This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MzS0a-if8StAwGvSc_KLQZwctYA.roa File: MzS0a-if8StAwGvSc_KLQZwctYA.roa (raw, json) Hash identifier: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE= Subject key identifier: 33:34:B4:6B:E8:9F:F1:2B:40:C0:6B:D2:73:F2:8B:41:9C:1C:B5:80 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F1434EE86D0DFE4A523B85C90E49B1E Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MzS0a-if8StAwGvSc_KLQZwctYA.roa Signing time: Fri 02 Jan 2026 14:19:49 +0000 ROA not before: Fri 02 Jan 2026 14:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199218 IP address blocks: 94.190.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:34:ee:86:d0:df:e4:a5:23:b8:5c:90:e4:9b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3334b46be89ff12b40c06bd273f28b419c1cb580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:13:6f:d6:97:86:ab:7c:1a:aa:a6:b5:5a: 04:99:77:5b:fd:bc:81:98:a5:a0:cc:fe:54:76:d2: 2d:99:4f:72:30:cf:59:c8:aa:60:ec:76:50:fe:6b: 51:63:04:6c:62:b5:b9:21:30:96:e9:08:d4:62:36: 1f:87:d0:20:42:32:aa:2a:4c:4e:14:aa:87:b1:6a: 95:48:6c:e7:9e:8d:64:3e:aa:17:45:5e:85:e7:dc: 8d:60:05:9f:2d:39:ad:1e:87:f5:2f:01:aa:6b:81: 0a:87:5f:aa:3d:37:2a:df:83:6f:3b:ee:5e:05:b0: 63:63:d2:0b:b7:e8:5f:bd:d6:52:ae:b2:ec:17:ac: b2:1c:d3:98:61:4b:74:95:d2:90:9b:58:51:9f:c3: 75:09:64:3d:f4:0d:56:a8:a1:4a:f6:33:cf:cd:b1: fa:74:ef:14:0b:b1:c4:af:a9:d9:28:6d:80:ec:b7: 74:fa:36:db:cd:11:bf:24:cd:a9:06:eb:f6:c8:43: f2:42:a4:b1:19:1a:6a:ce:eb:c4:c4:b3:59:68:e9: 88:c9:af:bb:87:86:7e:74:6c:d3:d9:67:bf:be:42: 48:c1:d1:d8:7a:99:d0:a8:18:62:2a:1d:c0:6c:ff: b8:4e:e0:37:f8:12:a6:0e:d8:fa:3b:90:ac:46:a7: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:B4:6B:E8:9F:F1:2B:40:C0:6B:D2:73:F2:8B:41:9C:1C:B5:80 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/MzS0a-if8StAwGvSc_KLQZwctYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.190.195.0/24 Signature Algorithm: sha256WithRSAEncryption 41:3a:93:fe:c4:b4:48:4d:2f:ba:75:c7:67:ff:73:19:2d:c5: c2:02:f9:87:8c:55:43:b7:7d:b1:de:dd:cb:d3:1a:a5:54:9a: 69:37:1e:5c:92:31:43:ea:81:63:9a:a0:37:3c:88:c1:46:26: c7:d9:0a:0f:11:e0:66:c9:98:49:b8:b4:79:3a:e0:78:7f:0f: df:9f:3f:59:46:bb:d7:06:a6:21:87:4d:1a:07:20:73:98:82: 74:65:86:00:ca:94:62:7f:26:f1:80:68:46:8d:4b:da:7c:aa: f9:f6:62:45:8b:1c:0c:e5:13:9b:33:1d:61:59:51:d2:58:33: 0a:de:0d:0f:bb:ef:9a:88:af:d4:4b:f4:9b:f0:84:05:f8:dd: 0b:31:a8:b7:c3:4e:0d:a0:5a:58:b1:a9:a0:d3:b2:77:c7:97: 27:de:a8:51:f9:54:4b:0c:e3:3b:25:9d:02:37:6e:0a:65:82: b2:69:a4:04:8a:82:47:e0:48:a2:ca:9a:02:76:7e:5e:51:82: f7:6b:3c:5d:31:92:b7:9b:bc:98:43:55:45:37:10:96:2b:96: 4f:2e:a8:f9:62:3c:79:95:20:8d:53:bc:2a:5b:24:f4:1d:fa: bd:67:97:d4:59:80:af:91:f2:4f:b6:54:7d:00:7f:6d:6b:c3: 85:8b:62:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FDTuhtDf5KUjuFyQ5JseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzM0YjQ2YmU4OWZmMTJiNDBjMDZiZDI3M2YyOGI0MTljMWNiNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D4Tb9aXhqt8GqqmtVoEmXdb/byB mKWgzP5UdtItmU9yMM9ZyKpg7HZQ/mtRYwRsYrW5ITCW6QjUYjYfh9AgQjKqKkxO FKqHsWqVSGznno1kPqoXRV6F59yNYAWfLTmtHof1LwGqa4EKh1+qPTcq34NvO+5e BbBjY9ILt+hfvdZSrrLsF6yyHNOYYUt0ldKQm1hRn8N1CWQ99A1WqKFK9jPPzbH6 dO8UC7HEr6nZKG2A7Ld0+jbbzRG/JM2pBuv2yEPyQqSxGRpqzuvExLNZaOmIya+7 h4Z+dGzT2We/vkJIwdHYepnQqBhiKh3AbP+4TuA3+BKmDtj6O5CsRqdldQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDM0tGvon/ErQMBr0nPyi0GcHLWAMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTXpTMGEtaWY4U3RBd0d2U2NfS0xRWndjdFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXr7DMA0G CSqGSIb3DQEBCwUAA4IBAQBBOpP+xLRITS+6dcdn/3MZLcXCAvmHjFVDt32x3t3L 0xqlVJppNx5ckjFD6oFjmqA3PIjBRibH2QoPEeBmyZhJuLR5OuB4fw/fnz9ZRrvX BqYhh00aByBzmIJ0ZYYAypRifybxgGhGjUvafKr59mJFixwM5RObMx1hWVHSWDMK 3g0Pu++aiK/US/Sb8IQF+N0LMai3w04NoFpYsamg07J3x5cn3qhR+VRLDOM7JZ0C N24KZYKyaaQEioJH4EiiypoCdn5eUYL3azxdMZK3m7yYQ1VFNxCWK5ZPLqj5Yjx5 lSCNU7wqWyT0Hfq9Z5fUWYCvkfJPtlR9AH9ta8OFi2KS -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:55 2026 by rpki-client