This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mshfArpzUjCOI3VAXt9ofx-FYsU.roa File: mshfArpzUjCOI3VAXt9ofx-FYsU.roa (raw, json) Hash identifier: E4AU/ALB2gm1Ouwc1urgcMRh4bzLaMU2R6VEybB+8q4= Subject key identifier: 9A:C8:5F:02:BA:73:52:30:8E:23:75:40:5E:DF:68:7F:1F:85:62:C5 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759089FC49D854CC85801A095497418 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mshfArpzUjCOI3VAXt9ofx-FYsU.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 84.55.6.0/24 maxlen: 24 84.55.16.0/24 maxlen: 24 84.55.19.0/24 maxlen: 24 84.55.21.0/24 maxlen: 24 84.55.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:9f:c4:9d:85:4c:c8:58:01:a0:95:49:74:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ac85f02ba7352308e2375405edf687f1f8562c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:05:a0:80:fd:57:36:ce:80:06:8c:62:26: 84:dd:67:38:e7:88:db:66:06:e9:a3:d3:c3:bf:f7: b8:94:d8:23:c1:38:15:ba:c6:f2:8d:3b:82:ad:e3: 66:6b:37:86:0e:cb:b3:55:51:67:34:14:00:3f:42: 78:51:77:d5:2f:2b:28:cf:12:72:c6:d8:c4:2c:65: a2:3e:58:97:e1:e8:fe:2a:fb:bf:6e:ce:8a:cb:2b: aa:3d:18:86:9b:6e:39:36:cb:b5:ec:90:58:da:ba: 4d:48:0a:00:26:0d:02:af:6a:e5:94:c1:ac:58:d7: 85:e2:77:09:b4:fe:94:2e:4f:c7:d4:b8:75:d1:ba: d7:69:a8:20:60:15:62:46:72:cf:04:ef:91:1e:1f: 80:25:d6:5f:ea:4d:c4:39:55:97:27:21:88:01:01: b2:ed:d3:38:52:af:be:9d:5e:40:6a:49:ac:fa:18: 8e:34:71:c3:8b:eb:0b:22:55:02:a7:32:a4:80:20: 81:fd:c4:9d:0f:4f:73:8b:98:7a:a3:e5:c9:a3:f5: 5d:6f:b9:4e:e3:23:d7:4a:4d:48:2a:74:10:52:86: 83:48:bd:f4:e6:00:e1:e0:66:b2:15:4c:1b:f0:65: 80:d1:dc:22:f6:08:9f:88:9b:d8:07:ac:3f:d0:33: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:5F:02:BA:73:52:30:8E:23:75:40:5E:DF:68:7F:1F:85:62:C5 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mshfArpzUjCOI3VAXt9ofx-FYsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.6.0/24 84.55.16.0/24 84.55.19.0/24 84.55.21.0/24 84.55.23.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c5:2d:ff:cf:28:d5:3a:e4:3c:d4:71:e0:25:7e:98:04:65: 54:e8:fe:51:77:2f:d1:32:84:dc:c2:de:74:e7:e0:11:a0:88: 11:e0:9e:ef:de:56:f1:de:88:61:70:72:f2:00:88:ed:b2:74: 07:1d:a9:c9:e6:84:91:9b:8b:91:19:f4:02:4b:af:35:08:ce: 0b:8c:b3:80:3d:f2:5b:78:23:ab:25:c6:f9:a4:46:73:21:89: 1c:1e:ca:3c:80:5d:69:8b:40:55:18:8c:92:29:e2:ed:7c:f6: 68:b3:e5:82:52:b4:b6:68:7e:55:65:3d:19:db:5f:99:1b:cb: 08:69:d2:08:7f:68:cd:98:78:5c:ec:7d:27:8b:73:48:13:dc: d9:7d:36:07:69:32:52:25:71:bb:46:71:c0:6e:63:bd:78:26: 3f:cb:35:9b:07:21:c9:42:2a:3c:71:10:d5:3a:bd:31:51:cc: b5:b4:6d:7b:8c:fc:69:de:fe:46:b9:4f:f7:91:53:ae:a0:05: 44:c7:17:25:a3:48:1b:3d:bd:80:30:ff:b5:65:32:42:9d:f7: 9f:14:82:bf:d0:bc:bb:35:ca:bb:57:56:40:26:f3:be:37:c6: b4:71:c3:46:48:21:38:79:c0:9e:ad:cb:8f:b3:17:7d:ea:82: e9:af:8e:98 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WQifxJ2FTMhYAaCVSXQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWM4NWYwMmJhNzM1MjMwOGUyMzc1NDA1ZWRmNjg3ZjFmODU2MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5IFoID9VzbOgAaMYiaE3Wc454jb Zgbpo9PDv/e4lNgjwTgVusbyjTuCreNmazeGDsuzVVFnNBQAP0J4UXfVLysozxJy xtjELGWiPliX4ej+Kvu/bs6KyyuqPRiGm245Nsu17JBY2rpNSAoAJg0Cr2rllMGs WNeF4ncJtP6ULk/H1Lh10brXaaggYBViRnLPBO+RHh+AJdZf6k3EOVWXJyGIAQGy 7dM4Uq++nV5Aakms+hiONHHDi+sLIlUCpzKkgCCB/cSdD09zi5h6o+XJo/Vdb7lO 4yPXSk1IKnQQUoaDSL305gDh4GayFUwb8GWA0dwi9gifiJvYB6w/0DMiowIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJrIXwK6c1IwjiN1QF7faH8fhWLFMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvbXNoZkFycHpVakNPSTNWQVh0OW9meC1GWXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVDcGAwQA VDcQAwQAVDcTAwQAVDcVAwQAVDcXMA0GCSqGSIb3DQEBCwUAA4IBAQCCxS3/zyjV OuQ81HHgJX6YBGVU6P5Rdy/RMoTcwt505+ARoIgR4J7v3lbx3ohhcHLyAIjtsnQH HanJ5oSRm4uRGfQCS681CM4LjLOAPfJbeCOrJcb5pEZzIYkcHso8gF1pi0BVGIyS KeLtfPZos+WCUrS2aH5VZT0Z21+ZG8sIadIIf2jNmHhc7H0ni3NIE9zZfTYHaTJS JXG7RnHAbmO9eCY/yzWbByHJQio8cRDVOr0xUcy1tG17jPxp3v5GuU/3kVOuoAVE xxclo0gbPb2AMP+1ZTJCnfefFIK/0Ly7Ncq7V1ZAJvO+N8a0ccNGSCE4ecCercuP sxd96oLpr46Y -----END CERTIFICATE-----Generated at Wed Jan 21 05:20:39 2026 by rpki-client