This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/rMHgLwq1dgxl2KpsUSthXs0MWBk.roa File: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (raw, json) Hash identifier: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I= Subject key identifier: AC:C1:E0:2F:0A:B5:76:0C:65:D8:AA:6C:51:2B:61:5E:CD:0C:58:19 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7885C15E17487EEF998A08B2AA53 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/rMHgLwq1dgxl2KpsUSthXs0MWBk.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57934 IP address blocks: 2a13:b487:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:78:85:c1:5e:17:48:7e:ef:99:8a:08:b2:aa:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc1e02f0ab5760c65d8aa6c512b615ecd0c5819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:0e:6a:62:3b:3d:7b:6f:8c:c9:86:c1:54: c3:2b:03:ae:40:eb:b0:49:b1:2f:cc:0f:13:07:fe: ac:2f:fb:cb:d5:92:72:9d:7a:15:b4:56:d4:02:37: 5e:6e:2a:13:0f:6d:cc:67:ee:b7:40:cf:67:39:df: 54:d7:b0:a9:97:4f:72:f5:ce:3c:cb:61:0a:e2:7f: c6:7a:5a:7e:55:ad:8d:39:25:29:c9:06:1e:48:7d: a9:5a:24:41:bd:1d:81:32:84:62:a9:ac:42:9c:d7: 65:b4:fb:94:83:19:8a:c7:26:b8:36:c3:85:12:9d: 53:fb:9f:66:c0:fc:81:68:02:d8:d5:76:02:2f:32: 4c:92:7f:5a:99:36:f1:8d:32:f5:a0:05:15:a1:18: f3:42:59:c2:ca:59:c9:c6:11:64:0b:a0:38:2a:1c: f7:8d:1b:74:2c:87:f6:3a:1b:99:6d:18:cf:f1:1f: 38:2f:bd:17:80:73:44:58:a3:5e:61:ab:d5:3a:aa: f5:73:a1:5e:c9:3a:42:d1:67:a7:80:db:14:86:e4: 67:2c:e5:cd:f2:cf:94:b5:b2:c5:e1:ad:f9:32:da: 03:95:2a:27:e2:b0:45:28:d5:a9:ff:96:39:50:05: a3:09:f2:51:95:ca:fb:e4:86:80:a1:5c:1c:11:1a: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C1:E0:2F:0A:B5:76:0C:65:D8:AA:6C:51:2B:61:5E:CD:0C:58:19 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/rMHgLwq1dgxl2KpsUSthXs0MWBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:1000::/40 Signature Algorithm: sha256WithRSAEncryption 43:df:7f:84:78:9f:a6:b6:18:6d:b4:cf:b7:cc:75:b8:05:43: ed:2a:67:29:11:4c:e1:24:1f:2b:e2:d4:87:59:74:56:6e:63: 5a:2f:78:37:d3:2f:35:6e:57:80:3e:53:1a:67:2a:38:05:cd: 66:4f:ec:7d:fd:c2:bb:8b:e2:43:33:a6:8e:0e:0a:b9:14:0c: 93:7c:ed:aa:c1:b6:1c:b0:59:71:2d:ba:ae:45:26:51:a8:f9: b9:cc:7d:d4:dd:41:3c:6c:a6:d2:6e:17:3c:06:ba:3b:e4:a3: 88:c4:80:1b:8a:11:69:a0:44:f7:20:30:36:26:ae:50:c6:18: 2c:02:8a:a6:73:24:20:5d:0f:3d:c1:53:f2:f0:b7:88:9e:55: b0:58:05:86:52:20:3f:71:9c:e4:80:6a:c8:57:e0:b9:9d:5e: 0d:f5:1c:b6:8d:93:77:27:2a:a6:c9:27:ed:42:51:4a:0c:cb: 7d:24:ed:bc:56:08:f6:c1:c0:44:33:94:87:3c:45:a8:00:a6: da:60:28:3b:89:fd:47:85:31:36:a8:5d:9f:a9:7c:67:c3:3e: 5d:a1:a7:e1:52:c9:eb:d5:be:90:2a:b7:a2:ce:42:13:42:b7: dd:4f:48:14:cb:6a:29:be:99:1c:28:42:9f:5e:99:13:26:f0: 5d:46:1a:3e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHiFwV4XSH7vmYoIsqpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2MxZTAyZjBhYjU3NjBjNjVkOGFhNmM1MTJiNjE1ZWNkMGM1ODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo74OamI7PXtvjMmGwVTDKwOuQOuw SbEvzA8TB/6sL/vL1ZJynXoVtFbUAjdebioTD23MZ+63QM9nOd9U17Cpl09y9c48 y2EK4n/Gelp+Va2NOSUpyQYeSH2pWiRBvR2BMoRiqaxCnNdltPuUgxmKxya4NsOF Ep1T+59mwPyBaALY1XYCLzJMkn9amTbxjTL1oAUVoRjzQlnCylnJxhFkC6A4Khz3 jRt0LIf2OhuZbRjP8R84L70XgHNEWKNeYavVOqr1c6FeyTpC0WengNsUhuRnLOXN 8s+UtbLF4a35MtoDlSon4rBFKNWp/5Y5UAWjCfJRlcr75IaAoVwcERrdlwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKzB4C8KtXYMZdiqbFErYV7NDFgZMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvck1IZ0x3cTFkZ3hsMktwc1VTdGhYczBNV0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxAw DQYJKoZIhvcNAQELBQADggEBAEPff4R4n6a2GG20z7fMdbgFQ+0qZykRTOEkHyvi 1IdZdFZuY1oveDfTLzVuV4A+UxpnKjgFzWZP7H39wruL4kMzpo4OCrkUDJN87arB thywWXEtuq5FJlGo+bnMfdTdQTxsptJuFzwGujvko4jEgBuKEWmgRPcgMDYmrlDG GCwCiqZzJCBdDz3BU/Lwt4ieVbBYBYZSID9xnOSAashX4LmdXg31HLaNk3cnKqbJ J+1CUUoMy30k7bxWCPbBwEQzlIc8RagAptpgKDuJ/UeFMTaoXZ+pfGfDPl2hp+FS yevVvpAqt6LOQhNCt91PSBTLaim+mRwoQp9emRMm8F1GGj4= -----END CERTIFICATE-----Generated at Sun Jan 11 12:20:22 2026 by rpki-client