This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MJvriQn5Q-nTgNwko1rAjefvfyc.roa File: MJvriQn5Q-nTgNwko1rAjefvfyc.roa (raw, json) Hash identifier: 3gpd6VtlsrV3np7ZHJG9AG+GzD/jRSQ91jWM5dx8qCI= Subject key identifier: 30:9B:EB:89:09:F9:43:E9:D3:80:DC:24:A3:5A:C0:8D:E7:EF:7F:27 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71B8AEB8AF93F759B37490DB6571A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MJvriQn5Q-nTgNwko1rAjefvfyc.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216469 IP address blocks: 2a0c:9a40:8cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1b:8a:eb:8a:f9:3f:75:9b:37:49:0d:b6:57:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=309beb8909f943e9d380dc24a35ac08de7ef7f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:b0:c6:ad:c2:fa:92:ac:2c:b5:7f:55:74: 33:33:3a:94:7e:c8:db:da:9f:b4:33:da:87:aa:c7: dc:ef:fe:0a:ef:e4:50:18:e3:33:14:a9:fd:1a:4d: 5d:0c:1a:b4:4f:8a:53:69:cf:2c:85:a8:d3:3c:81: c1:c9:6d:4a:54:57:39:86:a0:7f:c1:f4:56:04:01: 3d:e2:4d:60:a2:4f:3b:c5:62:96:2e:27:08:04:e8: 62:ea:fe:61:b6:91:c7:9c:5d:cf:68:34:9a:44:9d: 0b:5d:b3:fa:14:f3:53:e0:d1:18:d2:50:cb:1e:ca: ad:b4:0c:56:23:ce:ba:fe:72:c6:8f:97:4f:e2:45: fb:ca:00:ca:d6:79:8c:58:f4:2a:ed:d6:9f:f6:04: b7:6c:0f:4f:47:13:b2:17:cd:37:27:c9:b8:d2:93: 0b:b4:95:32:ed:a3:eb:fc:00:9a:ca:46:f2:fd:ce: 53:34:4b:69:01:74:32:6c:30:ea:a7:02:f5:a6:2e: 77:1b:ca:a5:5c:e8:14:0c:39:4c:4d:52:df:5d:c7: e4:b4:23:8f:73:f3:28:fc:e0:a3:4f:1e:30:5e:86: c7:b1:84:48:eb:31:90:07:07:1d:17:ce:98:f9:12: 72:07:8a:9c:3c:00:6e:dc:32:e0:58:02:76:d2:c7: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9B:EB:89:09:F9:43:E9:D3:80:DC:24:A3:5A:C0:8D:E7:EF:7F:27 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MJvriQn5Q-nTgNwko1rAjefvfyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption 98:90:86:d4:40:22:bf:91:95:5b:de:82:05:56:c6:97:c0:5f: 64:a2:70:d7:52:ac:7c:15:c7:07:ec:56:bb:fe:dd:48:02:2c: 05:a4:07:8a:aa:73:29:ab:ab:de:d0:55:de:62:1f:81:0e:eb: 51:5d:ad:98:46:8b:12:58:37:43:58:76:cd:f0:63:01:de:2f: 8d:c0:75:f4:ad:2e:05:cf:25:47:32:22:29:dc:90:ee:b7:8e: 00:43:06:70:88:ae:a7:7a:ce:92:81:99:13:84:f9:ad:4b:ce: a1:69:e5:57:44:57:f6:aa:7b:fb:c9:02:53:53:82:fa:fc:52: 19:56:c9:a6:da:5e:17:20:51:01:2e:ab:b9:e9:d5:54:aa:15: 88:1a:dd:bc:a0:1c:85:3e:ba:bf:9a:34:42:6c:34:ad:77:8d: f2:61:51:53:bd:f6:75:bb:68:7d:4d:cb:f1:4c:d1:01:69:ab: 9b:40:49:d5:ef:10:e8:b4:a3:88:71:b8:d9:c0:99:2c:e8:0d: 68:e2:a5:ec:3b:6f:88:f3:00:bb:e0:da:4b:36:4e:5e:ea:62: a2:1d:99:89:51:78:b1:24:19:78:fe:07:5d:ed:bf:8d:ce:f6: af:6e:44:bb:43:e2:99:08:db:1c:3e:59:b0:42:37:1a:62:f6: d1:ff:d3:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxuK64r5P3WbN0kNtlcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDliZWI4OTA5Zjk0M2U5ZDM4MGRjMjRhMzVhYzA4ZGU3ZWY3ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYOwxq3C+pKsLLV/VXQzMzqUfsjb 2p+0M9qHqsfc7/4K7+RQGOMzFKn9Gk1dDBq0T4pTac8shajTPIHByW1KVFc5hqB/ wfRWBAE94k1gok87xWKWLicIBOhi6v5htpHHnF3PaDSaRJ0LXbP6FPNT4NEY0lDL HsqttAxWI866/nLGj5dP4kX7ygDK1nmMWPQq7daf9gS3bA9PRxOyF803J8m40pML tJUy7aPr/ACaykby/c5TNEtpAXQybDDqpwL1pi53G8qlXOgUDDlMTVLfXcfktCOP c/Mo/OCjTx4wXobHsYRI6zGQBwcdF86Y+RJyB4qcPABu3DLgWAJ20sfdZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDCb64kJ+UPp04DcJKNawI3n738nMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTUp2cmlRbjVRLW5UZ053a28xckFqZWZ2ZnljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIzA MA0GCSqGSIb3DQEBCwUAA4IBAQCYkIbUQCK/kZVb3oIFVsaXwF9konDXUqx8FccH 7Fa7/t1IAiwFpAeKqnMpq6ve0FXeYh+BDutRXa2YRosSWDdDWHbN8GMB3i+NwHX0 rS4FzyVHMiIp3JDut44AQwZwiK6nes6SgZkThPmtS86haeVXRFf2qnv7yQJTU4L6 /FIZVsmm2l4XIFEBLqu56dVUqhWIGt28oByFPrq/mjRCbDStd43yYVFTvfZ1u2h9 TcvxTNEBaaubQEnV7xDotKOIcbjZwJks6A1o4qXsO2+I8wC74NpLNk5e6mKiHZmJ UXixJBl4/gdd7b+NzvavbkS7Q+KZCNscPlmwQjcaYvbR/9Pb -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client