This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MB0Wu2hz-ofU6OYskpBZ65gjG8Y.roa File: MB0Wu2hz-ofU6OYskpBZ65gjG8Y.roa (raw, json) Hash identifier: NX+XKKR+ysLMWDS9wcxa1qlecHVdqUSZupTCNATBZgk= Subject key identifier: 30:1D:16:BB:68:73:FA:87:D4:E8:E6:2C:92:90:59:EB:98:23:1B:C6 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019C03EFC31CEECF78FE2CF9FEDA945E8113 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MB0Wu2hz-ofU6OYskpBZ65gjG8Y.roa Signing time: Wed 28 Jan 2026 09:29:30 +0000 ROA not before: Wed 28 Jan 2026 09:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11967 IP address blocks: 2a0d:d940:70::/44 maxlen: 48 2a0d:d940:2002::/48 maxlen: 48 2a0d:d940:2004::/48 maxlen: 48 2a0d:d940:2006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:ef:c3:1c:ee:cf:78:fe:2c:f9:fe:da:94:5e:81:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 28 09:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301d16bb6873fa87d4e8e62c929059eb98231bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:02:7d:ec:fa:95:66:ee:1f:f7:fd:71:2f: 5a:b0:eb:78:ae:75:ea:70:fb:3c:26:f4:6d:84:c8: 6a:f1:c8:88:ad:eb:e1:28:14:e5:c5:65:01:73:1d: f1:00:ed:11:be:32:f0:b8:e8:41:f4:ae:54:c5:6d: 8c:74:1b:6c:d8:80:2c:3f:05:54:00:17:ff:94:66: b0:07:47:7e:97:39:f6:b0:f0:c1:92:88:d5:26:4b: 43:3d:80:57:f1:6b:b0:11:b2:58:e8:33:79:9e:ed: 26:95:cf:3e:ae:82:67:7a:11:73:1a:59:d8:a8:9c: 54:b4:26:64:77:04:50:31:0e:bf:b9:02:38:89:a1: 5d:2d:4f:f3:5b:5a:dc:88:56:b8:8b:18:76:3c:70: a5:a2:d4:ca:57:dd:9d:90:34:6d:bb:78:eb:af:cb: 21:bf:d5:86:87:a7:30:2a:9c:e1:c8:6a:f6:99:c1: 74:3a:44:64:51:03:04:34:a9:2e:07:88:9e:bd:ca: 91:6f:5a:42:4f:50:4e:65:04:78:5d:84:e6:be:b6: 9d:f4:b2:f6:79:82:48:dc:09:8e:0d:c3:b7:00:4d: 60:ce:f9:19:50:6a:cc:a0:8b:fa:06:dc:95:5e:6c: c5:1e:50:f9:8c:55:bb:82:ed:b1:76:1c:f2:1f:f4: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1D:16:BB:68:73:FA:87:D4:E8:E6:2C:92:90:59:EB:98:23:1B:C6 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MB0Wu2hz-ofU6OYskpBZ65gjG8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:70::/44 2a0d:d940:2002::/48 2a0d:d940:2004::/48 2a0d:d940:2006::/48 Signature Algorithm: sha256WithRSAEncryption b0:14:aa:c2:9d:90:f6:c7:2f:c2:1a:27:3b:7e:c8:60:78:3c: bc:ea:2f:6c:a5:54:65:6b:22:b8:0b:32:12:b6:bb:79:73:29: 39:0e:59:b7:49:3f:aa:9f:b3:44:16:1e:ca:3f:cc:6c:66:71: 93:7c:e7:a9:1b:b7:04:9e:11:68:8d:28:01:ee:76:83:dc:e0: ed:2f:02:d2:0e:f6:54:d8:93:19:ae:71:de:01:ad:a5:e4:b0: 4d:d5:59:eb:3d:5e:d9:09:06:99:b1:81:28:43:86:20:30:cc: 57:57:16:96:4d:b7:2d:6c:10:bf:f3:4b:c9:45:49:a9:4f:f0: 5a:68:2b:20:6b:65:00:39:84:72:ba:5e:cd:90:01:c7:a9:74: 7a:ff:17:36:06:b2:f3:c8:6a:7a:65:06:e3:d7:96:69:ae:08: 2e:e0:78:e3:04:3f:1f:18:f6:f1:5e:a9:10:6a:c9:42:bd:3a: 1e:14:ec:00:cf:c4:d3:70:c1:e2:7c:a6:e6:19:c6:01:b1:af: 58:59:30:d5:e6:d3:d2:7d:6b:e0:f2:c2:35:8b:23:1d:9c:f6: 5b:a6:d6:b3:45:6f:57:a0:8e:1b:0a:c2:3d:d9:db:9a:e2:d6: e5:4a:68:72:81:ae:ff:c0:e8:45:a5:8e:67:b0:20:9a:b6:05: 8c:45:1e:0e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwD78Mc7s94/iz5/tqUXoETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTI4MDkyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFkMTZiYjY4NzNmYTg3ZDRlOGU2MmM5MjkwNTllYjk4MjMxYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNACfez6lWbuH/f9cS9asOt4rnXq cPs8JvRthMhq8ciIrevhKBTlxWUBcx3xAO0RvjLwuOhB9K5UxW2MdBts2IAsPwVU ABf/lGawB0d+lzn2sPDBkojVJktDPYBX8WuwEbJY6DN5nu0mlc8+roJnehFzGlnY qJxUtCZkdwRQMQ6/uQI4iaFdLU/zW1rciFa4ixh2PHClotTKV92dkDRtu3jrr8sh v9WGh6cwKpzhyGr2mcF0OkRkUQMENKkuB4ievcqRb1pCT1BOZQR4XYTmvrad9LL2 eYJI3AmODcO3AE1gzvkZUGrMoIv6BtyVXmzFHlD5jFW7gu2xdhzyH/Q7HwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDAdFrtoc/qH1OjmLJKQWeuYIxvGMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvTUIwV3UyaHotb2ZVNk9Zc2twQlo2NWdqRzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKg3ZQABw AwcAKg3ZQCACAwcAKg3ZQCAEAwcAKg3ZQCAGMA0GCSqGSIb3DQEBCwUAA4IBAQCw FKrCnZD2xy/CGic7fshgeDy86i9spVRlayK4CzIStrt5cyk5Dlm3ST+qn7NEFh7K P8xsZnGTfOepG7cEnhFojSgB7naD3ODtLwLSDvZU2JMZrnHeAa2l5LBN1VnrPV7Z CQaZsYEoQ4YgMMxXVxaWTbctbBC/80vJRUmpT/BaaCsga2UAOYRyul7NkAHHqXR6 /xc2BrLzyGp6ZQbj15Zprggu4HjjBD8fGPbxXqkQaslCvToeFOwAz8TTcMHifKbm GcYBsa9YWTDV5tPSfWvg8sI1iyMdnPZbptazRW9XoI4bCsI92dua4tblSmhyga7/ wOhFpY5nsCCatgWMRR4O -----END CERTIFICATE-----Generated at Mon Feb 2 09:41:29 2026 by rpki-client