This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MhTyretYFHew1JmznQF63IfuSLs.roa File: MhTyretYFHew1JmznQF63IfuSLs.roa (raw, json) Hash identifier: 8dZZMiLw2ZTDajscnjjAIvH5hzOFW+VENu+OCRPGN/U= Subject key identifier: 32:14:F2:AD:EB:58:14:77:B0:D4:99:B3:9D:01:7A:DC:87:EE:48:BB Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39358A87E381C8EB205D3B0AAFFB11 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MhTyretYFHew1JmznQF63IfuSLs.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203464 IP address blocks: 2a0c:b641:810::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:35:8a:87:e3:81:c8:eb:20:5d:3b:0a:af:fb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3214f2adeb581477b0d499b39d017adc87ee48bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:9c:ff:8a:75:53:e9:86:37:30:b1:df:f0: 44:54:f8:9a:f8:fb:a6:85:61:6d:e2:bb:ea:1a:55: 6a:53:e4:9a:25:73:3e:01:50:78:18:bb:72:59:82: 25:f5:2d:22:b6:89:28:5b:f7:69:6a:88:a3:c7:62: d7:a3:8a:b2:58:69:aa:bc:83:30:26:81:33:cb:f7: 01:c3:06:33:30:2c:04:54:93:b7:b1:74:5d:71:24: 63:5f:05:8e:bf:56:8d:fd:ba:f7:d8:18:e0:ef:3c: fb:32:dd:8b:2b:06:89:5b:c8:3f:df:9f:c6:4a:90: 8e:fb:b3:86:49:48:f1:28:75:12:a8:96:55:77:4b: 8b:53:9d:3f:da:0b:e0:fb:28:c3:1b:57:a5:07:55: b9:d6:9d:48:28:a8:15:1c:d8:a6:34:d1:d5:0a:68: 5e:30:bb:1a:0a:40:e6:74:b8:fb:37:5e:9f:4e:fb: 35:ed:e5:4c:7f:b2:41:e7:ae:27:a5:f7:c4:78:93: 60:e0:6d:ef:84:ff:c0:af:40:5a:ec:79:8a:33:e4: 76:91:aa:e4:b1:cf:24:6c:2e:7c:bb:ff:85:81:95: 4d:42:3c:0f:0f:e2:47:81:81:cf:cf:bf:dc:e5:9f: 85:f1:b6:20:26:bb:d0:31:eb:13:2d:9e:9a:ed:ed: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:14:F2:AD:EB:58:14:77:B0:D4:99:B3:9D:01:7A:DC:87:EE:48:BB X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MhTyretYFHew1JmznQF63IfuSLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:810::/44 Signature Algorithm: sha256WithRSAEncryption 59:62:8f:f4:00:13:65:59:1a:0e:5e:92:1c:76:15:26:ff:45: 9e:f4:92:97:7b:92:61:11:e9:cc:51:4d:08:06:bc:87:7a:cb: 16:eb:2a:c5:0a:dd:42:55:4d:da:c5:32:00:3b:04:37:ca:ae: 3f:ce:3c:89:7e:1b:19:ae:9d:d8:6d:ed:a2:c1:5f:5c:f5:41: 93:a8:9a:46:4d:cf:ae:9e:cb:43:36:20:f2:f6:ec:e1:77:b4: 89:80:bb:9d:e3:c0:58:73:64:da:f2:3c:9b:f2:1c:14:91:12: 47:06:2b:e2:84:5d:e3:ba:07:5d:87:3f:37:52:a2:27:20:f6: 64:0b:1f:c6:67:da:94:09:d8:a8:a9:1c:2d:71:ac:33:4a:92: 05:fd:8b:c7:77:99:b0:78:12:a0:15:56:c9:90:34:36:0b:6a: 8e:4a:7d:d3:e5:5c:74:9b:50:52:fb:06:15:d4:5f:a1:7f:53: 36:d1:56:08:12:86:5b:73:eb:82:63:00:96:22:7f:85:92:4f: 3f:5e:04:ae:df:e8:f8:b6:d9:4e:35:53:17:47:d5:f6:1d:7d: f4:77:68:29:ff:84:08:a1:95:49:ea:a8:b9:d9:91:50:27:03: 47:af:7d:71:d5:47:e0:ad:6f:c0:df:5c:bf:8e:3d:ab:1b:34: 4d:50:d6:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTWKh+OByOsgXTsKr/sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjE0ZjJhZGViNTgxNDc3YjBkNDk5YjM5ZDAxN2FkYzg3ZWU0OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Cmc/4p1U+mGNzCx3/BEVPia+Pum hWFt4rvqGlVqU+SaJXM+AVB4GLtyWYIl9S0itokoW/dpaoijx2LXo4qyWGmqvIMw JoEzy/cBwwYzMCwEVJO3sXRdcSRjXwWOv1aN/br32Bjg7zz7Mt2LKwaJW8g/35/G SpCO+7OGSUjxKHUSqJZVd0uLU50/2gvg+yjDG1elB1W51p1IKKgVHNimNNHVCmhe MLsaCkDmdLj7N16fTvs17eVMf7JB564npffEeJNg4G3vhP/Ar0Ba7HmKM+R2kark sc8kbC58u/+FgZVNQjwPD+JHgYHPz7/c5Z+F8bYgJrvQMesTLZ6a7e3GNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDIU8q3rWBR3sNSZs50BetyH7ki7MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvTWhUeXJldFlGSGV3MUptem5RRjYzSWZ1U0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgQ MA0GCSqGSIb3DQEBCwUAA4IBAQBZYo/0ABNlWRoOXpIcdhUm/0We9JKXe5JhEenM UU0IBryHessW6yrFCt1CVU3axTIAOwQ3yq4/zjyJfhsZrp3Ybe2iwV9c9UGTqJpG Tc+unstDNiDy9uzhd7SJgLud48BYc2Ta8jyb8hwUkRJHBivihF3jugddhz83UqIn IPZkCx/GZ9qUCdioqRwtcawzSpIF/YvHd5mweBKgFVbJkDQ2C2qOSn3T5Vx0m1BS +wYV1F+hf1M20VYIEoZbc+uCYwCWIn+Fkk8/XgSu3+j4ttlONVMXR9X2HX30d2gp /4QIoZVJ6qi52ZFQJwNHr31x1UfgrW/A31y/jj2rGzRNUNYZ -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:23 2026 by rpki-client