This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/mHlUc70rNMbtkPfKuvhCKEylgkY.roa File: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (raw, json) Hash identifier: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs= Subject key identifier: 98:79:54:73:BD:2B:34:C6:ED:90:F7:CA:BA:F8:42:28:4C:A5:82:46 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019B7D5B7139EB00AA490E9FCAAAACF6C153 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/mHlUc70rNMbtkPfKuvhCKEylgkY.roa Signing time: Fri 02 Jan 2026 06:18:23 +0000 ROA not before: Fri 02 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 2a12:5940::/32 maxlen: 32 2a12:5940:1::/48 maxlen: 48 2a12:5940:1000::/36 maxlen: 36 2a12:5940:2000::/36 maxlen: 36 2a12:5940:3000::/36 maxlen: 36 2a12:5940:4000::/36 maxlen: 36 2a12:5940:5000::/36 maxlen: 36 2a12:5940:6000::/36 maxlen: 36 2a12:5940:7000::/36 maxlen: 36 2a12:5940:8000::/36 maxlen: 36 2a12:5940:9000::/36 maxlen: 36 2a12:5940:a000::/36 maxlen: 36 2a12:5940:b000::/36 maxlen: 36 2a12:5940:c000::/36 maxlen: 36 2a12:5940:d000::/36 maxlen: 36 2a12:5940:d000::/48 maxlen: 48 2a12:5940:e000::/36 maxlen: 36 2a12:5940:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:71:39:eb:00:aa:49:0e:9f:ca:aa:ac:f6:c1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98795473bd2b34c6ed90f7cabaf842284ca58246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:24:05:b4:ef:b5:47:dd:e9:b7:66:23:35: 9e:1c:62:97:19:92:be:56:c1:6f:47:a7:6e:78:5a: 54:a1:6b:a1:e5:0a:6f:4f:5b:c7:1f:21:74:3f:6e: 19:20:b5:b8:b9:2f:a1:21:6c:a5:c7:64:68:2f:d3: 7a:e8:4d:ee:cd:c6:8a:d6:c0:db:f4:bb:3f:67:a7: c0:b9:2f:25:e6:29:44:2e:cd:d4:6c:60:c0:6e:f0: d1:3c:8c:75:1b:ad:d6:75:60:75:4f:e3:8e:b7:75: 4d:5a:82:a2:a9:64:67:ed:7a:d9:d4:83:7a:93:16: 66:38:ab:87:b6:98:74:bf:d6:21:dc:90:8e:96:bd: 33:ac:e3:3d:d2:fc:45:69:dc:e9:2a:c3:49:11:6f: 3a:45:e3:63:08:a4:1d:5f:c1:b3:00:81:32:e1:55: 84:ce:8a:e9:f4:9e:51:91:cb:aa:87:cd:13:a5:00: db:15:bf:e2:4e:2c:5a:1e:9f:76:40:8c:3f:90:94: 49:6c:3d:a6:0a:03:91:c8:6a:c2:fd:c5:7a:9e:f8: 28:29:dc:98:5b:3e:81:99:95:0c:54:6c:a4:d1:53: 65:3b:d0:42:0b:8f:12:41:fc:e6:3c:74:7b:1e:f7: 8e:da:d3:d3:ed:3d:72:87:6b:83:e9:9c:ea:38:f0: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:54:73:BD:2B:34:C6:ED:90:F7:CA:BA:F8:42:28:4C:A5:82:46 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/mHlUc70rNMbtkPfKuvhCKEylgkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5940::/32 Signature Algorithm: sha256WithRSAEncryption 42:ca:ec:08:3f:f9:21:e4:6b:55:05:cb:08:01:de:d8:ea:b4: b4:02:db:3b:1b:53:7b:bc:34:f3:2a:ef:fe:07:58:bb:4a:bc: 73:46:d9:0e:2e:92:c5:a2:43:5e:43:d5:27:0b:f6:4e:19:05: b3:8c:6d:65:1e:b7:09:f0:a9:52:ea:9f:12:4d:2b:9b:93:5e: 98:93:12:ad:02:7e:e2:46:f4:04:60:cb:b6:07:b1:81:1c:c4: 1a:4a:d9:4d:95:c1:84:55:ac:14:3a:62:a9:0d:c1:cc:f3:51: 96:59:d2:87:54:d5:50:7c:d9:99:da:6a:66:1f:02:e3:b1:d9: e4:ff:a0:8c:8b:b2:b0:a8:9a:c2:2b:f3:20:56:7a:bb:c9:07: 97:56:f8:0d:d9:71:f8:7c:d2:1d:a7:cd:aa:a7:fa:94:66:94: 95:67:33:41:15:de:55:49:2a:9f:ec:36:cd:3a:48:d5:13:85: 6b:f6:ae:54:94:31:3c:20:cf:c4:63:9b:32:39:12:63:48:e3: ef:ab:3b:66:e2:49:0e:93:b2:82:5a:75:46:3e:dc:34:87:80: 30:26:bc:61:5e:56:1c:79:59:c2:4f:45:ea:85:96:60:61:d4: e1:0a:fd:2d:49:f0:37:94:fe:a8:0f:5a:51:35:12:b2:58:a0: 8d:80:86:0e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W3E56wCqSQ6fyqqs9sFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODc5NTQ3M2JkMmIzNGM2ZWQ5MGY3Y2FiYWY4NDIyODRjYTU4MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ8kBbTvtUfd6bdmIzWeHGKXGZK+ VsFvR6dueFpUoWuh5QpvT1vHHyF0P24ZILW4uS+hIWylx2RoL9N66E3uzcaK1sDb 9Ls/Z6fAuS8l5ilELs3UbGDAbvDRPIx1G63WdWB1T+OOt3VNWoKiqWRn7XrZ1IN6 kxZmOKuHtph0v9Yh3JCOlr0zrOM90vxFadzpKsNJEW86ReNjCKQdX8GzAIEy4VWE zorp9J5Rkcuqh80TpQDbFb/iTixaHp92QIw/kJRJbD2mCgORyGrC/cV6nvgoKdyY Wz6BmZUMVGyk0VNlO9BCC48SQfzmPHR7HveO2tPT7T1yh2uD6ZzqOPBhKQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJh5VHO9KzTG7ZD3yrr4QihMpYJGMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvbUhsVWM3MHJOTWJ0a1BmS3V2aENLRXlsZ2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJZQDAN BgkqhkiG9w0BAQsFAAOCAQEAQsrsCD/5IeRrVQXLCAHe2Oq0tALbOxtTe7w08yrv /gdYu0q8c0bZDi6SxaJDXkPVJwv2ThkFs4xtZR63CfCpUuqfEk0rm5NemJMSrQJ+ 4kb0BGDLtgexgRzEGkrZTZXBhFWsFDpiqQ3BzPNRllnSh1TVUHzZmdpqZh8C47HZ 5P+gjIuysKiawivzIFZ6u8kHl1b4Ddlx+HzSHafNqqf6lGaUlWczQRXeVUkqn+w2 zTpI1ROFa/auVJQxPCDPxGObMjkSY0jj76s7ZuJJDpOyglp1Rj7cNIeAMCa8YV5W HHlZwk9F6oWWYGHU4Qr9LUnwN5T+qA9aUTUSsligjYCGDg== -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:16 2026 by rpki-client