This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mti-m63XL7QZjwNMXfv9P5fqpW0.roa File: mti-m63XL7QZjwNMXfv9P5fqpW0.roa (raw, json) Hash identifier: Kd+DjaZjs9Ag7P6slVCuuD+qgxYPJyxNQqrI8AjbtA4= Subject key identifier: 9A:D8:BE:9B:AD:D7:2F:B4:19:8F:03:4C:5D:FB:FD:3F:97:EA:A5:6D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CD259D79A93A0DAEA2AD650E7221 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mti-m63XL7QZjwNMXfv9P5fqpW0.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207083 IP address blocks: 2a0b:b87:ffe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cd:25:9d:79:a9:3a:0d:ae:a2:ad:65:0e:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ad8be9badd72fb4198f034c5dfbfd3f97eaa56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:26:d4:3f:16:6d:af:2b:6b:0e:04:7e:9c: 3a:3f:50:db:1d:df:ce:df:d6:41:2d:e6:46:0f:5f: 30:12:35:c9:43:e8:e1:db:44:0f:34:5d:34:38:7c: 05:94:e0:f0:26:ac:f0:04:b8:b9:7b:6f:bd:60:fb: d3:b5:e3:a2:e4:ee:af:58:03:e0:aa:60:89:d1:df: ee:84:9f:f4:93:0b:25:ca:5c:15:ed:7a:dc:9f:2a: 3e:cb:c4:50:e2:4a:3d:b6:a5:c1:85:81:17:e8:71: ea:6a:4c:4a:87:b8:42:67:94:9e:f5:38:ad:20:af: 27:5e:27:9f:7e:e7:6b:16:5d:49:c8:fa:69:1e:3e: 7b:4f:7a:95:e2:bc:da:32:75:fb:d3:ec:29:8f:15: 5e:ec:d5:ce:18:39:8f:bb:98:93:79:09:05:fd:09: 75:4a:dc:ae:4d:b6:96:a7:f5:b9:12:d0:f3:23:3e: 8c:3c:80:29:23:8e:c4:4f:d2:11:af:16:d6:37:f7: c1:8f:dd:bd:af:f7:1a:d2:bb:ac:a9:40:ec:2f:4f: d6:ac:ab:af:14:35:31:bc:90:f4:73:4b:fc:8d:c4: 07:8c:4f:73:8c:3f:67:64:d7:1b:de:c0:b0:f4:3c: 2f:aa:80:4f:96:f6:df:88:02:86:57:98:37:8f:08: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:BE:9B:AD:D7:2F:B4:19:8F:03:4C:5D:FB:FD:3F:97:EA:A5:6D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mti-m63XL7QZjwNMXfv9P5fqpW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffe4::/48 Signature Algorithm: sha256WithRSAEncryption 72:42:75:f2:56:be:38:82:ef:58:23:2a:c2:df:76:ff:96:9f: 97:6e:a6:96:c6:39:78:02:4d:50:12:aa:fe:22:85:7e:b4:57: f6:4e:79:c3:28:ae:01:1e:f2:9e:09:a6:a8:1a:f7:c3:4c:06: 67:67:0f:73:4c:b0:63:2f:d4:0d:b8:db:12:a7:47:c9:93:04: 77:3a:f8:98:11:35:7c:6f:64:b5:93:1b:23:88:19:d2:61:c3: fa:2c:0a:dd:b0:54:35:47:7b:6d:fd:6a:2e:22:03:8d:16:cf: f7:b0:3c:db:b1:de:6d:d2:8a:31:fe:d7:e0:5f:7e:78:3e:d5: 50:64:cc:16:f2:5c:e5:f7:d4:8a:26:55:c0:35:41:30:db:17: 1d:f3:69:3e:10:1f:37:73:aa:1a:bc:61:c0:2a:cf:d4:62:74: 0b:7f:c9:3c:e3:a1:17:d9:cf:d6:60:72:9f:d6:74:99:41:33: a0:90:dd:22:4c:14:08:e1:f6:c6:1a:22:80:68:44:41:16:59: 6b:15:68:0b:19:a8:87:02:0b:54:c4:db:8e:68:d3:95:94:a3: df:7e:23:f4:b1:ad:a5:96:b2:c2:0f:7a:76:20:8b:ff:95:43: 5e:b9:e6:79:bb:72:4a:8b:55:ee:e1:90:a4:da:ab:f6:bb:9d: b5:6c:0f:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gs0lnXmpOg2uoq1lDnIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWQ4YmU5YmFkZDcyZmI0MTk4ZjAzNGM1ZGZiZmQzZjk3ZWFhNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Ym1D8Wba8raw4Efpw6P1DbHd/O 39ZBLeZGD18wEjXJQ+jh20QPNF00OHwFlODwJqzwBLi5e2+9YPvTteOi5O6vWAPg qmCJ0d/uhJ/0kwslylwV7Xrcnyo+y8RQ4ko9tqXBhYEX6HHqakxKh7hCZ5Se9Tit IK8nXieffudrFl1JyPppHj57T3qV4rzaMnX70+wpjxVe7NXOGDmPu5iTeQkF/Ql1 StyuTbaWp/W5EtDzIz6MPIApI47ET9IRrxbWN/fBj929r/ca0rusqUDsL0/WrKuv FDUxvJD0c0v8jcQHjE9zjD9nZNcb3sCw9DwvqoBPlvbfiAKGV5g3jwhKNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJrYvput1y+0GY8DTF37/T+X6qVtMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvbXRpLW02M1hMN1FaandOTVhmdjlQNWZxcFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//k MA0GCSqGSIb3DQEBCwUAA4IBAQByQnXyVr44gu9YIyrC33b/lp+XbqaWxjl4Ak1Q Eqr+IoV+tFf2TnnDKK4BHvKeCaaoGvfDTAZnZw9zTLBjL9QNuNsSp0fJkwR3OviY ETV8b2S1kxsjiBnSYcP6LArdsFQ1R3tt/WouIgONFs/3sDzbsd5t0oox/tfgX354 PtVQZMwW8lzl99SKJlXANUEw2xcd82k+EB83c6oavGHAKs/UYnQLf8k846EX2c/W YHKf1nSZQTOgkN0iTBQI4fbGGiKAaERBFllrFWgLGaiHAgtUxNuOaNOVlKPffiP0 sa2llrLCD3p2IIv/lUNeueZ5u3JKi1Xu4ZCk2qv2u521bA8s -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:40 2026 by rpki-client