This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MsaIlnMAr_OLeT_H8e_hlU60uEg.roa File: MsaIlnMAr_OLeT_H8e_hlU60uEg.roa (raw, json) Hash identifier: 52QXtPOwNDXHGGTYGifitwy0CzoYx8jYedtmxqriilQ= Subject key identifier: 32:C6:88:96:73:00:AF:F3:8B:79:3F:C7:F1:EF:E1:95:4E:B4:B8:48 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1331C27A9C26295FA2DE0CE0540DCE Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MsaIlnMAr_OLeT_H8e_hlU60uEg.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207136 IP address blocks: 45.137.138.0/24 maxlen: 24 94.198.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:31:c2:7a:9c:26:29:5f:a2:de:0c:e0:54:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32c688967300aff38b793fc7f1efe1954eb4b848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:64:94:15:40:84:6a:83:24:79:82:4e:37: 30:32:18:c6:2e:39:cd:24:93:f4:a3:49:aa:c0:e2: d5:4a:04:96:82:27:a9:d7:07:49:3e:e6:1d:9a:bb: 95:37:f3:45:2c:36:f7:ed:85:3f:7a:c4:25:6f:a0: 35:91:f0:22:d3:59:fc:42:0b:4b:be:cf:78:25:d8: 8c:48:a2:39:b9:c6:c2:8e:cc:97:9d:a1:3d:38:4f: fe:0f:2e:ff:04:e7:7c:06:19:e0:b7:39:b1:0b:e7: 47:67:03:05:6d:72:53:d7:84:d0:2f:e8:a2:99:b8: e8:0c:b3:4b:58:79:0a:2c:43:bf:c7:be:4d:f1:86: a2:52:9d:27:3e:06:4f:eb:78:3c:7a:3d:34:a9:b3: b0:82:f3:32:4c:0f:70:84:e4:cb:04:c5:f1:da:e0: a7:b1:0e:54:fb:8b:28:ee:12:d8:1d:5e:d3:05:1b: 5d:13:a2:82:6f:cb:7c:9a:a2:b9:b9:64:3e:22:4e: 92:0c:00:67:72:1c:4e:cc:e9:2f:45:be:92:ef:4f: 7a:b4:66:7b:46:07:a9:92:03:3b:ff:e1:33:0f:81: ae:0b:02:c9:7e:24:bb:a5:dc:25:1d:29:f8:b0:ca: e5:26:ac:e1:4c:d9:31:b9:c8:38:af:bf:be:83:bb: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C6:88:96:73:00:AF:F3:8B:79:3F:C7:F1:EF:E1:95:4E:B4:B8:48 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MsaIlnMAr_OLeT_H8e_hlU60uEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.138.0/24 94.198.44.0/24 Signature Algorithm: sha256WithRSAEncryption 95:25:a2:2e:df:3a:07:61:9d:9f:93:02:d6:de:2a:13:e6:c7: e6:60:b6:9e:e3:5b:c3:2b:10:cd:00:36:a6:fe:07:3f:d1:1a: eb:db:f3:ad:d0:d8:ce:0b:29:5f:77:eb:a7:aa:b8:e7:75:f8: ed:6c:b5:91:c8:c8:4e:d7:4e:54:34:47:0b:1c:4f:25:31:b0: 9e:2d:43:bc:8b:f3:43:10:12:6f:7f:94:bc:fe:aa:4d:06:06: ac:64:7e:33:50:7e:f3:2a:f0:ca:26:6b:09:c0:bd:9e:cf:7e: 42:24:40:e0:37:c7:3d:1b:4c:b4:51:b5:03:89:f4:c3:75:7b: 8f:c2:85:a0:7b:f6:d1:20:d6:fe:f0:a5:c1:9d:b6:fc:aa:c2: ad:cf:62:b9:9b:8f:8c:13:ea:db:da:fd:eb:2c:88:c5:97:b6: 94:a8:1d:d6:d6:91:ef:d3:e0:11:88:8e:ad:bd:b5:a5:a0:9f: e7:ba:02:9e:af:e2:22:0e:30:6e:1b:94:80:ed:c9:4e:55:62: f5:cb:ee:23:a9:61:96:9e:79:31:4b:84:1a:3c:e6:65:b2:2f: 1d:bb:a4:7c:86:6a:76:09:fd:ff:7a:58:af:47:e9:7e:aa:34: d7:e2:02:ae:d2:16:39:08:aa:f9:ca:ca:7a:25:fc:91:22:f6: 2c:40:ee:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EzHCepwmKV+i3gzgVA3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmM2ODg5NjczMDBhZmYzOGI3OTNmYzdmMWVmZTE5NTRlYjRiODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xxklBVAhGqDJHmCTjcwMhjGLjnN JJP0o0mqwOLVSgSWgiep1wdJPuYdmruVN/NFLDb37YU/esQlb6A1kfAi01n8QgtL vs94JdiMSKI5ucbCjsyXnaE9OE/+Dy7/BOd8BhngtzmxC+dHZwMFbXJT14TQL+ii mbjoDLNLWHkKLEO/x75N8YaiUp0nPgZP63g8ej00qbOwgvMyTA9whOTLBMXx2uCn sQ5U+4so7hLYHV7TBRtdE6KCb8t8mqK5uWQ+Ik6SDABnchxOzOkvRb6S7096tGZ7 RgepkgM7/+EzD4GuCwLJfiS7pdwlHSn4sMrlJqzhTNkxucg4r7++g7tSWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDLGiJZzAK/zi3k/x/Hv4ZVOtLhIMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvTXNhSWxuTUFyX09MZVRfSDhlX2hsVTYwdUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYmKAwQA XsYsMA0GCSqGSIb3DQEBCwUAA4IBAQCVJaIu3zoHYZ2fkwLW3ioT5sfmYLae41vD KxDNADam/gc/0Rrr2/Ot0NjOCylfd+unqrjndfjtbLWRyMhO105UNEcLHE8lMbCe LUO8i/NDEBJvf5S8/qpNBgasZH4zUH7zKvDKJmsJwL2ez35CJEDgN8c9G0y0UbUD ifTDdXuPwoWge/bRINb+8KXBnbb8qsKtz2K5m4+ME+rb2v3rLIjFl7aUqB3W1pHv 0+ARiI6tvbWloJ/nugKer+IiDjBuG5SA7clOVWL1y+4jqWGWnnkxS4QaPOZlsi8d u6R8hmp2Cf3/elivR+l+qjTX4gKu0hY5CKr5ysp6JfyRIvYsQO4p -----END CERTIFICATE-----Generated at Fri Jan 23 21:36:19 2026 by rpki-client