This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/MGJZDZy48CKe0KFJgl-NtQKce1M.roa File: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (raw, json) Hash identifier: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI= Subject key identifier: 30:62:59:0D:9C:B8:F0:22:9E:D0:A1:49:82:5F:8D:B5:02:9C:7B:53 Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946 Certificate serial: 019B7910FE76AB5BABC3FF835DC176E7C179 Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/MGJZDZy48CKe0KFJgl-NtQKce1M.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61146 IP address blocks: 194.0.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fe:76:ab:5b:ab:c3:ff:83:5d:c1:76:e7:c1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3062590d9cb8f0229ed0a149825f8db5029c7b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:7f:db:33:bb:b7:23:b0:2a:ff:1f:b8:88: 8c:3f:fd:3a:4b:aa:4e:3d:8c:5d:f1:21:f7:1a:8e: f2:a0:42:60:3d:e9:7a:6f:f1:6c:7c:3e:fe:56:e0: 6b:5d:4f:ed:a2:2d:e2:ca:af:fa:93:2a:17:f2:bb: 98:67:6d:25:01:30:06:31:20:44:6f:bd:e5:9a:22: ac:f8:f3:eb:5e:7f:65:68:f7:e8:23:32:77:ff:37: ba:90:03:7c:19:89:64:c2:7a:28:f0:d0:4b:e0:0e: 37:00:5a:a2:5d:1a:a0:b0:a4:fb:d8:eb:4c:b3:f2: 9f:6f:28:ad:5b:e7:cd:14:37:97:0a:9f:b8:4e:61: cc:2c:fc:ad:f3:3d:13:ae:39:dd:dc:99:16:b9:1e: 1d:61:f6:b3:4f:27:13:f7:d0:d2:87:d2:98:47:de: 4d:53:07:03:b3:52:df:22:cf:5e:a8:1c:f1:d2:2b: e2:2b:ba:8e:cb:eb:f5:61:50:85:1d:1a:6a:d8:d5: bd:d7:5e:7b:53:9a:f5:03:a6:08:31:6f:38:ab:48: d0:39:4b:04:02:0b:6c:88:93:0f:39:a4:e9:f3:1a: 42:a1:66:b4:a3:31:26:df:59:e5:d9:a7:d6:69:cc: fa:4d:d0:03:c4:ff:99:d3:52:46:ad:65:13:9f:e9: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:62:59:0D:9C:B8:F0:22:9E:D0:A1:49:82:5F:8D:B5:02:9C:7B:53 X509v3 Authority Key Identifier: keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/MGJZDZy48CKe0KFJgl-NtQKce1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.217.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d1:80:39:82:ab:49:c0:6a:07:ab:f4:29:cf:3e:f2:67:78: 79:73:75:9f:b0:bf:f7:74:ac:e7:48:6f:fb:94:e4:3a:09:de: 5d:35:d6:48:48:f0:b0:7a:f2:f7:4b:fd:0f:c8:2f:fa:7e:1d: f8:3f:4c:93:9d:1d:16:08:b1:9f:a7:e5:75:56:89:b3:3f:57: 1d:e4:f6:d5:6f:80:23:ef:bd:8e:59:f2:7d:7c:61:bb:58:59: 3d:15:bd:39:cd:36:b0:68:be:e0:4a:57:e0:73:c4:e5:d0:de: a3:d9:c9:1a:f8:3b:16:f2:2a:c6:79:37:33:99:2e:13:08:02: a5:67:83:7a:8e:11:16:9b:39:d2:c0:51:f8:a3:70:cf:82:c6: 8f:c7:7e:74:34:4a:e3:a9:95:f0:cf:c2:6d:ff:3f:ce:de:36: 88:af:49:4e:29:dc:2c:3d:88:ac:29:6a:c7:ec:ae:df:0d:66: 14:a5:d3:68:f4:b5:08:19:a6:d4:92:93:33:90:89:38:08:4e: b7:cd:05:d4:b5:32:d3:3f:15:14:54:31:21:e5:d0:86:16:be: a0:6f:e1:b6:aa:0f:bc:05:b2:a8:ae:29:1c:02:e0:da:fe:3f: 4f:ef:fe:33:9e:f7:83:88:44:72:7a:06:1e:8c:65:af:ca:27: 8f:f3:4c:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EP52q1urw/+DXcF258F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5 MWU5NDYwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDYyNTkwZDljYjhmMDIyOWVkMGExNDk4MjVmOGRiNTAyOWM3YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15d/2zO7tyOwKv8fuIiMP/06S6pO PYxd8SH3Go7yoEJgPel6b/FsfD7+VuBrXU/toi3iyq/6kyoX8ruYZ20lATAGMSBE b73lmiKs+PPrXn9laPfoIzJ3/ze6kAN8GYlkwnoo8NBL4A43AFqiXRqgsKT72OtM s/KfbyitW+fNFDeXCp+4TmHMLPyt8z0Trjnd3JkWuR4dYfazTycT99DSh9KYR95N UwcDs1LfIs9eqBzx0iviK7qOy+v1YVCFHRpq2NW91157U5r1A6YIMW84q0jQOUsE AgtsiJMPOaTp8xpCoWa0ozEm31nl2afWacz6TdADxP+Z01JGrWUTn+mDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDBiWQ2cuPAintChSYJfjbUCnHtTMB8GA1UdIwQY MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt Njc1NmY3YjBjMGRiLzEvTUdKWkRaeTQ4Q0tlMEtGSmdsLU50UUtjZTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDZMA0G CSqGSIb3DQEBCwUAA4IBAQBk0YA5gqtJwGoHq/Qpzz7yZ3h5c3WfsL/3dKznSG/7 lOQ6Cd5dNdZISPCwevL3S/0PyC/6fh34P0yTnR0WCLGfp+V1VomzP1cd5PbVb4Aj 772OWfJ9fGG7WFk9Fb05zTawaL7gSlfgc8Tl0N6j2cka+DsW8irGeTczmS4TCAKl Z4N6jhEWmznSwFH4o3DPgsaPx350NErjqZXwz8Jt/z/O3jaIr0lOKdwsPYisKWrH 7K7fDWYUpdNo9LUIGabUkpMzkIk4CE63zQXUtTLTPxUUVDEh5dCGFr6gb+G2qg+8 BbKorikcAuDa/j9P7/4znveDiERyegYejGWvyieP80zx -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:34 2026 by rpki-client