This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MzrFIPlYg-mxR7IGmm257Nnn5LM.roa File: MzrFIPlYg-mxR7IGmm257Nnn5LM.roa (raw, json) Hash identifier: Pl/pxoEPCaOUSI8L/JvMmBfFmFgd63iIJy5AAQl4f30= Subject key identifier: 33:3A:C5:20:F9:58:83:E9:B1:47:B2:06:9A:6D:B9:EC:D9:E7:E4:B3 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E1DA7655A6153392AE44074412CC Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MzrFIPlYg-mxR7IGmm257Nnn5LM.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39378 IP address blocks: 94.247.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:da:76:55:a6:15:33:92:ae:44:07:44:12:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=333ac520f95883e9b147b2069a6db9ecd9e7e4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:29:02:8f:16:80:9a:a5:83:fa:31:d8:fb: 0c:8f:13:84:3e:c2:26:f5:a6:7c:ee:45:f9:fa:33: 05:7b:1c:35:a0:69:b8:b2:7c:38:eb:38:2d:57:a8: 06:3d:b2:38:31:e7:30:51:68:c9:4f:41:b1:16:70: 0e:f9:c9:d1:a5:9c:d7:b0:c7:94:d3:22:a4:f0:eb: f4:29:be:ab:9b:da:fc:e3:26:df:23:96:2c:51:7d: f8:1f:a9:d1:64:fa:4e:ad:d1:90:ef:43:8d:67:dc: 48:68:6f:ef:3f:c5:0e:90:9e:5e:de:35:2d:f0:bd: 61:66:71:dc:75:b7:8e:0c:62:ad:ab:62:18:21:e6: df:23:81:7b:22:07:a6:38:7a:ec:61:10:56:89:d3: 98:01:cc:53:5e:d8:6b:ae:ad:d6:d8:55:6b:ec:9c: 7e:20:da:dd:0e:a1:82:48:43:65:6a:40:62:a2:f1: 72:f2:4f:b1:f0:06:aa:a7:3d:cb:69:c7:c8:5c:dd: 57:3c:1b:e7:f5:22:ae:e8:28:5e:18:e4:79:bd:00: ba:24:15:63:5d:fe:53:fc:9b:4b:bd:b4:86:d1:a8: be:d6:05:3b:72:ab:94:55:b7:8c:b1:cd:4e:00:09: ba:2e:65:42:b3:5d:1c:00:a4:9c:21:f4:4c:eb:11: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:C5:20:F9:58:83:E9:B1:47:B2:06:9A:6D:B9:EC:D9:E7:E4:B3 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MzrFIPlYg-mxR7IGmm257Nnn5LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.44.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b0:00:37:f0:b0:17:8a:52:88:a6:a6:f9:1f:81:49:31:b6: e0:03:b1:81:b1:3c:a1:62:f2:92:b5:cc:16:16:f9:25:48:47: de:f1:9d:49:e5:b5:ba:2c:09:cc:f8:a8:58:1d:4f:f7:ed:38: 70:ee:6d:a2:49:82:f6:15:53:6e:3e:41:17:9d:75:45:a4:b3: 20:0b:7e:79:1f:79:ed:b2:b4:80:3f:9b:d9:8f:63:57:77:ab: 28:a5:d8:32:b8:62:75:b6:34:b6:1c:5e:cb:b0:f1:78:b5:94: 9e:0d:1e:ae:6f:ab:aa:be:97:58:18:97:be:f7:29:6f:02:da: 22:92:ca:2f:7d:d8:08:66:f3:c0:ef:27:98:e2:4d:14:8a:60: 56:8f:63:98:83:46:32:a7:b9:0d:1d:47:20:06:ef:42:a3:e5: c2:a0:eb:e6:67:d8:5d:81:65:3e:01:2f:cb:c7:c2:97:d2:63: f7:05:34:dd:5e:17:74:0c:42:6b:c0:73:3c:0f:0d:3f:af:60: 1e:4b:aa:6d:04:64:4c:23:47:34:c5:f5:a8:55:52:80:28:ad: c7:b6:85:58:cf:14:f0:65:91:94:a3:e9:9f:2a:7a:f0:53:fe: e9:83:75:dc:36:85:16:e6:c9:d7:91:de:98:44:13:74:cd:24: 8a:df:a6:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOHadlWmFTOSrkQHRBLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzNhYzUyMGY5NTg4M2U5YjE0N2IyMDY5YTZkYjllY2Q5ZTdlNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHMpAo8WgJqlg/ox2PsMjxOEPsIm 9aZ87kX5+jMFexw1oGm4snw46zgtV6gGPbI4MecwUWjJT0GxFnAO+cnRpZzXsMeU 0yKk8Ov0Kb6rm9r84ybfI5YsUX34H6nRZPpOrdGQ70ONZ9xIaG/vP8UOkJ5e3jUt 8L1hZnHcdbeODGKtq2IYIebfI4F7IgemOHrsYRBWidOYAcxTXthrrq3W2FVr7Jx+ INrdDqGCSENlakBiovFy8k+x8Aaqpz3LacfIXN1XPBvn9SKu6CheGOR5vQC6JBVj Xf5T/JtLvbSG0ai+1gU7cquUVbeMsc1OAAm6LmVCs10cAKScIfRM6xEtdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDM6xSD5WIPpsUeyBpptuezZ5+SzMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTXpyRklQbFlnLW14UjdJR21tMjU3Tm5uNUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvcsMA0G CSqGSIb3DQEBCwUAA4IBAQA5sAA38LAXilKIpqb5H4FJMbbgA7GBsTyhYvKStcwW FvklSEfe8Z1J5bW6LAnM+KhYHU/37Thw7m2iSYL2FVNuPkEXnXVFpLMgC355H3nt srSAP5vZj2NXd6sopdgyuGJ1tjS2HF7LsPF4tZSeDR6ub6uqvpdYGJe+9ylvAtoi ksovfdgIZvPA7yeY4k0UimBWj2OYg0Yyp7kNHUcgBu9Co+XCoOvmZ9hdgWU+AS/L x8KX0mP3BTTdXhd0DEJrwHM8Dw0/r2AeS6ptBGRMI0c0xfWoVVKAKK3HtoVYzxTw ZZGUo+mfKnrwU/7pg3XcNoUW5snXkd6YRBN0zSSK36Y/ -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:44 2026 by rpki-client