This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/mssfFR-jvVEjXWitmlgUfKmk1ic.roa File: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (raw, json) Hash identifier: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE= Subject key identifier: 9A:CB:1F:15:1F:A3:BD:51:23:5D:68:AD:9A:58:14:7C:A9:A4:D6:27 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B7BA4EB9C2A2FA1BE9F0381DB57683BB2 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/mssfFR-jvVEjXWitmlgUfKmk1ic.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12886 IP address blocks: 193.96.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:eb:9c:2a:2f:a1:be:9f:03:81:db:57:68:3b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9acb1f151fa3bd51235d68ad9a58147ca9a4d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:36:10:0e:1e:d8:b8:d2:99:f6:14:f0:a1: d4:4a:09:a9:f9:81:02:46:60:08:07:6b:f4:90:14: 60:cd:48:22:6a:54:52:40:78:ce:60:79:f9:1b:aa: a2:84:c0:4a:83:02:85:bc:b6:44:61:01:6f:fc:b0: 63:a4:f5:15:c0:1a:bc:28:b1:fe:49:48:fd:7b:25: 0d:0b:63:48:85:e5:dd:6c:0c:9e:9a:ce:c5:76:fd: f9:08:77:63:7d:f2:7c:f0:8b:d1:0b:da:36:31:91: 43:3b:4a:e6:32:6e:9f:83:a9:69:47:0b:51:db:f2: 1f:ff:48:29:f8:bc:30:44:2a:23:34:eb:50:50:6e: b2:e6:19:76:4b:06:8f:b3:06:dd:81:64:38:a1:e2: 93:64:c0:98:15:7e:e0:49:e4:4c:e0:1d:6c:e5:f7: 05:ea:7b:75:9c:3f:37:79:a8:40:ef:d7:9c:ba:19: 27:72:ba:0c:c3:e4:18:cf:17:6a:cd:63:bf:6c:25: a6:e9:d0:aa:fb:3a:fb:dc:51:69:b5:2b:fd:15:39: 56:96:0d:3c:be:b1:37:d1:4c:f6:58:46:02:96:28: 7f:8a:24:32:90:83:8d:b7:09:3d:20:ca:3e:ce:97: de:6b:29:77:a9:b1:dd:db:58:ad:19:72:b8:2b:4a: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:1F:15:1F:A3:BD:51:23:5D:68:AD:9A:58:14:7C:A9:A4:D6:27 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/mssfFR-jvVEjXWitmlgUfKmk1ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.96.173.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:bd:e8:a8:a7:83:b0:02:7e:ac:a3:e1:64:92:be:23:d2:46: 68:e8:7a:3f:a2:3d:27:b0:3b:38:09:7c:bb:6d:d0:58:f7:54: b6:db:f7:f6:06:b1:81:50:12:82:ae:04:ff:e8:e2:c3:e5:37: b7:23:32:4a:df:ea:c1:61:7e:1d:c9:12:3f:e9:a5:bc:11:7f: ff:b9:06:be:bf:2e:6c:99:98:18:18:ce:db:36:b4:91:80:2f: d1:ca:63:f8:8e:25:83:56:ef:c3:81:0c:81:14:22:f4:0f:d5: 40:8b:1e:7d:bf:d9:02:64:04:73:91:cf:dd:1b:4f:c9:11:92: 23:c3:be:26:fe:09:98:5e:41:44:0d:bb:de:74:1d:80:d5:da: c1:d4:26:7c:7d:e7:e5:6a:8a:ed:21:15:a5:a8:e4:ef:2f:d9: c8:d4:38:97:4b:04:48:13:21:f3:bb:a7:82:55:fd:c7:d5:35: a0:b7:05:d5:f2:a6:37:08:a1:70:8c:7a:c6:1f:82:be:db:66: 3d:13:bd:fc:97:32:09:f7:10:28:b7:1d:f9:e0:75:e4:87:c9: 3b:a8:b1:18:61:3e:d4:ec:30:18:c7:17:1e:dc:3a:af:e9:ab: e9:02:aa:d3:20:1e:31:3d:d9:81:ea:a4:4d:f4:4e:3a:ed:06: bc:c1:3c:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOucKi+hvp8DgdtXaDuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWNiMWYxNTFmYTNiZDUxMjM1ZDY4YWQ5YTU4MTQ3Y2E5YTRkNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p82EA4e2LjSmfYU8KHUSgmp+YEC RmAIB2v0kBRgzUgialRSQHjOYHn5G6qihMBKgwKFvLZEYQFv/LBjpPUVwBq8KLH+ SUj9eyUNC2NIheXdbAyems7Fdv35CHdjffJ88IvRC9o2MZFDO0rmMm6fg6lpRwtR 2/If/0gp+LwwRCojNOtQUG6y5hl2SwaPswbdgWQ4oeKTZMCYFX7gSeRM4B1s5fcF 6nt1nD83eahA79ecuhkncroMw+QYzxdqzWO/bCWm6dCq+zr73FFptSv9FTlWlg08 vrE30Uz2WEYClih/iiQykIONtwk9IMo+zpfeayl3qbHd21itGXK4K0o9oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJrLHxUfo71RI11orZpYFHyppNYnMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvbXNzZkZSLWp2VkVqWFdpdG1sZ1VmS21rMWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWCtMA0G CSqGSIb3DQEBCwUAA4IBAQBLveiop4OwAn6so+Fkkr4j0kZo6Ho/oj0nsDs4CXy7 bdBY91S22/f2BrGBUBKCrgT/6OLD5Te3IzJK3+rBYX4dyRI/6aW8EX//uQa+vy5s mZgYGM7bNrSRgC/RymP4jiWDVu/DgQyBFCL0D9VAix59v9kCZARzkc/dG0/JEZIj w74m/gmYXkFEDbvedB2A1drB1CZ8feflaortIRWlqOTvL9nI1DiXSwRIEyHzu6eC Vf3H1TWgtwXV8qY3CKFwjHrGH4K+22Y9E738lzIJ9xAotx354HXkh8k7qLEYYT7U 7DAYxxce3Dqv6avpAqrTIB4xPdmB6qRN9E467Qa8wTzY -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:37 2026 by rpki-client