This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa File: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (raw, json) Hash identifier: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns= Subject key identifier: 98:23:EF:55:9E:76:72:AB:BF:ED:F4:22:61:FC:4D:59:38:26:23:25 Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Certificate serial: 019B7759619441B076327C9899ED5DE7F01A Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209968 IP address blocks: 2a0e:48c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:94:41:b0:76:32:7c:98:99:ed:5d:e7:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9823ef559e7672abbfedf42261fc4d5938262325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:51:45:f4:b2:b9:57:44:7a:93:bf:6c:a5: f2:70:37:74:5c:b9:24:69:b0:94:15:c3:8d:3f:a2: d3:95:b7:30:b5:71:1b:62:d1:6b:63:64:e2:02:f6: 95:db:49:7c:1c:df:84:ae:d2:b5:05:89:24:d2:6c: 1b:29:fd:7c:48:f2:7f:10:24:e1:b4:eb:c3:30:d2: 4a:e3:32:3e:b1:34:3d:45:b6:5b:42:1c:f9:d4:cc: 81:82:d9:53:31:30:08:b5:7c:eb:24:90:06:86:c7: e9:38:eb:ad:71:c7:54:79:16:39:4a:b4:05:33:04: 9b:1e:dd:13:8f:95:fd:7d:b0:59:4e:75:71:76:9a: fe:53:03:0a:04:ec:d8:8d:9a:88:94:e1:e9:f0:b6: e3:28:e1:8d:d7:c7:74:fe:27:3f:37:d3:01:c7:96: 11:74:41:d1:c1:7a:4b:ee:dd:f2:7a:54:c7:48:24: e5:07:e4:19:0a:de:ab:96:06:15:e0:1c:72:66:cd: 9b:fa:9b:c9:c6:2e:f2:fa:3a:a6:c5:79:81:3e:ab: 08:fc:35:9c:1f:b2:af:e9:ba:b6:28:0c:34:d6:40: f0:c2:92:45:a7:b0:da:dd:1d:90:0b:ff:b1:b4:2e: ab:35:95:d1:15:08:82:17:2f:eb:61:e8:42:c4:7d: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:23:EF:55:9E:76:72:AB:BF:ED:F4:22:61:FC:4D:59:38:26:23:25 X509v3 Authority Key Identifier: keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:48c0::/29 Signature Algorithm: sha256WithRSAEncryption 71:d8:63:90:c9:21:86:2a:31:ff:c1:dc:67:f4:0b:3f:c9:6d: 4f:8c:db:25:2a:b9:eb:7e:47:9e:fa:cc:af:69:ca:0f:f1:08: 6e:b2:0f:ea:0a:04:da:33:fc:e0:00:d1:35:19:09:21:6a:c0: b8:64:0f:98:31:7e:75:5f:82:9b:4d:6a:d1:41:28:1b:58:d5: 45:4d:be:7c:24:56:78:0e:04:97:24:3e:e3:0f:24:99:0a:59: 53:bd:5a:54:cd:e9:48:09:18:da:03:09:c0:1d:04:a8:7b:8a: 71:47:cc:dc:b8:e2:4f:6e:12:02:4e:1c:5c:f6:83:28:8d:b0: 37:52:d1:60:77:61:16:e9:1b:2a:c3:25:e7:5e:91:6d:52:14: 17:f8:bb:99:2a:36:5b:a2:73:fc:8a:b7:35:64:69:66:9a:3d: e2:5e:3d:9e:5b:a6:a5:e1:30:aa:dd:65:ba:58:a2:be:da:4c: b7:c3:3e:0a:4b:61:f5:c4:e0:6f:6f:82:25:98:d0:c6:60:1a: fc:f9:52:4a:84:01:f9:0e:6a:a7:d4:2e:10:6c:9a:94:ca:b9: 6d:ff:c5:cd:18:09:d7:24:03:98:dc:29:51:b8:ed:1a:89:b9: 0d:a3:ae:4b:82:b7:09:a6:a2:ed:21:03:7f:71:f7:6e:72:14: de:5f:f9:f8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WWGUQbB2MnyYme1d5/AaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0 NmY1NWMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODIzZWY1NTllNzY3MmFiYmZlZGY0MjI2MWZjNGQ1OTM4MjYyMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMVRRfSyuVdEepO/bKXycDd0XLkk abCUFcONP6LTlbcwtXEbYtFrY2TiAvaV20l8HN+ErtK1BYkk0mwbKf18SPJ/ECTh tOvDMNJK4zI+sTQ9RbZbQhz51MyBgtlTMTAItXzrJJAGhsfpOOutccdUeRY5SrQF MwSbHt0Tj5X9fbBZTnVxdpr+UwMKBOzYjZqIlOHp8LbjKOGN18d0/ic/N9MBx5YR dEHRwXpL7t3yelTHSCTlB+QZCt6rlgYV4BxyZs2b+pvJxi7y+jqmxXmBPqsI/DWc H7Kv6bq2KAw01kDwwpJFp7Da3R2QC/+xtC6rNZXRFQiCFy/rYehCxH1fywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJgj71WednKrv+30ImH8TVk4JiMlMB8GA1UdIwQY MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt YWQyOGZhOTY2YjUxLzEvbUNQdlZaNTJjcXVfN2ZRaVlmeE5XVGdtSXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg5IwDAN BgkqhkiG9w0BAQsFAAOCAQEAcdhjkMkhhiox/8HcZ/QLP8ltT4zbJSq5635HnvrM r2nKD/EIbrIP6goE2jP84ADRNRkJIWrAuGQPmDF+dV+Cm01q0UEoG1jVRU2+fCRW eA4ElyQ+4w8kmQpZU71aVM3pSAkY2gMJwB0EqHuKcUfM3LjiT24SAk4cXPaDKI2w N1LRYHdhFukbKsMl516RbVIUF/i7mSo2W6Jz/Iq3NWRpZpo94l49nlumpeEwqt1l uliivtpMt8M+Ckth9cTgb2+CJZjQxmAa/PlSSoQB+Q5qp9QuEGyalMq5bf/FzRgJ 1yQDmNwpUbjtGom5DaOuS4K3Caai7SEDf3H3bnIU3l/5+A== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:33 2026 by rpki-client