This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MsitqtGr-Vk8TR1AgdgEynSvADk.roa File: MsitqtGr-Vk8TR1AgdgEynSvADk.roa (raw, json) Hash identifier: N0Fk5zoJ1xQ4TIZpoS7V/DGcsSQAEURDA1IaGnT+fA8= Subject key identifier: 32:C8:AD:AA:D1:AB:F9:59:3C:4D:1D:40:81:D8:04:CA:74:AF:00:39 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55FF4792106B6E657D3B1FA8ABA84 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MsitqtGr-Vk8TR1AgdgEynSvADk.roa Signing time: Thu 01 Jan 2026 22:19:54 +0000 ROA not before: Thu 01 Jan 2026 22:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210558 IP address blocks: 45.94.31.0/24 maxlen: 24 45.138.16.0/24 maxlen: 24 91.206.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5f:f4:79:21:06:b6:e6:57:d3:b1:fa:8a:ba:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32c8adaad1abf9593c4d1d4081d804ca74af0039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:ac:41:1f:98:ab:f6:1f:26:4a:da:cb:e7: e8:da:44:4a:ef:af:4e:9b:da:be:1f:05:eb:1a:55: c4:b0:87:51:1a:87:de:1d:ac:62:e9:7f:5a:7f:bd: b5:7a:74:5d:4f:2d:89:2b:89:1c:51:b3:7b:d4:91: c7:d5:fd:82:2e:b6:4a:05:cb:08:9c:89:9d:0b:99: 6b:3d:9d:50:e8:15:fb:57:9c:50:83:4e:c0:ad:b1: 6d:83:6b:4f:78:17:5e:fc:46:9e:e2:69:04:fc:42: 66:1b:9c:c2:44:e8:f4:49:c0:91:c5:18:8d:4e:6b: 10:3a:55:1f:1c:35:21:83:86:e2:c3:e3:49:7e:1f: e6:55:9f:c4:a4:5f:13:55:51:59:31:39:ae:d6:9c: f4:85:ee:6a:65:be:b6:89:36:f5:3c:52:c4:e1:e8: d3:7b:5b:00:a0:7c:22:95:8f:c0:04:af:15:43:57: e0:77:e1:dd:3d:c8:e2:34:09:66:a7:be:01:ce:c1: 4b:52:b9:a3:46:f3:57:db:99:40:9c:f0:cb:7f:9d: 6d:fc:73:f1:41:5f:44:3e:6d:d4:b9:0e:46:ee:1e: 52:81:8c:56:c5:22:03:c0:0f:af:82:aa:eb:fb:39: 8b:d1:13:9d:20:28:80:f2:cd:2a:f4:9e:73:32:71: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C8:AD:AA:D1:AB:F9:59:3C:4D:1D:40:81:D8:04:CA:74:AF:00:39 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MsitqtGr-Vk8TR1AgdgEynSvADk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.31.0/24 45.138.16.0/24 91.206.169.0/24 Signature Algorithm: sha256WithRSAEncryption b7:e1:77:34:fc:1b:01:b8:1e:22:2a:df:74:be:e2:aa:fd:6d: 9e:09:d9:ff:55:da:51:e2:3e:83:19:bb:ce:51:2c:48:0b:95: 2f:6a:8e:c3:6a:12:d2:39:20:95:02:60:0f:21:27:97:1e:da: 78:a2:c0:b8:9b:80:91:83:ee:18:ce:cd:4f:ce:c0:f2:3e:5a: 6d:ce:1c:1f:11:94:3d:47:25:b3:0f:f9:b8:bf:c5:f2:eb:55: 9d:0f:f5:03:5d:05:d5:9e:fe:5d:55:0d:f8:a9:91:37:bd:fd: ea:85:13:46:6b:03:55:38:93:e9:6b:a1:6d:39:05:d7:0d:5f: de:06:56:79:28:4c:57:7c:a0:9f:2d:5c:a0:03:69:f1:85:08: b0:00:3f:65:c2:b6:5f:6e:5f:45:4a:34:aa:15:7e:8b:42:df: 65:3d:1e:dd:1b:fa:c1:07:26:9e:ee:4f:fb:44:78:53:d4:80: 9c:eb:a2:18:b9:49:e2:84:67:43:75:99:2b:8c:7b:d6:10:11: b5:23:3a:2c:6e:ac:91:2d:79:fd:a5:99:18:3c:ad:da:cf:f6: 38:b5:a0:53:85:9c:75:08:f4:a5:05:f5:7d:8c:ed:8c:de:3b: 13:24:76:0e:24:2a:c1:1a:da:37:cd:ff:52:6a:60:34:1e:da: 09:7c:f8:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pV/0eSEGtuZX07H6irqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmM4YWRhYWQxYWJmOTU5M2M0ZDFkNDA4MWQ4MDRjYTc0YWYwMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIGsQR+Yq/YfJkray+fo2kRK769O m9q+HwXrGlXEsIdRGofeHaxi6X9af721enRdTy2JK4kcUbN71JHH1f2CLrZKBcsI nImdC5lrPZ1Q6BX7V5xQg07ArbFtg2tPeBde/Eae4mkE/EJmG5zCROj0ScCRxRiN TmsQOlUfHDUhg4biw+NJfh/mVZ/EpF8TVVFZMTmu1pz0he5qZb62iTb1PFLE4ejT e1sAoHwilY/ABK8VQ1fgd+HdPcjiNAlmp74BzsFLUrmjRvNX25lAnPDLf51t/HPx QV9EPm3UuQ5G7h5SgYxWxSIDwA+vgqrr+zmL0ROdICiA8s0q9J5zMnET8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDLIrarRq/lZPE0dQIHYBMp0rwA5MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvTXNpdHF0R3ItVms4VFIxQWdkZ0V5blN2QURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV4fAwQA LYoQAwQAW86pMA0GCSqGSIb3DQEBCwUAA4IBAQC34Xc0/BsBuB4iKt90vuKq/W2e Cdn/VdpR4j6DGbvOUSxIC5Uvao7DahLSOSCVAmAPISeXHtp4osC4m4CRg+4Yzs1P zsDyPlptzhwfEZQ9RyWzD/m4v8Xy61WdD/UDXQXVnv5dVQ34qZE3vf3qhRNGawNV OJPpa6FtOQXXDV/eBlZ5KExXfKCfLVygA2nxhQiwAD9lwrZfbl9FSjSqFX6LQt9l PR7dG/rBByae7k/7RHhT1ICc66IYuUnihGdDdZkrjHvWEBG1IzosbqyRLXn9pZkY PK3az/Y4taBThZx1CPSlBfV9jO2M3jsTJHYOJCrBGto3zf9SamA0HtoJfPjk -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client