This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/mzpaYdFOnh67fknlets-KcusWr4.roa File: mzpaYdFOnh67fknlets-KcusWr4.roa (raw, json) Hash identifier: kF0xfsE+o4xiNq+jHxQbRf9whqlGH+HiIj8K0kGs300= Subject key identifier: 9B:3A:5A:61:D1:4E:9E:1E:BB:7E:49:E5:7A:DB:3E:29:CB:AC:5A:BE Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B7F12F81D55C9656EA90A75F556941735 Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/mzpaYdFOnh67fknlets-KcusWr4.roa Signing time: Fri 02 Jan 2026 14:18:28 +0000 ROA not before: Fri 02 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205517 IP address blocks: 185.194.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:f8:1d:55:c9:65:6e:a9:0a:75:f5:56:94:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Jan 2 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b3a5a61d14e9e1ebb7e49e57adb3e29cbac5abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:e0:b1:bc:5c:20:94:89:85:77:73:db:d0: 08:f0:bc:35:70:8b:e0:29:e7:0c:d7:e8:81:26:24: ec:69:14:b5:ec:65:a4:f0:26:7f:fd:69:a9:c3:07: b8:47:6a:e7:9d:8a:5e:dc:6f:00:98:fe:53:cf:08: 03:5a:5d:b7:a9:29:56:52:55:b3:c5:72:47:d4:8e: 65:c7:84:cb:f5:ec:d0:c8:14:63:63:75:33:d2:ee: 64:f3:c2:53:c5:50:26:10:df:c2:d4:67:2c:3f:0e: ea:32:e2:de:94:06:3e:13:ff:b7:26:fb:b4:13:95: 1a:97:0b:17:3a:27:69:04:28:22:bb:da:b6:68:8f: 87:9a:d8:6d:db:4f:27:5a:84:51:6a:dc:33:e6:12: f0:16:57:51:39:f1:7d:d4:01:4d:ec:36:8c:94:03: 5a:1d:4d:49:97:b3:c1:83:28:da:4e:a5:98:31:79: 77:dc:f1:22:03:cb:07:6a:d3:f9:b8:27:04:71:eb: cf:51:3f:53:f7:90:d9:89:23:2a:92:70:1e:12:a8: b1:44:07:51:72:f3:99:1d:bc:f3:0a:f0:db:01:92: c5:64:37:65:cc:d1:0c:2f:ba:1f:a4:ca:02:6c:54: bd:bb:87:32:25:af:d0:ab:ae:9f:aa:de:b2:48:d5: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:5A:61:D1:4E:9E:1E:BB:7E:49:E5:7A:DB:3E:29:CB:AC:5A:BE X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/mzpaYdFOnh67fknlets-KcusWr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.115.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3c:f8:e8:18:8f:89:f7:4a:7a:6d:8c:bd:2f:34:7c:75:bf: 95:8f:6f:48:0a:86:d6:d9:45:ab:d6:35:15:07:14:62:45:ff: af:9f:b5:0f:8d:c5:5e:b6:18:12:96:c1:cd:df:df:90:bd:85: cd:a2:81:95:22:1b:85:8a:a4:ab:d4:a2:28:4a:85:63:58:f1: a3:6b:fb:05:f5:5b:ac:bb:98:14:87:99:73:c9:74:b4:6e:97: c1:d5:20:36:1e:0a:f4:64:4a:1c:56:c3:00:c8:7f:f6:14:49: 9b:6e:e9:9d:fb:3c:42:bd:7b:20:10:6a:26:09:0a:4a:b8:72: 63:75:ae:cf:ea:13:da:8d:dd:6c:e5:5c:4c:fa:ee:e6:10:27: d7:e2:d3:9d:7f:b2:8a:18:31:1c:93:8d:33:8b:e0:6c:39:eb: 2a:4f:5f:8b:0e:29:7b:ad:00:3b:4e:38:0e:7b:61:18:2f:b7: 7d:3d:3c:ec:9b:3a:8c:60:cb:ee:cd:b0:84:5f:55:1a:f1:92: 15:68:b0:1d:2c:8e:cd:f0:8c:bc:03:da:1e:9b:c3:54:3f:98: ae:72:74:6d:7e:5b:04:ea:f7:68:b4:dc:bd:af:1c:ae:80:37: 5c:4e:a1:74:0a:73:a7:a8:f3:61:c0:d0:f6:1f:40:09:7f:95: c6:b8:25:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/EvgdVcllbqkKdfVWlBc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjYwMTAyMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjNhNWE2MWQxNGU5ZTFlYmI3ZTQ5ZTU3YWRiM2UyOWNiYWM1YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0rgsbxcIJSJhXdz29AI8Lw1cIvg KecM1+iBJiTsaRS17GWk8CZ//Wmpwwe4R2rnnYpe3G8AmP5TzwgDWl23qSlWUlWz xXJH1I5lx4TL9ezQyBRjY3Uz0u5k88JTxVAmEN/C1GcsPw7qMuLelAY+E/+3Jvu0 E5UalwsXOidpBCgiu9q2aI+Hmtht208nWoRRatwz5hLwFldROfF91AFN7DaMlANa HU1Jl7PBgyjaTqWYMXl33PEiA8sHatP5uCcEcevPUT9T95DZiSMqknAeEqixRAdR cvOZHbzzCvDbAZLFZDdlzNEML7ofpMoCbFS9u4cyJa/Qq66fqt6ySNUhpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJs6WmHRTp4eu35J5XrbPinLrFq+MB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvbXpwYVlkRk9uaDY3ZmtubGV0cy1LY3VzV3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucJzMA0G CSqGSIb3DQEBCwUAA4IBAQA5PPjoGI+J90p6bYy9LzR8db+Vj29ICobW2UWr1jUV BxRiRf+vn7UPjcVethgSlsHN39+QvYXNooGVIhuFiqSr1KIoSoVjWPGja/sF9Vus u5gUh5lzyXS0bpfB1SA2Hgr0ZEocVsMAyH/2FEmbbumd+zxCvXsgEGomCQpKuHJj da7P6hPajd1s5VxM+u7mECfX4tOdf7KKGDEck40zi+BsOesqT1+LDil7rQA7TjgO e2EYL7d9PTzsmzqMYMvuzbCEX1Ua8ZIVaLAdLI7N8Iy8A9oem8NUP5iucnRtflsE 6vdotNy9rxyugDdcTqF0CnOnqPNhwND2H0AJf5XGuCUY -----END CERTIFICATE-----Generated at Tue Feb 10 10:32:45 2026 by rpki-client