This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nMC_L5lutbBGjnZ_A7CwQV4-GHU.roa File: nMC_L5lutbBGjnZ_A7CwQV4-GHU.roa (raw, json) Hash identifier: xQCShrbekopJeFXEC0Fw4ryX3pmLTWshF8CEGbaRYgA= Subject key identifier: 9C:C0:BF:2F:99:6E:B5:B0:46:8E:76:7F:03:B0:B0:41:5E:3E:18:75 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39395B59BF6B63DBD9A142B1005ED6 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nMC_L5lutbBGjnZ_A7CwQV4-GHU.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204655 IP address blocks: 2a0c:b641:3c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:39:5b:59:bf:6b:63:db:d9:a1:42:b1:00:5e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cc0bf2f996eb5b0468e767f03b0b0415e3e1875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:d9:60:b2:70:e0:88:41:f7:3a:e8:f1:d3: 21:d0:00:c1:04:88:c4:71:3f:f8:c1:ee:ea:cb:27: 0a:9b:2a:cb:c7:3f:3d:33:d5:d9:40:41:dc:83:ba: 50:ff:cf:34:6e:a8:6e:21:d4:0a:f1:73:d4:8c:16: 7c:f2:85:eb:d2:b8:b1:55:26:8d:7d:80:81:e9:3d: 0c:03:41:f8:44:ce:7c:5a:fb:ae:ba:4f:3d:3c:93: 0e:77:5c:87:68:99:cd:33:5c:ae:b0:ff:37:7c:46: 3a:e1:78:fc:69:6f:60:24:58:86:0d:e3:a7:2f:5e: 95:fa:7f:81:97:7f:34:ae:04:ce:be:7f:aa:60:10: 2e:5c:99:0a:c0:f3:b8:a1:d7:4a:08:ad:5e:8f:3e: 44:71:a8:8b:46:d9:e9:e7:24:f7:cf:3c:00:77:e7: 1b:84:b7:7c:5c:99:1f:40:f0:89:7a:38:72:2b:b2: 47:8e:9a:f4:4b:04:4b:cc:4f:5b:01:87:52:74:b4: f2:65:1e:64:e6:d9:db:35:a5:81:93:a1:07:7c:3e: db:d1:a6:8a:b1:af:43:91:94:88:a0:ca:e2:c7:a7: 70:7a:34:e6:c6:2d:83:24:01:2d:d8:7c:be:15:70: d7:6b:9f:af:a9:4f:b5:5e:64:d2:f4:57:be:b4:80: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:BF:2F:99:6E:B5:B0:46:8E:76:7F:03:B0:B0:41:5E:3E:18:75 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nMC_L5lutbBGjnZ_A7CwQV4-GHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:3c0::/44 Signature Algorithm: sha256WithRSAEncryption 49:db:ea:9d:b9:c2:38:d3:a6:6a:96:76:80:3a:79:20:87:b3: c9:22:2a:21:af:f1:3d:e8:29:99:7d:98:51:c0:11:a2:10:c5: 3c:90:c2:78:c9:51:65:ea:10:5a:db:29:a5:a4:f5:cf:18:8b: 68:de:9a:29:a0:35:12:c9:c3:75:bb:1f:ad:5d:16:57:47:cb: e4:57:0e:24:d9:8e:8d:49:eb:4d:a0:fb:02:69:79:53:cd:f0: 30:2f:9b:e3:af:91:16:cd:a6:8b:fb:7b:64:8f:cf:ef:f6:07: 75:5c:e4:ea:8d:41:84:54:26:ce:92:46:a1:3c:0e:47:18:d6: f0:34:47:db:e6:ed:69:6a:59:e1:92:0c:37:d9:76:22:ea:c2: 3f:ac:9b:28:d8:a8:ca:eb:c4:4d:aa:d4:47:df:f9:46:5b:bc: 94:af:87:ee:4d:c0:8c:27:07:cb:83:84:4e:66:85:5e:1a:75: 63:a3:b2:46:66:51:1d:51:5b:ce:b6:db:2b:6a:ed:1b:fc:c6: ed:87:e7:de:ed:bf:ed:5e:e4:ef:2e:55:68:3a:c8:81:07:c2: a3:3a:d6:9a:40:6b:79:09:c0:4c:8a:12:f1:c8:70:94:86:a1: e2:3c:29:2e:3f:00:04:67:b0:d3:81:52:a3:c8:54:40:12:72: 79:4c:b7:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTlbWb9rY9vZoUKxAF7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2MwYmYyZjk5NmViNWIwNDY4ZTc2N2YwM2IwYjA0MTVlM2UxODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrZYLJw4IhB9zro8dMh0ADBBIjE cT/4we7qyycKmyrLxz89M9XZQEHcg7pQ/880bqhuIdQK8XPUjBZ88oXr0rixVSaN fYCB6T0MA0H4RM58Wvuuuk89PJMOd1yHaJnNM1yusP83fEY64Xj8aW9gJFiGDeOn L16V+n+Bl380rgTOvn+qYBAuXJkKwPO4oddKCK1ejz5EcaiLRtnp5yT3zzwAd+cb hLd8XJkfQPCJejhyK7JHjpr0SwRLzE9bAYdSdLTyZR5k5tnbNaWBk6EHfD7b0aaK sa9DkZSIoMrix6dwejTmxi2DJAEt2Hy+FXDXa5+vqU+1XmTS9Fe+tIDC5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJzAvy+ZbrWwRo52fwOwsEFePhh1MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbk1DX0w1bHV0YkJHam5aX0E3Q3dRVjQtR0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQPA MA0GCSqGSIb3DQEBCwUAA4IBAQBJ2+qducI406ZqlnaAOnkgh7PJIiohr/E96CmZ fZhRwBGiEMU8kMJ4yVFl6hBa2ymlpPXPGIto3popoDUSycN1ux+tXRZXR8vkVw4k 2Y6NSetNoPsCaXlTzfAwL5vjr5EWzaaL+3tkj8/v9gd1XOTqjUGEVCbOkkahPA5H GNbwNEfb5u1palnhkgw32XYi6sI/rJso2KjK68RNqtRH3/lGW7yUr4fuTcCMJwfL g4ROZoVeGnVjo7JGZlEdUVvOttsrau0b/Mbth+fe7b/tXuTvLlVoOsiBB8KjOtaa QGt5CcBMihLxyHCUhqHiPCkuPwAEZ7DTgVKjyFRAEnJ5TLea -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:08 2026 by rpki-client