This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa File: gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa (raw, json) Hash identifier: bbsVeB+tsruoiPL39i3dFZ2CIkCF+DrD7yxa7d4IlMo= Subject key identifier: 82:2F:60:D1:A4:9F:D9:2B:F3:17:29:FA:A5:FA:53:E9:ED:3F:41:A7 Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019BA23DBF6C68F15E73F7922607029B0E80 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa Signing time: Fri 09 Jan 2026 10:11:54 +0000 ROA not before: Fri 09 Jan 2026 10:11:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209952 IP address blocks: 45.151.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:3d:bf:6c:68:f1:5e:73:f7:92:26:07:02:9b:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Jan 9 10:11:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=822f60d1a49fd92bf31729faa5fa53e9ed3f41a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:75:44:d1:21:53:33:91:55:24:e9:20:a7: 77:c1:9e:69:7c:56:b4:4c:c7:10:22:94:2c:4e:7f: 53:92:5b:35:09:9b:9a:51:56:23:2a:c4:9e:13:41: 65:f9:72:eb:c1:05:16:92:0c:99:b8:0d:c1:80:fb: 0e:b1:d1:4e:b1:2a:44:78:1d:12:84:a6:ce:93:fb: 01:3e:12:56:32:46:c7:31:df:5c:7c:d6:22:44:35: 93:c6:8b:84:b4:c9:47:98:94:41:82:d2:48:54:ac: 3f:0d:3c:ca:f8:b3:66:c3:4b:7a:e0:49:d3:66:25: 28:68:f9:ac:8a:e7:3b:2b:56:b6:4c:db:86:86:74: 6b:6b:b1:75:bc:08:70:01:e7:fd:0e:15:01:c6:26: eb:c9:b8:94:d1:48:82:ef:1d:5a:dc:b2:c1:b8:25: c4:99:f7:a6:f2:ef:e1:14:06:66:fb:30:da:11:ee: 8b:19:39:bd:3b:48:0d:a2:b1:75:aa:44:1c:26:40: 8d:cb:1a:83:c8:1f:c5:3c:8b:8b:fb:6f:64:b0:29: e2:78:ae:8c:aa:05:32:ea:2d:99:0a:4b:8a:f0:38: 0e:a5:b6:5b:9d:5f:ff:d4:c1:60:18:2c:98:80:11: 5c:f1:64:03:87:58:04:5b:a6:a2:45:e0:f5:f0:2c: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:60:D1:A4:9F:D9:2B:F3:17:29:FA:A5:FA:53:E9:ED:3F:41:A7 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.90.0/24 Signature Algorithm: sha256WithRSAEncryption 02:d5:1b:73:5b:87:6f:cf:79:cd:86:a2:5b:15:a3:08:26:bf: 4a:79:e9:95:01:b2:1f:28:f4:ee:69:26:2f:79:df:63:73:6d: 64:db:a4:9c:56:1f:f7:17:f0:b6:c1:51:c9:9f:44:47:12:78: fd:3d:28:91:a5:0c:bc:67:73:1e:68:1b:2d:4a:86:a4:65:7a: af:4d:4b:5d:fd:ce:d5:5d:61:6c:d7:06:ed:fe:f5:af:93:3d: c3:2c:99:7f:f5:b5:f5:4d:27:69:69:9b:60:cb:aa:12:80:25: 5e:c3:5f:04:96:9b:02:0c:d1:d1:c5:dd:d6:70:62:9a:51:51: c9:1a:50:3b:c8:0f:4a:cc:23:45:a7:37:35:54:43:6e:4a:39: dc:79:f8:ac:85:84:9c:f1:36:4b:70:54:e6:f2:d6:85:fd:85: 5a:21:83:88:ca:8d:53:23:bb:38:50:c5:d9:eb:2c:36:d7:74: 9a:2d:c6:b8:78:44:e4:b0:76:6b:78:86:89:20:53:62:46:08: 8f:ce:ae:50:cd:a7:29:e6:62:57:d0:d9:11:55:fa:6f:4d:0a: 0b:56:a6:7a:4f:a1:53:00:82:00:fe:59:b1:4a:97:5e:aa:65: 7a:91:74:f5:c2:e2:de:74:6f:73:9b:81:49:07:98:55:f5:b5: 4a:12:95:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuiPb9saPFec/eSJgcCmw6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjYwMTA5MTAxMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjJmNjBkMWE0OWZkOTJiZjMxNzI5ZmFhNWZhNTNlOWVkM2Y0MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh51RNEhUzORVSTpIKd3wZ5pfFa0 TMcQIpQsTn9Tkls1CZuaUVYjKsSeE0Fl+XLrwQUWkgyZuA3BgPsOsdFOsSpEeB0S hKbOk/sBPhJWMkbHMd9cfNYiRDWTxouEtMlHmJRBgtJIVKw/DTzK+LNmw0t64EnT ZiUoaPmsiuc7K1a2TNuGhnRra7F1vAhwAef9DhUBxibrybiU0UiC7x1a3LLBuCXE mfem8u/hFAZm+zDaEe6LGTm9O0gNorF1qkQcJkCNyxqDyB/FPIuL+29ksCnieK6M qgUy6i2ZCkuK8DgOpbZbnV//1MFgGCyYgBFc8WQDh1gEW6aiReD18Cxk8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIvYNGkn9kr8xcp+qX6U+ntP0GnMB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvZ2k5ZzBhU2YyU3Z6RnluNnBmcFQ2ZTBfUWFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdaMA0G CSqGSIb3DQEBCwUAA4IBAQAC1RtzW4dvz3nNhqJbFaMIJr9KeemVAbIfKPTuaSYv ed9jc21k26ScVh/3F/C2wVHJn0RHEnj9PSiRpQy8Z3MeaBstSoakZXqvTUtd/c7V XWFs1wbt/vWvkz3DLJl/9bX1TSdpaZtgy6oSgCVew18ElpsCDNHRxd3WcGKaUVHJ GlA7yA9KzCNFpzc1VENuSjncefishYSc8TZLcFTm8taF/YVaIYOIyo1TI7s4UMXZ 6yw213SaLca4eETksHZreIaJIFNiRgiPzq5Qzacp5mJX0NkRVfpvTQoLVqZ6T6FT AIIA/lmxSpdeqmV6kXT1wuLedG9zm4FJB5hV9bVKEpWW -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:18 2026 by rpki-client