This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MSZK8jrESw3X95DGo6Q6y2gkBQo.roa File: MSZK8jrESw3X95DGo6Q6y2gkBQo.roa (raw, json) Hash identifier: 6fNmmkfO8icQVvyxXKuImPCRc7L84j8jmlRXu+sels8= Subject key identifier: 31:26:4A:F2:3A:C4:4B:0D:D7:F7:90:C6:A3:A4:3A:CB:68:24:05:0A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7133734A21D810A5D22F27EECADA4 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MSZK8jrESw3X95DGo6Q6y2gkBQo.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215563 IP address blocks: 2a0c:9a40:8500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:37:34:a2:1d:81:0a:5d:22:f2:7e:ec:ad:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31264af23ac44b0dd7f790c6a3a43acb6824050a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:79:8c:1f:ca:bc:b0:ef:af:2b:71:4f:18: c9:60:85:79:77:93:1b:cc:52:e9:2d:85:a2:d1:f9: 87:e5:73:ba:a0:de:2a:2f:a6:0b:b0:d0:ce:05:86: 65:2f:9d:5c:fe:9b:5b:51:49:0f:be:d1:be:6d:fc: d8:55:f8:02:bf:84:b6:e9:15:c1:ef:71:ca:5b:d8: e9:39:3d:d1:65:3d:e0:e4:72:75:83:00:1d:95:9d: 88:ea:0d:69:0b:86:6d:ca:34:0f:12:01:63:48:9e: a8:09:82:65:6a:97:1a:8c:f1:4e:5e:4e:ea:2b:d5: 94:61:e0:dc:ea:e6:7a:40:eb:05:a0:e8:d5:40:04: 21:16:7f:17:c1:58:fc:67:f5:7c:2f:75:d0:51:3f: 79:56:f0:5b:33:32:b9:79:8a:74:f7:1f:bd:c1:f6: 98:f7:06:06:14:51:87:be:2c:32:95:4d:5c:fb:b0: c6:73:75:a0:43:a0:02:ad:7a:91:c9:25:ca:25:63: c3:78:7d:33:75:f9:6e:63:d7:5d:df:83:68:90:16: f9:38:1c:9a:bf:a8:47:a0:61:df:fe:b3:42:57:18: 0c:59:0c:79:bd:bf:d3:86:17:00:c9:75:3a:96:84: 69:fb:c7:ef:22:d5:a1:af:7d:a9:41:40:ce:9c:85: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:4A:F2:3A:C4:4B:0D:D7:F7:90:C6:A3:A4:3A:CB:68:24:05:0A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MSZK8jrESw3X95DGo6Q6y2gkBQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8500::/48 Signature Algorithm: sha256WithRSAEncryption a5:58:fc:a5:d1:23:a4:50:f0:6e:d2:78:8c:8a:7e:14:f7:9b: e6:32:db:94:2b:5c:51:62:e3:ea:79:c3:86:0c:19:a3:4d:ee: 61:18:f8:bf:ba:db:3c:6d:68:56:f4:3d:28:94:b0:61:13:cc: c0:89:5f:fa:99:b4:f8:8c:eb:f8:17:e2:e1:c2:4c:2c:47:1f: db:24:2a:33:bc:d9:5c:e2:dc:74:27:35:4a:8b:c3:69:d8:bc: 51:72:b1:01:70:eb:dd:ed:df:ef:eb:d0:86:dc:aa:9e:6d:cc: 75:53:a4:30:af:bb:a5:c2:f0:f2:67:11:99:4f:58:1a:c9:70: a6:62:e9:fc:62:3e:8a:1b:ef:b4:bb:df:75:5c:56:25:29:ed: fc:43:2b:d5:39:87:72:4f:39:09:b1:9f:18:ec:ec:63:96:d5: 4d:49:c8:6b:aa:07:00:04:42:a5:f2:af:d7:88:34:79:ff:ad: c6:ce:3b:d7:dd:8d:58:4b:05:63:1d:92:f3:55:5b:ae:4c:ee: 6a:07:aa:b9:2b:e2:06:35:05:1b:48:75:2f:1a:88:b6:6e:6f: 5a:d7:f0:f2:b6:22:a2:9f:b6:96:b8:b3:40:7b:77:8e:ae:6e: 2d:22:4a:2f:a8:c6:fa:2d:2e:03:a7:4e:31:a4:74:e4:72:a9: 69:3f:66:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxM3NKIdgQpdIvJ+7K2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTI2NGFmMjNhYzQ0YjBkZDdmNzkwYzZhM2E0M2FjYjY4MjQwNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB55jB/KvLDvrytxTxjJYIV5d5Mb zFLpLYWi0fmH5XO6oN4qL6YLsNDOBYZlL51c/ptbUUkPvtG+bfzYVfgCv4S26RXB 73HKW9jpOT3RZT3g5HJ1gwAdlZ2I6g1pC4ZtyjQPEgFjSJ6oCYJlapcajPFOXk7q K9WUYeDc6uZ6QOsFoOjVQAQhFn8XwVj8Z/V8L3XQUT95VvBbMzK5eYp09x+9wfaY 9wYGFFGHviwylU1c+7DGc3WgQ6ACrXqRySXKJWPDeH0zdfluY9dd34NokBb5OBya v6hHoGHf/rNCVxgMWQx5vb/ThhcAyXU6loRp+8fvItWhr32pQUDOnIXZnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDEmSvI6xEsN1/eQxqOkOstoJAUKMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTVNaSzhqckVTdzNYOTVER282UTZ5MmdrQlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIUA MA0GCSqGSIb3DQEBCwUAA4IBAQClWPyl0SOkUPBu0niMin4U95vmMtuUK1xRYuPq ecOGDBmjTe5hGPi/uts8bWhW9D0olLBhE8zAiV/6mbT4jOv4F+LhwkwsRx/bJCoz vNlc4tx0JzVKi8Np2LxRcrEBcOvd7d/v69CG3Kqebcx1U6Qwr7ulwvDyZxGZT1ga yXCmYun8Yj6KG++0u991XFYlKe38QyvVOYdyTzkJsZ8Y7OxjltVNSchrqgcABEKl 8q/XiDR5/63GzjvX3Y1YSwVjHZLzVVuuTO5qB6q5K+IGNQUbSHUvGoi2bm9a1/Dy tiKin7aWuLNAe3eOrm4tIkovqMb6LS4Dp04xpHTkcqlpP2aB -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:36 2026 by rpki-client