This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mzgOVcQFb5T9zgivAQDtStbnug0.roa File: mzgOVcQFb5T9zgivAQDtStbnug0.roa (raw, json) Hash identifier: yWUsi1DIu7DGLTRazzHtfk6HfxxO2sQtyKnrpOc0niM= Subject key identifier: 9B:38:0E:55:C4:05:6F:94:FD:CE:08:AF:01:00:ED:4A:D6:E7:BA:0D Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019C41D2B1705C1D8A0E784916BFAF45E645 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mzgOVcQFb5T9zgivAQDtStbnug0.roa Signing time: Mon 09 Feb 2026 09:54:12 +0000 ROA not before: Mon 09 Feb 2026 09:54:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400866 IP address blocks: 2a0b:21c1:602b::/48 maxlen: 48 2a0b:21c1:602c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d2:b1:70:5c:1d:8a:0e:78:49:16:bf:af:45:e6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Feb 9 09:54:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b380e55c4056f94fdce08af0100ed4ad6e7ba0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:ba:1e:d5:ad:46:30:ca:74:ec:58:7d:af: d1:5e:4d:5f:73:1c:63:88:6c:f2:f3:e6:28:5b:be: f3:a3:1a:f4:ac:07:1a:6e:91:e3:e0:2f:e1:ca:f0: c2:3b:ff:f5:20:05:ce:2c:09:44:77:89:87:cb:eb: 15:99:b7:4f:0c:06:8d:62:38:0a:a2:d5:fb:5c:d5: 89:76:cf:a0:91:39:30:0a:77:63:3c:e0:23:28:04: ea:9f:76:83:5a:8c:43:36:e8:fc:e2:e2:22:f5:ff: 9a:e3:f1:ff:5b:54:dc:df:3e:bb:3b:82:74:4c:ad: 11:3a:4e:ca:b7:3f:04:38:f3:5e:6e:09:29:4e:15: 53:9e:81:c7:cf:80:9a:13:f4:e5:01:ff:f8:b7:b8: 0d:3a:5b:af:bf:ff:78:52:19:c1:ab:53:cc:2a:b5: 0b:ec:36:08:22:36:8b:f7:22:e3:94:db:1d:d9:0c: bd:07:4e:94:8a:43:5b:58:7b:a7:e5:fa:5a:97:cd: 18:8c:0c:4d:04:bf:ec:d8:7d:1f:9b:49:62:56:97: 17:49:04:eb:ed:72:43:0a:32:c4:68:2a:63:5d:00: 3c:09:08:70:6d:85:88:5d:ec:9f:65:9d:64:19:b6: a0:8d:72:ef:75:f9:fc:03:8e:ed:c7:56:78:a1:10: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:0E:55:C4:05:6F:94:FD:CE:08:AF:01:00:ED:4A:D6:E7:BA:0D X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mzgOVcQFb5T9zgivAQDtStbnug0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:21c1:602b::-2a0b:21c1:602c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6f:83:4d:dd:c3:ba:df:f6:3d:8e:f0:11:91:57:29:0b:ce:8d: d3:1b:21:49:0a:63:54:18:86:d7:a4:90:ca:6e:06:69:ff:80: f8:c4:53:44:76:f7:45:ed:a5:d7:b7:6e:8a:f6:f3:20:08:2e: cd:13:37:e9:3a:7f:74:3c:ff:92:aa:df:c5:45:b0:f1:a7:6a: 0b:44:e2:bc:4f:b1:af:d3:28:9b:53:43:f0:93:94:99:b3:c2: 29:18:51:6d:a2:d5:8d:e9:8f:0c:64:d4:30:7a:6a:b5:9c:1f: 1e:6a:71:3d:b1:40:0b:e9:3f:53:55:09:4e:81:49:29:7e:d7: a1:b3:d4:71:ce:0e:f2:d9:5f:02:8c:fc:f9:cf:a9:4b:2c:3c: df:cc:b8:a2:f6:dd:5a:46:57:35:57:43:50:76:7a:93:ef:bd: d0:03:1f:a4:86:21:57:b7:fa:64:2c:f9:01:b4:d0:3a:7e:85: ab:eb:3d:82:3a:46:cb:00:ca:6a:77:01:8e:58:84:04:a5:5c: 0a:17:db:16:49:ed:f2:ec:c5:a6:d5:b1:5f:6d:c1:f9:83:24: 4a:85:87:53:9f:bb:09:df:da:87:cc:54:42:44:e7:3e:fd:b7: 75:27:3d:e6:7b:47:74:be:4b:f3:0b:92:a7:11:53:60:78:ed: ec:8e:0f:b3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZxB0rFwXB2KDnhJFr+vReZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMjA5MDk1NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjM4MGU1NWM0MDU2Zjk0ZmRjZTA4YWYwMTAwZWQ0YWQ2ZTdiYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnS6HtWtRjDKdOxYfa/RXk1fcxxj iGzy8+YoW77zoxr0rAcabpHj4C/hyvDCO//1IAXOLAlEd4mHy+sVmbdPDAaNYjgK otX7XNWJds+gkTkwCndjPOAjKATqn3aDWoxDNuj84uIi9f+a4/H/W1Tc3z67O4J0 TK0ROk7Ktz8EOPNebgkpThVTnoHHz4CaE/TlAf/4t7gNOluvv/94UhnBq1PMKrUL 7DYIIjaL9yLjlNsd2Qy9B06UikNbWHun5fpal80YjAxNBL/s2H0fm0liVpcXSQTr 7XJDCjLEaCpjXQA8CQhwbYWIXeyfZZ1kGbagjXLvdfn8A47tx1Z4oRDypwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJs4DlXEBW+U/c4IrwEA7UrW57oNMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvbXpnT1ZjUUZiNVQ5emdpdkFRRHRTdGJudWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqCyHB YCsDBwAqCyHBYCwwDQYJKoZIhvcNAQELBQADggEBAG+DTd3Dut/2PY7wEZFXKQvO jdMbIUkKY1QYhtekkMpuBmn/gPjEU0R290Xtpde3bor28yAILs0TN+k6f3Q8/5Kq 38VFsPGnagtE4rxPsa/TKJtTQ/CTlJmzwikYUW2i1Y3pjwxk1DB6arWcHx5qcT2x QAvpP1NVCU6BSSl+16Gz1HHODvLZXwKM/PnPqUssPN/MuKL23VpGVzVXQ1B2epPv vdADH6SGIVe3+mQs+QG00Dp+havrPYI6RssAymp3AY5YhASlXAoX2xZJ7fLsxabV sV9twfmDJEqFh1Ofuwnf2ofMVEJE5z79t3UnPeZ7R3S+S/MLkqcRU2B47eyOD7M= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:24 2026 by rpki-client