This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa File: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (raw, json) Hash identifier: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc= Subject key identifier: 31:D5:08:64:82:78:7C:C7:4C:9A:75:A9:19:A9:29:7E:75:D4:86:EF Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C730AB1166556B73400C21000C23F6 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208861 IP address blocks: 2a0c:ab03::/32 maxlen: 32 2a0c:ab05::/32 maxlen: 32 2a0c:ab06::/32 maxlen: 32 2a0c:ab07:2000::/36 maxlen: 36 2a0c:ab07:3000::/36 maxlen: 36 2a0c:ab07:5000::/36 maxlen: 36 2a0c:ab07:c000::/36 maxlen: 36 2a0c:ab07:d000::/36 maxlen: 36 2a0c:ab07:e000::/36 maxlen: 36 2a0c:ab07:f000::/36 maxlen: 36 2a10:2ec1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:30:ab:11:66:55:6b:73:40:0c:21:00:0c:23:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31d5086482787cc74c9a75a919a9297e75d486ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:38:ec:3a:38:9c:f2:00:e1:56:a4:fe:2d:55: e4:09:c8:35:00:4c:2b:23:dd:fa:e7:01:d4:50:5b: 3d:d7:77:34:f2:5b:88:b4:08:17:f6:56:43:38:c1: 9c:58:46:09:dc:a9:5c:86:d8:0b:db:7a:a5:f3:4e: d1:2a:e2:b2:a5:ff:0b:28:66:57:1f:79:62:f4:c9: f3:9b:e0:44:1a:dc:c4:e4:13:8c:91:60:98:01:21: 8a:ec:0c:bf:80:ef:37:3c:c3:ec:68:37:99:f2:69: 19:d1:22:f1:99:fa:ca:a5:92:d8:d1:d1:84:ea:c6: c6:57:72:e2:11:3f:5a:ad:4b:97:8c:18:83:26:86: b4:52:63:5e:6e:1f:f6:ad:f2:d3:1d:e1:1b:8b:bf: 48:6b:d0:af:1f:7c:ac:a0:00:ae:20:6f:06:5d:34: 52:dd:ce:7a:1a:27:73:5a:24:98:c1:cd:fb:13:61: 42:3d:29:35:79:4e:52:27:09:a0:ef:b3:52:02:57: 34:eb:e0:e4:41:45:ef:cb:32:92:b7:71:57:5f:3d: 3d:4b:fc:e7:7e:34:76:2a:88:e5:43:a3:0e:3b:49: 6f:cf:84:f7:4c:8b:4c:71:81:91:45:d5:e3:f6:98: 1d:43:66:b5:26:77:93:34:d6:06:87:c1:d6:b9:02: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D5:08:64:82:78:7C:C7:4C:9A:75:A9:19:A9:29:7E:75:D4:86:EF X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:ab03::/32 2a0c:ab05::-2a0c:ab06:ffff:ffff:ffff:ffff:ffff:ffff 2a0c:ab07:2000::/35 2a0c:ab07:5000::/36 2a0c:ab07:c000::/34 2a10:2ec1::/32 Signature Algorithm: sha256WithRSAEncryption 8d:2f:ca:c5:1b:93:ee:53:b2:b5:44:64:e9:71:53:3d:a9:d7: ad:73:5a:49:40:79:ec:af:1f:99:78:bb:03:81:e8:d1:ad:e6: 7c:6f:49:46:8c:0c:09:80:e2:26:c0:f8:3c:d2:24:9a:a1:cf: 9b:5f:af:8b:c6:9a:24:0a:0a:0a:9f:9e:d6:7b:e2:9c:3f:08: 0e:df:10:18:97:d9:10:d0:d3:2d:35:d7:af:bc:f6:e3:16:9d: bb:6d:74:84:4b:54:bd:ac:4f:ca:c0:af:e1:6b:c1:81:07:cd: 40:7d:16:a4:98:74:97:d7:3a:bb:41:67:6c:17:16:d4:84:1a: 12:3b:8f:80:81:3a:e5:cc:1f:b0:cf:f3:b4:8c:59:ac:3f:0f: 9d:b2:9a:b4:43:bc:e7:5e:e6:41:29:98:98:9f:87:d6:2b:e7: ad:98:89:43:a2:61:14:d8:c3:7f:4b:b1:05:3c:ac:1c:f6:a9: 0b:8f:60:c0:a6:ab:92:6d:a4:d7:21:e2:e0:79:6a:1a:6d:f5: 5d:97:77:a9:99:67:4f:e2:58:61:21:ac:f9:84:8b:5a:cc:40: 1c:e3:f1:85:84:4c:ba:87:19:b5:1d:9d:ab:7b:42:13:87:18: fa:1e:f3:dd:41:58:46:52:37:22:e0:61:21:dd:22:e3:a1:3f: 2a:16:1b:3d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt3xzCrEWZVa3NADCEADCP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWQ1MDg2NDgyNzg3Y2M3NGM5YTc1YTkxOWE5Mjk3ZTc1ZDQ4NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zjsOjic8gDhVqT+LVXkCcg1AEwr I9365wHUUFs913c08luItAgX9lZDOMGcWEYJ3KlchtgL23ql807RKuKypf8LKGZX H3li9Mnzm+BEGtzE5BOMkWCYASGK7Ay/gO83PMPsaDeZ8mkZ0SLxmfrKpZLY0dGE 6sbGV3LiET9arUuXjBiDJoa0UmNebh/2rfLTHeEbi79Ia9CvH3ysoACuIG8GXTRS 3c56GidzWiSYwc37E2FCPSk1eU5SJwmg77NSAlc06+DkQUXvyzKSt3FXXz09S/zn fjR2KojlQ6MOO0lvz4T3TItMcYGRRdXj9pgdQ2a1JneTNNYGh8HWuQLGnQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDHVCGSCeHzHTJp1qRmpKX511IbvMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvTWRVSVpJSjRmTWRNbW5XcEdha3BmblhVaHU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwUAKgyrAzAO AwUAKgyrBQMFACoMqwYDBgUqDKsHIAMGBCoMqwdQAwYGKgyrB8ADBQAqEC7BMA0G CSqGSIb3DQEBCwUAA4IBAQCNL8rFG5PuU7K1RGTpcVM9qdetc1pJQHnsrx+ZeLsD gejRreZ8b0lGjAwJgOImwPg80iSaoc+bX6+LxpokCgoKn57We+KcPwgO3xAYl9kQ 0NMtNdevvPbjFp27bXSES1S9rE/KwK/ha8GBB81AfRakmHSX1zq7QWdsFxbUhBoS O4+AgTrlzB+wz/O0jFmsPw+dspq0Q7znXuZBKZiYn4fWK+etmIlDomEU2MN/S7EF PKwc9qkLj2DApquSbaTXIeLgeWoabfVdl3epmWdP4lhhIaz5hItazEAc4/GFhEy6 hxm1HZ2re0IThxj6HvPdQVhGUjci4GEh3SLjoT8qFhs9 -----END CERTIFICATE-----Generated at Wed Jan 21 03:29:21 2026 by rpki-client