This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa File: MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa (raw, json) Hash identifier: cWyQP57tffmbuPRh8jXrqPR/aGo4VRBu/ka+8DAvu8Q= Subject key identifier: 33:30:A9:FC:48:5D:1D:CA:4A:3E:1B:C3:A6:E3:A0:79:3F:30:38:64 Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9 Certificate serial: 019B7BA4DD8687B07FA721A49ACE6E258A58 Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35676 IP address blocks: 178.213.64.0/22 maxlen: 24 178.213.68.0/22 maxlen: 24 185.16.252.0/22 maxlen: 24 194.5.88.0/23 maxlen: 24 195.234.36.0/24 maxlen: 24 2a03:6f80::/32 maxlen: 33 2a03:6f80:100::/40 maxlen: 40 2a03:6f80:200::/40 maxlen: 40 2a03:6f80:300::/40 maxlen: 40 2a03:6f80:400::/40 maxlen: 40 2a03:6f80:500::/40 maxlen: 40 2a03:6f80:600::/40 maxlen: 40 2a03:6f80:700::/40 maxlen: 40 2a03:6f80:800::/40 maxlen: 40 2a03:6f80:900::/40 maxlen: 40 2a03:6f81::/32 maxlen: 33 2a03:6f81::/40 maxlen: 40 2a03:6f81:100::/40 maxlen: 40 2a03:6f81:200::/40 maxlen: 40 2a03:6f81:300::/40 maxlen: 40 2a03:6f81:400::/40 maxlen: 40 2a03:6f81:500::/40 maxlen: 40 2a03:6f81:600::/40 maxlen: 40 2a03:6f81:700::/40 maxlen: 40 2a03:6f82::/32 maxlen: 33 2a03:6f82:100::/40 maxlen: 40 2a03:6f82:200::/40 maxlen: 40 2a03:6f82:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dd:86:87:b0:7f:a7:21:a4:9a:ce:6e:25:8a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3330a9fc485d1dca4a3e1bc3a6e3a0793f303864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:d5:e0:a1:e2:16:7a:96:d3:d1:79:ff:55: ce:ad:78:de:0b:a3:df:bf:92:e8:fa:f9:23:fd:12: c2:04:58:c5:af:1e:f5:87:8e:d0:17:21:56:41:a2: c6:98:19:f5:13:f2:de:57:d2:40:93:a1:91:4e:57: d7:df:86:cc:1a:ec:b2:0c:9c:7a:0f:e9:76:99:a5: cd:6d:e5:02:94:b9:e7:1a:63:26:16:3c:69:6e:ce: de:4c:81:f8:42:b5:92:d8:12:35:94:5c:2f:48:e7: ed:1b:7a:80:3b:0f:7f:df:99:60:b7:44:4a:92:30: 9e:87:6c:d9:42:b7:57:09:6b:e2:b5:c6:6f:19:83: 51:5b:1f:d5:a5:69:64:f6:61:79:69:1e:75:ab:76: 0d:53:cb:af:97:9a:94:96:57:85:fa:01:92:d8:67: 03:63:be:cc:20:a6:50:28:a9:84:40:7c:68:0d:de: 4e:5c:fa:b2:ae:78:8f:c0:c2:87:95:67:bb:fc:a0: 9d:1c:e9:43:44:a3:8f:ee:51:1c:61:ca:95:49:ae: 47:af:27:65:39:24:cc:4e:26:b0:7f:19:68:25:fb: f1:61:27:f4:c0:4e:11:1b:ad:d6:e8:db:8e:e4:92: fe:11:dc:b6:38:cf:e0:ad:04:9a:cf:00:0c:02:81: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:30:A9:FC:48:5D:1D:CA:4A:3E:1B:C3:A6:E3:A0:79:3F:30:38:64 X509v3 Authority Key Identifier: keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.64.0/21 