This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MSktJCjRKQDGOhyyr4mKUY-X9I0.roa File: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (raw, json) Hash identifier: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc= Subject key identifier: 31:29:2D:24:28:D1:29:00:C6:3A:1C:B2:AF:89:8A:51:8F:97:F4:8D Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347F23338CD0E7F04FB46DD18A9F06 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MSktJCjRKQDGOhyyr4mKUY-X9I0.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152700 IP address blocks: 45.149.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7f:23:33:8c:d0:e7:f0:4f:b4:6d:d1:8a:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31292d2428d12900c63a1cb2af898a518f97f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:f7:8d:33:fc:62:19:d5:93:25:dc:71:73: 86:90:00:6c:e2:c2:74:f3:cb:9d:62:ea:8d:7a:16: 66:2e:ec:eb:a8:94:55:ca:98:27:c9:e1:cd:20:d7: f9:fe:a1:69:0e:34:88:f7:b7:e3:13:68:5c:66:14: b9:92:fb:7f:9d:28:cb:6f:ec:41:75:b8:13:9a:9e: 43:44:ea:81:cd:52:72:f8:0a:7e:f1:83:0c:a4:27: 4f:38:5a:d1:b8:16:1b:dc:af:97:77:f5:dc:60:78: ac:f7:cf:43:9e:08:4c:24:46:d3:f9:95:23:86:e2: a3:4b:41:b8:f6:a4:c8:b0:bc:0f:dd:be:7b:d9:ab: ad:66:79:b5:3c:cf:96:fa:45:70:a0:7f:d0:fb:19: 5b:ae:71:e5:95:db:4d:70:da:92:d0:fa:ee:3e:f2: a1:92:03:13:da:58:ed:75:cb:f9:97:5c:bf:99:8b: 83:b6:65:8a:08:fe:fe:05:61:c3:a7:51:3b:1f:64: 5d:22:ff:f3:ab:8c:45:9c:c5:79:b5:fc:cd:1a:d8: db:c4:f8:13:fd:a3:a2:fa:ce:5b:44:32:1c:c8:a5: c3:05:46:5f:f0:5c:1a:29:7b:8d:57:84:04:09:83: 85:c9:3b:f4:f2:0b:80:7a:fc:40:33:3c:7c:76:a4: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:2D:24:28:D1:29:00:C6:3A:1C:B2:AF:89:8A:51:8F:97:F4:8D X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/MSktJCjRKQDGOhyyr4mKUY-X9I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.6.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:86:b6:8e:19:1f:fb:2e:1a:37:19:7c:0c:b4:57:00:91:5f: dc:78:b6:d9:7d:b8:b1:2c:96:a3:ed:98:55:c0:cd:bf:83:de: a3:7e:f9:fe:8a:b1:44:24:0c:06:ef:88:88:01:15:04:e4:6b: 8b:e6:51:b5:53:03:2a:b4:1b:46:b1:b2:3c:f3:5d:58:80:92: c4:f2:95:88:8f:60:8a:af:25:d2:0e:c5:c9:58:df:5d:59:d1: 53:0e:de:6d:6e:f6:ec:cd:dc:2c:bb:39:51:bb:cd:4e:50:27: 66:03:ba:1c:ab:70:c4:30:14:26:e1:b7:f7:de:c6:b7:89:44: 13:e4:f1:b1:74:e6:80:96:12:ba:f7:be:6c:73:5b:37:28:25: df:81:cc:99:45:f3:ca:e4:17:71:8d:62:89:67:d8:97:d7:f3: 52:be:45:46:1a:2e:ea:b5:28:8a:39:c8:63:67:81:77:9e:f1: 32:ca:b6:27:7e:99:d5:dd:19:16:4b:4b:16:10:57:76:63:0d: 1c:c0:58:26:d6:94:1b:7c:61:62:8a:13:e2:13:0e:b3:e8:1c: ad:13:52:95:b6:fb:86:2c:97:4c:17:64:24:d1:13:84:69:d9: 65:91:94:fa:7a:e3:a5:0c:aa:56:a1:91:2b:24:15:08:49:b9: 32:76:f1:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NH8jM4zQ5/BPtG3Rip8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTI5MmQyNDI4ZDEyOTAwYzYzYTFjYjJhZjg5OGE1MThmOTdmNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyP3jTP8YhnVkyXccXOGkABs4sJ0 88udYuqNehZmLuzrqJRVypgnyeHNINf5/qFpDjSI97fjE2hcZhS5kvt/nSjLb+xB dbgTmp5DROqBzVJy+Ap+8YMMpCdPOFrRuBYb3K+Xd/XcYHis989DnghMJEbT+ZUj huKjS0G49qTIsLwP3b572autZnm1PM+W+kVwoH/Q+xlbrnHlldtNcNqS0PruPvKh kgMT2ljtdcv5l1y/mYuDtmWKCP7+BWHDp1E7H2RdIv/zq4xFnMV5tfzNGtjbxPgT /aOi+s5bRDIcyKXDBUZf8FwaKXuNV4QECYOFyTv08guAevxAMzx8dqRs6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEpLSQo0SkAxjocsq+JilGPl/SNMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvTVNrdEpDalJLUURHT2h5eXI0bUtVWS1YOUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUGMA0G CSqGSIb3DQEBCwUAA4IBAQBahraOGR/7Lho3GXwMtFcAkV/ceLbZfbixLJaj7ZhV wM2/g96jfvn+irFEJAwG74iIARUE5GuL5lG1UwMqtBtGsbI8811YgJLE8pWIj2CK ryXSDsXJWN9dWdFTDt5tbvbszdwsuzlRu81OUCdmA7ocq3DEMBQm4bf33sa3iUQT 5PGxdOaAlhK6975sc1s3KCXfgcyZRfPK5BdxjWKJZ9iX1/NSvkVGGi7qtSiKOchj Z4F3nvEyyrYnfpnV3RkWS0sWEFd2Yw0cwFgm1pQbfGFiihPiEw6z6BytE1KVtvuG LJdMF2Qk0ROEadllkZT6euOlDKpWoZErJBUISbkydvE1 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:57 2026 by rpki-client