This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa File: mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa (raw, json) Hash identifier: 7MjOgwhf1xPnvfegvDmAvTWCavPasFV1fKSbjNEHbXM= Subject key identifier: 9A:DF:00:1E:86:0B:B7:79:AF:AA:02:1F:45:9A:78:43:01:F7:BB:5C Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced Certificate serial: 019B7E376294819C3400DD205D53D4457424 Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207117 IP address blocks: 45.152.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:62:94:81:9c:34:00:dd:20:5d:53:d4:45:74:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9adf001e860bb779afaa021f459a784301f7bb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:8e:a5:a9:16:3a:3d:d7:64:e6:89:77:9c: 21:c4:00:53:85:fd:b2:cb:53:65:a4:64:f2:66:b0: 7b:e9:6a:d5:fb:df:1e:26:d1:b3:e5:7d:ef:c1:0a: 59:34:12:d4:0c:39:f2:09:a4:98:43:0b:b8:a1:06: f4:28:cf:2f:d8:27:84:c0:05:ee:40:03:43:76:65: 04:c5:38:85:3a:58:08:ba:e8:a8:fa:a3:3d:a6:f4: 83:2c:30:e2:b1:a6:3b:24:c1:3f:8d:98:0c:34:b4: 56:73:a1:66:a0:48:bd:f4:55:86:a4:ca:20:4c:67: 5e:05:08:3c:c8:83:fb:61:4e:9c:4a:c8:cf:ec:70: 8e:1c:4a:85:7a:7e:a6:3b:48:f5:da:c0:fd:e0:43: 94:fa:07:87:43:ee:94:54:05:2f:a2:70:16:0a:b9: 4d:3b:31:81:5c:95:2d:2b:ba:72:61:b4:05:b1:11: cc:b6:be:4f:b4:1f:04:c9:0c:15:f0:98:b3:8f:46: 69:25:37:c7:e6:c6:6b:06:be:f9:d3:f1:3a:4d:16: 97:73:14:4f:a7:52:d5:2c:42:4f:3e:63:24:a6:f5: a0:61:f7:65:04:96:ec:2f:ba:74:a2:63:0d:c3:06: 5b:ce:3b:f9:c0:9f:04:63:fc:9f:25:cd:59:c4:51: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DF:00:1E:86:0B:B7:79:AF:AA:02:1F:45:9A:78:43:01:F7:BB:5C X509v3 Authority Key Identifier: keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.78.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:3f:49:c8:78:2d:02:79:16:6f:60:d5:f6:88:ba:1c:e6:31: ac:3c:6d:50:d3:a3:23:7d:23:e4:6f:ee:c7:f3:e0:f8:e6:87: 0b:3b:d1:31:59:f0:38:a6:ee:d4:dc:e4:74:f6:a3:77:6e:cf: a0:b1:e8:ba:be:17:5a:b5:da:4e:3f:4a:0c:26:8f:a2:d4:d4: 53:33:f2:16:07:60:d8:6b:f3:bb:c3:da:c9:58:9f:32:98:30: 74:f9:25:53:d6:22:83:44:f1:4a:36:c0:4b:22:05:e4:e2:84: 13:15:30:6a:83:80:2c:b2:bc:1e:22:59:71:c3:2d:4d:b2:ca: ea:b1:b7:96:fa:6e:0d:2e:a4:f8:63:88:8c:35:87:4d:39:5f: 79:17:12:b6:c8:ff:ba:d3:14:bc:58:c8:c4:f7:59:b1:ce:4e: 3d:60:b6:49:e6:cf:2f:7b:a7:a3:90:fe:ba:2c:67:6f:e6:49: 34:b7:bd:65:f9:46:79:5a:60:62:eb:f7:30:24:f6:bb:59:8c: 08:ae:15:e2:95:aa:b2:92:c4:60:ee:6c:f6:39:5a:2c:79:fa: c0:37:fe:82:67:3a:72:25:83:2b:02:41:0a:1e:68:71:22:d3: ca:53:0c:87:b6:9f:bc:70:1c:35:81:aa:c4:bc:a4:ca:65:6c: 3d:99:17:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2KUgZw0AN0gXVPURXQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh YWZjZWQwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWRmMDAxZTg2MGJiNzc5YWZhYTAyMWY0NTlhNzg0MzAxZjdiYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldqOpakWOj3XZOaJd5whxABThf2y y1NlpGTyZrB76WrV+98eJtGz5X3vwQpZNBLUDDnyCaSYQwu4oQb0KM8v2CeEwAXu QANDdmUExTiFOlgIuuio+qM9pvSDLDDisaY7JME/jZgMNLRWc6FmoEi99FWGpMog TGdeBQg8yIP7YU6cSsjP7HCOHEqFen6mO0j12sD94EOU+geHQ+6UVAUvonAWCrlN OzGBXJUtK7pyYbQFsRHMtr5PtB8EyQwV8Jizj0ZpJTfH5sZrBr750/E6TRaXcxRP p1LVLEJPPmMkpvWgYfdlBJbsL7p0omMNwwZbzjv5wJ8EY/yfJc1ZxFFjrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrfAB6GC7d5r6oCH0WaeEMB97tcMB8GA1UdIwQY MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt MWIyNDQ4NGU1NWVjLzEvbXQ4QUhvWUx0M212cWdJZlJacDRRd0gzdTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZhOMA0G CSqGSIb3DQEBCwUAA4IBAQCMP0nIeC0CeRZvYNX2iLoc5jGsPG1Q06MjfSPkb+7H 8+D45ocLO9ExWfA4pu7U3OR09qN3bs+gsei6vhdatdpOP0oMJo+i1NRTM/IWB2DY a/O7w9rJWJ8ymDB0+SVT1iKDRPFKNsBLIgXk4oQTFTBqg4AssrweIllxwy1Nssrq sbeW+m4NLqT4Y4iMNYdNOV95FxK2yP+60xS8WMjE91mxzk49YLZJ5s8ve6ejkP66 LGdv5kk0t71l+UZ5WmBi6/cwJPa7WYwIrhXilaqyksRg7mz2OVosefrAN/6CZzpy JYMrAkEKHmhxItPKUwyHtp+8cBw1garEvKTKZWw9mRft -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:51 2026 by rpki-client