This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa File: MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa (raw, json) Hash identifier: skXEJp7MsTuCw1bxF6Ss3mHgzce5kN4hSKRqdlY6UhE= Subject key identifier: 31:91:82:17:C8:C9:02:2C:A8:26:97:DC:7C:A6:1E:22:A5:3E:4A:6D Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Certificate serial: 019B7C7F65AF82CD862A5DD289FAC3171EAB Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa Signing time: Fri 02 Jan 2026 02:18:02 +0000 ROA not before: Fri 02 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208138 IP address blocks: 185.251.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:65:af:82:cd:86:2a:5d:d2:89:fa:c3:17:1e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Validity Not Before: Jan 2 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31918217c8c9022ca82697dc7ca61e22a53e4a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:df:88:26:9c:7f:e2:5e:38:af:77:99:f1: b9:c1:66:b9:c6:ac:63:7c:48:fa:b0:e5:28:d8:f3: 9a:27:fe:53:d6:87:0b:10:6c:c6:0c:ce:bd:ba:b7: bb:d5:1c:5b:11:3d:81:c4:1a:d4:c8:8e:b0:e9:94: e8:93:77:a9:63:de:18:41:cd:99:14:ef:c3:c7:1d: af:7d:47:a1:e8:b3:d2:37:70:8b:2a:9d:1d:1d:3b: 40:0b:94:11:2b:78:1a:a8:b8:b7:e1:53:a4:6c:b9: 9c:b4:cf:88:37:b9:26:68:2b:ce:f2:39:ef:a1:57: 9f:2b:71:62:c1:9d:fd:48:7e:bc:79:76:61:25:a9: 1d:68:50:5a:c9:71:e5:47:47:5f:86:18:cc:f4:94: 9e:c6:3e:6a:e2:4a:b4:af:68:5c:bc:fe:7e:e6:41: 0d:ef:48:7c:3c:56:28:9c:e7:3a:01:cf:cf:0c:df: f4:f0:7d:a7:da:8d:dd:89:12:cb:e5:bc:e8:ba:a2: c7:63:c8:c7:03:e3:de:73:75:3d:47:12:80:d8:d0: 06:89:28:bc:a9:02:ff:a3:eb:34:c0:2b:65:51:f7: 3a:1b:67:96:7f:bb:50:45:07:cb:1f:c3:21:fa:32: b5:f5:92:cb:41:c0:72:0f:35:37:e1:a4:74:35:0a: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:91:82:17:C8:C9:02:2C:A8:26:97:DC:7C:A6:1E:22:A5:3E:4A:6D X509v3 Authority Key Identifier: keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/MZGCF8jJAiyoJpfcfKYeIqU-Sm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.40.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:17:b5:7b:b6:a2:a2:9b:2b:18:41:26:b2:8c:09:d3:4c:c6: cd:ac:47:d7:19:73:2f:ea:2e:69:7d:6a:b7:6e:f9:e5:07:59: d4:8b:51:19:d4:89:fa:61:78:73:07:47:2d:33:39:58:e4:cb: 26:41:7c:92:7b:40:c0:91:cc:35:94:11:98:04:ca:b6:32:5d: a9:92:73:d4:59:c6:10:48:db:9c:b9:ba:1b:be:c0:64:c7:fe: 4e:06:9c:5c:d4:20:ad:97:ff:a2:1f:0b:dd:35:d0:03:c0:bd: 2e:69:be:82:1c:5b:00:7d:82:92:c0:46:0d:6f:56:72:be:e8: a7:a4:41:82:12:79:1b:51:7f:ef:55:ab:12:22:92:1d:7d:8f: 11:cd:fe:e5:b1:d1:6a:42:84:37:fa:0e:7b:e7:d8:5b:e1:c5: 9a:c2:c8:b2:7f:6c:b1:41:c7:a8:e5:c6:2b:2c:68:f5:cf:70: e0:5f:11:ce:bc:a1:10:24:7c:99:d8:48:41:4b:a3:e6:ba:5e: 58:19:ed:05:a7:c4:7c:d8:33:4a:27:2a:63:c4:02:fe:a5:e0: 06:70:a0:10:19:3d:7c:09:16:7d:c4:37:63:27:34:44:6a:f5: 8f:bc:12:23:e7:9e:31:55:92:ae:bf:89:ad:bc:6b:fe:fb:83: 4b:97:1e:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2Wvgs2GKl3SifrDFx6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3 YjhiNGYwHhcNMjYwMTAyMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTkxODIxN2M4YzkwMjJjYTgyNjk3ZGM3Y2E2MWUyMmE1M2U0YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYTfiCacf+JeOK93mfG5wWa5xqxj fEj6sOUo2POaJ/5T1ocLEGzGDM69ure71RxbET2BxBrUyI6w6ZTok3epY94YQc2Z FO/Dxx2vfUeh6LPSN3CLKp0dHTtAC5QRK3gaqLi34VOkbLmctM+IN7kmaCvO8jnv oVefK3FiwZ39SH68eXZhJakdaFBayXHlR0dfhhjM9JSexj5q4kq0r2hcvP5+5kEN 70h8PFYonOc6Ac/PDN/08H2n2o3diRLL5bzouqLHY8jHA+Pec3U9RxKA2NAGiSi8 qQL/o+s0wCtlUfc6G2eWf7tQRQfLH8Mh+jK19ZLLQcByDzU34aR0NQo1aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDGRghfIyQIsqCaX3HymHiKlPkptMB8GA1UdIwQY MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt MGUyZWE2YTAyMTgyLzEvTVpHQ0Y4akpBaXlvSnBmY2ZLWWVJcVUtU20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufsoMA0G CSqGSIb3DQEBCwUAA4IBAQArF7V7tqKimysYQSayjAnTTMbNrEfXGXMv6i5pfWq3 bvnlB1nUi1EZ1In6YXhzB0ctMzlY5MsmQXySe0DAkcw1lBGYBMq2Ml2pknPUWcYQ SNucubobvsBkx/5OBpxc1CCtl/+iHwvdNdADwL0uab6CHFsAfYKSwEYNb1Zyvuin pEGCEnkbUX/vVasSIpIdfY8Rzf7lsdFqQoQ3+g5759hb4cWawsiyf2yxQceo5cYr LGj1z3DgXxHOvKEQJHyZ2EhBS6Pmul5YGe0Fp8R82DNKJypjxAL+peAGcKAQGT18 CRZ9xDdjJzREavWPvBIj554xVZKuv4mtvGv++4NLlx5l -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:46 2026 by rpki-client