This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/mstzb26BC_IbEF1cblkahySAWUo.roa File: mstzb26BC_IbEF1cblkahySAWUo.roa (raw, json) Hash identifier: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU= Subject key identifier: 9A:CB:73:6F:6E:81:0B:F2:1B:10:5D:5C:6E:59:1A:87:24:80:59:4A Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019B7A5B5527F72DF68499B20AB35FED73F2 Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/mstzb26BC_IbEF1cblkahySAWUo.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21217 IP address blocks: 193.72.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:55:27:f7:2d:f6:84:99:b2:0a:b3:5f:ed:73:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9acb736f6e810bf21b105d5c6e591a872480594a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:e1:7f:d7:b1:89:38:1b:b8:fd:30:34:77: b9:51:ef:09:47:d1:58:52:13:5a:ad:d0:e1:a6:79: c8:ce:8e:05:6b:80:49:e2:b0:45:4b:98:fb:a1:cd: 26:39:8c:b1:23:9a:5a:3d:3f:a6:bc:21:4c:81:e6: 73:79:6f:12:34:21:db:dc:64:85:9a:0a:a2:b9:f0: 10:2b:fc:e1:84:4d:1b:0b:45:c7:25:dc:db:35:ad: 96:2c:94:64:fc:4a:2c:ab:aa:3c:00:a4:7a:9c:fe: f6:c6:bc:30:1d:5a:c2:ed:4a:06:72:46:20:76:97: 8d:39:c2:14:65:eb:28:c6:04:bd:d6:16:94:51:a1: c0:43:46:86:ca:84:27:08:04:d2:54:34:59:0f:32: c8:06:55:72:8f:33:86:6c:c5:6a:5a:c5:f9:67:67: 3c:5d:b0:cd:1c:24:39:41:f0:14:61:a6:d4:b8:9d: a9:66:76:da:d6:4b:a0:51:75:ec:5b:c7:74:a6:78: 75:12:67:c9:c2:ec:c8:21:09:96:cd:1f:02:b2:90: e7:b4:e5:43:48:47:f0:d2:24:a9:20:48:ad:15:2b: 7e:c5:1f:13:31:08:91:87:c6:1d:9a:6b:61:81:7c: e3:ed:a9:66:d7:8b:17:a8:9f:67:34:14:47:f8:ec: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:73:6F:6E:81:0B:F2:1B:10:5D:5C:6E:59:1A:87:24:80:59:4A X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/mstzb26BC_IbEF1cblkahySAWUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.72.147.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:da:9c:50:47:87:46:e9:5d:b1:d2:5a:cf:de:72:66:75:a7: e7:25:7d:ca:41:7c:88:cd:40:b4:80:8c:91:97:ba:39:05:d9: 92:93:1a:0b:fd:09:16:a8:eb:48:b8:99:cb:f8:68:3c:09:17: 17:76:c3:2e:b8:4e:38:95:cc:16:cf:a4:aa:e2:17:6d:09:50: 69:6c:14:6a:d9:7d:f4:c5:62:a1:f2:16:99:53:4f:cc:b7:8d: 76:66:18:95:6f:1a:9a:bc:28:a3:95:d3:c6:8c:8a:8b:8d:31: 5c:72:d9:00:4e:8a:8c:47:44:2e:be:1d:34:50:ef:13:be:a9: fd:fb:2c:3a:0c:75:3b:a6:8a:86:a5:52:ca:2a:91:31:8f:ba: c9:0d:08:dc:71:8a:42:f8:9e:2b:92:d0:a5:1a:87:1e:e0:f9: 40:85:29:41:ca:64:19:70:60:96:b5:60:37:7e:81:43:a2:13: a6:a9:55:ac:2c:df:99:5e:9f:0c:5b:b5:75:b5:41:89:14:38: e1:5f:ac:a7:aa:8b:c2:ed:6e:16:3e:0a:3a:e8:82:0a:78:f2: 13:5f:b2:90:1d:fc:c5:28:41:2f:2f:8b:ff:49:92:fe:f6:f9: 9e:41:c7:ed:a5:5d:3a:c7:5d:c5:36:73:87:95:ab:82:4d:6f: f2:fb:cb:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1Un9y32hJmyCrNf7XPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWNiNzM2ZjZlODEwYmYyMWIxMDVkNWM2ZTU5MWE4NzI0ODA1OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoLhf9exiTgbuP0wNHe5Ue8JR9FY UhNardDhpnnIzo4Fa4BJ4rBFS5j7oc0mOYyxI5paPT+mvCFMgeZzeW8SNCHb3GSF mgqiufAQK/zhhE0bC0XHJdzbNa2WLJRk/Eosq6o8AKR6nP72xrwwHVrC7UoGckYg dpeNOcIUZesoxgS91haUUaHAQ0aGyoQnCATSVDRZDzLIBlVyjzOGbMVqWsX5Z2c8 XbDNHCQ5QfAUYabUuJ2pZnba1kugUXXsW8d0pnh1EmfJwuzIIQmWzR8CspDntOVD SEfw0iSpIEitFSt+xR8TMQiRh8YdmmthgXzj7alm14sXqJ9nNBRH+OxWHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrLc29ugQvyGxBdXG5ZGockgFlKMB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEvbXN0emIyNkJDX0liRUYxY2Jsa2FoeVNBV1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUiTMA0G CSqGSIb3DQEBCwUAA4IBAQAL2pxQR4dG6V2x0lrP3nJmdafnJX3KQXyIzUC0gIyR l7o5BdmSkxoL/QkWqOtIuJnL+Gg8CRcXdsMuuE44lcwWz6Sq4hdtCVBpbBRq2X30 xWKh8haZU0/Mt412ZhiVbxqavCijldPGjIqLjTFcctkAToqMR0Quvh00UO8Tvqn9 +yw6DHU7poqGpVLKKpExj7rJDQjccYpC+J4rktClGoce4PlAhSlBymQZcGCWtWA3 foFDohOmqVWsLN+ZXp8MW7V1tUGJFDjhX6ynqovC7W4WPgo66IIKePITX7KQHfzF KEEvL4v/SZL+9vmeQcftpV06x13FNnOHlauCTW/y+8vF -----END CERTIFICATE-----Generated at Sat Jan 10 14:04:16 2026 by rpki-client