This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nmx46o6ozJODoZuE6SgRDIXQ5SU.roa File: Nmx46o6ozJODoZuE6SgRDIXQ5SU.roa (raw, json) Hash identifier: jeUv33v1tn0ArEbutv1DbFNEJoAIxO7RDCw2LShLIno= Subject key identifier: 36:6C:78:EA:8E:A8:CC:93:83:A1:9B:84:E9:28:11:0C:85:D0:E5:25 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C325EB315182FCDE42B633441BEB8B4B9 Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nmx46o6ozJODoZuE6SgRDIXQ5SU.roa Signing time: Fri 06 Feb 2026 09:53:12 +0000 ROA not before: Fri 06 Feb 2026 09:53:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201488 IP address blocks: 2a06:9801:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:5e:b3:15:18:2f:cd:e4:2b:63:34:41:be:b8:b4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 6 09:53:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=366c78ea8ea8cc9383a19b84e928110c85d0e525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:4a:2b:7d:e4:f2:50:90:58:16:32:1a:f9: fa:49:49:7f:c5:15:8f:37:79:35:7b:f1:ed:21:fa: 04:7f:5c:95:d7:b4:13:ca:a7:c8:43:2e:72:20:5f: 34:34:07:3c:76:86:4d:b8:14:d9:11:f1:4a:b2:06: e8:cf:b2:9c:96:67:99:b3:48:f3:dd:04:ce:00:5c: 26:9f:c9:20:1c:b3:fb:24:8a:a9:8e:f8:e5:f8:05: e1:62:44:42:4a:4d:b6:57:c2:45:95:61:72:80:a7: 07:6d:e3:46:f0:94:4b:ed:a8:6e:a6:99:8e:9d:91: bc:7c:b5:3f:49:67:28:2f:dd:c6:7a:14:7a:3e:42: 65:b1:2f:43:05:c1:be:99:7c:34:31:13:92:a2:a5: 4d:2b:0b:19:9a:67:d9:b5:96:24:fc:5c:99:41:de: 86:cb:35:1b:f3:a7:68:d2:d6:7d:62:d0:68:51:1e: df:c7:12:9c:3f:3a:d1:ec:7c:bc:ec:dc:80:9a:5d: 5c:38:38:70:cf:70:e1:4d:63:2c:5c:ab:94:40:2a: 67:cf:98:8b:94:46:5a:48:c4:d3:8f:c9:12:92:3e: 7b:7a:e5:f4:c8:cc:2e:1e:31:9c:51:c6:fc:99:36: 31:eb:e5:b0:d9:ba:e2:e4:85:9a:0c:41:a7:ab:da: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:78:EA:8E:A8:CC:93:83:A1:9B:84:E9:28:11:0C:85:D0:E5:25 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Nmx46o6ozJODoZuE6SgRDIXQ5SU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:2::/48 Signature Algorithm: sha256WithRSAEncryption 51:b7:39:2c:1d:02:2a:18:db:cf:fa:93:c0:a3:f1:6f:a0:f6: 2b:22:8c:4b:e6:2b:07:b7:50:1a:cb:6b:4c:48:99:77:48:c8: 55:49:50:a3:e8:08:bb:13:d3:3a:cc:4a:f6:9a:93:c9:47:60: 5b:06:76:63:ac:bc:bd:94:cb:fc:ce:8f:7a:2d:be:66:9e:b3: 65:8a:42:ca:2c:55:56:b4:a3:d1:6f:b1:b8:78:30:24:aa:db: a4:b4:e7:9d:4f:a2:f3:02:dc:8e:29:f0:34:83:0d:09:c0:d5: f7:81:f1:6e:33:80:72:2f:61:ea:1b:51:bf:27:4d:c6:c8:0a: 1a:f2:de:4b:e9:e5:ae:9b:86:99:e4:f9:01:e7:59:20:9a:26: 30:bc:03:7d:7c:3d:1a:e4:7e:1a:77:de:f7:46:ad:02:d2:6b: f4:d9:8b:74:02:70:d3:64:58:bd:d6:62:4f:f9:e5:87:5c:a1: fc:81:8e:15:30:f3:20:35:25:fd:71:9a:55:ad:47:ae:4b:c8: 94:99:5b:7c:36:4f:eb:86:a8:05:3a:9f:9b:90:41:1c:d9:4b: d7:e6:dc:4a:d0:dc:28:58:0e:fd:be:0c:3f:44:71:92:9a:79: 35:3d:e5:f8:6f:ad:ac:f0:f2:45:23:4e:ec:20:53:ed:c8:19: 43:52:f4:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwyXrMVGC/N5CtjNEG+uLS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA2MDk1MzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjZjNzhlYThlYThjYzkzODNhMTliODRlOTI4MTEwYzg1ZDBlNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BlKK33k8lCQWBYyGvn6SUl/xRWP N3k1e/HtIfoEf1yV17QTyqfIQy5yIF80NAc8doZNuBTZEfFKsgboz7KclmeZs0jz 3QTOAFwmn8kgHLP7JIqpjvjl+AXhYkRCSk22V8JFlWFygKcHbeNG8JRL7ahuppmO nZG8fLU/SWcoL93GehR6PkJlsS9DBcG+mXw0MROSoqVNKwsZmmfZtZYk/FyZQd6G yzUb86do0tZ9YtBoUR7fxxKcPzrR7Hy87NyAml1cODhwz3DhTWMsXKuUQCpnz5iL lEZaSMTTj8kSkj57euX0yMwuHjGcUcb8mTYx6+Ww2bri5IWaDEGnq9q9DQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDZseOqOqMyTg6GbhOkoEQyF0OUlMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvTm14NDZvNm96Sk9Eb1p1RTZTZ1JESVhRNVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQAC MA0GCSqGSIb3DQEBCwUAA4IBAQBRtzksHQIqGNvP+pPAo/FvoPYrIoxL5isHt1Aa y2tMSJl3SMhVSVCj6Ai7E9M6zEr2mpPJR2BbBnZjrLy9lMv8zo96Lb5mnrNlikLK LFVWtKPRb7G4eDAkqtuktOedT6LzAtyOKfA0gw0JwNX3gfFuM4ByL2HqG1G/J03G yAoa8t5L6eWum4aZ5PkB51kgmiYwvAN9fD0a5H4ad973Rq0C0mv02Yt0AnDTZFi9 1mJP+eWHXKH8gY4VMPMgNSX9cZpVrUeuS8iUmVt8Nk/rhqgFOp+bkEEc2UvX5txK 0NwoWA79vgw/RHGSmnk1PeX4b62s8PJFI07sIFPtyBlDUvQ1 -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:38 2026 by rpki-client