This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MhLTRicNbR4m0VYAij5fN5tzTaE.roa File: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (raw, json) Hash identifier: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo= Subject key identifier: 32:12:D3:46:27:0D:6D:1E:26:D1:56:00:8A:3E:5F:37:9B:73:4D:A1 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AD966F953ECDCB117456A38C8F07 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MhLTRicNbR4m0VYAij5fN5tzTaE.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203323 IP address blocks: 2a01:5c40:c000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ad:96:6f:95:3e:cd:cb:11:74:56:a3:8c:8f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3212d346270d6d1e26d156008a3e5f379b734da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:8d:0d:a3:cc:2e:bd:d4:01:95:25:e5:a3: 1c:65:9b:3f:c5:8e:85:19:1f:e5:10:94:37:89:dd: a2:03:c8:b8:96:a9:21:65:9e:a7:b5:d3:d9:98:51: 5b:b2:d1:40:82:3a:cd:98:75:43:fb:16:01:a8:ef: 39:ef:84:c7:3b:6d:2b:67:dd:0c:2b:93:07:1e:aa: 2c:c5:9a:02:1b:ab:cf:c2:c1:3b:05:36:79:a6:bc: 98:7d:b8:e4:a6:fb:f0:42:c6:9d:2b:99:b9:87:f6: 90:bc:9e:38:c4:f4:73:01:5a:36:36:65:7e:77:97: d6:53:e7:66:5c:b5:11:53:88:46:f4:6c:8d:66:67: ba:b1:69:86:54:85:73:78:cf:8e:f7:21:5a:7b:fb: f3:50:d8:18:b1:d9:40:56:42:e7:bb:07:bc:e9:f6: fd:12:86:b7:a7:31:e3:b1:9f:ee:db:a7:b0:5c:5b: cc:14:8c:18:88:a1:d1:36:96:c8:2a:f7:90:e8:ee: 2c:67:e9:56:01:f7:de:c0:04:4a:a0:4c:d3:57:98: b0:aa:43:fc:a0:ae:6d:b2:5f:e0:62:af:13:fd:49: 84:ec:5b:d6:a0:13:60:7b:68:f1:f5:36:8f:9d:ae: c5:c9:64:37:f2:c6:09:27:d3:23:03:b9:b5:cd:33: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:D3:46:27:0D:6D:1E:26:D1:56:00:8A:3E:5F:37:9B:73:4D:A1 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MhLTRicNbR4m0VYAij5fN5tzTaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:5c40:c000::/64 Signature Algorithm: sha256WithRSAEncryption 7e:c4:4a:75:f5:64:3f:0e:a0:bf:e1:24:2b:ff:cb:88:84:3a: a7:27:68:d4:0c:57:03:f3:4d:ab:3b:74:d3:12:80:5a:9b:69: f1:c9:50:98:7a:ca:5a:2d:4e:f7:5f:e4:a1:7f:bf:11:47:d7: 08:23:33:9d:22:cf:af:e2:93:0d:47:b1:1c:5c:a6:1b:1a:d0: 45:a1:3b:25:86:a8:31:34:79:c4:67:fc:9b:12:53:2e:6c:d7: 28:d2:04:fc:85:cb:cb:70:ca:2d:88:a3:77:09:4a:cc:77:d6: b8:67:48:b0:0d:22:1a:d9:94:66:bf:31:37:80:30:c7:86:c3: 75:67:14:21:9a:89:61:44:82:2f:11:c5:56:6e:74:03:ef:a1: aa:78:cf:1e:3a:14:d1:5d:04:87:93:4a:27:4a:32:f2:0c:72: a1:23:b7:8f:a6:11:a8:d8:a3:54:17:f0:01:e3:3d:aa:b3:8b: f4:25:ee:2c:6f:9d:aa:b6:87:45:b7:44:c8:8b:f1:27:c6:fd: 41:cc:29:b1:88:23:d8:fb:60:fd:c0:0c:9a:b9:17:c3:f6:5c: 40:09:b8:6f:55:ac:0b:ec:27:71:ec:55:f8:72:86:cd:fd:ae: 23:d7:8f:78:b7:31:62:0b:36:4e:22:a7:4d:9a:11:ed:22:93: 32:08:93:f6 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt+OK2Wb5U+zcsRdFajjI8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjEyZDM0NjI3MGQ2ZDFlMjZkMTU2MDA4YTNlNWYzNzliNzM0ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYSNDaPMLr3UAZUl5aMcZZs/xY6F GR/lEJQ3id2iA8i4lqkhZZ6ntdPZmFFbstFAgjrNmHVD+xYBqO8574THO20rZ90M K5MHHqosxZoCG6vPwsE7BTZ5pryYfbjkpvvwQsadK5m5h/aQvJ44xPRzAVo2NmV+ d5fWU+dmXLURU4hG9GyNZme6sWmGVIVzeM+O9yFae/vzUNgYsdlAVkLnuwe86fb9 Eoa3pzHjsZ/u26ewXFvMFIwYiKHRNpbIKveQ6O4sZ+lWAffewARKoEzTV5iwqkP8 oK5tsl/gYq8T/UmE7FvWoBNge2jx9TaPna7FyWQ38sYJJ9MjA7m1zTNdEwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDIS00YnDW0eJtFWAIo+Xzebc02hMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvTWhMVFJpY05iUjRtMFZZQWlqNWZONXR6VGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgFcQMAA AAAwDQYJKoZIhvcNAQELBQADggEBAH7ESnX1ZD8OoL/hJCv/y4iEOqcnaNQMVwPz Tas7dNMSgFqbafHJUJh6ylotTvdf5KF/vxFH1wgjM50iz6/ikw1HsRxcphsa0EWh OyWGqDE0ecRn/JsSUy5s1yjSBPyFy8twyi2Io3cJSsx31rhnSLANIhrZlGa/MTeA MMeGw3VnFCGaiWFEgi8RxVZudAPvoap4zx46FNFdBIeTSidKMvIMcqEjt4+mEajY o1QX8AHjPaqzi/Ql7ixvnaq2h0W3RMiL8SfG/UHMKbGII9j7YP3ADJq5F8P2XEAJ uG9VrAvsJ3HsVfhyhs39riPXj3i3MWILNk4ip02aEe0ikzIIk/Y= -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:27 2026 by rpki-client