This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa File: NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa (raw, json) Hash identifier: prtuEAhteJnyPtEN60rHKuUcM2dOiBz2oKoaK+ZKr2g= Subject key identifier: 34:18:DE:56:96:B9:8C:E7:0B:A4:DA:89:0A:D0:BC:BE:B6:46:9D:6D Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Certificate serial: 019B77C7462F7AE9D3BFBA6A5374381CE473 Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208566 IP address blocks: 45.128.216.0/24 maxlen: 24 45.128.217.0/24 maxlen: 24 195.191.235.0/24 maxlen: 24 2a0e:41c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:46:2f:7a:e9:d3:bf:ba:6a:53:74:38:1c:e4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3418de5696b98ce70ba4da890ad0bcbeb6469d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:a7:2d:0e:d2:02:74:ba:7d:20:66:76:c8: 39:d5:3f:56:d7:4f:b9:55:ef:2a:40:03:eb:5b:15: fa:79:11:70:50:2e:be:0e:07:2f:f2:ee:1e:f4:91: 83:1b:f2:d2:1d:5c:55:8f:9b:0e:a2:d2:e4:f7:3a: dc:b9:65:e8:44:f6:0c:2d:9c:37:47:7b:e4:76:2d: 0b:81:4c:f8:10:74:ba:83:d8:5a:a3:42:64:af:db: b9:6f:24:2b:54:11:e0:da:7c:77:52:10:bd:00:49: 44:65:e5:fa:10:bc:92:af:bc:3c:07:12:f8:c6:6c: 88:e6:63:af:ad:da:44:d1:74:d9:04:17:d2:a1:38: c7:9a:63:e4:27:e3:1a:a8:85:5e:53:25:62:a7:bd: 3b:5f:bd:af:10:4e:75:64:03:49:40:24:7b:5f:64: 49:c6:db:aa:ee:32:1d:8a:cd:db:0e:63:bb:96:6f: fa:d9:dc:c8:57:db:92:f2:81:9d:62:cb:a3:55:75: 6c:ef:41:5e:23:5d:98:98:bf:d2:1b:3b:d0:a9:81: 48:2b:18:3e:31:4b:89:d1:4f:84:1f:82:28:1b:6c: c1:ee:ee:e4:9f:79:7f:64:85:27:54:65:dc:f5:15: a5:94:2b:1f:01:c7:47:90:5e:d3:a5:7e:42:65:11: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:18:DE:56:96:B9:8C:E7:0B:A4:DA:89:0A:D0:BC:BE:B6:46:9D:6D X509v3 Authority Key Identifier: keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/NBjeVpa5jOcLpNqJCtC8vrZGnW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.216.0/23 195.191.235.0/24 IPv6: 2a0e:41c0::/29 Signature Algorithm: sha256WithRSAEncryption 87:77:f1:90:1f:d9:39:3f:f3:f8:0d:70:e4:11:97:7c:c3:2c: a2:e3:4a:cd:aa:22:4e:63:1e:00:40:38:24:b6:b5:d4:60:6f: 72:92:9b:fe:2a:60:34:1e:a5:6e:0c:ca:4c:dd:db:48:e9:3d: 85:51:f0:8e:a9:c6:97:88:fd:85:fc:63:69:df:41:26:81:48: d5:d2:f1:03:6b:15:19:3c:92:bb:bb:52:43:fe:1e:83:04:a4: ff:0f:7c:46:c2:c7:76:b8:48:21:2e:06:86:8c:62:21:42:55: 1c:0e:b2:d0:e7:cb:ac:74:3e:59:92:51:c1:e2:ba:7d:4c:0f: 43:f3:c4:39:f3:c2:00:4a:ff:66:a3:27:26:07:59:c8:31:00: 9e:32:af:f7:a7:cd:27:d1:b7:0e:01:38:93:80:af:27:80:0a: ca:0d:71:12:ed:dc:bc:f0:16:7d:3c:15:9b:ac:6b:3f:0a:45: e4:4b:23:92:8c:c2:81:52:c8:52:10:f1:84:5d:37:6a:66:da: d1:af:13:3b:e7:59:85:0d:e5:e4:c6:5c:62:c3:9f:b9:71:2e: 0b:59:fe:b5:86:2c:74:91:a0:72:46:b4:e6:55:4e:dc:38:91: e2:bc:77:1d:80:76:0f:8f:29:23:a4:be:46:0f:13:8e:e5:c8: d6:51:08:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x0YveunTv7pqU3Q4HORzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw MzZmZTQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDE4ZGU1Njk2Yjk4Y2U3MGJhNGRhODkwYWQwYmNiZWI2NDY5ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4unLQ7SAnS6fSBmdsg51T9W10+5 Ve8qQAPrWxX6eRFwUC6+Dgcv8u4e9JGDG/LSHVxVj5sOotLk9zrcuWXoRPYMLZw3 R3vkdi0LgUz4EHS6g9hao0Jkr9u5byQrVBHg2nx3UhC9AElEZeX6ELySr7w8BxL4 xmyI5mOvrdpE0XTZBBfSoTjHmmPkJ+MaqIVeUyVip707X72vEE51ZANJQCR7X2RJ xtuq7jIdis3bDmO7lm/62dzIV9uS8oGdYsujVXVs70FeI12YmL/SGzvQqYFIKxg+ MUuJ0U+EH4IoG2zB7u7kn3l/ZIUnVGXc9RWllCsfAcdHkF7TpX5CZRG+OQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDQY3laWuYznC6TaiQrQvL62Rp1tMB8GA1UdIwQY MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt MjY2ZmUyNzM3YjhmLzEvTkJqZVZwYTVqT2NMcE5xSkN0Qzh2clpHblcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLYDYAwQA w7/rMA0EAgACMAcDBQMqDkHAMA0GCSqGSIb3DQEBCwUAA4IBAQCHd/GQH9k5P/P4 DXDkEZd8wyyi40rNqiJOYx4AQDgktrXUYG9ykpv+KmA0HqVuDMpM3dtI6T2FUfCO qcaXiP2F/GNp30EmgUjV0vEDaxUZPJK7u1JD/h6DBKT/D3xGwsd2uEghLgaGjGIh QlUcDrLQ58usdD5ZklHB4rp9TA9D88Q588IASv9moycmB1nIMQCeMq/3p80n0bcO ATiTgK8ngArKDXES7dy88BZ9PBWbrGs/CkXkSyOSjMKBUshSEPGEXTdqZtrRrxM7 51mFDeXkxlxiw5+5cS4LWf61hix0kaByRrTmVU7cOJHivHcdgHYPjykjpL5GDxOO 5cjWUQj1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:04 2026 by rpki-client