This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_MTZVIXTzTzSj-PKyIHk99QeYe0.roa File: _MTZVIXTzTzSj-PKyIHk99QeYe0.roa (raw, json) Hash identifier: TMuWHxGqFDL2K/e62i+t9gnxx+pC/f5oQ1b0OPQzGlg= Subject key identifier: FC:C4:D9:54:85:D3:CD:3C:D2:8F:E3:CA:C8:81:E4:F7:D4:1E:61:ED Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A980F975B6CDF5082A5521E151738 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_MTZVIXTzTzSj-PKyIHk99QeYe0.roa Signing time: Fri 02 Jan 2026 06:17:27 +0000 ROA not before: Fri 02 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40940 IP address blocks: 213.176.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:98:0f:97:5b:6c:df:50:82:a5:52:1e:15:17:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcc4d95485d3cd3cd28fe3cac881e4f7d41e61ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:8d:db:15:29:01:bf:04:7e:07:09:a0:4c: 4e:8d:00:73:99:20:f2:64:21:2f:d9:90:e1:b8:b3: 58:78:63:ba:67:6c:f9:a9:4e:4b:e0:e0:fc:03:a7: ce:5d:e9:94:38:bf:1e:2f:af:e7:c5:f3:17:4b:a3: 2c:c8:6e:a4:a6:62:f0:25:b6:c9:f5:73:e5:b6:c4: 36:6f:c2:34:47:19:77:a2:82:a7:a6:97:4e:87:1e: 1c:b8:d0:c4:f2:0d:c7:33:3a:ca:2c:28:51:dc:f0: 42:5e:e3:60:1e:16:b5:d4:26:8b:8f:e4:ec:ed:7c: 41:cb:ce:4c:8b:9b:15:0b:83:7b:23:49:a7:4d:d7: 6f:06:e0:2f:78:db:4d:99:8d:67:58:88:a6:3e:d3: b4:a5:3f:9e:28:32:76:8a:9f:f3:42:eb:db:b3:2a: a6:5f:ee:b1:e6:62:ad:23:08:ad:7f:12:44:ca:4d: 88:b7:74:af:f3:1f:fd:9d:d0:48:c0:49:26:79:9a: 7c:11:7d:12:9d:6d:40:4a:68:7d:b7:f3:97:21:8e: f9:4f:c5:4f:7c:44:52:43:a7:22:d8:49:06:10:ae: 6c:a8:92:7b:49:26:d1:13:4b:08:3a:d5:2b:c6:0b: d8:d6:a2:19:31:5d:6e:7d:92:af:a2:b2:e2:16:80: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:D9:54:85:D3:CD:3C:D2:8F:E3:CA:C8:81:E4:F7:D4:1E:61:ED X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_MTZVIXTzTzSj-PKyIHk99QeYe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.176.73.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:aa:e2:db:54:db:cf:39:66:b5:1b:30:5b:7c:3c:a7:2a:70: 0d:d6:be:16:f0:be:c7:ad:fc:6e:6c:85:eb:06:ac:bd:83:a5: 79:a4:13:48:67:69:44:94:9c:fe:91:21:c0:59:f8:6b:7f:a1: 56:31:a6:14:17:d3:39:84:32:31:97:d5:8b:6a:4c:8c:82:ac: 5b:0d:4c:21:51:53:e3:50:2f:b7:6e:3a:5f:80:39:02:90:fa: 88:70:b1:b4:87:e0:b6:98:c3:40:c0:55:5b:1a:46:c6:d4:e6: e4:07:b1:ec:7c:d8:4b:e2:65:47:e9:37:a7:4e:82:04:35:54: 90:08:e5:bb:3a:1d:46:ae:6c:2c:e5:3d:ab:77:3b:44:1e:d8: db:93:67:cf:84:b9:ff:6d:d0:00:98:64:8c:69:4d:48:12:ac: d6:74:8b:28:18:47:90:8b:39:17:46:47:c6:26:3b:fe:3a:1d: 7d:5e:59:f6:c5:e3:86:c6:52:d9:8f:a2:04:98:94:26:42:a2: 80:5d:ae:e3:28:46:08:c6:2b:14:ea:f6:79:42:4c:8d:88:ae: 84:f2:83:da:cd:cf:4e:27:1b:1c:b5:7b:ff:30:a2:25:50:30: 86:55:8b:79:55:62:cf:b5:d9:19:c9:b6:bf:2b:36:e8:3f:7c: e6:8c:46:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WpgPl1ts31CCpVIeFRc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2M0ZDk1NDg1ZDNjZDNjZDI4ZmUzY2FjODgxZTRmN2Q0MWU2MWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnGN2xUpAb8EfgcJoExOjQBzmSDy ZCEv2ZDhuLNYeGO6Z2z5qU5L4OD8A6fOXemUOL8eL6/nxfMXS6MsyG6kpmLwJbbJ 9XPltsQ2b8I0Rxl3ooKnppdOhx4cuNDE8g3HMzrKLChR3PBCXuNgHha11CaLj+Ts 7XxBy85Mi5sVC4N7I0mnTddvBuAveNtNmY1nWIimPtO0pT+eKDJ2ip/zQuvbsyqm X+6x5mKtIwitfxJEyk2It3Sv8x/9ndBIwEkmeZp8EX0SnW1ASmh9t/OXIY75T8VP fERSQ6ci2EkGEK5sqJJ7SSbRE0sIOtUrxgvY1qIZMV1ufZKvorLiFoAQ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzE2VSF08080o/jysiB5PfUHmHtMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvX01UWlZJWFR6VHpTai1QS3lJSGs5OVFlWWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bBJMA0G CSqGSIb3DQEBCwUAA4IBAQAdquLbVNvPOWa1GzBbfDynKnAN1r4W8L7HrfxubIXr Bqy9g6V5pBNIZ2lElJz+kSHAWfhrf6FWMaYUF9M5hDIxl9WLakyMgqxbDUwhUVPj UC+3bjpfgDkCkPqIcLG0h+C2mMNAwFVbGkbG1ObkB7HsfNhL4mVH6TenToIENVSQ COW7Oh1Grmws5T2rdztEHtjbk2fPhLn/bdAAmGSMaU1IEqzWdIsoGEeQizkXRkfG Jjv+Oh19Xln2xeOGxlLZj6IEmJQmQqKAXa7jKEYIxisU6vZ5QkyNiK6E8oPazc9O JxsctXv/MKIlUDCGVYt5VWLPtdkZyba/KzboP3zmjEZn -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:23 2026 by rpki-client