This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/MvJCT3rODSbi8r5Yig7Zau3fVYg.roa File: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (raw, json) Hash identifier: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU= Subject key identifier: 32:F2:42:4F:7A:CE:0D:26:E2:F2:BE:58:8A:0E:D9:6A:ED:DF:55:88 Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a Certificate serial: 019B7B36EE5A02145BDD19BCF12317DB0184 Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/MvJCT3rODSbi8r5Yig7Zau3fVYg.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:678:934::/48 maxlen: 48 2001:67c:bf0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ee:5a:02:14:5b:dd:19:bc:f1:23:17:db:01:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32f2424f7ace0d26e2f2be588a0ed96aeddf5588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:db:00:bd:07:83:c4:f8:ad:84:06:54:64: 38:7f:96:ec:5c:f7:e4:fa:96:38:37:40:c1:61:2a: 55:79:5b:11:83:50:82:d6:07:04:12:72:de:f1:38: 3e:dc:1a:41:59:ae:b2:c1:30:6f:fa:7a:33:44:0b: e6:84:82:54:09:1e:f3:d7:01:7d:aa:e1:7a:96:b8: 7d:db:4f:a4:ec:66:a7:11:05:3a:ac:39:42:7e:20: eb:9a:c8:ec:11:f0:24:ee:a3:50:b5:7c:c4:ef:e8: 85:11:a8:7d:d6:b2:5d:9b:ac:cc:dc:aa:45:2a:80: 9e:54:7c:5b:4e:30:a8:1f:17:3e:24:95:cf:3c:e2: 58:34:cb:64:82:33:33:6f:7b:84:62:fa:4b:f0:a8: e1:94:d2:90:6c:ad:84:71:58:00:6c:5f:53:ed:f3: 8f:6d:5e:f3:94:b4:08:0f:71:bc:8e:73:3f:92:fb: 42:7d:75:d2:cb:62:da:5a:80:6f:45:43:06:00:cb: 4e:08:71:a1:ae:5c:5e:d2:8b:6c:d2:95:ac:55:20: b5:60:87:1c:cd:b0:f0:44:c7:37:76:23:ed:f3:9a: af:c5:d0:82:76:31:84:5e:8e:c5:68:78:4e:53:8c: 36:d0:90:02:0a:ff:be:c7:60:9a:3a:8f:f7:fb:d2: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:42:4F:7A:CE:0D:26:E2:F2:BE:58:8A:0E:D9:6A:ED:DF:55:88 X509v3 Authority Key Identifier: keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/MvJCT3rODSbi8r5Yig7Zau3fVYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:934::/48 2001:67c:bf0::/48 Signature Algorithm: sha256WithRSAEncryption 76:59:1d:e4:89:25:42:ad:17:d3:f5:85:40:25:94:76:3b:4e: 3c:67:26:90:6e:6f:a5:54:fe:05:b0:80:ec:e5:99:e0:a0:6d: 37:be:ff:2f:be:53:0c:3d:73:38:11:84:f8:4d:8d:8f:81:58: 58:fc:4d:8c:2a:c4:e5:10:c9:94:85:95:e8:7c:a9:67:68:2f: 7f:98:28:49:61:e9:ca:35:56:b0:e6:b5:bf:65:95:06:20:e4: 26:fd:5a:56:2d:3e:b3:b9:88:c4:13:79:ef:9f:f5:12:d8:c9: c0:23:cf:6c:5d:7a:06:67:2b:b4:e6:0c:41:f4:b0:bf:b7:40: 0f:b8:dc:9b:6f:5c:84:8b:70:93:39:52:a7:5a:54:ae:5a:bf: ee:de:75:8a:00:4c:19:7d:0c:33:ed:23:bf:5c:4a:84:03:17: db:e6:88:30:b2:64:12:c8:ae:3b:95:35:ad:53:12:89:a6:c5: 41:da:aa:a5:be:aa:70:35:25:cf:ae:f8:21:10:fe:cc:bc:73: 22:9e:04:10:4d:c4:c5:8c:be:7b:1e:42:49:ad:76:98:9e:f5: d6:5c:9d:99:59:a8:73:b6:4a:18:7e:b6:70:c8:93:a8:fa:5e: 14:4f:c5:9d:48:5d:3f:1e:6d:b3:56:85:d8:34:77:ff:eb:ec: e5:17:f9:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nu5aAhRb3Rm88SMX2wGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2Y3NGYyYjZlNGUyOGU5ZmY2Y2EzY2NhM2E1ZDc4Y2Ey Y2FkNmEwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmYyNDI0ZjdhY2UwZDI2ZTJmMmJlNTg4YTBlZDk2YWVkZGY1NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijbAL0Hg8T4rYQGVGQ4f5bsXPfk +pY4N0DBYSpVeVsRg1CC1gcEEnLe8Tg+3BpBWa6ywTBv+nozRAvmhIJUCR7z1wF9 quF6lrh920+k7GanEQU6rDlCfiDrmsjsEfAk7qNQtXzE7+iFEah91rJdm6zM3KpF KoCeVHxbTjCoHxc+JJXPPOJYNMtkgjMzb3uEYvpL8KjhlNKQbK2EcVgAbF9T7fOP bV7zlLQID3G8jnM/kvtCfXXSy2LaWoBvRUMGAMtOCHGhrlxe0ots0pWsVSC1YIcc zbDwRMc3diPt85qvxdCCdjGEXo7FaHhOU4w20JACCv++x2CaOo/3+9Iy6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDLyQk96zg0m4vK+WIoO2Wrt31WIMB8GA1UdIwQY MBaAFL4/dPK25OKOn/bKPMo6XXjKLK1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzIt ZDA5OTYxN2JlYjU2LzEvTXZKQ1Qzck9EU2JpOHI1WWlnN1phdTNmVllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzItZDA5OTYxN2JlYjU2 LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAk0 AwcAIAEGfAvwMA0GCSqGSIb3DQEBCwUAA4IBAQB2WR3kiSVCrRfT9YVAJZR2O048 ZyaQbm+lVP4FsIDs5ZngoG03vv8vvlMMPXM4EYT4TY2PgVhY/E2MKsTlEMmUhZXo fKlnaC9/mChJYenKNVaw5rW/ZZUGIOQm/VpWLT6zuYjEE3nvn/US2MnAI89sXXoG Zyu05gxB9LC/t0APuNybb1yEi3CTOVKnWlSuWr/u3nWKAEwZfQwz7SO/XEqEAxfb 5ogwsmQSyK47lTWtUxKJpsVB2qqlvqpwNSXPrvghEP7MvHMingQQTcTFjL57HkJJ rXaYnvXWXJ2ZWahztkoYfrZwyJOo+l4UT8WdSF0/Hm2zVoXYNHf/6+zlF/na -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:06 2026 by rpki-client