This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa File: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (raw, json) Hash identifier: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80= Subject key identifier: 31:2C:55:35:E6:48:69:44:E7:43:4F:50:08:52:A5:BC:4D:89:98:F7 Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019B797F010F7460653D37298F830458F03C Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61309 IP address blocks: 45.147.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:0f:74:60:65:3d:37:29:8f:83:04:58:f0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=312c5535e6486944e7434f500852a5bc4d8998f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:71:ff:df:1f:d8:9f:b1:3f:7e:b8:3e:88: d4:01:dd:6d:79:1b:c7:ad:14:bc:cd:0d:c8:61:20: c0:78:9e:f8:e5:ba:66:e5:fc:d4:b7:a7:a0:c9:8c: b9:d0:d0:43:41:14:49:3b:67:0b:8e:c7:5f:31:ae: d1:f9:01:e4:50:95:55:89:97:e4:c2:ec:1d:8a:e5: 99:f0:77:f2:de:6c:f7:c0:14:53:d6:d6:fa:00:05: 46:6e:95:29:08:6b:fc:4a:52:2e:ce:36:0d:77:a7: ec:18:eb:79:3e:2d:b9:17:25:3e:39:7a:8e:a3:72: ea:8d:e8:17:b4:9c:3d:34:92:8f:30:d6:e4:a8:9e: 18:3e:a7:cf:1b:2d:10:43:e6:84:92:50:22:9d:52: 47:20:c7:88:7f:fc:79:a7:d0:dd:ab:71:ec:87:65: a6:6c:79:6c:51:ae:85:ae:aa:bc:ab:0d:7d:76:ba: c0:bd:30:21:9d:cb:42:27:8b:c1:3c:38:c5:db:2c: 48:33:d8:ac:68:8c:e4:a7:af:47:80:78:41:d4:e8: da:51:87:57:d5:df:89:06:03:fd:06:c2:ed:d3:40: 4e:35:22:63:1f:3d:99:80:a1:a2:b0:22:41:38:98: 1c:d2:0b:82:2c:52:c4:b8:24:f7:03:df:32:b8:4e: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:55:35:E6:48:69:44:E7:43:4F:50:08:52:A5:BC:4D:89:98:F7 X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.42.0/24 Signature Algorithm: sha256WithRSAEncryption 99:cd:98:e1:ef:31:f4:6c:1d:fe:b8:51:01:1c:dc:0b:27:db: d2:d2:18:51:91:65:21:13:bc:28:58:1b:f4:eb:5d:48:d9:6b: 2c:6d:be:15:9b:ef:a8:e9:4e:74:f4:a9:2f:d0:bc:27:07:f5: 63:d5:e3:7d:54:69:c6:35:4d:b3:d7:bc:ee:0c:e0:30:c2:59: c6:f5:d0:10:ec:94:62:00:d3:d4:ca:e3:67:cc:f7:5d:9b:5f: a7:21:8b:e0:18:a8:f0:9c:ec:d5:d0:55:69:d0:ce:ba:cc:ec: 01:eb:08:fc:c5:53:16:b5:32:99:08:43:06:66:40:fd:67:19: c0:f6:41:8b:5a:ca:61:51:52:e1:b6:09:f7:c7:22:ac:53:08: 12:3e:30:ac:db:18:9e:b5:00:7d:60:fa:4d:fb:25:51:53:27: 37:bd:77:e9:72:8f:0d:ce:a5:a2:9e:3d:6c:5d:f0:3a:38:41: ed:26:12:e6:17:36:a4:50:98:aa:f3:0b:ce:fc:4e:d4:0e:0e: 19:7f:69:06:ef:d7:2c:18:99:90:70:57:5a:f7:b1:94:b6:0d: 98:fe:41:c4:d6:7d:4e:cf:6e:5e:0d:e1:af:9e:ac:9a:d4:4f: d6:2e:f2:f9:08:ee:9c:c3:f4:77:d7:c8:19:c1:dd:5b:62:56: 37:12:dd:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwEPdGBlPTcpj4MEWPA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTJjNTUzNWU2NDg2OTQ0ZTc0MzRmNTAwODUyYTViYzRkODk5OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb9x/98f2J+xP364PojUAd1teRvH rRS8zQ3IYSDAeJ745bpm5fzUt6egyYy50NBDQRRJO2cLjsdfMa7R+QHkUJVViZfk wuwdiuWZ8Hfy3mz3wBRT1tb6AAVGbpUpCGv8SlIuzjYNd6fsGOt5Pi25FyU+OXqO o3LqjegXtJw9NJKPMNbkqJ4YPqfPGy0QQ+aEklAinVJHIMeIf/x5p9Ddq3Hsh2Wm bHlsUa6Frqq8qw19drrAvTAhnctCJ4vBPDjF2yxIM9isaIzkp69HgHhB1OjaUYdX 1d+JBgP9BsLt00BONSJjHz2ZgKGisCJBOJgc0guCLFLEuCT3A98yuE7LrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEsVTXmSGlE50NPUAhSpbxNiZj3MB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvTVN4Vk5lWklhVVRuUTA5UUNGS2x2RTJKbVBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMqMA0G CSqGSIb3DQEBCwUAA4IBAQCZzZjh7zH0bB3+uFEBHNwLJ9vS0hhRkWUhE7woWBv0 611I2Wssbb4Vm++o6U509Kkv0LwnB/Vj1eN9VGnGNU2z17zuDOAwwlnG9dAQ7JRi ANPUyuNnzPddm1+nIYvgGKjwnOzV0FVp0M66zOwB6wj8xVMWtTKZCEMGZkD9ZxnA 9kGLWsphUVLhtgn3xyKsUwgSPjCs2xietQB9YPpN+yVRUyc3vXfpco8NzqWinj1s XfA6OEHtJhLmFzakUJiq8wvO/E7UDg4Zf2kG79csGJmQcFda97GUtg2Y/kHE1n1O z25eDeGvnqya1E/WLvL5CO6cw/R318gZwd1bYlY3Et04 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:28 2026 by rpki-client