This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pC7SiNspR8M_MSA7-97b8qsfzv8.roa File: pC7SiNspR8M_MSA7-97b8qsfzv8.roa (raw, json) Hash identifier: 74JAbryhyglF+QgezjiYS3Lt8LiWGFaYyN8GwPoT3dk= Subject key identifier: A4:2E:D2:88:DB:29:47:C3:3F:31:20:3B:FB:DE:DB:F2:AB:1F:CE:FF Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da Certificate serial: 019B77C6C252845A1ED43A73BC1DED436A90 Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pC7SiNspR8M_MSA7-97b8qsfzv8.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59808 IP address blocks: 45.151.212.0/24 maxlen: 24 2a0e:b580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 07:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c2:52:84:5a:1e:d4:3a:73:bc:1d:ed:43:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42ed288db2947c33f31203bfbdedbf2ab1fceff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:1a:a0:68:0c:d0:91:43:35:3e:a0:7b:39: 7a:35:15:95:cf:1d:1f:ae:26:86:30:9c:29:ee:25: 39:cb:db:b7:3c:2b:cd:05:2b:c0:7a:47:d0:00:83: 2b:df:ea:31:da:7d:18:b2:87:01:2a:5d:cd:e8:2d: dd:1b:3b:18:78:a5:f9:bb:66:5d:65:17:9c:7e:48: 7b:c0:0f:20:e8:5d:9d:7e:20:a3:6b:56:8f:8c:fc: 19:f6:7d:bf:bc:c5:03:67:5b:14:b2:dc:e4:41:4a: f7:2d:ab:a9:ea:17:f9:42:f3:8d:1a:26:cc:ec:dc: cb:31:8d:66:7d:82:02:ae:8c:0e:16:7a:2b:15:db: 16:db:0f:ec:26:4f:43:60:3b:cd:a2:82:da:4c:bc: 3c:ac:84:19:f0:fe:70:08:74:91:74:97:7f:37:f8: 55:91:15:45:02:62:8e:72:c3:b0:49:20:c9:06:ad: df:c2:f9:c0:46:33:4f:2f:36:39:8f:97:40:82:32: 9d:5c:ec:7c:f9:d6:1c:b9:b0:d4:bb:a7:f4:dd:d0: 3c:fe:a6:0d:1b:70:a2:68:d2:4c:7b:2f:b4:53:a7: f4:4a:7b:ba:0f:40:f8:14:16:ed:f4:ed:2b:de:5d: 68:07:a4:0f:48:4f:1f:9f:cd:a4:6f:03:99:40:11: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:D2:88:DB:29:47:C3:3F:31:20:3B:FB:DE:DB:F2:AB:1F:CE:FF X509v3 Authority Key Identifier: keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pC7SiNspR8M_MSA7-97b8qsfzv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.212.0/24 IPv6: 2a0e:b580::/29 Signature Algorithm: sha256WithRSAEncryption 18:83:c0:76:aa:4c:97:a9:12:e1:8d:d0:ce:aa:d8:29:88:ed: cf:31:41:fe:bc:6a:5f:17:a6:b1:d9:96:f7:34:3d:d5:cd:51: 8c:33:e2:4f:c3:69:96:f3:5e:c7:29:8c:0f:a7:e1:c1:78:87: a3:f2:d1:32:1c:8f:41:5b:91:c1:df:eb:34:2d:e2:b4:2e:be: 58:8b:47:ec:b1:bb:9f:bb:16:1d:b1:85:22:b7:33:02:23:c7: 44:cf:b6:a0:87:13:f1:72:38:51:4e:c5:7a:f7:46:3f:98:04: 5c:00:65:a3:b1:0b:fa:4c:97:cc:f0:f7:b4:96:5f:9a:ad:dd: d8:f4:a9:ae:6d:0f:10:2f:7e:e8:0b:2a:76:a2:9f:ac:a5:9f: f0:7f:01:43:f8:65:36:76:81:a5:19:51:00:55:97:fa:3f:c9: b2:4c:c3:a0:ee:e7:86:d2:81:52:85:42:ca:42:24:0a:f9:a9: 35:50:6e:06:27:62:2d:d3:61:1b:f6:e8:f8:c7:16:5a:34:61: e0:07:78:4a:d2:18:b0:1c:ec:ec:6d:2b:a6:20:6f:5c:93:63: b3:e4:4a:9d:8f:dc:8b:c6:44:4d:aa:b3:cc:b6:18:fd:b0:48: cf:b2:f0:65:30:65:21:0b:f6:32:68:b8:a7:e1:f3:8c:36:d1: 7b:6b:c2:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xsJShFoe1DpzvB3tQ2qQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGU1OWEyMjNmNGJjYjgyMzQ5MmZiMTA5NmMzYTgyMzEw YzAzZGEwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJlZDI4OGRiMjk0N2MzM2YzMTIwM2JmYmRlZGJmMmFiMWZjZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39IaoGgM0JFDNT6gezl6NRWVzx0f riaGMJwp7iU5y9u3PCvNBSvAekfQAIMr3+ox2n0YsocBKl3N6C3dGzsYeKX5u2Zd ZRecfkh7wA8g6F2dfiCja1aPjPwZ9n2/vMUDZ1sUstzkQUr3Laup6hf5QvONGibM 7NzLMY1mfYICrowOFnorFdsW2w/sJk9DYDvNooLaTLw8rIQZ8P5wCHSRdJd/N/hV kRVFAmKOcsOwSSDJBq3fwvnARjNPLzY5j5dAgjKdXOx8+dYcubDUu6f03dA8/qYN G3CiaNJMey+0U6f0Snu6D0D4FBbt9O0r3l1oB6QPSE8fn82kbwOZQBHy5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKQu0ojbKUfDPzEgO/ve2/KrH87/MB8GA1UdIwQY MBaAFDBOWaIj9Ly4I0kvsQlsOoIxDAPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTct MzQ0Y2M1MDJmMWJkLzEvcEM3U2lOc3BSOE1fTVNBNy05N2I4cXNmenY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTctMzQ0Y2M1MDJmMWJk LzEvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZfUMA0E AgACMAcDBQMqDrWAMA0GCSqGSIb3DQEBCwUAA4IBAQAYg8B2qkyXqRLhjdDOqtgp iO3PMUH+vGpfF6ax2Zb3ND3VzVGMM+JPw2mW817HKYwPp+HBeIej8tEyHI9BW5HB 3+s0LeK0Lr5Yi0fssbufuxYdsYUitzMCI8dEz7aghxPxcjhRTsV690Y/mARcAGWj sQv6TJfM8Pe0ll+ard3Y9KmubQ8QL37oCyp2op+spZ/wfwFD+GU2doGlGVEAVZf6 P8myTMOg7ueG0oFShULKQiQK+ak1UG4GJ2It02Eb9uj4xxZaNGHgB3hK0hiwHOzs bSumIG9ck2Oz5Eqdj9yLxkRNqrPMthj9sEjPsvBlMGUhC/YyaLin4fOMNtF7a8Kt -----END CERTIFICATE-----Generated at Tue Feb 10 11:34:11 2026 by rpki-client