This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MFAY7_OLyA4recGDb-cluDo0Fy4.roa File: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (raw, json) Hash identifier: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE= Subject key identifier: 30:50:18:EF:F3:8B:C8:0E:2B:79:C1:83:6F:E7:25:B8:3A:34:17:2E Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019B7A5B7674545B707D938E5E340C08B4D8 Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MFAY7_OLyA4recGDb-cluDo0Fy4.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 2a13:7505:3::/48 maxlen: 48 2a13:7505:4::/48 maxlen: 48 2a13:7505:8004::/48 maxlen: 48 2a13:7506:9004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:74:54:5b:70:7d:93:8e:5e:34:0c:08:b4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=305018eff38bc80e2b79c1836fe725b83a34172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:a4:c1:79:3a:9e:e4:6e:b3:25:21:b2:ab: 24:17:fe:bc:e0:a5:3a:f5:64:a2:2a:61:79:4a:3c: 34:2b:3f:8b:08:a5:c7:29:b5:78:53:4c:9d:4b:06: f3:40:03:53:90:72:86:1e:cb:ca:d8:eb:81:f8:a5: ad:23:42:f0:4e:dd:66:63:13:9a:a1:9a:d3:30:cf: 4f:b2:57:e0:57:84:05:05:b3:6a:50:8e:0d:3a:36: 74:55:1f:7f:29:bb:d0:f6:b7:96:b4:96:c9:87:c7: 4d:ff:e6:4a:c6:47:65:14:d5:2e:bd:11:f6:7b:a8: e9:01:7f:a0:2b:93:f1:61:a3:23:a5:c1:c5:fd:61: ff:e6:b8:f6:25:09:48:89:b8:92:1f:ca:6f:97:12: 84:21:d1:c8:10:40:3b:71:40:14:4d:75:87:08:a3: e2:4c:d3:c1:ba:1f:59:95:4c:0d:2f:02:ea:e0:43: 5a:97:73:c3:61:4f:8d:74:05:f1:24:4b:bf:ef:7b: 54:d1:f0:fc:4e:06:15:33:10:46:13:7d:c8:de:61: 38:08:d6:e8:17:a6:0f:48:cd:4c:00:e4:bf:3e:c8: f9:df:ba:b5:27:66:86:42:b0:d8:01:bc:fc:d5:4b: d3:c4:8f:f4:48:eb:7b:b5:45:8f:60:a9:58:f4:be: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:18:EF:F3:8B:C8:0E:2B:79:C1:83:6F:E7:25:B8:3A:34:17:2E X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MFAY7_OLyA4recGDb-cluDo0Fy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:7505:3::-2a13:7505:4:ffff:ffff:ffff:ffff:ffff 2a13:7505:8004::/48 2a13:7506:9004::/48 Signature Algorithm: sha256WithRSAEncryption 65:e2:fe:77:c2:25:69:cc:18:a3:45:9b:3d:70:d1:08:bd:35: e2:d2:4f:eb:e3:ea:5e:4e:b8:a4:c6:01:8b:2c:ee:e6:d4:97: c5:53:42:15:17:4b:f0:a8:0d:a8:79:b2:ab:2c:e4:21:d6:b9: 85:d2:71:82:f5:5e:68:a7:4a:95:24:74:5a:b0:5e:c4:bc:91: d9:15:26:e6:43:3e:67:86:ed:9f:2a:77:41:37:62:43:a2:f7: ea:3b:ed:4a:02:70:8e:ba:3b:c9:5f:f6:e2:ae:32:32:d2:69: 41:05:27:2f:53:98:9a:d7:56:b7:05:88:75:fb:9b:df:27:21: e7:73:f6:89:f5:76:6d:3c:d8:19:27:1b:02:e5:c7:6c:73:90: b3:b4:f6:f5:e6:63:e2:53:b1:98:79:11:2f:ef:34:b0:b8:d4: 05:bd:51:02:cf:07:74:9a:49:6a:c2:ad:8f:b7:17:c3:a1:7d: 81:17:02:2c:a6:b0:9c:b3:aa:d0:f3:df:dd:20:ae:72:74:23: 2b:61:19:3c:39:e5:73:6e:82:e0:17:1b:4c:61:83:92:6e:b0: 55:71:48:4f:67:9d:08:a8:0a:5c:d9:74:ef:8c:4c:e7:90:8a: ff:b5:82:3f:69:1d:4d:03:b4:95:5c:6a:e1:d8:22:7c:6b:fd: 75:bc:17:8c -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6W3Z0VFtwfZOOXjQMCLTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDUwMThlZmYzOGJjODBlMmI3OWMxODM2ZmU3MjViODNhMzQxNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte2kwXk6nuRusyUhsqskF/684KU6 9WSiKmF5Sjw0Kz+LCKXHKbV4U0ydSwbzQANTkHKGHsvK2OuB+KWtI0LwTt1mYxOa oZrTMM9PslfgV4QFBbNqUI4NOjZ0VR9/KbvQ9reWtJbJh8dN/+ZKxkdlFNUuvRH2 e6jpAX+gK5PxYaMjpcHF/WH/5rj2JQlIibiSH8pvlxKEIdHIEEA7cUAUTXWHCKPi TNPBuh9ZlUwNLwLq4ENal3PDYU+NdAXxJEu/73tU0fD8TgYVMxBGE33I3mE4CNbo F6YPSM1MAOS/Psj537q1J2aGQrDYAbz81UvTxI/0SOt7tUWPYKlY9L7D2wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDBQGO/zi8gOK3nBg2/nJbg6NBcuMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvTUZBWTdfT0x5QTRyZWNHRGItY2x1RG8wRnk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqE3UF AAMDBwAqE3UFAAQDBwAqE3UFgAQDBwAqE3UGkAQwDQYJKoZIhvcNAQELBQADggEB AGXi/nfCJWnMGKNFmz1w0Qi9NeLST+vj6l5OuKTGAYss7ubUl8VTQhUXS/CoDah5 sqss5CHWuYXScYL1XminSpUkdFqwXsS8kdkVJuZDPmeG7Z8qd0E3YkOi9+o77UoC cI66O8lf9uKuMjLSaUEFJy9TmJrXVrcFiHX7m98nIedz9on1dm082BknGwLlx2xz kLO09vXmY+JTsZh5ES/vNLC41AW9UQLPB3SaSWrCrY+3F8OhfYEXAiymsJyzqtDz 390grnJ0IythGTw55XNuguAXG0xhg5JusFVxSE9nnQioClzZdO+MTOeQiv+1gj9p HU0DtJVcauHYInxr/XW8F4w= -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:48 2026 by rpki-client