This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MCVGFCbftZ5gfHbWoFCdLqX6jI0.roa File: MCVGFCbftZ5gfHbWoFCdLqX6jI0.roa (raw, json) Hash identifier: Q3EUQYT2owqZa7XgO5KjXih6mJ3N0EWPSPAbL3yd93w= Subject key identifier: 30:25:46:14:26:DF:B5:9E:60:7C:76:D6:A0:50:9D:2E:A5:FA:8C:8D Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39693C29E5152E781DB967DBC9EC9F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MCVGFCbftZ5gfHbWoFCdLqX6jI0.roa Signing time: Fri 02 Jan 2026 10:20:50 +0000 ROA not before: Fri 02 Jan 2026 10:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214234 IP address blocks: 2a0c:b641:cf0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:69:3c:29:e5:15:2e:78:1d:b9:67:db:c9:ec:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3025461426dfb59e607c76d6a0509d2ea5fa8c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:62:4e:e5:fc:6c:00:5f:6b:f0:9a:89:bc: 5b:b8:41:dd:76:9b:5c:32:66:29:87:14:f7:ac:ee: c0:7e:8d:8e:21:1d:88:72:1f:85:d9:d0:1d:8c:b8: f5:50:0b:b9:81:6c:3e:42:17:d7:c5:44:1f:b4:2a: 75:7d:6c:fd:f1:91:5e:ef:2d:b0:66:6c:8e:54:2b: 66:18:83:5d:08:01:8a:57:3d:f3:56:73:ea:08:6d: af:36:20:dd:24:93:cd:39:d1:05:9d:a3:19:0c:a9: 0f:7d:8e:fc:d8:b0:67:d6:ba:9f:5d:e2:5a:79:14: 12:01:0b:96:32:91:8b:ed:f2:67:46:c8:bf:0b:72: cf:e2:39:db:09:3d:62:d8:00:9e:33:2b:fc:88:c7: 56:c6:e4:1e:6e:7a:68:12:4c:09:56:83:e0:dd:76: 69:36:49:7b:27:e2:68:6c:7a:a9:df:00:ad:9c:e1: b4:ac:6c:b3:f8:f7:f8:02:d4:16:25:b8:80:16:fc: b3:e2:d5:8e:8f:55:8e:dc:53:cc:d6:61:d2:dc:3d: 94:b1:3e:49:aa:27:37:5c:58:9c:87:74:ea:24:c5: f4:59:b7:a5:16:45:5c:f6:75:97:ed:4f:7f:95:fa: 0c:89:ea:b8:3f:22:3c:cf:90:cb:d8:63:dc:78:6c: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:25:46:14:26:DF:B5:9E:60:7C:76:D6:A0:50:9D:2E:A5:FA:8C:8D X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MCVGFCbftZ5gfHbWoFCdLqX6jI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:cf0::/44 Signature Algorithm: sha256WithRSAEncryption 34:b9:2e:c7:ab:0c:c9:db:cf:6e:68:c3:d5:10:18:36:b1:3c: 02:a3:cb:43:53:f0:d0:b3:2c:fb:45:72:c2:47:7e:a7:99:94: 38:2b:2d:04:b5:3c:57:f7:0f:35:f3:f4:8f:ea:1e:27:a2:de: 50:76:23:e4:0f:6d:d0:f2:86:4f:b7:ba:81:1b:55:13:2e:e6: 10:b2:9f:8a:ef:a0:50:f8:41:5e:d5:61:e1:ae:2b:01:d7:53: 1c:97:1e:92:43:16:04:5e:63:46:3c:df:a5:07:e6:b4:09:74: 5c:24:73:08:9c:6d:1a:9e:51:b3:93:8b:37:7e:ce:26:1f:06: f4:68:bd:47:ed:d3:64:e7:44:7c:c6:f4:6e:e6:f3:66:ee:a3: 6b:62:d9:0e:03:8a:59:e3:c7:2c:89:0d:6c:1b:a8:95:f4:07: 47:b5:38:62:fa:0e:0a:82:a4:53:02:ed:01:e3:b7:d8:a8:38: 06:a8:97:4f:03:c8:f9:b5:46:fe:41:4f:82:4c:f6:81:f2:d7: 59:c4:b7:89:65:96:88:ac:3f:d0:19:01:9e:25:ed:c0:0c:43: 08:4e:7b:c9:b3:10:17:4f:1e:bd:56:71:cf:d8:55:a2:fd:22: 5f:df:fd:45:a8:97:10:59:c1:3e:85:44:1c:f4:b2:43:9d:c7: 15:da:88:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OWk8KeUVLngduWfbyeyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDI1NDYxNDI2ZGZiNTllNjA3Yzc2ZDZhMDUwOWQyZWE1ZmE4YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIhiTuX8bABfa/CaibxbuEHddptc MmYphxT3rO7Afo2OIR2Ich+F2dAdjLj1UAu5gWw+QhfXxUQftCp1fWz98ZFe7y2w ZmyOVCtmGINdCAGKVz3zVnPqCG2vNiDdJJPNOdEFnaMZDKkPfY782LBn1rqfXeJa eRQSAQuWMpGL7fJnRsi/C3LP4jnbCT1i2ACeMyv8iMdWxuQebnpoEkwJVoPg3XZp Nkl7J+JobHqp3wCtnOG0rGyz+Pf4AtQWJbiAFvyz4tWOj1WO3FPM1mHS3D2UsT5J qic3XFich3TqJMX0WbelFkVc9nWX7U9/lfoMieq4PyI8z5DL2GPceGytpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDAlRhQm37WeYHx21qBQnS6l+oyNMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTUNWR0ZDYmZ0WjVnZkhiV29GQ2RMcVg2akkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQzw MA0GCSqGSIb3DQEBCwUAA4IBAQA0uS7HqwzJ289uaMPVEBg2sTwCo8tDU/DQsyz7 RXLCR36nmZQ4Ky0EtTxX9w818/SP6h4not5QdiPkD23Q8oZPt7qBG1UTLuYQsp+K 76BQ+EFe1WHhrisB11Mclx6SQxYEXmNGPN+lB+a0CXRcJHMInG0anlGzk4s3fs4m Hwb0aL1H7dNk50R8xvRu5vNm7qNrYtkOA4pZ48csiQ1sG6iV9AdHtThi+g4KgqRT Au0B47fYqDgGqJdPA8j5tUb+QU+CTPaB8tdZxLeJZZaIrD/QGQGeJe3ADEMITnvJ sxAXTx69VnHP2FWi/SJf3/1FqJcQWcE+hUQc9LJDnccV2ohc -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:54 2026 by rpki-client