This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa File: mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa (raw, json) Hash identifier: uRtR0RgLCvCTy0WRec1Dco4dbai9D9t4d5nexRt8H7s= Subject key identifier: 98:63:E8:2A:7C:F1:43:F0:09:CF:74:D2:36:41:83:0C:07:61:13:BF Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019B7D5CEA9F46DC51E723888EBD36A36372 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57621 IP address blocks: 2a05:100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:9f:46:dc:51:e7:23:88:8e:bd:36:a3:63:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9863e82a7cf143f009cf74d23641830c076113bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:a5:30:98:c0:5e:59:e0:ab:bf:50:1d:f1: 35:03:45:93:b7:9c:d3:a5:43:03:44:7f:93:53:e9: 70:f1:f5:86:30:c4:95:8d:13:86:80:f0:8b:e6:d5: 3f:3a:34:62:b8:5c:16:63:27:58:23:62:eb:a9:a8: d4:41:52:70:2a:a8:c6:1b:22:c3:ce:de:0e:6c:61: a6:f2:81:e7:82:17:4e:e7:07:39:69:b3:b2:95:f2: 0e:21:2b:3e:b9:bb:35:70:5a:f6:40:04:fa:9a:ff: bd:d7:a4:81:c7:d7:f5:27:16:9f:69:1c:71:45:d5: dd:15:e7:f0:0a:ab:b1:2d:5a:0a:91:a1:78:b9:02: 6e:c7:28:6a:84:2e:ed:06:d1:b4:b6:91:09:a3:fb: 36:24:d3:bb:ba:51:cd:95:8d:92:b8:1b:76:3e:83: 07:21:2a:83:eb:75:45:3d:f3:a9:4d:8e:b8:79:2c: 67:ad:14:c2:cb:42:ec:65:ac:d6:98:43:f1:26:21: d5:bc:f1:d7:b8:ec:02:47:c5:5c:e2:84:cf:13:cc: 38:35:c2:f6:74:27:8b:e0:f6:ed:ac:5f:2d:a7:8c: c6:8b:ed:c1:ef:c0:70:46:97:3e:bd:cd:8b:b4:d1: 12:63:0b:ad:9b:a2:28:38:d9:9a:84:4d:35:d9:5f: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:E8:2A:7C:F1:43:F0:09:CF:74:D2:36:41:83:0C:07:61:13:BF X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/mGPoKnzxQ_AJz3TSNkGDDAdhE78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:100::/29 Signature Algorithm: sha256WithRSAEncryption 81:b5:6e:e7:fd:eb:f8:93:86:a0:40:e7:10:78:bf:96:99:b8: ef:c7:11:c2:45:b5:d4:10:3f:a8:37:3d:b1:d2:5b:88:42:eb: 9f:63:4f:da:a9:55:ad:41:28:88:31:66:26:f6:de:2f:30:8a: b2:a1:0c:31:ab:15:82:77:22:08:5f:0a:b2:d4:8a:4b:5a:81: ca:ab:1e:a7:4d:e3:f4:0b:fe:f2:75:17:f8:72:fe:c3:15:d2: 52:25:49:8b:b3:e6:b5:da:85:c2:09:fc:4a:ff:32:28:7c:be: 76:87:11:97:be:78:02:56:e6:16:f5:a4:eb:d3:03:b0:57:9d: da:ab:ee:58:75:ad:a7:df:9e:84:ba:90:be:83:52:4e:ef:89: 71:7e:4c:fb:e9:40:f3:16:3e:36:61:51:8d:b8:17:ea:2a:b8: be:06:64:29:bf:4e:44:28:86:43:18:46:4e:11:32:12:06:e1: 71:3f:2d:a9:ef:48:c0:62:c0:79:14:af:a6:f6:a7:f6:fb:dc: e0:cf:8b:3e:36:18:a1:a0:d9:1a:60:db:12:3e:42:78:2c:7c: a0:e4:60:5f:ea:d9:c8:45:66:52:d7:6f:02:57:d0:95:51:89: 65:63:e9:33:a3:54:79:3b:d7:fb:12:9e:95:26:fa:bb:fa:25: ad:1e:c5:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOqfRtxR5yOIjr02o2NyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODYzZTgyYTdjZjE0M2YwMDljZjc0ZDIzNjQxODMwYzA3NjExM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsGlMJjAXlngq79QHfE1A0WTt5zT pUMDRH+TU+lw8fWGMMSVjROGgPCL5tU/OjRiuFwWYydYI2LrqajUQVJwKqjGGyLD zt4ObGGm8oHnghdO5wc5abOylfIOISs+ubs1cFr2QAT6mv+916SBx9f1JxafaRxx RdXdFefwCquxLVoKkaF4uQJuxyhqhC7tBtG0tpEJo/s2JNO7ulHNlY2SuBt2PoMH ISqD63VFPfOpTY64eSxnrRTCy0LsZazWmEPxJiHVvPHXuOwCR8Vc4oTPE8w4NcL2 dCeL4PbtrF8tp4zGi+3B78BwRpc+vc2LtNESYwutm6IoONmahE012V9TvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJhj6Cp88UPwCc900jZBgwwHYRO/MB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xL21HUG9Lbnp4UV9BSnozVFNOa0dEREFkaEU3OC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNhLTMzODk2MjBjMWJk Ny8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqBQEA MA0GCSqGSIb3DQEBCwUAA4IBAQCBtW7n/ev4k4agQOcQeL+WmbjvxxHCRbXUED+o Nz2x0luIQuufY0/aqVWtQSiIMWYm9t4vMIqyoQwxqxWCdyIIXwqy1IpLWoHKqx6n TeP0C/7ydRf4cv7DFdJSJUmLs+a12oXCCfxK/zIofL52hxGXvngCVuYW9aTr0wOw V53aq+5Yda2n356EupC+g1JO74lxfkz76UDzFj42YVGNuBfqKri+BmQpv05EKIZD GEZOETISBuFxPy2p70jAYsB5FK+m9qf2+9zgz4s+NhihoNkaYNsSPkJ4LHyg5GBf 6tnIRWZS128CV9CVUYllY+kzo1R5O9f7Ep6VJvq7+iWtHsXW -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:19 2026 by rpki-client