This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa File: mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa (raw, json) Hash identifier: Q8HW68vvE5dt2JCgiuU6uY8uDN63CVOq6IX7sRD6oHI= Subject key identifier: 98:DB:B7:53:91:CE:8A:69:0B:31:7A:C4:ED:77:77:C3:4F:92:55:90 Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Certificate serial: 019B77594DB4B7DC1627CFD4083016245044 Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51923 IP address blocks: 2a01:1b0:c000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4d:b4:b7:dc:16:27:cf:d4:08:30:16:24:50:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98dbb75391ce8a690b317ac4ed7777c34f925590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:4d:43:d6:b9:b0:b9:97:b8:91:d2:af:37: 8c:80:ee:9a:f0:25:1c:ec:5d:6d:24:c2:2b:bb:f7: 5c:52:0d:8f:c3:80:bb:70:49:74:20:a9:93:60:51: 2c:f2:5b:d4:4c:ad:4d:e5:cd:90:b3:70:10:c0:a2: 26:8a:24:4e:b3:ea:f9:08:6f:9e:09:41:7e:13:fc: de:3a:94:db:ab:80:4c:b2:f7:7a:30:11:5d:dc:44: 15:cb:e3:ff:34:7f:a8:1c:fe:9c:ed:f8:33:d1:1b: 0b:b0:62:49:a1:43:20:e0:41:5d:2d:c3:dc:fb:1f: aa:d0:be:e6:ba:d0:be:38:56:3d:9d:32:c5:9c:12: 04:21:f3:4a:85:fb:81:b3:f3:cd:5e:72:a4:00:16: 69:fb:ea:f5:e7:e4:fd:d1:f4:bd:38:ee:2f:b6:47: d0:8d:f6:9b:bc:09:34:13:e8:45:19:55:e9:68:bd: fa:3c:eb:7a:d2:a1:40:89:4d:c8:3f:ee:65:e8:8a: d7:aa:ef:98:64:bd:06:b1:f3:1d:9f:dd:cc:fe:7f: 46:2c:37:e1:5e:d2:78:90:0d:96:2e:62:ea:11:60: 90:0c:2a:f6:60:ad:48:6f:20:49:0a:93:4c:42:62: 43:9d:90:56:cc:50:39:a9:e8:33:9b:b4:02:27:a6: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:B7:53:91:CE:8A:69:0B:31:7A:C4:ED:77:77:C3:4F:92:55:90 X509v3 Authority Key Identifier: keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:1b0:c000::/44 Signature Algorithm: sha256WithRSAEncryption cd:00:f4:05:a1:34:06:37:c2:dc:31:55:15:e0:c8:71:8c:2a: b9:e7:e7:b0:e3:20:10:bf:bc:e8:11:70:be:09:97:2f:7d:06: 11:36:8a:ad:55:b5:ca:bb:78:d1:cd:2f:b9:30:97:1a:e0:1f: 6f:79:56:e0:cc:d7:82:09:f1:90:7e:1f:82:0c:f3:5b:36:0a: a2:22:37:98:ac:b7:18:d7:3b:c5:0d:de:4e:54:d4:06:3e:32: 22:ef:11:eb:c2:52:e8:e9:b9:8d:62:da:1e:f0:8d:06:fb:49: d3:24:2e:24:6a:5b:f9:b6:ad:1b:be:2f:cd:08:94:cd:dc:45: d3:0e:b2:31:d8:9e:05:aa:ad:c7:dd:df:f9:6c:32:05:6d:f2: da:81:61:c5:b1:9e:5f:b4:41:eb:46:43:6a:dc:d4:45:0c:21: dc:d9:74:54:60:6e:ab:c9:08:37:e0:b2:08:12:31:37:46:c5: 2c:36:97:36:4e:1e:b2:7b:78:61:f9:11:a6:96:0f:e5:b4:10: 2f:0a:8d:c4:30:e3:d1:eb:be:a7:8c:68:67:9a:82:97:ab:fa: 2d:39:70:2a:82:a8:86:ba:44:e2:bd:22:c4:fc:10:d3:16:b8: f6:0c:c0:74:0e:20:3d:8b:a7:10:72:21:f6:34:14:ed:91:d6: 58:58:79:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WU20t9wWJ8/UCDAWJFBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi MGRkNWEwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRiYjc1MzkxY2U4YTY5MGIzMTdhYzRlZDc3NzdjMzRmOTI1NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJtNQ9a5sLmXuJHSrzeMgO6a8CUc 7F1tJMIru/dcUg2Pw4C7cEl0IKmTYFEs8lvUTK1N5c2Qs3AQwKImiiROs+r5CG+e CUF+E/zeOpTbq4BMsvd6MBFd3EQVy+P/NH+oHP6c7fgz0RsLsGJJoUMg4EFdLcPc +x+q0L7mutC+OFY9nTLFnBIEIfNKhfuBs/PNXnKkABZp++r15+T90fS9OO4vtkfQ jfabvAk0E+hFGVXpaL36POt60qFAiU3IP+5l6IrXqu+YZL0GsfMdn93M/n9GLDfh XtJ4kA2WLmLqEWCQDCr2YK1IbyBJCpNMQmJDnZBWzFA5qegzm7QCJ6Zx4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJjbt1ORzoppCzF6xO13d8NPklWQMB8GA1UdIwQY MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt MjYxNjY2YzNhNTg5LzEvbU51M1U1SE9pbWtMTVhyRTdYZDN3MC1TVlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5 LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgEBsMAA MA0GCSqGSIb3DQEBCwUAA4IBAQDNAPQFoTQGN8LcMVUV4MhxjCq55+ew4yAQv7zo EXC+CZcvfQYRNoqtVbXKu3jRzS+5MJca4B9veVbgzNeCCfGQfh+CDPNbNgqiIjeY rLcY1zvFDd5OVNQGPjIi7xHrwlLo6bmNYtoe8I0G+0nTJC4kalv5tq0bvi/NCJTN 3EXTDrIx2J4Fqq3H3d/5bDIFbfLagWHFsZ5ftEHrRkNq3NRFDCHc2XRUYG6ryQg3 4LIIEjE3RsUsNpc2Th6ye3hh+RGmlg/ltBAvCo3EMOPR676njGhnmoKXq/otOXAq gqiGukTivSLE/BDTFrj2DMB0DiA9i6cQciH2NBTtkdZYWHlc -----END CERTIFICATE-----Generated at Wed Feb 4 12:26:04 2026 by rpki-client