This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MwvZOBj0s4qjbTXNydp_HEWBFGg.roa File: MwvZOBj0s4qjbTXNydp_HEWBFGg.roa (raw, json) Hash identifier: H3cu739yBXQz+abiITzDIfyl+CQIjQK1P9/7W80OXIc= Subject key identifier: 33:0B:D9:38:18:F4:B3:8A:A3:6D:35:CD:C9:DA:7F:1C:45:81:14:68 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B8433AEB6DE87319490349E180BA504B6 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MwvZOBj0s4qjbTXNydp_HEWBFGg.roa Signing time: Sat 03 Jan 2026 14:12:18 +0000 ROA not before: Sat 03 Jan 2026 14:12:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214079 IP address blocks: 2a0d:d940:40::/44 maxlen: 44 2a0d:d940:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:84:33:ae:b6:de:87:31:94:90:34:9e:18:0b:a5:04:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 3 14:12:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=330bd93818f4b38aa36d35cdc9da7f1c45811468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:58:27:bd:96:da:9c:0b:22:da:bb:c1:06: 68:64:10:8b:6b:e3:06:8a:e7:d9:3a:1e:6e:f0:7b: 54:81:5d:27:4f:99:54:66:10:63:61:22:f0:08:82: 77:8b:6a:b6:b0:7d:7f:37:42:61:d7:8f:8c:87:a3: e6:67:07:89:ce:35:6e:82:ef:21:a6:78:50:32:b4: 66:3e:45:25:9e:18:37:77:b2:d1:9e:14:d4:21:9e: fa:90:50:43:6f:46:aa:ce:35:52:bd:ce:ff:bb:d4: c9:a5:ec:b9:b2:ce:11:2b:b2:d1:ca:0a:0d:33:f8: 91:66:8c:11:c3:cf:77:b9:62:37:6d:b1:10:a9:5d: 2c:85:fd:72:ac:1a:12:15:be:d3:22:10:54:2e:66: 49:76:d3:63:c3:13:71:31:7f:12:7e:9b:73:10:08: b5:71:6f:4e:27:ef:ef:8c:61:b7:78:00:ea:4a:a5: 2f:e5:5a:70:98:e7:ed:43:1e:71:91:d3:6c:1b:b3: b0:68:aa:e6:26:23:9f:da:47:d5:c1:25:0c:59:f6: 03:9e:cc:1a:9b:7b:32:b5:83:3c:da:cc:f9:0f:b1: 61:e5:77:7b:7b:e0:d5:60:c6:91:cc:00:9e:cc:3a: 39:70:8d:ca:51:0f:5e:62:40:6f:06:b2:85:3f:04: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:D9:38:18:F4:B3:8A:A3:6D:35:CD:C9:DA:7F:1C:45:81:14:68 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MwvZOBj0s4qjbTXNydp_HEWBFGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:40::/44 2a0d:d940:2003::/48 Signature Algorithm: sha256WithRSAEncryption 8c:79:33:f2:a6:ae:55:7a:ce:66:8b:43:65:08:60:5f:cf:58: 61:d3:f7:6a:43:e7:6f:12:71:0b:5f:e1:37:48:c2:ca:10:58: 1d:8f:20:15:a5:92:7a:a0:06:b1:2f:63:a5:a3:8c:53:57:55: 10:31:4b:a1:83:47:94:6b:2a:92:09:7a:be:ee:c4:3b:93:44: fa:63:d1:a1:be:a7:f9:23:0d:97:d3:47:2e:e9:4b:48:22:ed: a4:b8:5f:ba:31:f6:8e:68:a3:41:c5:82:8b:74:e7:e7:ac:e0: 80:34:dc:5d:69:f5:a6:cd:86:77:b6:fc:d1:1d:b7:af:78:22: fd:1d:6c:4a:f3:25:b1:0a:d0:e9:44:64:8b:ba:ac:84:06:b8: 1a:26:35:0a:54:a3:c4:77:5e:1d:93:1c:ff:b8:55:aa:c4:4a: 1f:c3:73:05:b0:e8:fa:75:43:bc:48:a3:0e:06:6b:63:53:df: 40:c1:72:61:af:72:74:b3:41:91:43:ee:28:ea:82:8c:ce:06: f1:83:d7:1d:52:35:84:cc:e3:c5:f4:6f:72:54:6c:a4:fb:b7: d3:de:16:1b:1b:72:10:92:31:8c:4b:11:28:57:2a:cb:e4:3d: 95:44:81:07:cf:68:ac:16:2d:20:09:22:a7:6c:8b:73:b6:9d: 19:36:70:bd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuEM6623ocxlJA0nhgLpQS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAzMTQxMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzBiZDkzODE4ZjRiMzhhYTM2ZDM1Y2RjOWRhN2YxYzQ1ODExNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBZYJ72W2pwLItq7wQZoZBCLa+MG iufZOh5u8HtUgV0nT5lUZhBjYSLwCIJ3i2q2sH1/N0Jh14+Mh6PmZweJzjVugu8h pnhQMrRmPkUlnhg3d7LRnhTUIZ76kFBDb0aqzjVSvc7/u9TJpey5ss4RK7LRygoN M/iRZowRw893uWI3bbEQqV0shf1yrBoSFb7TIhBULmZJdtNjwxNxMX8SfptzEAi1 cW9OJ+/vjGG3eADqSqUv5VpwmOftQx5xkdNsG7OwaKrmJiOf2kfVwSUMWfYDnswa m3sytYM82sz5D7Fh5Xd7e+DVYMaRzACezDo5cI3KUQ9eYkBvBrKFPwTpTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDML2TgY9LOKo201zcnafxxFgRRoMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvTXd2Wk9CajBzNHFqYlRYTnlkcF9IRVdCRkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg3ZQABA AwcAKg3ZQCADMA0GCSqGSIb3DQEBCwUAA4IBAQCMeTPypq5Ves5mi0NlCGBfz1hh 0/dqQ+dvEnELX+E3SMLKEFgdjyAVpZJ6oAaxL2Olo4xTV1UQMUuhg0eUayqSCXq+ 7sQ7k0T6Y9Ghvqf5Iw2X00cu6UtIIu2kuF+6MfaOaKNBxYKLdOfnrOCANNxdafWm zYZ3tvzRHbeveCL9HWxK8yWxCtDpRGSLuqyEBrgaJjUKVKPEd14dkxz/uFWqxEof w3MFsOj6dUO8SKMOBmtjU99AwXJhr3J0s0GRQ+4o6oKMzgbxg9cdUjWEzOPF9G9y VGyk+7fT3hYbG3IQkjGMSxEoVyrL5D2VRIEHz2isFi0gCSKnbItztp0ZNnC9 -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:04 2026 by rpki-client