This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/MZXVTiNksKGTLq9u4L9cUwgb3IA.roa File: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (raw, json) Hash identifier: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk= Subject key identifier: 31:95:D5:4E:23:64:B0:A1:93:2E:AF:6E:E0:BF:5C:53:08:1B:DC:80 Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Certificate serial: 019B7F852021A59D0AA6EDDE8FB8B5DDFADA Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/MZXVTiNksKGTLq9u4L9cUwgb3IA.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202185 IP address blocks: 91.216.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:20:21:a5:9d:0a:a6:ed:de:8f:b8:b5:dd:fa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3195d54e2364b0a1932eaf6ee0bf5c53081bdc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:fd:82:cb:c2:48:fe:68:21:f7:b3:da:ec: 3c:f2:62:90:34:6a:16:e4:d1:af:da:08:fd:f0:99: b7:78:28:44:57:83:3e:3b:0b:ac:cf:05:e5:cf:03: ce:a4:3b:aa:87:e2:a0:37:77:2b:d8:6f:b4:70:0e: 11:b0:82:0d:5b:86:9d:bb:f7:eb:bb:00:3e:d0:c6: 17:4e:f5:fe:99:fd:5f:3f:5e:d3:ff:3e:f4:aa:b1: 76:47:ea:e7:c7:94:f2:18:0b:a8:94:88:5b:2f:7b: 08:bf:bc:ec:28:97:05:42:58:b8:b3:02:b4:97:14: 5f:f8:d0:a2:f2:e1:69:21:b1:41:15:98:41:3d:c1: 03:9c:cb:ed:f9:86:20:0d:02:bb:ed:84:cd:f0:f6: e1:47:ab:60:6d:79:e6:b5:82:60:2b:91:ce:42:c7: cd:60:3a:15:ca:15:cd:be:0e:5c:03:60:f5:e3:0d: 21:28:56:e4:24:af:b9:f9:d1:7e:a1:67:dc:1a:b8: 6b:ec:75:44:94:0d:26:0b:38:a2:6b:cf:0a:d4:49: 0c:7d:fd:b8:a5:85:70:65:51:eb:a1:94:ba:aa:7d: 3d:9c:c3:28:61:c1:b5:f9:65:0f:63:20:f3:b0:4e: 73:d2:90:fd:f6:b4:04:6f:3d:8a:b0:48:12:a9:a0: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:D5:4E:23:64:B0:A1:93:2E:AF:6E:E0:BF:5C:53:08:1B:DC:80 X509v3 Authority Key Identifier: keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/MZXVTiNksKGTLq9u4L9cUwgb3IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.115.0/24 Signature Algorithm: sha256WithRSAEncryption 19:d7:c2:af:5c:2d:c9:cf:6e:50:22:52:39:76:e2:63:a6:26: 2b:f3:bd:b4:33:0f:de:a4:57:52:03:52:15:f3:e3:75:cf:3e: b8:01:64:9a:4b:eb:18:db:09:70:71:89:a4:84:17:ec:8e:5b: 57:3e:b9:24:66:c6:bc:01:0f:d5:6d:ff:37:45:dc:cb:bb:75: 64:09:bd:58:b6:70:fe:92:b8:3e:df:ee:17:92:48:43:7b:c0: 49:d8:ce:11:ea:ac:9e:07:27:f1:ee:5e:48:cc:39:e5:15:68: e7:de:ea:c6:e7:e0:a9:a6:77:0b:d8:2f:61:60:92:5a:0d:3e: 69:3c:15:d9:b2:b9:05:9a:04:98:cc:f8:ee:d6:a9:fc:3a:f6: 57:6b:46:6b:fe:49:72:17:94:09:a4:f9:39:5e:ee:3e:8d:57: df:c2:2a:6f:22:91:98:58:14:db:88:ef:cb:9a:28:fe:8b:0f: 8a:b5:6a:8a:a6:c0:f7:4e:42:82:ee:21:d7:84:e1:4f:99:90: 3a:eb:75:59:0c:5c:88:99:b3:d3:3d:26:1d:7c:cd:4e:3c:ef: cb:59:02:6f:e6:ac:db:69:01:e9:f2:d6:b2:f4:db:cf:a5:8b: be:1c:1c:a2:f3:d8:1b:b2:15:84:43:32:8b:91:26:57:b4:8e: f9:f4:bd:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hSAhpZ0Kpu3ej7i13fraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj ODY4MWMwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTk1ZDU0ZTIzNjRiMGExOTMyZWFmNmVlMGJmNWM1MzA4MWJkYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC79gsvCSP5oIfez2uw88mKQNGoW 5NGv2gj98Jm3eChEV4M+OwuszwXlzwPOpDuqh+KgN3cr2G+0cA4RsIINW4adu/fr uwA+0MYXTvX+mf1fP17T/z70qrF2R+rnx5TyGAuolIhbL3sIv7zsKJcFQli4swK0 lxRf+NCi8uFpIbFBFZhBPcEDnMvt+YYgDQK77YTN8PbhR6tgbXnmtYJgK5HOQsfN YDoVyhXNvg5cA2D14w0hKFbkJK+5+dF+oWfcGrhr7HVElA0mCziia88K1EkMff24 pYVwZVHroZS6qn09nMMoYcG1+WUPYyDzsE5z0pD99rQEbz2KsEgSqaD1xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDGV1U4jZLChky6vbuC/XFMIG9yAMB8GA1UdIwQY MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt NzM2NjliYTYzZjdjLzEvTVpYVlRpTmtzS0dUTHE5dTRMOWNVd2diM0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hzMA0G CSqGSIb3DQEBCwUAA4IBAQAZ18KvXC3Jz25QIlI5duJjpiYr8720Mw/epFdSA1IV 8+N1zz64AWSaS+sY2wlwcYmkhBfsjltXPrkkZsa8AQ/Vbf83RdzLu3VkCb1YtnD+ krg+3+4XkkhDe8BJ2M4R6qyeByfx7l5IzDnlFWjn3urG5+CppncL2C9hYJJaDT5p PBXZsrkFmgSYzPju1qn8OvZXa0Zr/klyF5QJpPk5Xu4+jVffwipvIpGYWBTbiO/L mij+iw+KtWqKpsD3TkKC7iHXhOFPmZA663VZDFyImbPTPSYdfM1OPO/LWQJv5qzb aQHp8tay9NvPpYu+HByi89gbshWEQzKLkSZXtI759L3K -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:13 2026 by rpki-client