This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1MNzVKC9htvcNDGJvI7xuyGACNU.roa File: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (raw, json) Hash identifier: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c= Subject key identifier: D4:C3:73:54:A0:BD:86:DB:DC:34:31:89:BC:8E:F1:BB:21:80:08:D5 Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95 Certificate serial: 019B7F145F0BDBDC7668A0DEB71BC0DF5B21 Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1MNzVKC9htvcNDGJvI7xuyGACNU.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42352 IP address blocks: 2a07:76c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5f:0b:db:dc:76:68:a0:de:b7:1b:c0:df:5b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95 Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4c37354a0bd86dbdc343189bc8ef1bb218008d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:84:fa:21:bf:6b:34:ca:10:41:96:ef:86: 68:6c:52:21:19:b6:cd:4d:25:f1:48:b7:45:00:1c: 98:d2:ce:b6:7f:72:7c:07:37:b6:ab:84:22:92:24: 39:b6:91:c4:70:a9:90:43:24:ae:a8:91:ec:6f:12: a7:a9:0d:3e:90:cc:b7:ba:12:ad:22:d0:7a:af:32: ee:2c:d5:97:b0:c4:d9:2b:b9:82:6d:86:27:af:8e: d4:05:10:2a:6f:17:00:f8:ae:a6:67:5a:75:d9:95: 60:db:37:d5:8b:59:b4:fd:e3:1b:7b:61:30:56:93: 4e:a5:fc:22:a3:ff:26:8a:d5:2d:11:ea:85:f7:29: 61:9f:0a:04:ec:f4:8b:93:11:ca:c9:d2:f2:07:53: e0:b6:78:fd:c8:f3:5f:89:74:32:6b:54:ee:7b:95: ee:26:39:d4:0c:de:a6:36:45:47:a4:97:51:34:de: 94:02:3d:c5:16:00:2d:9c:f8:c0:c1:dc:84:fa:45: c0:dc:c1:d1:e7:2d:c8:ba:55:05:a7:f7:20:f4:2d: a2:67:bb:64:3c:c9:b3:e5:95:8f:6a:43:83:dc:ff: 5a:51:2f:47:73:bc:f7:12:57:98:48:8c:24:fe:a7: 7d:5b:97:a1:33:85:c1:25:5a:ef:47:46:d6:93:80: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:73:54:A0:BD:86:DB:DC:34:31:89:BC:8E:F1:BB:21:80:08:D5 X509v3 Authority Key Identifier: keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1MNzVKC9htvcNDGJvI7xuyGACNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:76c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 38:a9:ed:35:e1:87:a2:2d:95:86:c9:ca:94:d3:ca:f4:51:38: 15:80:e9:9f:27:a3:7c:19:d7:93:c9:c0:b6:f6:c7:67:c6:9a: 31:74:1b:7b:99:7a:47:bf:88:bc:c1:e8:b9:e7:f1:da:35:54: 05:7e:03:6d:65:58:03:c5:e7:73:b8:1c:c2:97:55:36:ee:8c: 32:1a:57:fe:b7:7b:91:c1:41:97:ac:d0:b0:94:fa:e6:95:f3: 49:5b:4f:e3:62:aa:1a:61:2a:90:5f:70:3f:b6:e6:91:82:02: a7:1b:3f:82:3b:bd:5b:74:a8:b5:94:8b:86:01:5a:e9:8f:7e: 7c:a4:32:a9:6f:ac:55:1d:b2:df:2b:a0:b9:6f:04:8b:7c:44: 91:04:09:f1:9a:b8:77:5a:9a:9d:61:c0:0a:5e:b0:30:fe:fa: 1d:1d:6d:93:df:30:bf:25:fa:04:14:62:79:eb:24:13:16:3c: 1f:d5:d9:fd:7f:7b:f2:a8:22:ad:5b:5e:65:d2:70:05:89:80: 37:b7:6f:9d:db:3e:74:1c:f5:5c:5b:39:06:61:17:d9:29:2e: 94:6d:f7:16:84:b7:24:fb:ea:03:5e:96:1d:c7:d6:9b:a9:3a: 41:9a:2f:a8:17:33:54:ef:6b:cf:4e:83:bb:a6:28:7f:ad:bc: 09:50:9e:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FF8L29x2aKDetxvA31shMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh ZmViOTUwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGMzNzM1NGEwYmQ4NmRiZGMzNDMxODliYzhlZjFiYjIxODAwOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6iE+iG/azTKEEGW74ZobFIhGbbN TSXxSLdFAByY0s62f3J8Bze2q4QikiQ5tpHEcKmQQySuqJHsbxKnqQ0+kMy3uhKt ItB6rzLuLNWXsMTZK7mCbYYnr47UBRAqbxcA+K6mZ1p12ZVg2zfVi1m0/eMbe2Ew VpNOpfwio/8mitUtEeqF9ylhnwoE7PSLkxHKydLyB1Pgtnj9yPNfiXQya1Tue5Xu JjnUDN6mNkVHpJdRNN6UAj3FFgAtnPjAwdyE+kXA3MHR5y3IulUFp/cg9C2iZ7tk PMmz5ZWPakOD3P9aUS9Hc7z3EleYSIwk/qd9W5ehM4XBJVrvR0bWk4AA5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNTDc1SgvYbb3DQxibyO8bshgAjVMB8GA1UdIwQY MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct N2Q1OTMwMzNkMDA1LzEvMU1OelZLQzlodHZjTkRHSnZJN3h1eUdBQ05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1 LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgd2wAAB MA0GCSqGSIb3DQEBCwUAA4IBAQA4qe014YeiLZWGycqU08r0UTgVgOmfJ6N8GdeT ycC29sdnxpoxdBt7mXpHv4i8wei55/HaNVQFfgNtZVgDxedzuBzCl1U27owyGlf+ t3uRwUGXrNCwlPrmlfNJW0/jYqoaYSqQX3A/tuaRggKnGz+CO71bdKi1lIuGAVrp j358pDKpb6xVHbLfK6C5bwSLfESRBAnxmrh3WpqdYcAKXrAw/vodHW2T3zC/JfoE FGJ56yQTFjwf1dn9f3vyqCKtW15l0nAFiYA3t2+d2z50HPVcWzkGYRfZKS6UbfcW hLck++oDXpYdx9abqTpBmi+oFzNU72vPToO7pih/rbwJUJ54 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client