This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/mzscA40zEoiH9Kq_9VBI19qX6D0.roa
File: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (raw, json)
Hash identifier: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=
Subject key identifier: 9B:3B:1C:03:8D:33:12:88:87:F4:AA:BF:F5:50:48:D7:DA:97:E8:3D
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019B7834EF3E30D2379942FFC9588718DCE3
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/mzscA40zEoiH9Kq_9VBI19qX6D0.roa
Signing time: Thu 01 Jan 2026 06:18:13 +0000
ROA not before: Thu 01 Jan 2026 06:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47201
IP address blocks: 79.98.120.0/24 maxlen: 24
79.98.121.0/24 maxlen: 24
79.98.122.0/24 maxlen: 24
79.98.123.0/24 maxlen: 24
79.98.124.0/24 maxlen: 24
79.98.125.0/24 maxlen: 24
2a00:d30:120::/48 maxlen: 48
2a00:d30:121::/48 maxlen: 48
2a00:d30:122::/48 maxlen: 48
2a00:d30:123::/48 maxlen: 48
2a00:d30:124::/48 maxlen: 48
2a00:d30:125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:ef:3e:30:d2:37:99:42:ff:c9:58:87:18:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jan 1 06:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b3b1c038d33128887f4aabff55048d7da97e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:72:11:b6:f1:fb:46:af:e2:af:d9:22:97:
db:8a:13:9c:da:d0:92:36:de:c0:b3:8d:64:06:d5:
40:9b:c4:76:a1:5f:9f:98:8a:24:1c:1e:36:df:ac:
b4:0a:c8:9a:fd:5d:81:55:e8:1c:a0:55:83:f9:ae:
5e:9a:fc:e0:a8:40:a0:8c:34:63:dd:96:55:25:89:
21:01:4c:46:b8:3f:ae:cf:17:41:8b:08:7d:d6:32:
64:dc:9d:d7:5d:21:53:69:08:04:4d:47:1d:18:1d:
99:d7:ef:a7:d1:cc:56:d4:00:e3:4b:0c:6b:81:88:
b7:7f:ad:aa:3d:70:b7:6e:c8:8d:0d:c9:62:ad:34:
30:40:00:3f:64:bc:1b:2b:11:ee:75:5e:82:ad:5f:
19:79:d2:b9:17:4c:9b:fa:0a:de:f6:78:41:43:0d:
0a:09:b1:a3:f9:fc:ad:f7:da:92:3c:0b:7e:55:90:
99:53:22:a1:93:07:41:44:36:e6:44:bc:59:b3:75:
ec:3b:39:7d:73:8c:d2:0d:8a:33:f3:0e:df:84:51:
6a:44:2c:a1:02:a9:88:21:f2:39:e1:8d:92:48:c3:
93:2d:fb:0a:39:0c:ee:a4:4b:1f:cd:89:00:e9:4d:
5f:0a:1f:60:e4:d4:8f:aa:72:09:24:e9:18:78:92:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3B:1C:03:8D:33:12:88:87:F4:AA:BF:F5:50:48:D7:DA:97:E8:3D
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/mzscA40zEoiH9Kq_9VBI19qX6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.120.0-79.98.125.255
IPv6:
2a00:d30:120::-2a00:d30:125:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:6e:73:5e:5c:5d:a8:8a:78:f1:c5:dc:d7:01:83:ba:ef:59:
bd:72:fd:dd:23:cc:95:5a:d7:00:dc:07:11:25:6a:21:02:78:
de:c9:46:57:27:2b:b6:08:3c:0e:6b:82:02:1e:ee:7e:fb:7a:
07:6f:34:1b:de:ec:4e:f5:bc:96:66:a1:1e:0f:3f:7c:35:bb:
1a:66:51:94:42:d6:3c:af:ce:08:cc:90:fa:ed:81:d3:ee:3b:
37:69:bb:27:34:a2:67:13:81:42:6b:1d:b1:f7:0d:3a:19:f1:
64:d5:b6:9d:cb:42:dc:07:84:10:0d:3a:03:c6:61:9e:6f:84:
58:01:c1:32:65:bc:7e:e4:f6:75:17:1f:ff:e7:03:ea:38:74:
c4:42:e0:40:57:ee:d3:ea:4b:0b:75:e0:35:80:79:0c:08:4b:
bc:5f:4a:90:7c:f9:b9:65:3d:08:88:3f:69:28:4a:f9:2b:3d:
fd:7f:64:6a:03:6c:78:15:6c:85:c9:fa:db:b5:dd:4d:9f:0b:
06:67:e9:08:61:78:b6:67:b6:6e:49:7c:0e:9b:9a:35:6c:11:
9d:86:e1:3c:71:aa:d4:f1:ef:15:22:75:d3:20:28:ff:0d:ca:
ad:e5:22:04:6e:f6:47:24:50:e1:4a:1a:03:0a:5a:8a:03:6e:
e4:d6:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:49 2026 by rpki-client