This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ne01hL0XhqI7Jy0ADpwV6Zo_VuY.roa File: Ne01hL0XhqI7Jy0ADpwV6Zo_VuY.roa (raw, json) Hash identifier: G1Mc6FZpTkVTjmU/NlolUEq4OXVBgE0MJO889j6fPYk= Subject key identifier: 35:ED:35:84:BD:17:86:A2:3B:27:2D:00:0E:9C:15:E9:9A:3F:56:E6 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E42539C75A61AA2288CB38EDD4D72 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ne01hL0XhqI7Jy0ADpwV6Zo_VuY.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212396 IP address blocks: 45.85.194.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:53:9c:75:a6:1a:a2:28:8c:b3:8e:dd:4d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35ed3584bd1786a23b272d000e9c15e99a3f56e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:4b:31:f8:ac:3c:20:c3:8d:a1:bd:bb:1c: 18:48:a9:da:0c:c0:1d:ab:31:47:6c:ec:25:92:3a: 65:e6:65:9a:b5:37:f9:4b:10:7c:db:d1:91:7c:12: e1:b1:17:bd:21:47:58:1b:20:6b:1e:15:37:73:0b: eb:52:93:8c:80:46:8d:7a:48:31:86:e5:d2:81:2f: c4:ac:ed:64:6b:86:00:dd:c2:85:b5:2e:16:91:e6: 86:7b:f1:9d:57:33:e9:df:42:19:00:49:55:35:d1: 30:36:f8:dc:c4:d2:18:f9:84:35:50:44:be:7f:69: 9e:ae:e1:d2:ef:c3:05:69:13:be:c8:f1:d0:fc:74: ea:66:1e:fd:ed:a1:11:05:70:77:a9:4e:cb:03:ce: 7b:bb:ee:09:50:3e:fb:55:f4:33:e5:3e:d6:5f:db: 8a:4b:61:11:93:0e:48:2b:72:5d:88:47:74:eb:9c: 80:96:46:9a:4a:b4:a4:07:d7:d3:aa:84:04:a1:59: 82:99:b7:a1:6a:b7:b0:e9:20:84:be:50:ea:46:18: ea:26:07:83:3e:38:10:3e:b8:ed:72:ca:c2:70:99: 7c:9d:4b:75:6f:03:16:2c:17:2e:64:65:a7:65:9c: 7f:77:9c:ff:97:3b:4f:90:64:83:4e:88:50:2d:90: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:35:84:BD:17:86:A2:3B:27:2D:00:0E:9C:15:E9:9A:3F:56:E6 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ne01hL0XhqI7Jy0ADpwV6Zo_VuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.194.0/24 Signature Algorithm: sha256WithRSAEncryption a8:56:c3:81:48:dc:e8:51:c3:15:af:b7:32:4a:c8:cd:29:9e: 01:26:98:85:84:e3:16:4f:50:98:33:d8:1c:1e:df:10:57:47: ba:58:09:59:6e:f5:5a:a9:80:87:d4:db:d5:9d:a8:70:da:68: 17:2d:1e:b3:91:b2:33:38:45:ff:ec:1f:f5:e2:7f:9c:48:4d: 9d:75:9c:ab:04:ec:69:19:7f:62:38:6d:a0:19:04:a1:86:4e: 18:be:08:79:7a:a0:ce:30:41:f1:ab:f5:fd:73:36:96:6a:13: 25:8c:d9:e3:a7:9b:87:70:00:3f:14:88:dc:56:60:a8:a2:af: f8:77:28:3e:ba:24:6c:d5:19:64:6f:02:ec:e2:26:41:a4:b4: cd:84:35:a0:13:2c:37:f6:38:a1:f1:cd:44:c3:37:62:8e:23: 62:e0:3b:d9:2c:26:33:e5:d4:d3:4c:c2:42:8d:77:83:1a:4a: 20:0a:14:12:da:2f:ab:13:16:28:cc:32:31:54:a0:1d:3e:fe: 1e:de:4e:89:64:de:bd:91:76:87:ef:a1:2a:73:90:b1:50:63: 6b:b5:ea:4e:5f:b8:20:34:0a:28:35:66:ff:db:fb:1f:a2:85: be:26:96:67:91:fb:1d:fe:6e:02:03:c3:34:82:8c:38:97:28: 4f:43:0d:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkJTnHWmGqIojLOO3U1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWVkMzU4NGJkMTc4NmEyM2IyNzJkMDAwZTljMTVlOTlhM2Y1NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAdLMfisPCDDjaG9uxwYSKnaDMAd qzFHbOwlkjpl5mWatTf5SxB829GRfBLhsRe9IUdYGyBrHhU3cwvrUpOMgEaNekgx huXSgS/ErO1ka4YA3cKFtS4WkeaGe/GdVzPp30IZAElVNdEwNvjcxNIY+YQ1UES+ f2meruHS78MFaRO+yPHQ/HTqZh797aERBXB3qU7LA857u+4JUD77VfQz5T7WX9uK S2ERkw5IK3JdiEd065yAlkaaSrSkB9fTqoQEoVmCmbeharew6SCEvlDqRhjqJgeD PjgQPrjtcsrCcJl8nUt1bwMWLBcuZGWnZZx/d5z/lztPkGSDTohQLZCaywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXtNYS9F4aiOyctAA6cFemaP1bmMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvTmUwMWhMMFhocUk3SnkwQURwd1Y2Wm9fVnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVXCMA0G CSqGSIb3DQEBCwUAA4IBAQCoVsOBSNzoUcMVr7cySsjNKZ4BJpiFhOMWT1CYM9gc Ht8QV0e6WAlZbvVaqYCH1NvVnahw2mgXLR6zkbIzOEX/7B/14n+cSE2ddZyrBOxp GX9iOG2gGQShhk4Yvgh5eqDOMEHxq/X9czaWahMljNnjp5uHcAA/FIjcVmCooq/4 dyg+uiRs1RlkbwLs4iZBpLTNhDWgEyw39jih8c1EwzdijiNi4DvZLCYz5dTTTMJC jXeDGkogChQS2i+rExYozDIxVKAdPv4e3k6JZN69kXaH76Eqc5CxUGNrtepOX7gg NAooNWb/2/sfooW+JpZnkfsd/m4CA8M0gow4lyhPQw0V -----END CERTIFICATE-----Generated at Mon Jan 19 20:28:22 2026 by rpki-client