:c6:57:45:28:5c:8e:c9:ad: b3:a3:c5:3c:70:03:01:c8:d1:ae:6f:6a:84:a5:4b: ae:05:81:10:ee:11:eb:71:55:06:4b:bb:ff:07:92: 2b:d2:03:6c:85:e3:d0:fd:f0:d7:3b:23:9a:0f:90: fe:29:af:a6:6c:26:c8:df:68:c0:24:31:1a:db:40: 52:7f:0c:1a:e3:cf:13:0c:cb:7a:d9:cb:57:7e:70: e7:d4:d5:9a:4b:90:7b:67:05:2f:34:05:18:2a:5e: cb:ee:7d:bf:41:04:02:83:3c:f6:c1:f6:ce:db:d6: 1c:94:82:05:d2:d3:a4:b2:25:7d:ac:ae:78:1d:29: ee:42:d7:31:c5:c7:99:bb:74:68:eb:a6:a4:d4:b4: 63:41:47:e9:1f:e1:6e:d3:38:28:0c:fd:c5:45:66: 77:5e:1f:a8:c1:87:8e:37:2f:83:c3:17:e9:ef:5e: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:25:15:09:FB:EC:64:63:D1:AE:4F:71:DB:E9:9E:D5:E3:0A:49 X509v3 Authority Key Identifier: keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/nEwlFQn77GRj0a5PcdvpntXjCkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:f3:5f:f3:75:ce:39:75:53:6d:bf:a8:b3:aa:07:10:bb:2c: a6:53:bf:d7:94:77:cc:6a:06:4b:19:19:c3:94:18:d8:dc:33: ad:fd:4f:af:6e:3d:41:54:4c:de:30:2e:26:2b:61:9b:da:0f: 50:00:25:e1:c9:3a:6c:30:20:5c:55:14:af:e3:8b:46:86:1c: e8:30:e6:01:e8:d5:73:4f:3d:c2:45:0b:e8:9a:5c:ec:77:4d: 81:da:d3:1f:d0:c8:29:b3:74:71:76:50:f8:24:a8:6e:ff:a3: f4:9d:f2:2e:00:15:d1:f1:e7:a7:f0:35:39:59:f8:78:3b:d8: e6:89:63:2b:ac:c3:b4:ec:d1:a2:ea:42:8d:c4:65:3b:61:07: 70:30:b2:74:06:da:d7:97:32:90:ec:59:98:11:7a:1d:0d:56: 24:f4:af:96:ee:5e:76:6b:f5:29:94:15:76:e3:b0:e9:77:3d: 56:d1:de:0a:05:1a:4f:f5:7c:7a:10:9f:30:f0:c9:51:a5:e7: 66:bb:e6:24:c2:6b:21:11:20:ff:aa:5d:f0:18:77:89:5c:42: 9c:9e:86:84:a9:67:31:d6:eb:29:52:d0:1f:53:c2:d9:99:e8: 4d:f9:17:35:29:e0:17:b8:02:24:67:9f:70:66:c5:1b:31:c2: 65:83:86:d3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6WgT/kYHvm2nKTtpVNskhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4 ZjJiYmEwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzRjMjUxNTA5ZmJlYzY0NjNkMWFlNGY3MWRiZTk5ZWQ1ZTMwYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog9SMp8HS5tFlYUp7GXx0nrU7Sfn ySgOULAF2SYg0bTsAaparBBBQpw//JmREJGIlvXbsI7ndQsxYTHnk52ZDcU5250L yEXGR4w21BSaRJ6LxldFKFyOya2zo8U8cAMByNGub2qEpUuuBYEQ7hHrcVUGS7v/ B5Ir0gNshePQ/fDXOyOaD5D+Ka+mbCbI32jAJDEa20BSfwwa488TDMt62ctXfnDn 1NWaS5B7ZwUvNAUYKl7L7n2/QQQCgzz2wfbO29YclIIF0tOksiV9rK54HSnuQtcx xceZu3Ro66ak1LRjQUfpH+Fu0zgoDP3FRWZ3Xh+owYeONy+Dwxfp714G0wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJxMJRUJ++xkY9GuT3Hb6Z7V4wpJMB8GA1UdIwQY MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5 LWM5ZjdkMDJmOTBjMC8xL25Fd2xGUW43N0dSajBhNVBjZHZwbnRYakNray5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5LWM5ZjdkMDJmOTBj MC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItWvww DQYJKoZIhvcNAQELBQADggEBAG/zX/N1zjl1U22/qLOqBxC7LKZTv9eUd8xqBksZ GcOUGNjcM639T69uPUFUTN4wLiYrYZvaD1AAJeHJOmwwIFxVFK/ji0aGHOgw5gHo 1XNPPcJFC+iaXOx3TYHa0x/QyCmzdHF2UPgkqG7/o/Sd8i4AFdHx56fwNTlZ+Hg7 2OaJYyusw7Ts0aLqQo3EZTthB3AwsnQG2teXMpDsWZgReh0NViT0r5buXnZr9SmU FXbjsOl3PVbR3goFGk/1fHoQnzDwyVGl52a75iTCayERIP+qXfAYd4lcQpyehoSp ZzHW6ylS0B9TwtmZ6E35FzUp4Be4AiRnn3BmxRsxwmWDhtM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:37 2026 by rpki-client