This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mzaocvfAO00E0q0MHvgsKRohhzo.roa File: mzaocvfAO00E0q0MHvgsKRohhzo.roa (raw, json) Hash identifier: JRyf6XXzzEfwTyTzAKnQK0bU87Be6689EvQOsi08HEE= Subject key identifier: 9B:36:A8:72:F7:C0:3B:4D:04:D2:AD:0C:1E:F8:2C:29:1A:21:87:3A Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC9ABC316FC51DFFEE6B48B3103B7 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mzaocvfAO00E0q0MHvgsKRohhzo.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56681 IP address blocks: 188.255.146.0/24 maxlen: 24 188.255.169.0/24 maxlen: 24 188.255.173.0/24 maxlen: 24 188.255.184.0/24 maxlen: 24 188.255.221.0/24 maxlen: 24 188.255.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:ab:c3:16:fc:51:df:fe:e6:b4:8b:31:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b36a872f7c03b4d04d2ad0c1ef82c291a21873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:76:f6:1d:c7:c8:f6:a4:f1:b1:1c:c9:c2: 33:b6:5a:74:19:82:20:2a:d7:56:be:d7:cd:62:03: bc:4e:a2:6e:7f:95:8f:f2:66:39:5f:f3:04:f8:c5: f7:b9:81:28:91:37:4c:2b:91:bd:ea:ba:50:93:5d: 04:03:43:98:47:ae:9a:e1:0c:24:ae:05:54:1e:01: ec:a7:ef:69:81:f1:49:ca:e9:9f:71:ae:84:71:0f: 55:b3:8d:26:0f:86:3d:fc:a7:cc:5c:46:07:31:fa: e0:d2:02:d0:27:5b:82:cc:1b:fc:0e:8c:db:55:15: 53:60:72:80:e6:a0:1b:46:68:5d:89:eb:fa:a8:f7: bf:67:ff:33:ee:7e:14:b4:31:cb:30:af:1d:13:75: 0f:b3:c5:16:3d:1c:92:a1:84:f1:15:64:11:8e:e6: a3:6b:57:97:1a:7e:6e:e8:6c:1f:e3:02:2d:1f:27: d1:bb:ce:1e:75:c3:8c:80:53:04:d1:60:37:70:4f: 59:51:ba:f1:28:9a:95:6e:e8:0f:fd:6e:12:4b:2b: 6b:37:3c:a3:5d:45:0b:b1:eb:a8:fb:3f:29:26:6d: 3c:f6:97:57:38:57:f4:bd:80:99:f1:a3:3e:cf:9b: ad:da:7e:6f:dd:0b:a7:b7:71:82:e0:e7:d8:c4:a1: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:36:A8:72:F7:C0:3B:4D:04:D2:AD:0C:1E:F8:2C:29:1A:21:87:3A X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mzaocvfAO00E0q0MHvgsKRohhzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.146.0/24 188.255.169.0/24 188.255.173.0/24 188.255.184.0/24 188.255.221.0/24 188.255.224.0/24 Signature Algorithm: sha256WithRSAEncryption 15:8a:c4:2d:c2:51:1d:5c:f4:e3:85:fd:3a:29:e3:80:2c:46: f0:9f:9a:99:26:ca:40:19:99:0d:5f:ab:7d:b4:59:c1:23:8f: c2:b7:95:69:88:72:9b:cd:76:68:2a:6f:82:09:a9:ae:d3:7d: 61:50:83:53:00:ed:56:a2:4c:bd:72:25:9d:ca:a2:26:2a:55: e1:c7:d6:3d:09:7e:69:16:a9:be:ac:b4:0b:fd:1e:4f:82:79: 9a:ce:04:dc:f1:ac:dc:5d:9a:32:42:61:9f:63:d2:96:3e:a4: e9:e1:7e:7b:e9:66:47:f9:0e:ec:2e:39:93:be:1a:18:64:f1: ef:5c:1d:ff:3f:02:20:d1:3f:b2:0b:2f:c3:52:b7:38:53:ef: 22:c9:5b:77:6d:9b:cb:61:7b:2d:a1:d1:5f:4c:10:48:79:99: 90:56:b9:a7:2e:9f:9c:fc:33:b0:8b:d8:d0:d9:7d:0d:81:68: 19:f1:07:67:4f:07:f4:9a:32:0f:2e:7e:c0:fb:4d:4c:12:4c: 1c:66:2f:bd:8b:78:da:f5:3e:96:37:60:c7:4d:5b:58:42:89: 0d:d0:7c:bb:1b:da:4e:81:dd:a2:06:0b:74:da:3c:98:2b:e2: 59:f9:89:eb:31:71:a2:1a:7b:73:54:f2:36:6c:9b:08:2e:6f: 58:90:71:e4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fsmrwxb8Ud/+5rSLMQO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjM2YTg3MmY3YzAzYjRkMDRkMmFkMGMxZWY4MmMyOTFhMjE4NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo129h3HyPak8bEcycIztlp0GYIg KtdWvtfNYgO8TqJuf5WP8mY5X/ME+MX3uYEokTdMK5G96rpQk10EA0OYR66a4Qwk rgVUHgHsp+9pgfFJyumfca6EcQ9Vs40mD4Y9/KfMXEYHMfrg0gLQJ1uCzBv8Dozb VRVTYHKA5qAbRmhdiev6qPe/Z/8z7n4UtDHLMK8dE3UPs8UWPRySoYTxFWQRjuaj a1eXGn5u6Gwf4wItHyfRu84edcOMgFME0WA3cE9ZUbrxKJqVbugP/W4SSytrNzyj XUULseuo+z8pJm089pdXOFf0vYCZ8aM+z5ut2n5v3Qunt3GC4OfYxKEtKQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJs2qHL3wDtNBNKtDB74LCkaIYc6MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvbXphb2N2ZkFPMDBFMHEwTUh2Z3NLUm9oaHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAvP+SAwQA vP+pAwQAvP+tAwQAvP+4AwQAvP/dAwQAvP/gMA0GCSqGSIb3DQEBCwUAA4IBAQAV isQtwlEdXPTjhf06KeOALEbwn5qZJspAGZkNX6t9tFnBI4/Ct5VpiHKbzXZoKm+C Camu031hUINTAO1Woky9ciWdyqImKlXhx9Y9CX5pFqm+rLQL/R5PgnmazgTc8azc XZoyQmGfY9KWPqTp4X576WZH+Q7sLjmTvhoYZPHvXB3/PwIg0T+yCy/DUrc4U+8i yVt3bZvLYXstodFfTBBIeZmQVrmnLp+c/DOwi9jQ2X0NgWgZ8QdnTwf0mjIPLn7A +01MEkwcZi+9i3ja9T6WN2DHTVtYQokN0Hy7G9pOgd2iBgt02jyYK+JZ+YnrMXGi GntzVPI2bJsILm9YkHHk -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client