This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/h7Slf79U-tivsMXa7hEOttxBA6M.roa File: h7Slf79U-tivsMXa7hEOttxBA6M.roa (raw, json) Hash identifier: 3/yXrVufCN3qWz4paHjP2MngE7Cq+dL6ygZqrLPEOdk= Subject key identifier: 87:B4:A5:7F:BF:54:FA:D8:AF:B0:C5:DA:EE:11:0E:B6:DC:41:03:A3 Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f Certificate serial: 019B77C75464E91F4CCF76819DDC2F148D32 Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/h7Slf79U-tivsMXa7hEOttxBA6M.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202182 IP address blocks: 45.153.90.0/24 maxlen: 24 2a13:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:54:64:e9:1f:4c:cf:76:81:9d:dc:2f:14:8d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578041152df80f6e531342663dd003109905084f Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87b4a57fbf54fad8afb0c5daee110eb6dc4103a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:71:2a:a1:75:37:14:48:17:be:89:fd:80: da:dc:2b:f6:0f:f5:ab:34:fe:d3:eb:3b:64:5b:78: e3:54:c5:8f:75:3b:41:ed:20:00:a1:9c:f4:9f:6e: ae:c1:60:49:ba:91:4a:8d:34:b0:fe:5b:c9:ed:be: 70:7e:b9:72:ec:1b:05:75:5c:ca:5a:2d:73:92:99: 60:b3:7e:8c:81:3b:16:a8:33:bb:30:f4:a1:41:fc: 94:a7:17:01:19:0c:f3:73:5e:c3:25:d6:45:9b:0c: 90:c5:94:b6:0c:6e:b2:3d:5a:51:e6:44:a9:7f:f1: c8:1e:bb:1c:a8:c1:09:ca:cc:3a:7b:f5:37:3d:fd: 11:d6:64:75:37:f8:67:73:dd:6a:0b:13:3a:ba:63: fa:a7:9c:68:05:20:7d:4f:a2:84:36:96:10:cb:ca: ba:af:d6:cd:e9:2f:69:17:11:64:93:46:ca:76:09: 0a:5b:5f:01:16:5d:94:28:19:de:54:63:d2:d6:75: ca:be:18:3d:b2:4c:29:b5:5d:65:07:cc:56:67:89: f9:59:59:9e:2b:12:73:c2:ed:51:c8:81:9f:6a:c8: 34:38:ab:01:ff:f1:2c:d5:6b:d6:b2:ff:ab:38:c5: 25:ae:91:a4:e4:1d:19:f1:f0:8f:84:a6:4a:19:c3: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:A5:7F:BF:54:FA:D8:AF:B0:C5:DA:EE:11:0E:B6:DC:41:03:A3 X509v3 Authority Key Identifier: keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/h7Slf79U-tivsMXa7hEOttxBA6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.90.0/24 IPv6: 2a13:9c0::/48 Signature Algorithm: sha256WithRSAEncryption e2:63:64:c5:dc:82:6a:9b:84:3b:0f:77:6c:46:9b:7f:55:95: 56:e3:85:73:55:46:24:6c:08:6d:31:73:c3:50:14:d4:a5:d4: 54:98:bf:4d:f3:a0:4c:1c:5d:b6:5e:17:37:c7:62:b7:55:65: 50:26:be:c3:68:79:c4:a3:a2:75:5a:aa:eb:06:47:14:86:ea: 68:af:71:dc:3b:33:49:3d:5e:f0:04:5a:99:54:8e:72:ab:8a: fc:e0:57:b2:f4:73:28:38:49:7d:93:2d:4f:db:ec:f3:46:86: ba:e0:1c:1c:ce:1a:11:09:5b:a1:f5:d1:99:58:c5:ba:88:3e: 12:97:af:c4:1a:8a:37:3d:42:d6:6d:5a:ee:73:87:24:cf:5f: da:43:e1:10:8f:2a:ab:35:19:e3:17:7c:98:b8:77:17:0f:ff: ff:4f:48:69:72:f0:b2:0d:98:59:54:31:02:a4:7e:13:30:c1: 8a:a4:15:71:b7:5c:98:9d:77:e9:60:ec:c0:8d:c3:55:50:34: 52:40:bf:92:2d:a6:50:18:0a:d5:b1:7f:4b:65:83:12:fe:1d: 50:ea:ea:c7:f9:b1:38:ac:7b:1c:9c:dd:5f:82:c6:47:1f:5b: f2:af:64:c5:74:f3:de:7f:56:77:b8:01:3c:7e:ac:cf:72:f3: db:79:68:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x1Rk6R9Mz3aBndwvFI0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ODA0MTE1MmRmODBmNmU1MzEzNDI2NjNkZDAwMzEwOTkw NTA4NGYwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2I0YTU3ZmJmNTRmYWQ4YWZiMGM1ZGFlZTExMGViNmRjNDEwM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1JxKqF1NxRIF76J/YDa3Cv2D/Wr NP7T6ztkW3jjVMWPdTtB7SAAoZz0n26uwWBJupFKjTSw/lvJ7b5wfrly7BsFdVzK Wi1zkplgs36MgTsWqDO7MPShQfyUpxcBGQzzc17DJdZFmwyQxZS2DG6yPVpR5kSp f/HIHrscqMEJysw6e/U3Pf0R1mR1N/hnc91qCxM6umP6p5xoBSB9T6KENpYQy8q6 r9bN6S9pFxFkk0bKdgkKW18BFl2UKBneVGPS1nXKvhg9skwptV1lB8xWZ4n5WVme KxJzwu1RyIGfasg0OKsB//Es1WvWsv+rOMUlrpGk5B0Z8fCPhKZKGcOSEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIe0pX+/VPrYr7DF2u4RDrbcQQOjMB8GA1UdIwQY MBaAFFeAQRUt+A9uUxNCZj3QAxCZBQhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3Mzkt YzYxMmE3MGFiYjQyLzEvaDdTbGY3OVUtdGl2c01YYTdoRU90dHhCQTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3MzktYzYxMmE3MGFiYjQy LzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZlaMA8E AgACMAkDBwAqEwnAAAAwDQYJKoZIhvcNAQELBQADggEBAOJjZMXcgmqbhDsPd2xG m39VlVbjhXNVRiRsCG0xc8NQFNSl1FSYv03zoEwcXbZeFzfHYrdVZVAmvsNoecSj onVaqusGRxSG6mivcdw7M0k9XvAEWplUjnKrivzgV7L0cyg4SX2TLU/b7PNGhrrg HBzOGhEJW6H10ZlYxbqIPhKXr8Qaijc9QtZtWu5zhyTPX9pD4RCPKqs1GeMXfJi4 dxcP//9PSGly8LINmFlUMQKkfhMwwYqkFXG3XJidd+lg7MCNw1VQNFJAv5ItplAY CtWxf0tlgxL+HVDq6sf5sTisexyc3V+CxkcfW/KvZMV0895/Vne4ATx+rM9y89t5 aKI= -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:26 2026 by rpki-client