This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/MkcX9GenTKmR5jedlZaDXtOqlb8.roa File: MkcX9GenTKmR5jedlZaDXtOqlb8.roa (raw, json) Hash identifier: HYFxXiizcZIEgsQl7ewj/koOWIU6qo+dNkAHdlTz/+A= Subject key identifier: 32:47:17:F4:67:A7:4C:A9:91:E6:37:9D:95:96:83:5E:D3:AA:95:BF Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B7BA3D01A52224B2D7248EE44CFC3098E Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/MkcX9GenTKmR5jedlZaDXtOqlb8.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54994 IP address blocks: 2a0b:1880:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d0:1a:52:22:4b:2d:72:48:ee:44:cf:c3:09:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324717f467a74ca991e6379d9596835ed3aa95bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:57:05:66:ba:84:14:89:4c:0c:97:1a:b6: 06:fd:8c:70:88:e4:fd:5f:a6:ba:e9:df:0f:8f:18: 78:88:91:8a:48:ed:b7:db:2c:7f:76:38:eb:b9:e2: 98:6b:d1:f7:d0:97:5d:9f:bc:c8:4c:87:e0:ab:84: 66:d3:8a:bb:34:32:5d:4e:7e:46:0d:82:fe:a0:20: ac:a1:16:bb:59:ca:4e:e0:13:ee:e5:61:b1:06:2e: 6b:eb:ff:b8:bf:9f:89:b3:56:51:47:aa:a6:02:f4: c8:4e:9d:5d:87:52:12:ee:c3:cf:97:ef:34:0a:5d: bb:99:3d:2c:07:d1:bf:7d:aa:ef:92:36:89:5f:a2: b3:82:c9:57:28:58:21:26:9e:21:c0:ac:99:c3:6a: 29:85:ae:5c:c0:2c:d9:f0:13:84:f5:52:a0:17:4e: ec:af:a5:9d:3f:85:33:3f:2f:fc:15:9c:3a:fa:5b: 7f:47:37:95:71:bf:5e:fa:64:48:ba:a2:94:2b:1d: 63:28:9d:b7:5a:e4:39:fa:f0:a9:2e:b3:ce:fc:61: e8:40:24:10:be:c5:28:d0:af:ea:1d:e5:16:08:9b: ef:82:cb:7b:77:52:bb:b3:2e:f6:df:ac:8a:44:77: c7:9a:cf:d3:f9:dd:fa:1d:b6:e9:1c:9c:b6:13:78: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:47:17:F4:67:A7:4C:A9:91:E6:37:9D:95:96:83:5E:D3:AA:95:BF X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/MkcX9GenTKmR5jedlZaDXtOqlb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:1880:9::/48 Signature Algorithm: sha256WithRSAEncryption b5:a9:31:4d:7d:ba:33:79:df:63:76:ad:c3:66:34:32:c7:68: a5:4e:f2:93:bf:6f:a9:01:94:12:6e:58:98:72:ae:52:45:aa: 34:13:dd:ca:97:b6:56:50:18:88:7d:85:c7:f0:02:2c:ae:14: e7:96:b5:8a:5d:34:b3:43:97:36:e9:56:da:db:1d:09:32:ea: 16:99:c8:82:e7:08:8f:fd:5b:db:ed:24:e3:8d:f4:7f:95:99: c4:56:9d:eb:60:d0:32:67:85:b3:65:f9:09:44:07:1f:65:71: 14:dd:71:3f:3f:9d:7d:f4:cb:af:75:fa:a8:c6:81:c5:e0:68: ed:a8:8b:e8:fb:01:c6:c1:20:2b:f4:f2:f0:8e:20:2a:88:b8: 9a:e1:ac:fa:c3:b1:95:3b:b0:93:86:68:b6:23:0c:00:d8:04: aa:ad:29:b1:f8:4c:2e:fe:d2:54:93:fd:27:a1:4f:f0:ed:62: 31:3e:3b:d5:58:4d:1a:13:4f:bc:54:df:5f:e9:70:0f:18:5f: 0f:79:00:3b:41:b8:b3:0d:ed:d2:4d:9b:ce:d1:5c:cb:e2:ed: c9:ce:fd:35:02:8d:5a:dc:23:7f:df:dd:3e:9a:19:33:21:6c: f3:41:05:bb:8c:db:f9:da:93:61:18:9f:4a:ca:fb:e7:e6:42: eb:a6:fb:b2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o9AaUiJLLXJI7kTPwwmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjQ3MTdmNDY3YTc0Y2E5OTFlNjM3OWQ5NTk2ODM1ZWQzYWE5NWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29VXBWa6hBSJTAyXGrYG/YxwiOT9 X6a66d8Pjxh4iJGKSO232yx/djjrueKYa9H30Jddn7zITIfgq4Rm04q7NDJdTn5G DYL+oCCsoRa7WcpO4BPu5WGxBi5r6/+4v5+Js1ZRR6qmAvTITp1dh1IS7sPPl+80 Cl27mT0sB9G/farvkjaJX6KzgslXKFghJp4hwKyZw2opha5cwCzZ8BOE9VKgF07s r6WdP4UzPy/8FZw6+lt/RzeVcb9e+mRIuqKUKx1jKJ23WuQ5+vCpLrPO/GHoQCQQ vsUo0K/qHeUWCJvvgst7d1K7sy7236yKRHfHms/T+d36HbbpHJy2E3jQUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDJHF/Rnp0ypkeY3nZWWg17TqpW/MB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvTWtjWDlHZW5US21SNWplZGxaYURYdE9xbGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsYgAAJ MA0GCSqGSIb3DQEBCwUAA4IBAQC1qTFNfbozed9jdq3DZjQyx2ilTvKTv2+pAZQS bliYcq5SRao0E93Kl7ZWUBiIfYXH8AIsrhTnlrWKXTSzQ5c26Vba2x0JMuoWmciC 5wiP/Vvb7STjjfR/lZnEVp3rYNAyZ4WzZfkJRAcfZXEU3XE/P5199MuvdfqoxoHF 4GjtqIvo+wHGwSAr9PLwjiAqiLia4az6w7GVO7CThmi2IwwA2ASqrSmx+Ewu/tJU k/0noU/w7WIxPjvVWE0aE0+8VN9f6XAPGF8PeQA7QbizDe3STZvO0VzL4u3Jzv01 Ao1a3CN/390+mhkzIWzzQQW7jNv52pNhGJ9Kyvvn5kLrpvuy -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:04 2026 by rpki-client