This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa File: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (raw, json) Hash identifier: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng= Subject key identifier: 33:3D:4F:72:4C:F8:18:5A:6F:41:C2:C6:78:68:EF:92:01:E0:11:47 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019B7834CB0F676F4FB03299023DF003E397 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 143.161.74.0/24 maxlen: 24 143.161.91.0/24 maxlen: 24 143.161.92.0/22 maxlen: 22 143.161.96.0/22 maxlen: 22 143.161.100.0/23 maxlen: 23 2a05:6747::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:0f:67:6f:4f:b0:32:99:02:3d:f0:03:e3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=333d4f724cf8185a6f41c2c67868ef9201e01147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:fd:f1:15:be:b5:a5:6b:12:d4:de:7d:d3: ac:94:64:fc:91:2a:bd:dc:5a:74:5a:49:0a:39:ce: db:55:2f:92:ed:ee:0b:6f:f9:83:14:3c:69:43:77: cb:26:43:5b:65:ba:fc:61:99:5e:b8:2f:3d:19:87: a0:ad:e1:a4:f1:79:33:2d:56:d6:02:4a:a1:42:36: 94:b2:ff:92:98:36:30:c8:d0:0a:26:5c:ad:ff:5a: c9:15:3f:ed:01:9f:26:1c:30:c5:0b:9f:e9:be:9f: c3:4c:ed:e4:0e:8a:a2:f9:35:14:ff:37:da:bf:c9: e8:2c:d8:fa:56:93:ec:d3:ac:cf:c9:8a:cc:09:a4: 98:46:48:1e:64:7c:36:28:9a:01:fb:81:04:3e:f9: 4b:57:86:6b:9b:63:12:ea:6c:d8:0f:b3:cc:b6:de: e0:66:81:30:61:57:9f:cd:21:68:e1:af:13:d9:3c: d9:9d:31:3a:84:b4:0c:7b:5e:00:51:7a:0b:e7:2d: 20:63:36:b0:d7:c5:c4:28:ec:0b:46:5d:bf:3c:dc: 79:d4:5c:57:36:bb:e6:c7:cc:ad:20:b6:86:4d:2d: 37:1f:0a:aa:b0:68:8f:70:27:99:bd:42:f2:6f:35: cc:56:79:fa:be:7c:3c:00:4f:68:ed:3c:2e:79:1b: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:4F:72:4C:F8:18:5A:6F:41:C2:C6:78:68:EF:92:01:E0:11:47 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.161.74.0/24 143.161.91.0-143.161.101.255 IPv6: 2a05:6747::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1c:77:0d:0f:a4:c3:30:c9:b1:67:88:90:d2:08:72:e3:d5: 85:74:7e:c5:e9:e6:7d:fb:47:93:38:7a:c2:fa:b7:31:f2:d7: e0:e6:6b:11:c7:db:18:dc:34:f8:17:85:16:a3:4b:e1:40:4c: bf:cd:53:a9:31:b2:d1:d3:49:b2:f9:cd:d2:e9:0b:6b:c1:f6: dd:35:b9:97:5b:70:d5:b2:33:71:fd:c1:4f:40:9c:88:38:eb: f5:7d:d3:a6:e3:65:34:f8:31:d6:fb:9b:4b:57:c7:cc:a1:82: 0c:f8:de:59:ad:e0:cf:60:f1:fa:34:20:ba:bb:4c:35:19:41: ec:1b:c0:81:39:a7:d6:2d:88:b2:3b:af:c1:99:06:3e:6f:e9: 25:5a:e0:e7:bc:a9:19:cb:82:42:ac:ef:a6:9c:f7:79:53:45: 64:e8:2b:cd:10:a4:d0:8e:55:d2:1e:72:df:d3:8a:af:69:04: 86:e6:d2:95:5a:34:ae:ca:f5:4d:9e:a7:21:c7:3d:be:59:15: 5f:15:da:f1:1b:6a:2f:01:ea:d0:ac:05:cb:90:8c:1d:7c:80: 86:25:a0:42:b9:64:00:ce:4d:29:90:cb:9c:dd:ae:7b:88:28: 13:14:cb:c6:d9:d6:b0:f5:35:4c:89:12:9c:e7:bb:63:46:f4: 0c:eb:b8:b3 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt4NMsPZ29PsDKZAj3wA+OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzNkNGY3MjRjZjgxODVhNmY0MWMyYzY3ODY4ZWY5MjAxZTAxMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06398RW+taVrEtTefdOslGT8kSq9 3Fp0WkkKOc7bVS+S7e4Lb/mDFDxpQ3fLJkNbZbr8YZleuC89GYegreGk8XkzLVbW AkqhQjaUsv+SmDYwyNAKJlyt/1rJFT/tAZ8mHDDFC5/pvp/DTO3kDoqi+TUU/zfa v8noLNj6VpPs06zPyYrMCaSYRkgeZHw2KJoB+4EEPvlLV4Zrm2MS6mzYD7PMtt7g ZoEwYVefzSFo4a8T2TzZnTE6hLQMe14AUXoL5y0gYzaw18XEKOwLRl2/PNx51FxX Nrvmx8ytILaGTS03HwqqsGiPcCeZvULybzXMVnn6vnw8AE9o7TwueRsYsQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFDM9T3JM+Bhab0HCxnho75IB4BFHMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvTXoxUGNrejRHRnB2UWNMR2VHanZrZ0hnRVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQAj6FKMAwD BACPoVsDBAGPoWQwDwQCAAIwCQMHACoFZ0cAADANBgkqhkiG9w0BAQsFAAOCAQEA Gxx3DQ+kwzDJsWeIkNIIcuPVhXR+xenmfftHkzh6wvq3MfLX4OZrEcfbGNw0+BeF FqNL4UBMv81TqTGy0dNJsvnN0ukLa8H23TW5l1tw1bIzcf3BT0CciDjr9X3TpuNl NPgx1vubS1fHzKGCDPjeWa3gz2Dx+jQgurtMNRlB7BvAgTmn1i2IsjuvwZkGPm/p JVrg57ypGcuCQqzvppz3eVNFZOgrzRCk0I5V0h5y39OKr2kEhubSlVo0rsr1TZ6n Icc9vlkVXxXa8RtqLwHq0KwFy5CMHXyAhiWgQrlkAM5NKZDLnN2ue4goExTLxtnW sPU1TIkSnOe7Y0b0DOu4sw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:51 2026 by rpki-client