This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa File: MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa (raw, json) Hash identifier: EaKZOSwf60cJtDMMGuhN9/rV4xuZMLDks62/ENEPebA= Subject key identifier: 33:14:9A:FD:8D:76:66:42:96:D7:05:9B:F3:BE:7A:4D:F3:70:FC:0C Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Certificate serial: 019B77C69E11C1897382D6642431C4A6521E Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15664 IP address blocks: 91.213.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:11:c1:89:73:82:d6:64:24:31:c4:a6:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33149afd8d76664296d7059bf3be7a4df370fc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:59:a7:f7:93:a9:45:8b:59:7f:e0:93:bf: 2e:39:88:0a:17:cb:53:2f:5f:98:41:e4:37:7b:10: 22:c0:c5:1b:66:f9:05:dc:34:27:78:60:5c:89:01: cb:e7:73:3b:43:a6:6d:2b:79:83:cd:5d:78:ea:8c: f9:35:a0:88:eb:b6:ec:96:c1:35:16:e3:73:af:5c: c7:04:7d:e3:3a:df:7e:2f:0e:16:00:67:d9:a8:26: 85:10:e5:53:6a:35:0e:3d:da:14:fb:6d:16:2c:ca: 43:e1:98:86:b7:ef:7f:9b:63:64:b2:97:db:b4:3b: fa:d7:64:62:19:d5:fc:b7:8c:ae:28:36:38:22:a5: ca:aa:51:4b:c8:09:6b:0e:21:32:f6:89:dd:f8:0e: 35:da:91:c2:90:8a:c8:eb:c4:de:1d:15:20:47:a6: 0e:5b:b4:4f:e7:28:26:a6:50:b2:90:5e:0c:22:45: a9:c3:16:00:5f:59:97:f5:67:25:b9:bb:3d:70:af: f2:81:e4:d8:b1:f0:5b:88:b2:52:4f:f6:84:44:87: 9c:ff:7b:24:c0:86:f4:2b:96:e4:25:c1:dd:8c:45: 72:4f:9f:59:cd:f7:65:c4:a7:90:7c:0d:4d:7e:0c: bb:84:61:9c:aa:3c:cc:4c:d8:e3:72:93:ec:11:17: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:9A:FD:8D:76:66:42:96:D7:05:9B:F3:BE:7A:4D:F3:70:FC:0C X509v3 Authority Key Identifier: keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.89.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:2e:4f:fe:9e:42:09:d8:7d:56:81:7e:b5:1e:15:36:0e:4f: 0d:56:bd:e5:28:45:b4:54:d0:8f:fe:78:9a:f2:57:48:8d:ad: 69:56:c9:80:2e:9c:2a:70:24:a3:3b:cc:57:49:92:89:06:7e: 44:63:d0:c0:aa:f7:75:e2:7d:01:4f:ad:89:61:21:f0:9d:a1: 6f:66:1e:90:ae:55:d3:61:82:af:21:d8:a2:17:aa:70:64:a4: 84:e5:64:56:02:7d:24:8e:47:f3:8f:63:6c:06:2e:2f:f6:5d: 57:77:ff:0a:2a:2f:af:c4:e1:8f:6e:4f:fb:00:47:cc:2b:cf: ad:41:d0:5e:3c:be:c1:26:c0:ed:17:22:5f:3f:d2:af:d1:0b: 62:dd:66:3e:e2:3b:66:47:87:43:5c:18:39:93:05:a0:59:fa: 3c:bd:d6:a0:19:a4:49:1a:47:9b:d8:47:a6:4d:63:25:c3:ef: eb:6b:09:0a:33:77:47:c6:7d:d4:26:07:c9:56:87:71:f5:f9: e5:7f:b5:63:87:eb:3d:0c:b2:04:6b:76:55:68:d4:96:8b:cc: 07:6d:db:e5:01:5f:d6:96:40:e1:bc:23:84:09:b2:c4:7e:33: 59:8f:2e:40:3c:91:6e:80:dc:c3:4a:73:90:70:8f:e5:c9:d0: 61:52:b6:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xp4RwYlzgtZkJDHEplIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0 NDEwYjcwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzE0OWFmZDhkNzY2NjQyOTZkNzA1OWJmM2JlN2E0ZGYzNzBmYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0JZp/eTqUWLWX/gk78uOYgKF8tT L1+YQeQ3exAiwMUbZvkF3DQneGBciQHL53M7Q6ZtK3mDzV146oz5NaCI67bslsE1 FuNzr1zHBH3jOt9+Lw4WAGfZqCaFEOVTajUOPdoU+20WLMpD4ZiGt+9/m2Nkspfb tDv612RiGdX8t4yuKDY4IqXKqlFLyAlrDiEy9ond+A412pHCkIrI68TeHRUgR6YO W7RP5ygmplCykF4MIkWpwxYAX1mX9Wclubs9cK/ygeTYsfBbiLJST/aERIec/3sk wIb0K5bkJcHdjEVyT59ZzfdlxKeQfA1Nfgy7hGGcqjzMTNjjcpPsERd4XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMUmv2NdmZCltcFm/O+ek3zcPwMMB8GA1UdIwQY MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt MGY4MmMxYmExODA2LzEvTXhTYV9ZMTJaa0tXMXdXYjg3NTZUZk53X0F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2 LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VZMA0G CSqGSIb3DQEBCwUAA4IBAQBMLk/+nkIJ2H1WgX61HhU2Dk8NVr3lKEW0VNCP/nia 8ldIja1pVsmALpwqcCSjO8xXSZKJBn5EY9DAqvd14n0BT62JYSHwnaFvZh6QrlXT YYKvIdiiF6pwZKSE5WRWAn0kjkfzj2NsBi4v9l1Xd/8KKi+vxOGPbk/7AEfMK8+t QdBePL7BJsDtFyJfP9Kv0Qti3WY+4jtmR4dDXBg5kwWgWfo8vdagGaRJGkeb2Eem TWMlw+/rawkKM3dHxn3UJgfJVodx9fnlf7Vjh+s9DLIEa3ZVaNSWi8wHbdvlAV/W lkDhvCOECbLEfjNZjy5APJFugNzDSnOQcI/lydBhUrZD -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:04 2026 by rpki-client