This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/Mz8qnBphricpE-y1NgDJ85UMBGA.roa File: Mz8qnBphricpE-y1NgDJ85UMBGA.roa (raw, json) Hash identifier: D7iDGlfFeVsE7k0g3r151vYQu3PiucDxigC9xAR74QQ= Subject key identifier: 33:3F:2A:9C:1A:61:AE:27:29:13:EC:B5:36:00:C9:F3:95:0C:04:60 Certificate issuer: /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267 Certificate serial: 019B797E5EDDA1F056311F536C4688BEB274 Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/Mz8qnBphricpE-y1NgDJ85UMBGA.roa Signing time: Thu 01 Jan 2026 12:18:03 +0000 ROA not before: Thu 01 Jan 2026 12:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198371 IP address blocks: 176.104.104.0/24 maxlen: 24 176.104.105.0/24 maxlen: 24 176.104.106.0/24 maxlen: 24 176.104.107.0/24 maxlen: 24 176.104.108.0/24 maxlen: 24 176.104.109.0/24 maxlen: 24 176.104.110.0/24 maxlen: 24 176.104.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5e:dd:a1:f0:56:31:1f:53:6c:46:88:be:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=333f2a9c1a61ae272913ecb53600c9f3950c0460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:a1:f0:bd:0b:f7:ee:f0:a0:5e:ca:34:11: c5:40:69:db:57:f1:a5:3b:50:5a:e2:d4:c6:6b:c9: 1d:e6:ad:40:7f:48:aa:7c:e7:90:5a:91:74:1b:64: 13:a8:2a:d2:93:d4:ba:73:dc:fe:ca:73:98:f5:13: ef:b8:b4:42:a4:0b:10:22:46:89:d9:85:ff:02:f6: 9b:ed:f0:e6:3f:b3:22:d5:4b:3b:d0:db:c0:2f:ed: dc:99:96:e9:8f:67:2d:75:c4:d2:25:73:90:c3:c0: e1:c1:b2:3c:cc:e2:f5:d6:61:27:04:e5:08:98:85: be:b6:3c:fb:38:f0:8d:35:a4:00:61:32:b2:de:a1: 07:16:56:97:36:a3:fd:0f:5c:0a:6e:c8:df:d3:fe: a7:b4:20:9c:5c:3d:8b:d9:c4:f5:32:14:d2:d2:1e: 9b:42:39:b8:9a:00:4b:e9:e5:15:17:ed:9d:6c:ea: 31:58:de:be:22:88:43:4b:06:ea:1e:19:62:68:0b: 8f:4d:7a:50:ba:45:58:4a:2b:c4:c5:ef:e5:08:c2: 36:0a:4f:c3:36:10:6f:59:d6:bd:09:67:89:e6:a2: 8d:9f:db:5a:31:10:63:d8:11:6d:ef:2a:af:91:8d: 7e:c3:34:26:54:47:5f:ae:3a:f8:af:f6:84:4c:0a: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3F:2A:9C:1A:61:AE:27:29:13:EC:B5:36:00:C9:F3:95:0C:04:60 X509v3 Authority Key Identifier: keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/Mz8qnBphricpE-y1NgDJ85UMBGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.104.104.0/21 Signature Algorithm: sha256WithRSAEncryption 72:f4:8f:01:b8:b0:ca:4b:86:b3:0a:0b:f7:f9:df:9a:1b:30: f4:14:27:8a:86:dc:57:38:cd:32:02:31:94:92:f2:8f:80:cf: 58:d8:55:93:54:7d:a0:65:7a:39:15:42:ab:23:f3:fe:17:24: 42:df:a5:5f:3f:f1:ab:4e:0b:3c:7f:7d:11:67:f2:b6:88:33: ce:05:96:8e:2a:d7:7c:17:8c:d7:87:a7:f7:78:52:9c:0b:a7: b5:4b:71:45:4f:a2:85:60:e0:92:98:0c:f2:76:20:e6:43:33: 40:b9:66:10:7f:4d:eb:be:a8:aa:0e:77:d5:a7:06:8b:d1:ca: 05:77:02:00:6b:f6:6c:5c:8b:c1:97:e9:56:3a:72:33:4e:39: 8c:6d:a7:c5:12:e1:da:46:ef:9e:ae:8d:86:15:6e:02:7e:3b: 2a:de:c7:ae:ba:63:0f:40:a6:88:f2:7e:3e:96:1a:61:70:1e: 16:42:17:d4:a6:61:06:57:9e:78:cc:f3:4f:c9:62:90:ae:a9: dc:5f:5b:3c:9c:1c:b2:0d:7b:53:1c:a9:a1:6d:9a:d1:f1:71: 43:6b:25:48:1d:4e:36:48:49:9b:a8:14:3e:c1:49:85:dd:10: 3d:5e:e6:26:84:88:e3:1e:d5:fd:ba:f8:40:4c:18:10:00:51: 38:29:30:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fl7dofBWMR9TbEaIvrJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNjJlNmFhNTk0NjZmZTU2MWE5M2FiY2Q0ZGNkZjNkZWE0 ZGMyNjcwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzNmMmE5YzFhNjFhZTI3MjkxM2VjYjUzNjAwYzlmMzk1MGMwNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeh8L0L9+7woF7KNBHFQGnbV/Gl O1Ba4tTGa8kd5q1Af0iqfOeQWpF0G2QTqCrSk9S6c9z+ynOY9RPvuLRCpAsQIkaJ 2YX/Avab7fDmP7Mi1Us70NvAL+3cmZbpj2ctdcTSJXOQw8DhwbI8zOL11mEnBOUI mIW+tjz7OPCNNaQAYTKy3qEHFlaXNqP9D1wKbsjf0/6ntCCcXD2L2cT1MhTS0h6b Qjm4mgBL6eUVF+2dbOoxWN6+IohDSwbqHhliaAuPTXpQukVYSivExe/lCMI2Ck/D NhBvWda9CWeJ5qKNn9taMRBj2BFt7yqvkY1+wzQmVEdfrjr4r/aETAqAuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDM/KpwaYa4nKRPstTYAyfOVDARgMB8GA1UdIwQY MBaAFMBi5qpZRm/lYak6vNTc3z3qTcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEt MjM3M2ExYmE2ZDBiLzEvTXo4cW5CcGhyaWNwRS15MU5nREo4NVVNQkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEtMjM3M2ExYmE2ZDBi LzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsGhoMA0G CSqGSIb3DQEBCwUAA4IBAQBy9I8BuLDKS4azCgv3+d+aGzD0FCeKhtxXOM0yAjGU kvKPgM9Y2FWTVH2gZXo5FUKrI/P+FyRC36VfP/GrTgs8f30RZ/K2iDPOBZaOKtd8 F4zXh6f3eFKcC6e1S3FFT6KFYOCSmAzydiDmQzNAuWYQf03rvqiqDnfVpwaL0coF dwIAa/ZsXIvBl+lWOnIzTjmMbafFEuHaRu+ero2GFW4Cfjsq3seuumMPQKaI8n4+ lhphcB4WQhfUpmEGV554zPNPyWKQrqncX1s8nByyDXtTHKmhbZrR8XFDayVIHU42 SEmbqBQ+wUmF3RA9XuYmhIjjHtX9uvhATBgQAFE4KTCG -----END CERTIFICATE-----Generated at Tue Jan 20 06:56:42 2026 by rpki-client