This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3mscZJwPUhVyJU2FNR2M641Kfw8.roa File: 3mscZJwPUhVyJU2FNR2M641Kfw8.roa (raw, json) Hash identifier: eVhOlzHuE0TCSzoL6zQVvBimgd4QWUzIvNDB0oLW1gk= Subject key identifier: DE:6B:1C:64:9C:0F:52:15:72:25:4D:85:35:1D:8C:EB:8D:4A:7F:0F Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3582FB7C602D9918B5C4958C4F3DEE Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3mscZJwPUhVyJU2FNR2M641Kfw8.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60909 IP address blocks: 85.120.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:82:fb:7c:60:2d:99:18:b5:c4:95:8c:4f:3d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6b1c649c0f521572254d85351d8ceb8d4a7f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:35:2d:42:62:99:6f:a5:1c:88:d2:f2:65: 75:6c:67:d7:9c:b4:c7:50:60:f4:88:2a:1f:6d:bd: f4:b0:f5:fd:e2:3e:7e:55:7a:79:bd:cc:e8:e9:95: af:ef:83:c7:00:87:d3:2a:fd:c0:36:0e:d6:28:78: 83:10:ba:4a:59:0f:3a:5b:91:e0:c7:ec:8e:52:6d: 50:9b:69:49:c1:5e:9a:f7:33:7d:1c:8e:b4:af:bd: 40:9b:96:6f:db:ce:5e:c5:b7:7c:68:2f:07:a2:62: 24:9b:b0:ba:f4:42:94:82:11:11:cc:68:16:af:3b: c3:8b:ff:22:08:b5:ed:24:47:df:81:7a:69:7a:2f: 59:59:19:2e:bb:e0:e1:e8:20:5d:b8:c9:89:76:fe: c4:9c:59:04:95:f3:bf:5f:88:f7:e8:bd:44:ff:1e: b9:4d:7e:bf:62:f4:bb:3c:0b:3f:bc:73:b8:44:d5: 28:e9:0a:08:5f:9f:9d:25:39:b4:3b:f7:ea:a9:5e: 27:ce:6c:22:91:7c:3c:1b:b4:e9:67:6f:d4:ed:19: 5c:50:ee:a6:6d:b4:7b:7f:74:01:9f:6d:76:f6:9e: 5d:dd:3a:aa:fb:b2:92:85:eb:17:af:19:a3:15:d7: 38:17:06:5b:a9:2f:29:a5:82:fe:59:c2:12:56:b9: b3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:1C:64:9C:0F:52:15:72:25:4D:85:35:1D:8C:EB:8D:4A:7F:0F X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3mscZJwPUhVyJU2FNR2M641Kfw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.92.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:9f:4c:5c:7a:7a:35:6a:29:31:ac:5c:d2:b8:60:5e:2c:86: 08:8b:2b:c8:4a:94:a6:7b:08:cc:2a:0e:ac:3d:61:92:90:e7: 2a:61:e0:cd:af:0c:da:61:57:47:b6:c6:d8:4e:46:5d:7c:e0: 08:bd:41:30:ab:4c:04:6d:3d:72:4a:bc:f2:86:63:42:10:87: eb:a8:c8:04:f9:78:a6:d3:0f:7f:b3:6e:2f:f8:53:1f:c2:f0: db:b6:8e:70:d7:fc:1a:35:d8:23:a9:0b:9e:64:7b:54:f8:a0: 40:1a:3b:a8:56:61:7a:c8:61:71:13:65:8f:09:9f:f0:9d:76: f5:fe:0b:df:29:54:ac:c7:b6:50:bf:f0:32:5f:a2:66:63:f7: 8a:e0:48:7d:5d:54:78:8e:62:23:16:95:31:a6:37:85:45:38: 87:6a:02:2f:65:df:3b:94:a5:e6:c5:42:fa:ff:e1:04:4a:fb: 9e:ff:32:b2:60:ff:ea:83:04:0d:a7:ff:73:db:ca:62:f7:61: 83:77:32:92:c7:d8:23:2b:71:77:c1:ed:7c:75:89:70:6b:62: 23:5d:ec:e6:ba:fb:6d:fc:b1:1d:50:a1:45:dd:be:f5:31:1e: cd:0c:40:ca:ca:48:42:e5:39:8e:db:b1:70:ea:a7:2d:86:34: 04:f7:02:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYL7fGAtmRi1xJWMTz3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTZiMWM2NDljMGY1MjE1NzIyNTRkODUzNTFkOGNlYjhkNGE3ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUU1LUJimW+lHIjS8mV1bGfXnLTH UGD0iCofbb30sPX94j5+VXp5vczo6ZWv74PHAIfTKv3ANg7WKHiDELpKWQ86W5Hg x+yOUm1Qm2lJwV6a9zN9HI60r71Am5Zv285exbd8aC8HomIkm7C69EKUghERzGgW rzvDi/8iCLXtJEffgXppei9ZWRkuu+Dh6CBduMmJdv7EnFkElfO/X4j36L1E/x65 TX6/YvS7PAs/vHO4RNUo6QoIX5+dJTm0O/fqqV4nzmwikXw8G7TpZ2/U7RlcUO6m bbR7f3QBn2129p5d3Tqq+7KShesXrxmjFdc4FwZbqS8ppYL+WcISVrmzxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5rHGScD1IVciVNhTUdjOuNSn8PMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvM21zY1pKd1BVaFZ5SlUyRk5SMk02NDFLZnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVXhcMA0G CSqGSIb3DQEBCwUAA4IBAQAdn0xceno1aikxrFzSuGBeLIYIiyvISpSmewjMKg6s PWGSkOcqYeDNrwzaYVdHtsbYTkZdfOAIvUEwq0wEbT1ySrzyhmNCEIfrqMgE+Xim 0w9/s24v+FMfwvDbto5w1/waNdgjqQueZHtU+KBAGjuoVmF6yGFxE2WPCZ/wnXb1 /gvfKVSsx7ZQv/AyX6JmY/eK4Eh9XVR4jmIjFpUxpjeFRTiHagIvZd87lKXmxUL6 /+EESvue/zKyYP/qgwQNp/9z28pi92GDdzKSx9gjK3F3we18dYlwa2IjXezmuvtt /LEdUKFF3b71MR7NDEDKykhC5TmO27Fw6qcthjQE9wJj -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:00 2026 by rpki-client