This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mRP96dfgn7vLXilOXwup5Py_ag8.roa File: mRP96dfgn7vLXilOXwup5Py_ag8.roa (raw, json) Hash identifier: XgiFI6TCKcJjbENrVrxCp9NvOFCgZjXzFxU4tJwfP60= Subject key identifier: 99:13:FD:E9:D7:E0:9F:BB:CB:5E:29:4E:5F:0B:A9:E4:FC:BF:6A:0F Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3927ABDF642193C33DCAF0ED0AF945 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mRP96dfgn7vLXilOXwup5Py_ag8.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44445 IP address blocks: 2a0c:b641:560::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:ab:df:64:21:93:c3:3d:ca:f0:ed:0a:f9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9913fde9d7e09fbbcb5e294e5f0ba9e4fcbf6a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:63:22:64:12:66:bc:b9:7c:6b:32:79:83: 8e:a5:3c:ad:56:b3:bf:a9:7b:fa:72:2a:f5:a7:00: 8d:c0:2a:5c:a0:35:b2:3a:66:0d:b1:a6:54:98:63: d9:6e:30:d7:4f:ca:b5:1c:a6:dd:90:60:13:80:32: 60:c4:d7:5e:b2:e2:17:10:67:6b:07:63:25:3a:4f: f9:50:6c:7a:51:5e:bb:10:ba:4d:21:03:a8:19:55: 70:28:83:aa:b4:d5:c5:3e:26:d3:81:ab:56:42:d3: 0b:8b:76:32:63:97:f4:88:b9:20:ff:2d:38:e8:2e: f6:c5:20:ff:3d:dd:39:6a:0d:21:dc:f2:95:db:f9: ec:f8:8f:29:e1:a5:3c:ae:61:11:6b:bd:04:96:db: ce:83:76:32:3f:8b:b1:bb:7b:6c:c0:fa:21:5b:3c: 83:8f:ce:7d:8a:75:43:72:6a:b5:77:9e:87:76:a1: 04:a3:3e:22:59:f6:74:4c:dc:ac:68:3d:78:5b:b8: 8a:87:ac:4f:e5:04:0d:63:0c:a2:18:46:c3:e4:14: 5c:0d:63:8f:d1:a6:72:04:0c:af:b0:08:67:30:36: b2:3f:a6:66:04:f6:36:d6:b9:46:0a:a9:ce:9c:5a: 37:28:18:c4:57:ab:52:9b:c8:4d:f0:98:e5:a2:79: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:13:FD:E9:D7:E0:9F:BB:CB:5E:29:4E:5F:0B:A9:E4:FC:BF:6A:0F X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mRP96dfgn7vLXilOXwup5Py_ag8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:560::/44 Signature Algorithm: sha256WithRSAEncryption 9e:d5:17:c0:9a:3a:cc:82:d2:43:e3:0a:86:bb:74:f8:ca:ff: bc:a0:91:b2:ad:a3:ff:f0:a9:ca:a7:42:4b:bd:b0:38:36:7f: aa:1d:ac:c4:e0:42:d3:a6:96:4b:2c:be:cb:16:ec:1a:cd:73: 14:d2:37:51:4d:4b:1d:b5:b8:01:e7:19:c4:67:86:b4:a6:c5: 27:54:50:74:03:20:10:57:75:ff:80:d4:dc:f9:9b:a5:7a:6c: 7e:4e:7a:20:db:e3:57:20:8a:e1:34:e7:71:7f:6f:cf:24:72: 5e:17:a4:54:06:72:0a:e5:2c:bf:8a:93:e3:39:64:0b:83:63: 62:bc:d6:ec:50:c5:c3:ef:0c:6a:bd:dd:d3:22:5b:3c:82:3e: 89:d8:fd:b1:26:ca:42:17:34:b0:91:6e:55:ed:97:85:c3:18: c5:af:00:1d:42:d2:d5:ea:f3:29:84:e5:02:2d:b7:b6:cf:74: 3a:cc:cb:3f:2f:8d:a4:8a:a1:28:52:07:1b:05:dc:49:0c:08: 12:5c:fd:d3:a8:78:6b:a2:db:82:b2:6b:1a:24:61:2f:c9:f1: f1:1c:a3:21:42:b6:01:f2:31:e7:58:d9:b1:18:f3:3b:89:49: 5e:fc:c4:55:96:32:80:fc:bd:ac:4b:7e:ba:25:62:36:61:44: ce:70:dd:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSer32Qhk8M9yvDtCvlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTEzZmRlOWQ3ZTA5ZmJiY2I1ZTI5NGU1ZjBiYTllNGZjYmY2YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCljImQSZry5fGsyeYOOpTytVrO/ qXv6cir1pwCNwCpcoDWyOmYNsaZUmGPZbjDXT8q1HKbdkGATgDJgxNdesuIXEGdr B2MlOk/5UGx6UV67ELpNIQOoGVVwKIOqtNXFPibTgatWQtMLi3YyY5f0iLkg/y04 6C72xSD/Pd05ag0h3PKV2/ns+I8p4aU8rmERa70EltvOg3YyP4uxu3tswPohWzyD j859inVDcmq1d56HdqEEoz4iWfZ0TNysaD14W7iKh6xP5QQNYwyiGEbD5BRcDWOP 0aZyBAyvsAhnMDayP6ZmBPY21rlGCqnOnFo3KBjEV6tSm8hN8JjlonmJxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJkT/enX4J+7y14pTl8LqeT8v2oPMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbVJQOTZkZmduN3ZMWGlsT1h3dXA1UHlfYWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQVg MA0GCSqGSIb3DQEBCwUAA4IBAQCe1RfAmjrMgtJD4wqGu3T4yv+8oJGyraP/8KnK p0JLvbA4Nn+qHazE4ELTppZLLL7LFuwazXMU0jdRTUsdtbgB5xnEZ4a0psUnVFB0 AyAQV3X/gNTc+Zulemx+Tnog2+NXIIrhNOdxf2/PJHJeF6RUBnIK5Sy/ipPjOWQL g2NivNbsUMXD7wxqvd3TIls8gj6J2P2xJspCFzSwkW5V7ZeFwxjFrwAdQtLV6vMp hOUCLbe2z3Q6zMs/L42kiqEoUgcbBdxJDAgSXP3TqHhrotuCsmsaJGEvyfHxHKMh QrYB8jHnWNmxGPM7iUle/MRVljKA/L2sS366JWI2YUTOcN2B -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:01 2026 by rpki-client