This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa File: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (raw, json) Hash identifier: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM= Subject key identifier: 32:C4:E9:4B:FF:44:7F:74:83:CB:63:CB:AB:A5:9F:35:49:18:8B:34 Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9 Certificate serial: 019B7758B7AA297C4DBB0F7203790585FAF3 Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51661 IP address blocks: 185.99.71.80/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:aa:29:7c:4d:bb:0f:72:03:79:05:85:fa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32c4e94bff447f7483cb63cbaba59f3549188b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:78:51:a3:fb:0d:7e:dd:87:84:2f:fc:ae: d0:11:3a:ed:f8:35:45:76:00:ad:cf:32:2b:32:26: 01:b3:83:d6:24:44:fb:2f:83:68:24:29:31:83:19: 25:ec:cf:bb:58:78:76:a0:2e:12:96:a7:67:b0:a5: 4d:75:26:d2:32:1a:f8:2a:12:61:a6:18:88:89:03: d3:8a:d5:35:cd:c8:83:80:da:25:7d:9b:31:8b:f8: a6:ee:8a:d9:90:f1:4f:5c:56:4a:7a:7e:b8:af:e1: 02:ba:6a:15:e2:3e:1d:bd:70:5e:a3:63:2c:21:34: e7:d1:be:2d:76:47:42:e3:b7:80:90:d5:e3:8e:3c: a9:63:75:6e:c3:5e:43:61:20:c0:ec:c2:57:aa:f7: 2a:54:14:fc:a0:19:00:0e:d7:f4:ce:ef:1c:17:42: a4:ea:84:aa:cd:e0:a4:fd:aa:94:f6:4e:48:29:01: 3f:b9:f5:b2:af:ef:f4:39:39:b7:78:39:2a:eb:dc: 83:f3:df:82:56:3a:db:ab:a2:5b:5f:3e:11:89:f3: e5:05:33:02:8b:13:18:8f:e9:28:ce:80:a1:73:ac: 6a:c7:9f:93:62:a0:ef:5f:03:3c:d1:b1:23:fc:66: ee:d2:d7:d5:51:c5:34:16:cc:6e:29:b2:e5:6c:43: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:E9:4B:FF:44:7F:74:83:CB:63:CB:AB:A5:9F:35:49:18:8B:34 X509v3 Authority Key Identifier: keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.71.80/29 Signature Algorithm: sha256WithRSAEncryption b1:c3:4f:84:04:aa:0b:78:cc:e4:49:10:02:e2:6f:2f:ae:ce: 93:49:10:1f:bf:3e:53:41:b6:2c:78:77:f2:fe:ff:5c:cd:0d: e7:06:be:88:82:1e:dc:6b:d5:6a:75:da:84:0d:ab:17:84:11: f0:32:e0:e2:da:1a:b2:15:95:5a:31:47:f0:91:3c:bc:ab:ba: a3:11:b6:80:c0:ac:ae:cb:0f:f7:bc:78:9c:fb:25:81:31:fc: 0e:5b:25:cc:43:36:df:65:f0:01:02:08:38:03:96:21:c9:31: 17:ec:4c:53:de:18:8a:c1:ce:51:29:d9:39:0f:44:c3:9e:c2: 3b:87:6d:32:c6:01:9c:40:f1:e4:e6:9e:1d:57:44:47:fd:d1: c5:2c:93:fa:31:53:ec:da:09:f9:8a:29:84:a2:18:9f:4b:33: 50:0e:91:34:b0:2b:2d:98:ce:4b:42:b0:e6:aa:18:5a:c4:39: ae:19:1e:3c:04:ca:f1:65:78:3d:cf:52:c2:1f:a5:5a:33:68: 36:ea:18:e5:16:6b:3d:12:47:77:a5:74:bf:6e:72:6e:97:88: 59:d6:8e:61:ff:6f:7d:61:c5:c6:2b:1e:50:c9:cf:91:16:54: c9:a9:6c:4e:46:2d:c7:fb:62:92:e1:30:d2:50:04:69:40:00: 78:99:1a:cf -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WLeqKXxNuw9yA3kFhfrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmM3ZjE3MDdiNmQwYjIyYmNkODE4MGY0ZmJiMWI2M2Vm Yzk5ZjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmM0ZTk0YmZmNDQ3Zjc0ODNjYjYzY2JhYmE1OWYzNTQ5MTg4YjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGt4UaP7DX7dh4Qv/K7QETrt+DVF dgCtzzIrMiYBs4PWJET7L4NoJCkxgxkl7M+7WHh2oC4SlqdnsKVNdSbSMhr4KhJh phiIiQPTitU1zciDgNolfZsxi/im7orZkPFPXFZKen64r+ECumoV4j4dvXBeo2Ms ITTn0b4tdkdC47eAkNXjjjypY3Vuw15DYSDA7MJXqvcqVBT8oBkADtf0zu8cF0Kk 6oSqzeCk/aqU9k5IKQE/ufWyr+/0OTm3eDkq69yD89+CVjrbq6JbXz4RifPlBTMC ixMYj+kozoChc6xqx5+TYqDvXwM80bEj/Gbu0tfVUcU0FsxuKbLlbENLEwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDLE6Uv/RH90g8tjy6ulnzVJGIs0MB8GA1UdIwQY MBaAFI+8fxcHttCyK82BgPT7sbY+/Jn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTct Nzg1MjIwNjIxM2UwLzEvTXNUcFNfOUVmM1NEeTJQTHE2V2ZOVWtZaXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTctNzg1MjIwNjIxM2Uw LzEvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDuWNHUDAN BgkqhkiG9w0BAQsFAAOCAQEAscNPhASqC3jM5EkQAuJvL67Ok0kQH78+U0G2LHh3 8v7/XM0N5wa+iIIe3GvVanXahA2rF4QR8DLg4toashWVWjFH8JE8vKu6oxG2gMCs rssP97x4nPslgTH8DlslzEM232XwAQIIOAOWIckxF+xMU94YisHOUSnZOQ9Ew57C O4dtMsYBnEDx5OaeHVdER/3RxSyT+jFT7NoJ+YophKIYn0szUA6RNLArLZjOS0Kw 5qoYWsQ5rhkePATK8WV4Pc9Swh+lWjNoNuoY5RZrPRJHd6V0v25ybpeIWdaOYf9v fWHFxiseUMnPkRZUyalsTkYtx/tikuEw0lAEaUAAeJkazw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:42 2026 by rpki-client