This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mcSZqUz13nC8X6m1V365d3ktq8c.roa File: mcSZqUz13nC8X6m1V365d3ktq8c.roa (raw, json) Hash identifier: zhSMAfW5ilf34n3KRuRDL4VBTEMjBoXPGLR4QRCP59k= Subject key identifier: 99:C4:99:A9:4C:F5:DE:70:BC:5F:A9:B5:57:7E:B9:77:79:2D:AB:C7 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE5EC82D49E64239B1955929E916A3 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mcSZqUz13nC8X6m1V365d3ktq8c.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61998 IP address blocks: 79.172.210.0/24 maxlen: 24 79.172.212.0/24 maxlen: 24 87.229.77.0/24 maxlen: 24 213.181.206.0/24 maxlen: 24 217.144.53.0/24 maxlen: 24 217.144.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5e:c8:2d:49:e6:42:39:b1:95:59:29:e9:16:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c499a94cf5de70bc5fa9b5577eb977792dabc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:09:2f:36:ab:37:da:54:f0:ba:ff:bc:61: e4:68:87:34:2b:d1:df:fe:e7:69:9f:d1:65:65:62: fe:b7:2a:93:c0:9c:89:f2:4b:f6:e0:84:09:07:41: 0a:43:86:78:aa:99:09:d1:34:7b:94:69:9a:56:61: 93:78:0c:75:91:8b:25:12:8d:d3:25:02:b9:c0:a1: 0d:d5:a0:88:2b:71:b9:b1:c9:ef:b8:3c:28:7e:b4: cb:82:5d:7c:10:06:64:cb:73:72:f7:1b:f6:22:e2: 08:47:f8:b0:55:5b:28:f4:ef:00:5a:83:5e:2a:e7: 02:5b:8d:5e:2d:e7:77:a7:c3:e9:89:81:18:cd:aa: 28:7e:9b:2c:a5:49:b3:2e:96:e8:a6:a5:fc:c6:1f: 85:45:8d:eb:2f:bc:7d:bb:fe:44:c0:16:87:9d:bd: d0:45:d7:aa:86:88:72:cc:1a:67:ce:74:3c:78:99: d5:39:f0:24:d7:5a:a8:de:cb:96:5f:33:79:3d:2b: 63:a7:2a:80:e9:0c:53:08:86:da:d9:f8:ac:02:f3: b2:bc:de:97:8d:b5:b2:e4:49:b9:72:27:93:a5:5b: 86:6d:b8:48:5f:0c:a0:89:f0:74:60:cb:ab:78:1e: 4a:b0:f7:c2:40:d2:08:28:ad:20:78:bc:a3:38:8d: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:99:A9:4C:F5:DE:70:BC:5F:A9:B5:57:7E:B9:77:79:2D:AB:C7 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mcSZqUz13nC8X6m1V365d3ktq8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.210.0/24 79.172.212.0/24 87.229.77.0/24 213.181.206.0/24 217.144.53.0-217.144.54.255 Signature Algorithm: sha256WithRSAEncryption 44:fa:48:22:d1:34:89:c2:b0:87:74:b2:2c:65:bd:0b:c5:37: 68:6d:d3:30:ea:4f:65:d4:45:f2:a4:51:32:99:f4:84:a9:66: 2b:ca:96:87:07:ea:3a:2f:99:a0:e7:61:4d:33:d2:b4:5d:67: 33:b6:83:4a:a6:24:a2:76:3f:30:51:f0:db:3c:cd:40:84:ce: a7:04:ea:7b:7c:c5:31:cf:75:54:21:4f:75:db:36:e5:e0:7a: 90:0a:d1:8a:3b:34:9a:d1:b0:28:b6:8e:d9:dc:64:f0:18:de: 2f:2a:69:46:b0:35:b0:e9:43:7b:91:a8:1a:29:ad:bd:72:e7: ce:79:88:d0:3d:49:5c:de:44:20:39:d1:48:76:62:07:d3:b4: 3e:0c:64:27:fa:3e:43:fd:39:71:8c:72:2e:03:09:3a:e3:49: 86:e4:aa:35:32:72:17:54:10:a9:b5:6a:56:9a:a3:32:90:bd: e3:de:56:ec:77:74:44:83:f4:e1:6a:ae:5c:20:0b:7b:d3:b2: 2a:41:55:32:e6:3c:2d:e9:69:3e:75:7b:39:1b:d9:fa:51:12: 32:57:43:ab:34:c2:84:ef:67:70:97:67:50:55:cf:e7:de:65: 82:d1:e2:91:79:7c:1c:82:f6:f7:ad:8d:a3:8b:50:1d:32:69: 89:c4:8e:59 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87l7ILUnmQjmxlVkp6RajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWM0OTlhOTRjZjVkZTcwYmM1ZmE5YjU1NzdlYjk3Nzc5MmRhYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/sJLzarN9pU8Lr/vGHkaIc0K9Hf /udpn9FlZWL+tyqTwJyJ8kv24IQJB0EKQ4Z4qpkJ0TR7lGmaVmGTeAx1kYslEo3T JQK5wKEN1aCIK3G5scnvuDwofrTLgl18EAZky3Ny9xv2IuIIR/iwVVso9O8AWoNe KucCW41eLed3p8PpiYEYzaoofpsspUmzLpbopqX8xh+FRY3rL7x9u/5EwBaHnb3Q RdeqhohyzBpnznQ8eJnVOfAk11qo3suWXzN5PStjpyqA6QxTCIba2fisAvOyvN6X jbWy5Em5cieTpVuGbbhIXwygifB0YMureB5KsPfCQNIIKK0geLyjOI1f8wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJnEmalM9d5wvF+ptVd+uXd5LavHMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvbWNTWnFVejEzbkM4WDZtMVYzNjVkM2t0cThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAT6zSAwQA T6zUAwQAV+VNAwQA1bXOMAwDBADZkDUDBADZkDYwDQYJKoZIhvcNAQELBQADggEB AET6SCLRNInCsId0sixlvQvFN2ht0zDqT2XURfKkUTKZ9ISpZivKlocH6jovmaDn YU0z0rRdZzO2g0qmJKJ2PzBR8Ns8zUCEzqcE6nt8xTHPdVQhT3XbNuXgepAK0Yo7 NJrRsCi2jtncZPAY3i8qaUawNbDpQ3uRqBoprb1y5855iNA9SVzeRCA50Uh2YgfT tD4MZCf6PkP9OXGMci4DCTrjSYbkqjUychdUEKm1alaaozKQvePeVux3dESD9OFq rlwgC3vTsipBVTLmPC3paT51ezkb2fpREjJXQ6s0woTvZ3CXZ1BVz+feZYLR4pF5 fByC9vetjaOLUB0yaYnEjlk= -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:05 2026 by rpki-client