185.16.252.0/22 194.5.88.0/23 195.234.36.0/24 IPv6: 2a03:6f80::-2a03:6f82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:4c:30:af:2e:52:ec:7f:7d:40:13:1a:8e:b7:cb:c3:a6:e0: 25:a5:29:7f:8c:fe:9b:73:ce:ec:59:df:3d:47:af:55:6b:95: 4e:87:e2:47:32:4f:ae:df:28:fb:65:ca:83:58:a4:77:85:58: 96:fc:b1:84:43:9e:b9:c4:73:33:61:3d:4f:f4:dc:cc:23:7c: 04:45:c3:0f:f0:11:86:1a:13:71:86:73:7a:c1:cc:9d:d9:16: 72:9f:dc:e4:b9:6d:7d:a3:76:b3:a5:94:ee:5c:81:90:64:ed: 55:70:9a:f0:d5:6e:6a:a4:7e:f0:76:2a:b2:ee:af:a3:6f:3b: a4:82:92:1b:d9:f3:a2:32:63:cb:67:78:98:07:6c:04:38:f9: 61:67:19:0f:78:17:11:79:7f:6a:a8:55:d8:94:fe:ee:38:bc: 9f:f0:ca:7c:62:eb:23:cf:b2:38:45:93:6d:b6:74:d3:ac:45: a9:9e:c1:bc:eb:75:66:34:57:fb:c6:49:99:67:da:23:ef:1c: 4e:2e:ce:25:34:06:a3:02:9f:f0:cc:c0:cb:3d:ac:07:13:9d: ee:2d:cc:b3:13:38:84:6c:49:6d:c6:e9:f6:cd:30:c3:c0:06: b1:27:c8:32:71:86:47:25:b5:6f:cb:8a:dc:bf:d9:fe:4a:16: 7f:71:2b:c3 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7pN2Gh7B/pyGkms5uJYpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTQ0ZWVlYTI2NTY5ZDBkZGJkMGU4NjM3ZjEyY2Y1MDVh NGVkZTkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzMwYTlmYzQ4NWQxZGNhNGEzZTFiYzNhNmUzYTA3OTNmMzAzODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfV4KHiFnqW09F5/1XOrXjeC6Pf v5Lo+vkj/RLCBFjFrx71h47QFyFWQaLGmBn1E/LeV9JAk6GRTlfX34bMGuyyDJx6 D+l2maXNbeUClLnnGmMmFjxpbs7eTIH4QrWS2BI1lFwvSOftG3qAOw9/35lgt0RK kjCeh2zZQrdXCWvitcZvGYNRWx/VpWlk9mF5aR51q3YNU8uvl5qUlleF+gGS2GcD Y77MIKZQKKmEQHxoDd5OXPqyrniPwMKHlWe7/KCdHOlDRKOP7lEcYcqVSa5Hrydl OSTMTiawfxloJfvxYSf0wE4RG63W6NuO5JL+Edy2OM/grQSazwAMAoFSVQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDMwqfxIXR3KSj4bw6bjoHk/MDhkMB8GA1UdIwQY MBaAFEnkTu6iZWnQ3b0OhjfxLPUFpO3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEt ZjBjNGJlOGUyNDBhLzEvTXpDcF9FaGRIY3BLUGh2RHB1T2dlVDh3T0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEtZjBjNGJlOGUyNDBh LzEvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQDstVAAwQC uRD8AwQBwgVYAwQAw+okMBYEAgACMBAwDgMFByoDb4ADBQAqA2+CMA0GCSqGSIb3 DQEBCwUAA4IBAQAATDCvLlLsf31AExqOt8vDpuAlpSl/jP6bc87sWd89R69Va5VO h+JHMk+u3yj7ZcqDWKR3hViW/LGEQ565xHMzYT1P9NzMI3wERcMP8BGGGhNxhnN6 wcyd2RZyn9zkuW19o3azpZTuXIGQZO1VcJrw1W5qpH7wdiqy7q+jbzukgpIb2fOi MmPLZ3iYB2wEOPlhZxkPeBcReX9qqFXYlP7uOLyf8Mp8Yusjz7I4RZNttnTTrEWp nsG863VmNFf7xkmZZ9oj7xxOLs4lNAajAp/wzMDLPawHE53uLcyzEziEbEltxun2 zTDDwAaxJ8gycYZHJbVvy4rcv9n+ShZ/cSvD -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:39 2026 by rpki-client