This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MfvQ4gUpWFzkk2_pgZ0dkS9YJsg.roa File: MfvQ4gUpWFzkk2_pgZ0dkS9YJsg.roa (raw, json) Hash identifier: quj+xG0jR1encph/iEE59SQtqYQ3GSr/Oyy8JwEzsHY= Subject key identifier: 31:FB:D0:E2:05:29:58:5C:E4:93:6F:E9:81:9D:1D:91:2F:58:26:C8 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3973BC11257028C1251B2572AB5917 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MfvQ4gUpWFzkk2_pgZ0dkS9YJsg.roa Signing time: Fri 02 Jan 2026 10:20:52 +0000 ROA not before: Fri 02 Jan 2026 10:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398646 IP address blocks: 2a0c:b642:1a0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:73:bc:11:25:70:28:c1:25:1b:25:72:ab:59:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31fbd0e20529585ce4936fe9819d1d912f5826c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:30:68:ab:66:5a:7c:c3:3b:66:7f:d9:9f: 37:b6:90:73:1c:67:fe:6e:19:d7:6e:f3:cc:ba:42: 19:dc:40:0f:60:7f:61:66:ae:b7:3d:cd:74:ba:3e: 66:c9:f3:22:66:e0:26:56:08:10:8a:e2:46:f2:d4: c1:b6:09:a8:11:16:d6:24:f6:af:5c:97:71:0f:5a: 37:83:ea:f4:27:91:d9:3d:91:91:86:c7:7e:39:c2: bb:c8:d5:4e:64:33:c8:0b:a5:9a:22:26:92:63:52: b5:9b:4a:5a:c8:c7:55:7c:91:c0:bd:ad:79:ea:12: 6e:fd:52:0e:81:97:b8:86:9e:d1:d5:13:34:36:f4: d0:29:17:d8:9b:0c:1c:f1:df:94:42:70:fb:b8:8a: f4:b4:f8:94:09:2b:8a:f2:3b:e3:db:b1:37:6f:88: e6:ea:ab:22:8c:0e:fc:3f:5e:a3:cf:84:7f:1b:82: bd:df:11:63:d7:53:24:a4:7d:30:53:43:73:2a:d3: ea:80:b9:80:2b:29:13:0c:5f:a4:81:93:99:3d:b8: f6:71:73:7c:fa:e2:67:31:1b:92:10:4a:0c:06:72: fe:76:6a:b3:e2:ab:17:08:8f:ef:46:9e:f1:4b:68: c8:72:d0:d5:29:ea:2d:0a:1a:c3:66:60:4c:f5:a0: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:D0:E2:05:29:58:5C:E4:93:6F:E9:81:9D:1D:91:2F:58:26:C8 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MfvQ4gUpWFzkk2_pgZ0dkS9YJsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a0d::/48 Signature Algorithm: sha256WithRSAEncryption 2e:ef:2d:ac:a5:12:25:4c:3d:b9:1b:72:36:4e:89:43:b2:03: 6f:c2:02:11:ad:b5:32:46:12:bb:1e:d8:9e:59:a8:7a:5d:f7: 7a:d0:27:e7:e9:93:00:51:ba:7b:e3:28:71:95:14:b2:c6:dc: b3:8d:08:18:fd:39:12:39:5f:b5:19:ff:1c:a4:7b:74:c0:09: 78:3c:9c:ec:53:47:90:a3:b8:ec:98:f9:63:d6:b7:8e:54:a8: 6c:41:31:06:8d:d7:32:77:fb:e8:f4:69:da:07:4c:70:19:7c: f0:14:ee:4f:63:8c:9c:e3:c9:1c:22:60:02:66:fa:41:6f:4c: a6:7c:af:a3:13:65:17:37:a2:2f:cd:07:56:f2:f2:90:54:fa: 0f:fb:73:79:62:93:ee:65:96:a0:a4:c5:d2:d0:c3:e4:84:07: 1d:f9:86:1c:3c:64:5b:5c:ab:8d:65:60:0f:ee:7f:eb:a4:97: 2f:34:f0:85:05:82:7b:d7:88:1d:7b:72:91:fe:e2:33:c1:20: 7f:73:71:3f:f6:13:fa:31:d1:6a:9f:7e:b3:17:04:9b:84:97: d4:06:8d:33:15:6d:61:59:1a:38:bb:db:b7:5a:ae:b6:53:6a: 49:38:c9:87:a3:90:2d:23:e4:f3:56:93:d8:3b:9d:9e:de:7b: 87:7e:56:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OXO8ESVwKMElGyVyq1kXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWZiZDBlMjA1Mjk1ODVjZTQ5MzZmZTk4MTlkMWQ5MTJmNTgyNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10IwaKtmWnzDO2Z/2Z83tpBzHGf+ bhnXbvPMukIZ3EAPYH9hZq63Pc10uj5myfMiZuAmVggQiuJG8tTBtgmoERbWJPav XJdxD1o3g+r0J5HZPZGRhsd+OcK7yNVOZDPIC6WaIiaSY1K1m0payMdVfJHAva15 6hJu/VIOgZe4hp7R1RM0NvTQKRfYmwwc8d+UQnD7uIr0tPiUCSuK8jvj27E3b4jm 6qsijA78P16jz4R/G4K93xFj11MkpH0wU0NzKtPqgLmAKykTDF+kgZOZPbj2cXN8 +uJnMRuSEEoMBnL+dmqz4qsXCI/vRp7xS2jIctDVKeotChrDZmBM9aBTUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDH70OIFKVhc5JNv6YGdHZEvWCbIMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTWZ2UTRnVXBXRnprazJfcGdaMGRrUzlZSnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoN MA0GCSqGSIb3DQEBCwUAA4IBAQAu7y2spRIlTD25G3I2TolDsgNvwgIRrbUyRhK7 HtieWah6Xfd60Cfn6ZMAUbp74yhxlRSyxtyzjQgY/TkSOV+1Gf8cpHt0wAl4PJzs U0eQo7jsmPlj1reOVKhsQTEGjdcyd/vo9GnaB0xwGXzwFO5PY4yc48kcImACZvpB b0ymfK+jE2UXN6IvzQdW8vKQVPoP+3N5YpPuZZagpMXS0MPkhAcd+YYcPGRbXKuN ZWAP7n/rpJcvNPCFBYJ714gde3KR/uIzwSB/c3E/9hP6MdFqn36zFwSbhJfUBo0z FW1hWRo4u9u3Wq62U2pJOMmHo5AtI+TzVpPYO52e3nuHflYt -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client