This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mv5Hu5efVUTkwYSBYnUNwKdrvbs.roa File: Mv5Hu5efVUTkwYSBYnUNwKdrvbs.roa (raw, json) Hash identifier: yWl6IORcEZtPbvXKWwFwdxRAUN6vTQjwUqwdrOF4X8w= Subject key identifier: 32:FE:47:BB:97:9F:55:44:E4:C1:84:81:62:75:0D:C0:A7:6B:BD:BB Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DC3EE1D53C3CE357509C9C002E14 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mv5Hu5efVUTkwYSBYnUNwKdrvbs.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200708 IP address blocks: 2a0c:9a40:83f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:dc:3e:e1:d5:3c:3c:e3:57:50:9c:9c:00:2e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32fe47bb979f5544e4c1848162750dc0a76bbdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:5a:9f:b3:0a:78:2c:83:44:d5:69:8a:b5: a2:2c:25:fd:c1:57:dd:9b:89:26:22:56:3b:c3:af: db:6b:74:ff:cb:03:cc:ba:54:e5:ff:84:39:3a:04: d8:23:25:b7:44:bf:81:7f:45:3a:93:95:7d:26:52: 32:49:9c:71:7a:fe:3a:6b:5d:ce:50:da:41:77:46: ed:2f:63:6e:b5:c1:96:e3:75:50:f3:45:b7:61:54: 55:b5:de:39:36:9c:74:a8:78:31:94:ac:a7:ef:04: d0:e1:a4:0d:02:84:d2:14:dd:6b:b3:4b:a0:86:cb: 5f:89:52:5b:aa:e2:85:35:4e:0e:8e:cc:7e:37:95: 46:a3:28:2f:6d:b5:21:43:ba:9d:c8:c1:87:92:2d: 41:eb:c1:aa:9b:ac:ed:fc:56:d7:31:2d:c0:73:b3: ed:d9:4f:33:d5:68:94:2d:38:5c:e4:85:1f:d6:e6: 06:54:ee:1f:db:fc:95:36:ad:19:a6:b4:ba:0c:49: a2:56:2d:41:91:b4:23:0d:11:25:77:a9:2e:7c:5b: 15:46:42:94:b8:d1:97:90:0e:6e:a4:18:f8:44:84: 04:1c:e0:ee:a7:30:10:6a:0d:f0:dc:1a:0a:54:5d: 22:46:aa:f7:2d:8a:36:99:ce:ec:5b:ed:8d:16:9a: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:47:BB:97:9F:55:44:E4:C1:84:81:62:75:0D:C0:A7:6B:BD:BB X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Mv5Hu5efVUTkwYSBYnUNwKdrvbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:83f0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:5d:e2:6e:0d:d2:a8:3a:f0:5a:9c:73:1a:a0:1b:f1:35:5e: 5d:4f:d6:22:6a:60:42:5f:6a:1a:20:44:95:e1:ab:cd:8c:48: 62:d1:61:a7:3b:d9:60:6e:2f:ba:55:ed:73:88:79:5b:73:ea: 53:f1:b8:a5:64:5a:e5:5d:52:0b:57:a8:8b:89:42:51:26:83: f4:d1:56:d0:58:55:f8:37:2b:0b:ad:1b:aa:b9:7e:84:3d:c8: 18:03:ce:7f:dd:2d:e9:bd:aa:bb:8f:79:3a:57:96:10:02:4d: 39:6b:ef:46:61:7b:73:89:61:35:1d:74:b1:95:9b:30:33:c0: db:aa:bb:d1:5e:70:76:a8:48:ec:17:57:c1:fa:c6:47:c6:17: a1:ec:71:ec:81:26:58:d0:11:e5:24:1e:fc:ae:cf:90:25:bd: 28:61:b1:00:06:43:2b:c4:48:01:d5:49:32:76:fe:44:13:18: b7:82:3d:e4:6e:97:b5:c3:2f:bb:a5:0d:f7:33:e9:f6:9e:17: 09:1e:e1:75:f0:a8:b7:9a:69:a7:ff:8f:05:db:34:73:70:a7: 1c:73:f8:a3:64:56:af:6d:47:6e:71:14:08:47:74:dc:07:04: 63:9c:05:eb:98:90:63:f0:c4:26:86:50:b8:98:92:3b:eb:5f: 08:9b:40:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptw+4dU8PONXUJycAC4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmZlNDdiYjk3OWY1NTQ0ZTRjMTg0ODE2Mjc1MGRjMGE3NmJiZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZVan7MKeCyDRNVpirWiLCX9wVfd m4kmIlY7w6/ba3T/ywPMulTl/4Q5OgTYIyW3RL+Bf0U6k5V9JlIySZxxev46a13O UNpBd0btL2NutcGW43VQ80W3YVRVtd45Npx0qHgxlKyn7wTQ4aQNAoTSFN1rs0ug hstfiVJbquKFNU4Ojsx+N5VGoygvbbUhQ7qdyMGHki1B68Gqm6zt/FbXMS3Ac7Pt 2U8z1WiULThc5IUf1uYGVO4f2/yVNq0ZprS6DEmiVi1BkbQjDREld6kufFsVRkKU uNGXkA5upBj4RIQEHODupzAQag3w3BoKVF0iRqr3LYo2mc7sW+2NFpqx/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDL+R7uXn1VE5MGEgWJ1DcCna727MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTXY1SHU1ZWZWVVRrd1lTQlluVU53S2RydmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIPw MA0GCSqGSIb3DQEBCwUAA4IBAQCeXeJuDdKoOvBanHMaoBvxNV5dT9YiamBCX2oa IESV4avNjEhi0WGnO9lgbi+6Ve1ziHlbc+pT8bilZFrlXVILV6iLiUJRJoP00VbQ WFX4NysLrRuquX6EPcgYA85/3S3pvaq7j3k6V5YQAk05a+9GYXtziWE1HXSxlZsw M8DbqrvRXnB2qEjsF1fB+sZHxheh7HHsgSZY0BHlJB78rs+QJb0oYbEABkMrxEgB 1Ukydv5EExi3gj3kbpe1wy+7pQ33M+n2nhcJHuF18Ki3mmmn/48F2zRzcKccc/ij ZFavbUducRQIR3TcBwRjnAXrmJBj8MQmhlC4mJI7618Im0C8 -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:33 2026 by rpki-client