This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MSS221VyqNkQDw0PUIJXxk4IbIw.roa File: MSS221VyqNkQDw0PUIJXxk4IbIw.roa (raw, json) Hash identifier: g1IL8mJsHRJejpKH6rxsqNjgNh8ALRoaUcusbfYsrxo= Subject key identifier: 31:24:B6:DB:55:72:A8:D9:10:0F:0D:0F:50:82:57:C6:4E:08:6C:8C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346310F64F2F153D1FCE1B1D3AFC29 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MSS221VyqNkQDw0PUIJXxk4IbIw.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48220 IP address blocks: 193.235.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:63:10:f6:4f:2f:15:3d:1f:ce:1b:1d:3a:fc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3124b6db5572a8d9100f0d0f508257c64e086c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:e9:c0:1c:5c:34:6b:72:f6:cf:11:14:9f: 2c:5e:2e:ba:a7:58:7e:96:8c:07:d8:72:8f:4b:ea: 6a:56:82:6e:14:8d:6b:84:2c:b2:9d:92:b1:20:69: 6f:5c:58:5f:fe:8d:7f:8c:ff:8b:ea:6d:bd:09:6b: b6:42:97:ff:f3:18:6e:54:70:bb:71:1b:a4:5a:48: f4:ea:50:54:c3:6b:a2:1d:99:f7:ff:08:8c:68:b1: bf:5e:76:73:fa:ee:ff:22:dd:4d:7a:bf:93:d3:ec: d9:4d:37:f3:61:df:10:f2:59:c7:4c:77:5f:14:5d: 1f:92:d4:51:57:2f:fe:2c:f7:9c:9e:31:65:1a:77: dd:25:fc:47:12:2b:d3:b7:99:61:f8:4f:4e:e9:21: 19:83:af:47:b6:a3:f1:04:1c:e6:98:f4:1a:9b:a7: f6:a6:c4:2e:37:33:06:a8:d9:1e:66:fe:e9:d8:15: 22:0e:c2:fc:46:09:85:3d:97:35:db:1f:f8:21:f3: a6:8b:36:a6:f4:1f:10:9f:78:2e:6a:b7:13:07:af: 15:e5:95:76:90:78:06:be:7f:43:3e:b4:31:cd:b1: 12:94:88:92:d7:da:2d:e6:3a:f5:d8:53:43:a4:92: bb:25:cf:b8:81:4a:3e:67:d8:ac:1b:fa:ae:2e:09: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:24:B6:DB:55:72:A8:D9:10:0F:0D:0F:50:82:57:C6:4E:08:6C:8C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MSS221VyqNkQDw0PUIJXxk4IbIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.154.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:c2:4d:3f:d4:05:5f:3c:05:a8:0a:1f:60:b0:65:f8:7b:5d: 2f:34:31:35:d6:2f:46:d3:7d:e6:5b:62:d7:1f:06:32:35:de: 71:00:08:46:2b:30:cc:fa:9c:8c:e9:79:bb:e5:78:63:94:76: 35:4b:1b:64:22:df:06:96:ff:56:0f:0f:20:6a:2c:09:99:20: 5c:20:87:cb:95:a7:4a:ec:86:03:61:a2:af:a4:4d:4b:67:07: 7e:7e:33:bf:8c:ad:4e:51:83:0d:32:2e:1b:db:e9:09:de:5a: c8:9c:51:04:eb:20:4e:c4:11:65:c6:8e:f9:6a:ea:41:f2:c5: 7c:e8:4e:ed:2b:56:82:33:34:2c:ba:ad:2f:d0:86:b8:aa:f6: eb:38:a9:50:22:79:dd:c8:55:e4:89:bc:60:f3:9d:0a:8e:29: 21:91:a4:c9:5a:bf:5e:67:ce:a1:a9:ba:df:8e:54:62:63:72: cb:1a:b9:95:a4:6e:25:aa:29:e6:3b:79:1e:27:ba:c6:07:5c: b9:e4:9d:be:64:1a:68:2d:6e:19:ff:95:40:ea:90:5b:a7:17: 0c:7f:b4:a7:b6:51:a1:78:95:df:0c:b9:1b:31:ab:4b:28:ac: 99:b8:e8:39:11:2b:35:c4:57:f4:db:ce:b5:9b:8b:89:ec:1d: 4b:d9:b0:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGMQ9k8vFT0fzhsdOvwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTI0YjZkYjU1NzJhOGQ5MTAwZjBkMGY1MDgyNTdjNjRlMDg2YzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tPpwBxcNGty9s8RFJ8sXi66p1h+ lowH2HKPS+pqVoJuFI1rhCyynZKxIGlvXFhf/o1/jP+L6m29CWu2Qpf/8xhuVHC7 cRukWkj06lBUw2uiHZn3/wiMaLG/XnZz+u7/It1Ner+T0+zZTTfzYd8Q8lnHTHdf FF0fktRRVy/+LPecnjFlGnfdJfxHEivTt5lh+E9O6SEZg69HtqPxBBzmmPQam6f2 psQuNzMGqNkeZv7p2BUiDsL8RgmFPZc12x/4IfOmizam9B8Qn3guarcTB68V5ZV2 kHgGvn9DPrQxzbESlIiS19ot5jr12FNDpJK7Jc+4gUo+Z9isG/quLgnEBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDEktttVcqjZEA8ND1CCV8ZOCGyMMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvTVNTMjIxVnlxTmtRRHcwUFVJSlh4azRJYkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweuaMA0G CSqGSIb3DQEBCwUAA4IBAQA7wk0/1AVfPAWoCh9gsGX4e10vNDE11i9G033mW2LX HwYyNd5xAAhGKzDM+pyM6Xm75XhjlHY1SxtkIt8Glv9WDw8gaiwJmSBcIIfLladK 7IYDYaKvpE1LZwd+fjO/jK1OUYMNMi4b2+kJ3lrInFEE6yBOxBFlxo75aupB8sV8 6E7tK1aCMzQsuq0v0Ia4qvbrOKlQInndyFXkibxg850KjikhkaTJWr9eZ86hqbrf jlRiY3LLGrmVpG4lqinmO3keJ7rGB1y55J2+ZBpoLW4Z/5VA6pBbpxcMf7SntlGh eJXfDLkbMatLKKyZuOg5ESs1xFf02861m4uJ7B1L2bBN -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:49 2026 by rpki-client