This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MWV90LWxUa-WUsz9LX9npKKVr3c.roa File: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (raw, json) Hash identifier: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s= Subject key identifier: 31:65:7D:D0:B5:B1:51:AF:96:52:CC:FD:2D:7F:67:A4:A2:95:AF:77 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC876CC87B806C6BFC28000258B3DD9 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MWV90LWxUa-WUsz9LX9npKKVr3c.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 2a0d:d940:b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:76:cc:87:b8:06:c6:bf:c2:80:00:25:8b:3d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31657dd0b5b151af9652ccfd2d7f67a4a295af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:36:05:55:99:df:81:e4:aa:39:ad:2a:2f: 03:bb:cc:52:a3:5f:7c:92:5d:00:32:32:41:12:d4: 41:a1:f3:78:57:bb:fc:2b:b0:66:8c:5c:de:8f:0a: 0c:1b:0e:2b:98:2f:76:65:8e:b7:cc:c1:5b:8f:ed: 25:34:fb:c2:60:b8:fa:1e:55:9e:83:70:51:fa:93: 59:ac:f5:b3:5e:11:bf:a7:e4:6c:be:44:f2:05:bd: c3:cc:30:b9:ad:40:46:b6:99:b4:f6:a2:3e:68:47: 7e:50:8f:da:23:c8:d8:7a:47:1f:14:69:91:ff:0b: 97:ec:e5:1f:5b:66:42:36:93:0e:cc:54:00:78:fe: 5a:9b:ca:b9:2e:e9:46:63:80:57:6f:a4:d3:2a:22: ac:e1:88:da:aa:64:d0:72:0f:45:33:55:c1:2f:31: 8f:b6:12:fe:d9:f8:95:da:a1:96:a1:7b:1e:1a:f9: f7:c7:1e:20:d3:25:a9:8a:39:c1:3b:72:c8:72:09: 95:cd:d8:85:1d:03:2e:21:3f:da:37:fb:02:a4:08: 1b:01:63:35:3d:de:48:a0:e0:0c:a7:ed:e9:1c:85: 31:24:90:03:bb:f4:98:10:54:03:2f:84:b7:24:ee: 04:5b:45:a1:bb:c3:b9:8c:f7:64:74:2c:cb:f0:3a: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:65:7D:D0:B5:B1:51:AF:96:52:CC:FD:2D:7F:67:A4:A2:95:AF:77 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MWV90LWxUa-WUsz9LX9npKKVr3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:b1::/48 Signature Algorithm: sha256WithRSAEncryption ac:8f:2d:10:13:2a:cc:37:69:99:f7:ce:18:4f:b1:5d:86:23: 8c:5a:54:b1:22:fa:21:df:a0:1e:c9:bb:c3:86:94:c5:e5:a7: 2b:58:df:d7:54:47:be:64:1c:56:70:4c:1a:7e:e2:47:8e:2c: 16:8c:6f:a1:bf:20:61:96:67:3c:80:52:5b:ca:f5:20:25:a9: 8c:c7:14:9b:3a:ed:34:34:8e:b7:35:ad:c9:a6:85:2c:7a:9a: d7:1e:f4:57:66:16:7d:23:a3:c8:46:15:74:24:28:e9:20:f6: 60:e0:e7:86:5b:57:fb:e7:57:85:eb:f8:84:f0:c9:3e:b6:d2: a4:e5:e7:c2:dd:fe:00:7d:9f:9c:09:1b:36:46:e1:a2:62:f3: 08:97:5f:54:c9:d8:cc:8d:71:4a:c6:d7:b3:89:02:52:eb:94: 80:cc:db:c9:4d:e2:d5:0e:12:af:ea:d5:c7:26:4d:2c:0d:82: 03:aa:1a:33:73:15:d1:00:fd:e1:42:53:2c:8a:56:e8:44:46: 9c:5d:dc:39:1d:d0:4f:16:44:30:91:ae:43:fb:f9:32:d2:f1: 97:c7:2f:47:a9:48:a8:38:4f:77:ac:b2:4f:ca:94:55:c4:d6: 2d:57:38:88:40:aa:5e:ef:83:a8:3a:d5:32:7a:46:af:af:9b: 3a:86:41:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yHbMh7gGxr/CgAAliz3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTY1N2RkMGI1YjE1MWFmOTY1MmNjZmQyZDdmNjdhNGEyOTVhZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXY2BVWZ34HkqjmtKi8Du8xSo198 kl0AMjJBEtRBofN4V7v8K7BmjFzejwoMGw4rmC92ZY63zMFbj+0lNPvCYLj6HlWe g3BR+pNZrPWzXhG/p+RsvkTyBb3DzDC5rUBGtpm09qI+aEd+UI/aI8jYekcfFGmR /wuX7OUfW2ZCNpMOzFQAeP5am8q5LulGY4BXb6TTKiKs4YjaqmTQcg9FM1XBLzGP thL+2fiV2qGWoXseGvn3xx4g0yWpijnBO3LIcgmVzdiFHQMuIT/aN/sCpAgbAWM1 Pd5IoOAMp+3pHIUxJJADu/SYEFQDL4S3JO4EW0Whu8O5jPdkdCzL8Drx4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDFlfdC1sVGvllLM/S1/Z6Sila93MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvTVdWOTBMV3hVYS1XVXN6OUxYOW5wS0tWcjNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQACx MA0GCSqGSIb3DQEBCwUAA4IBAQCsjy0QEyrMN2mZ984YT7FdhiOMWlSxIvoh36Ae ybvDhpTF5acrWN/XVEe+ZBxWcEwafuJHjiwWjG+hvyBhlmc8gFJbyvUgJamMxxSb Ou00NI63Na3JpoUseprXHvRXZhZ9I6PIRhV0JCjpIPZg4OeGW1f751eF6/iE8Mk+ ttKk5efC3f4AfZ+cCRs2RuGiYvMIl19UydjMjXFKxteziQJS65SAzNvJTeLVDhKv 6tXHJk0sDYIDqhozcxXRAP3hQlMsilboREacXdw5HdBPFkQwka5D+/ky0vGXxy9H qUioOE93rLJPypRVxNYtVziIQKpe74OoOtUyekavr5s6hkHr -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client