This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/mzMqmoVSIFuCLCPTGJNgkppjofc.roa File: mzMqmoVSIFuCLCPTGJNgkppjofc.roa (raw, json) Hash identifier: wetUFpoO1LIZACM6xLS3nZwdIp4jjp+fdNMN2abBvwo= Subject key identifier: 9B:33:2A:9A:85:52:20:5B:82:2C:23:D3:18:93:60:92:9A:63:A1:F7 Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da Certificate serial: 019B7E38751776A4805C076B83B6634DA477 Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/mzMqmoVSIFuCLCPTGJNgkppjofc.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20553 IP address blocks: 217.168.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:17:76:a4:80:5c:07:6b:83:b6:63:4d:a4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b332a9a8552205b822c23d3189360929a63a1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:63:49:84:0e:84:fe:05:21:c9:71:91:4c: 24:e4:7e:a5:c0:b2:07:22:b8:6c:c4:d7:37:72:c0: da:4c:66:25:ea:46:2e:bf:57:d3:e3:a8:4e:b7:b9: 58:14:10:42:a4:59:3f:4a:31:86:4f:2c:5a:83:00: 8b:3a:ad:95:96:c3:1a:3d:65:d7:ed:36:56:68:4b: fc:db:4a:e2:ef:39:0e:64:54:06:6c:65:02:c3:4c: a3:11:fc:95:4d:2d:87:fe:df:6c:70:c8:75:24:39: 7e:de:23:dd:df:00:cc:05:30:2d:1f:0e:89:50:3e: 2d:38:ef:9e:97:d1:be:ae:0b:0d:0c:20:d3:8a:5b: d1:50:1f:43:f1:9a:2c:15:e6:ae:e0:1d:c5:3d:50: 3e:5b:09:23:10:03:e6:83:da:0e:21:da:03:88:f5: ed:d1:68:3f:a9:21:e2:3c:18:84:dc:b9:67:7c:e1: 60:f8:26:71:82:5b:f0:ef:63:ff:15:32:62:5a:aa: b0:a1:69:e0:3a:d3:68:a3:78:39:34:71:3b:b5:da: 2c:e2:63:e3:2c:86:cc:7e:47:53:d9:89:1e:87:d9: 5f:b0:60:80:cf:e7:28:f9:e2:23:92:00:9d:cd:72: 4c:d9:12:8b:58:3a:ce:95:26:1c:d7:0f:7b:17:19: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:33:2A:9A:85:52:20:5B:82:2C:23:D3:18:93:60:92:9A:63:A1:F7 X509v3 Authority Key Identifier: keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/mzMqmoVSIFuCLCPTGJNgkppjofc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.168.192.0/20 Signature Algorithm: sha256WithRSAEncryption 22:50:d0:47:7e:e4:4c:3f:ad:f6:5a:11:c9:68:38:e3:c4:28: 08:17:15:b9:b6:ed:23:04:92:a7:17:e7:76:08:b1:75:8b:ca: 87:0b:1e:f3:e4:d3:ea:e1:44:61:ea:22:61:20:07:db:cd:06: 28:a2:18:0d:a1:c6:74:ee:8e:8d:f1:82:05:09:e4:76:d7:53: 43:c8:8c:7e:79:7a:25:d4:11:eb:91:5d:a9:12:29:ab:44:fe: 30:55:5e:9d:23:a5:68:0b:14:d2:26:f2:56:8c:51:7e:46:8f: 17:c1:fc:d1:52:82:b9:52:67:9e:bf:db:dc:04:63:5c:52:6c: 33:22:12:cc:83:7b:b2:86:3a:b1:d5:76:c1:b9:91:a8:6a:69: 2d:23:9e:d7:84:d7:8f:bf:dd:6a:43:1c:76:c4:f7:7d:de:08: 02:86:e6:89:94:c2:39:05:78:c0:d2:a1:f4:f5:ab:8b:4f:98: fc:37:44:f0:72:a7:d3:07:6b:dc:74:30:a1:91:64:cc:ae:7f: 86:1e:10:a5:d4:56:a0:5b:f9:60:bf:2f:06:45:0b:4f:a8:8d: 34:8a:c4:81:f2:58:fa:55:d2:7b:d7:3e:bc:e8:ab:d3:82:fb: f4:8a:a7:7f:aa:b8:cd:2b:a6:e0:d3:cb:d6:c0:d4:38:5a:15: 2c:67:9c:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHUXdqSAXAdrg7ZjTaR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm MTQyZGEwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjMzMmE5YTg1NTIyMDViODIyYzIzZDMxODkzNjA5MjlhNjNhMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizhjSYQOhP4FIclxkUwk5H6lwLIH IrhsxNc3csDaTGYl6kYuv1fT46hOt7lYFBBCpFk/SjGGTyxagwCLOq2VlsMaPWXX 7TZWaEv820ri7zkOZFQGbGUCw0yjEfyVTS2H/t9scMh1JDl+3iPd3wDMBTAtHw6J UD4tOO+el9G+rgsNDCDTilvRUB9D8ZosFeau4B3FPVA+WwkjEAPmg9oOIdoDiPXt 0Wg/qSHiPBiE3LlnfOFg+CZxglvw72P/FTJiWqqwoWngOtNoo3g5NHE7tdos4mPj LIbMfkdT2Ykeh9lfsGCAz+co+eIjkgCdzXJM2RKLWDrOlSYc1w97FxlLFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJszKpqFUiBbgiwj0xiTYJKaY6H3MB8GA1UdIwQY MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt NDViMzQ0M2E3NmY5LzEvbXpNcW1vVlNJRnVDTENQVEdKTmdrcHBqb2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5 LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ajAMA0G CSqGSIb3DQEBCwUAA4IBAQAiUNBHfuRMP632WhHJaDjjxCgIFxW5tu0jBJKnF+d2 CLF1i8qHCx7z5NPq4URh6iJhIAfbzQYoohgNocZ07o6N8YIFCeR211NDyIx+eXol 1BHrkV2pEimrRP4wVV6dI6VoCxTSJvJWjFF+Ro8XwfzRUoK5Umeev9vcBGNcUmwz IhLMg3uyhjqx1XbBuZGoamktI57XhNePv91qQxx2xPd93ggChuaJlMI5BXjA0qH0 9auLT5j8N0TwcqfTB2vcdDChkWTMrn+GHhCl1FagW/lgvy8GRQtPqI00isSB8lj6 VdJ71z686KvTgvv0iqd/qrjNK6bg08vWwNQ4WhUsZ5yp -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:33 2026 by rpki-client