This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/nZ-MC578XDNoxF9WT_GxSRoreCI.roa File: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (raw, json) Hash identifier: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo= Subject key identifier: 9D:9F:8C:0B:9E:FC:5C:33:68:C4:5F:56:4F:F1:B1:49:1A:2B:78:22 Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Certificate serial: 019B7F15CB409A57A41779A637676262C3BD Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/nZ-MC578XDNoxF9WT_GxSRoreCI.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399768 IP address blocks: 92.51.224.0/22 maxlen: 22 92.51.224.0/24 maxlen: 24 92.51.225.0/24 maxlen: 24 92.51.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:40:9a:57:a4:17:79:a6:37:67:62:62:c3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d9f8c0b9efc5c3368c45f564ff1b1491a2b7822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:f6:1c:87:4b:b8:d8:e9:5c:6b:f4:bc:e9: c3:51:5d:7e:9e:5b:b8:e6:51:c9:31:60:55:37:20: fc:ff:8f:e7:6d:cd:53:09:6e:18:59:b3:3e:56:0b: f1:f8:44:25:96:97:f7:aa:69:01:d7:3c:52:3c:fd: c2:34:d0:a9:9b:bf:4c:47:22:16:ae:8e:f9:66:8b: 44:c8:56:a0:49:fb:64:2f:bf:56:17:fd:fe:f9:35: 4e:de:97:4c:5d:fd:69:a3:ad:92:80:75:a2:eb:fa: 96:e4:7d:be:5a:8f:24:04:55:c2:2a:db:e2:ac:8b: cc:54:15:27:88:97:b0:f0:60:f7:1f:aa:2b:9f:69: 24:c9:d3:6c:af:8e:c4:e1:7a:67:18:d1:21:41:40: 4c:7e:2c:4d:5b:c5:95:8e:46:e3:81:bf:93:18:7b: 3d:11:6c:ef:89:a3:2b:0f:5f:48:b8:27:7c:76:26: a9:4a:7b:b9:e1:b4:71:04:fd:e8:95:58:bc:0e:32: 6d:ea:6b:6e:11:d2:ed:b2:85:8a:92:82:f0:d8:e0: fd:5c:c3:53:57:1f:24:89:5a:e4:d7:de:ac:12:d3: 64:0a:12:14:3a:b4:ab:ff:0b:52:4e:24:84:05:f4: 6b:0f:ed:bc:84:f6:b6:ab:63:1a:2c:03:22:e7:4d: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:8C:0B:9E:FC:5C:33:68:C4:5F:56:4F:F1:B1:49:1A:2B:78:22 X509v3 Authority Key Identifier: keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/nZ-MC578XDNoxF9WT_GxSRoreCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.51.224.0/22 Signature Algorithm: sha256WithRSAEncryption 95:7a:d8:dc:57:74:25:b4:53:e3:52:21:f7:5e:41:9d:db:77: 44:45:90:84:87:64:b2:d7:f7:be:51:a9:f3:57:84:eb:43:36: d1:0a:3a:a0:dc:93:3d:2c:81:78:46:32:5e:ae:82:e8:61:7d: 66:71:10:94:2d:8b:56:ca:0a:4a:e2:fd:eb:67:95:2f:78:1a: 1f:d0:7e:1a:43:fc:aa:ea:f3:ab:e6:88:ef:25:24:00:aa:a8: 55:18:9c:1f:00:2a:fb:f7:ac:9e:11:15:81:29:cf:27:ca:77: 59:c7:6d:47:dd:8e:72:33:e5:a6:87:e4:0c:b1:e4:28:c3:58: c6:f9:5b:d4:7b:cf:d7:ae:c9:a1:63:c8:b5:87:0d:04:2c:c4: 44:71:41:41:bf:00:2f:95:82:ce:62:b4:fc:ae:73:13:17:01: a0:17:0a:d6:a5:4f:c3:96:9d:cd:44:ca:ac:5c:a7:6b:55:ad: 76:35:b2:2c:ce:59:19:41:a0:e6:f5:37:b6:6a:f4:a4:27:9e: 16:23:72:06:fb:20:1f:60:36:14:47:ec:c0:f8:7f:d1:b2:60: 52:45:b5:23:0f:db:ef:b6:33:e0:75:f8:54:ef:45:05:48:eb: 09:09:8d:df:9c:49:8a:76:43:67:64:0c:4c:9b:44:34:02:f1: 7d:9f:b6:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FctAmlekF3mmN2diYsO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0 MzAwNDYwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDlmOGMwYjllZmM1YzMzNjhjNDVmNTY0ZmYxYjE0OTFhMmI3ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+f2HIdLuNjpXGv0vOnDUV1+nlu4 5lHJMWBVNyD8/4/nbc1TCW4YWbM+Vgvx+EQllpf3qmkB1zxSPP3CNNCpm79MRyIW ro75ZotEyFagSftkL79WF/3++TVO3pdMXf1po62SgHWi6/qW5H2+Wo8kBFXCKtvi rIvMVBUniJew8GD3H6orn2kkydNsr47E4XpnGNEhQUBMfixNW8WVjkbjgb+TGHs9 EWzviaMrD19IuCd8diapSnu54bRxBP3olVi8DjJt6mtuEdLtsoWKkoLw2OD9XMNT Vx8kiVrk196sEtNkChIUOrSr/wtSTiSEBfRrD+28hPa2q2MaLAMi501imQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2fjAue/FwzaMRfVk/xsUkaK3giMB8GA1UdIwQY MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt YWYxYTBlMDBmODIzLzEvblotTUM1NzhYRE5veEY5V1RfR3hTUm9yZUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDPgMA0G CSqGSIb3DQEBCwUAA4IBAQCVetjcV3QltFPjUiH3XkGd23dERZCEh2Sy1/e+Uanz V4TrQzbRCjqg3JM9LIF4RjJeroLoYX1mcRCULYtWygpK4v3rZ5UveBof0H4aQ/yq 6vOr5ojvJSQAqqhVGJwfACr796yeERWBKc8nyndZx21H3Y5yM+Wmh+QMseQow1jG +VvUe8/XrsmhY8i1hw0ELMREcUFBvwAvlYLOYrT8rnMTFwGgFwrWpU/Dlp3NRMqs XKdrVa12NbIszlkZQaDm9Te2avSkJ54WI3IG+yAfYDYUR+zA+H/RsmBSRbUjD9vv tjPgdfhU70UFSOsJCY3fnEmKdkNnZAxMm0Q0AvF9n7a/ -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:28 2026 by rpki-client