This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MZEL1d7Jfi-8XKMTEi-qJOjTWMw.roa File: MZEL1d7Jfi-8XKMTEi-qJOjTWMw.roa (raw, json) Hash identifier: Quj6wNiVMkbeDbRjZTyCx+j15lnahP5nnWM/x3pxAX0= Subject key identifier: 31:91:0B:D5:DE:C9:7E:2F:BC:5C:A3:13:12:2F:AA:24:E8:D3:58:CC Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB64565AD1482A96C6D49AC26E3448 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MZEL1d7Jfi-8XKMTEi-qJOjTWMw.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47125 IP address blocks: 212.46.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:64:56:5a:d1:48:2a:96:c6:d4:9a:c2:6e:34:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31910bd5dec97e2fbc5ca313122faa24e8d358cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:fa:45:33:6d:a9:24:f5:2f:4a:c9:85:b3: a0:66:79:26:4b:bd:e2:8f:79:5e:1c:2c:dd:85:71: be:a1:e1:82:6e:1b:0a:68:f2:f8:c1:b7:f8:b5:df: 98:cf:d3:61:e2:03:09:ef:a6:81:7b:d3:2b:66:08: 3c:a9:f0:5e:63:ae:99:bc:7e:06:2c:df:19:5a:c1: df:22:f9:d8:09:b5:d4:f0:85:74:2e:b4:e6:6f:d3: a0:38:9c:08:11:53:2d:02:39:d4:16:4b:6f:2a:e1: 80:85:db:15:a9:1c:10:85:ac:07:13:38:ca:de:35: 89:c6:07:2d:94:ac:f8:a5:53:92:f1:41:40:3e:79: 87:b1:44:09:a4:a7:d0:5a:26:d5:2b:a6:f0:8a:a9: 33:5a:fa:1c:ce:d2:e3:06:c9:55:9c:12:ca:aa:88: 96:84:91:54:06:af:ac:79:67:b6:0a:ca:04:ab:cb: 0d:fc:c3:0d:d7:64:27:d7:6d:5e:44:4a:0f:26:01: b3:4e:4c:21:7c:ac:54:31:f9:49:e8:1c:16:d9:41: 24:16:05:59:87:35:e0:b2:49:c3:5e:48:5d:ec:35: 07:fc:6d:b5:61:0d:d8:8a:f5:e1:a5:64:c2:d2:3b: 59:45:5d:d4:08:8a:38:77:4d:4f:60:be:b7:e5:d4: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:91:0B:D5:DE:C9:7E:2F:BC:5C:A3:13:12:2F:AA:24:E8:D3:58:CC X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MZEL1d7Jfi-8XKMTEi-qJOjTWMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.32.0/24 Signature Algorithm: sha256WithRSAEncryption 91:5e:26:ca:48:47:bf:8a:e9:37:cc:af:fd:e9:7a:15:c2:e7: 24:71:b2:a0:93:b2:a3:7a:8e:23:ae:0c:a9:22:5c:26:f9:0f: 21:de:97:59:a8:e8:99:c2:2b:49:ff:47:28:65:07:d5:c5:4c: 95:b6:61:59:3b:4b:9b:e9:85:91:a6:ad:7f:b8:87:81:00:97: cb:3e:a0:cb:55:5e:1c:c4:b2:74:92:92:50:0f:27:d4:60:e4: 95:7e:cc:ba:86:6f:1c:86:56:d7:db:61:49:a0:13:6f:e4:57: 41:10:b1:00:dd:fe:bd:4f:3c:4e:fb:9c:df:2b:2e:35:63:88: 4a:99:c1:03:b7:4a:fd:d7:2c:08:e4:5e:ff:c7:12:2b:14:1f: f1:82:dd:2f:94:dd:11:0a:d1:f0:c1:bd:8a:c4:5f:53:fd:3c: 0e:cd:44:e4:8c:d0:77:99:02:16:6c:1e:77:cc:f3:1d:b6:ad: 15:22:11:30:2e:24:80:a8:68:b5:a4:bf:58:c2:88:ac:09:07: cd:b4:00:15:84:82:6d:49:fd:70:87:d1:ad:0c:54:0f:db:45: 8a:52:f4:b2:b7:03:12:5c:ef:a9:45:39:1e:1a:c5:ff:95:b7: 66:24:88:af:a1:89:1b:76:57:9c:cf:4a:eb:da:f3:b8:26:89: df:04:7a:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2RWWtFIKpbG1JrCbjRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTkxMGJkNWRlYzk3ZTJmYmM1Y2EzMTMxMjJmYWEyNGU4ZDM1OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/T6RTNtqST1L0rJhbOgZnkmS73i j3leHCzdhXG+oeGCbhsKaPL4wbf4td+Yz9Nh4gMJ76aBe9MrZgg8qfBeY66ZvH4G LN8ZWsHfIvnYCbXU8IV0LrTmb9OgOJwIEVMtAjnUFktvKuGAhdsVqRwQhawHEzjK 3jWJxgctlKz4pVOS8UFAPnmHsUQJpKfQWibVK6bwiqkzWvocztLjBslVnBLKqoiW hJFUBq+seWe2CsoEq8sN/MMN12Qn121eREoPJgGzTkwhfKxUMflJ6BwW2UEkFgVZ hzXgsknDXkhd7DUH/G21YQ3YivXhpWTC0jtZRV3UCIo4d01PYL635dQaPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDGRC9XeyX4vvFyjExIvqiTo01jMMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvTVpFTDFkN0pmaS04WEtNVEVpLXFKT2pUV013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4gMA0G CSqGSIb3DQEBCwUAA4IBAQCRXibKSEe/iuk3zK/96XoVwuckcbKgk7Kjeo4jrgyp Ilwm+Q8h3pdZqOiZwitJ/0coZQfVxUyVtmFZO0ub6YWRpq1/uIeBAJfLPqDLVV4c xLJ0kpJQDyfUYOSVfsy6hm8chlbX22FJoBNv5FdBELEA3f69TzxO+5zfKy41Y4hK mcEDt0r91ywI5F7/xxIrFB/xgt0vlN0RCtHwwb2KxF9T/TwOzUTkjNB3mQIWbB53 zPMdtq0VIhEwLiSAqGi1pL9YwoisCQfNtAAVhIJtSf1wh9GtDFQP20WKUvSytwMS XO+pRTkeGsX/lbdmJIivoYkbdlecz0rr2vO4JonfBHqy -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:58 2026 by rpki-client