This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MZUJ_YtPrARksG8JiNeh9h5bxjU.roa File: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (raw, json) Hash identifier: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo= Subject key identifier: 31:95:09:FD:8B:4F:AC:04:64:B0:6F:09:88:D7:A1:F6:1E:5B:C6:35 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC7B8D8F5EF5BAE478495A3EE34B4 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MZUJ_YtPrARksG8JiNeh9h5bxjU.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35761 IP address blocks: 185.58.20.0/23 maxlen: 24 185.58.20.0/24 maxlen: 24 185.58.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:b8:d8:f5:ef:5b:ae:47:84:95:a3:ee:34:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=319509fd8b4fac0464b06f0988d7a1f61e5bc635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:fd:52:a0:53:8e:c7:00:9d:33:89:74:c3: 97:3b:17:49:de:9f:4c:db:e0:92:32:ba:7c:1d:55: 39:3f:ba:4c:e7:5e:92:2e:e9:c0:6e:90:b9:2b:96: 8f:23:83:61:cb:3f:da:c0:19:d2:14:5f:99:bd:8b: 3c:14:c2:af:9c:7a:f6:66:37:5a:c7:69:21:b1:8e: 6b:f8:05:4b:ba:13:33:3a:0e:10:f1:43:5d:7b:0b: 50:a8:e1:b3:02:00:14:a2:44:ce:77:01:83:a6:e0: ab:9a:0c:a7:ea:74:1e:92:95:fe:cb:9f:c2:fb:bf: 8b:2b:34:cf:dd:1b:01:15:73:86:f6:34:c6:ed:41: 86:2a:54:bf:c2:6b:0d:44:25:bc:97:d3:fa:8b:86: 28:e5:7d:b8:29:3d:f1:7b:89:f3:bc:dc:8a:ed:e2: d4:af:aa:fb:3d:e2:33:ba:54:7b:50:91:98:c4:6e: 95:b0:2a:fc:03:b0:54:4f:81:3b:28:06:c7:1e:2b: 9c:ed:25:89:93:12:4d:07:23:91:98:51:05:1c:46: 64:45:93:cd:1a:50:7c:53:16:ca:83:a2:8a:f5:56: d0:6a:c1:47:bb:54:cd:b6:8b:d3:d9:ae:56:7e:c9: bb:8e:a9:3c:c2:4c:1a:77:88:16:f1:1a:b6:01:99: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:09:FD:8B:4F:AC:04:64:B0:6F:09:88:D7:A1:F6:1E:5B:C6:35 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MZUJ_YtPrARksG8JiNeh9h5bxjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.20.0/23 Signature Algorithm: sha256WithRSAEncryption 79:16:88:93:7f:62:b6:cf:05:32:2c:28:a4:57:9d:c3:16:2f: 1f:56:f6:b3:6c:e4:93:30:d7:ea:ff:71:81:4e:b6:6b:7f:1c: 6a:99:7c:de:78:bf:ee:e6:80:bb:4a:29:56:18:3c:e5:ab:e5: 2e:89:b1:78:89:f4:cf:73:62:82:17:1e:67:bc:4a:27:0a:f8: 02:96:7c:50:1d:d6:7c:02:25:7a:69:66:24:10:a6:c5:da:d5: 80:67:4c:4c:2d:9f:b8:1e:9a:39:4c:9d:c6:27:06:b0:80:f4: 85:c8:f3:00:fc:fe:a5:e6:74:19:05:18:f6:cb:f9:76:6b:36: 92:b2:8e:96:6b:17:a2:c6:68:df:93:9f:8e:4b:f3:e2:82:92: 90:27:c9:f2:28:5c:51:b7:df:fc:de:78:72:48:53:27:7b:d5: 3f:3a:3c:f6:6a:41:c2:cf:da:62:4f:61:85:c6:53:01:ef:fb: ca:f5:3b:88:e5:cb:b9:68:0a:13:c7:ad:34:9f:e0:49:90:cf: b5:36:04:2e:98:1f:f4:05:17:15:1b:11:f7:54:b3:f0:56:19: df:1f:e3:87:dd:85:54:61:9c:89:69:07:26:1c:0f:33:c9:93: 15:73:6e:3c:16:a0:17:b9:da:0e:f1:e7:fc:17:1d:0e:c9:ee: dc:f3:6f:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ce42PXvW65HhJWj7jS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTk1MDlmZDhiNGZhYzA0NjRiMDZmMDk4OGQ3YTFmNjFlNWJjNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFj9UqBTjscAnTOJdMOXOxdJ3p9M 2+CSMrp8HVU5P7pM516SLunAbpC5K5aPI4Nhyz/awBnSFF+ZvYs8FMKvnHr2Zjda x2khsY5r+AVLuhMzOg4Q8UNdewtQqOGzAgAUokTOdwGDpuCrmgyn6nQekpX+y5/C +7+LKzTP3RsBFXOG9jTG7UGGKlS/wmsNRCW8l9P6i4Yo5X24KT3xe4nzvNyK7eLU r6r7PeIzulR7UJGYxG6VsCr8A7BUT4E7KAbHHiuc7SWJkxJNByORmFEFHEZkRZPN GlB8UxbKg6KK9VbQasFHu1TNtovT2a5Wfsm7jqk8wkwad4gW8Rq2AZn3rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDGVCf2LT6wEZLBvCYjXofYeW8Y1MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvTVpVSl9ZdFByQVJrc0c4SmlOZWg5aDVieGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuToUMA0G CSqGSIb3DQEBCwUAA4IBAQB5FoiTf2K2zwUyLCikV53DFi8fVvazbOSTMNfq/3GB TrZrfxxqmXzeeL/u5oC7SilWGDzlq+UuibF4ifTPc2KCFx5nvEonCvgClnxQHdZ8 AiV6aWYkEKbF2tWAZ0xMLZ+4Hpo5TJ3GJwawgPSFyPMA/P6l5nQZBRj2y/l2azaS so6Waxeixmjfk5+OS/PigpKQJ8nyKFxRt9/83nhySFMne9U/Ojz2akHCz9piT2GF xlMB7/vK9TuI5cu5aAoTx600n+BJkM+1NgQumB/0BRcVGxH3VLPwVhnfH+OH3YVU YZyJaQcmHA8zyZMVc248FqAXudoO8ef8Fx0Oye7c82/5 -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:32 2026 by rpki-client