This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/QsaJUx8IySwAVJKdDaCVAV_WeG8.roa File: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (raw, json) Hash identifier: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4= Subject key identifier: 42:C6:89:53:1F:08:C9:2C:00:54:92:9D:0D:A0:95:01:5F:D6:78:6F Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364B5A7BEE9171E1F47B36820A7411 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/QsaJUx8IySwAVJKdDaCVAV_WeG8.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197759 IP address blocks: 45.131.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:5a:7b:ee:91:71:e1:f4:7b:36:82:0a:74:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42c689531f08c92c0054929d0da095015fd6786f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:4e:42:87:c1:88:ff:c7:2f:fe:36:58:52: 38:ff:69:6a:9c:c1:88:35:4c:0c:fe:c7:c0:71:97: c5:76:2b:ed:53:cf:5e:95:4e:6b:a8:20:b8:8d:e6: c1:30:66:1c:a5:77:68:b9:86:2b:12:71:cf:5d:43: 47:ed:dd:9f:d5:40:4b:f9:5b:3c:4d:93:62:da:c0: 27:9f:1a:f6:e0:62:85:32:14:69:39:36:a4:bb:29: 19:34:e0:8f:ad:8d:59:42:ec:15:ea:08:7c:74:dd: 51:6f:a0:01:00:71:06:1e:cc:62:d9:df:1b:c8:4a: a9:02:a0:eb:c3:01:3d:6b:dc:66:26:fd:18:fb:22: a7:dc:4b:83:20:34:d5:4b:b6:5e:28:8c:65:32:5c: 1a:30:1a:39:d6:e6:d8:c7:41:c9:a2:d3:08:61:44: 37:43:0d:8f:26:3c:f2:59:51:69:81:34:a1:a0:7d: c9:95:c7:20:7e:6b:48:ad:da:1c:78:84:61:f5:72: d3:90:dc:39:37:2f:5c:74:a6:cd:ec:1d:bc:c2:5d: 2b:1b:01:87:8c:5f:ed:08:82:2f:b6:c8:c8:f9:3d: 3a:e5:d4:5b:65:36:09:9b:6b:4a:72:da:2e:c0:02: 94:1f:13:70:3c:64:90:96:3e:83:f9:1e:05:e1:3f: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:89:53:1F:08:C9:2C:00:54:92:9D:0D:A0:95:01:5F:D6:78:6F X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/QsaJUx8IySwAVJKdDaCVAV_WeG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.78.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:01:f2:1c:5c:24:09:2a:47:68:b8:95:2c:03:eb:c1:bb:ee: bf:19:d9:ac:90:88:88:7b:69:f1:6b:5e:fd:20:89:93:db:a1: 43:a3:ae:10:bc:0c:8a:4b:fb:80:73:d2:30:3c:d6:80:69:b9: 3d:9d:4c:80:07:fe:1c:2e:99:66:a3:81:90:4c:24:85:57:9d: b4:3e:cf:02:57:80:fa:d8:45:50:3a:33:b6:bf:3d:fe:9a:e9: c2:51:4b:89:94:73:65:21:55:b1:54:e9:1f:5f:fa:91:10:b4: 99:96:17:3d:9e:9e:32:4e:aa:76:72:b3:87:b6:50:58:6b:7b: c7:1d:3a:ec:fb:0b:ae:87:74:ef:b5:86:7c:72:1a:89:49:b2: be:2f:50:62:7f:29:33:76:a7:5d:f3:ca:31:57:4e:fb:02:0d: f5:c6:c6:26:9c:f4:3d:75:53:cd:4b:a9:20:e2:05:e8:1e:fa: 20:5f:2f:14:b4:61:45:cc:b2:c5:8d:6e:35:5c:bc:b9:35:e1: 69:48:50:f3:7f:f6:75:e6:38:b6:d5:e1:71:36:55:08:80:24: 0a:35:bb:13:a4:eb:cd:ee:6a:c4:82:44:da:91:82:6f:5d:96: ff:95:61:57:89:c4:69:55:61:d9:1b:74:6d:5f:35:06:55:8e: 20:61:b1:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nktae+6RceH0ezaCCnQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmM2ODk1MzFmMDhjOTJjMDA1NDkyOWQwZGEwOTUwMTVmZDY3ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zhOQofBiP/HL/42WFI4/2lqnMGI NUwM/sfAcZfFdivtU89elU5rqCC4jebBMGYcpXdouYYrEnHPXUNH7d2f1UBL+Vs8 TZNi2sAnnxr24GKFMhRpOTakuykZNOCPrY1ZQuwV6gh8dN1Rb6ABAHEGHsxi2d8b yEqpAqDrwwE9a9xmJv0Y+yKn3EuDIDTVS7ZeKIxlMlwaMBo51ubYx0HJotMIYUQ3 Qw2PJjzyWVFpgTShoH3JlccgfmtIrdoceIRh9XLTkNw5Ny9cdKbN7B28wl0rGwGH jF/tCIIvtsjI+T065dRbZTYJm2tKctouwAKUHxNwPGSQlj6D+R4F4T8OfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELGiVMfCMksAFSSnQ2glQFf1nhvMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvUXNhSlV4OEl5U3dBVkpLZERhQ1ZBVl9XZUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYNOMA0G CSqGSIb3DQEBCwUAA4IBAQCaAfIcXCQJKkdouJUsA+vBu+6/GdmskIiIe2nxa179 IImT26FDo64QvAyKS/uAc9IwPNaAabk9nUyAB/4cLplmo4GQTCSFV520Ps8CV4D6 2EVQOjO2vz3+munCUUuJlHNlIVWxVOkfX/qRELSZlhc9np4yTqp2crOHtlBYa3vH HTrs+wuuh3TvtYZ8chqJSbK+L1Bifykzdqdd88oxV077Ag31xsYmnPQ9dVPNS6kg 4gXoHvogXy8UtGFFzLLFjW41XLy5NeFpSFDzf/Z15ji21eFxNlUIgCQKNbsTpOvN 7mrEgkTakYJvXZb/lWFXicRpVWHZG3RtXzUGVY4gYbG4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:55 2026 by rpki-client